$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: 4cBNLDPQByCi7jJxOd8kkI4+pavxRDdxSoJXyutTUmw= Subject key identifier: 45:EC:AA:82:42:31:33:80:EB:12:8D:72:E3:57:29:6E:71:A4:5E:53 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 026E Signing time: Sun 19 May 2024 03:47:36 +0000 Manifest this update: Sun 19 May 2024 03:47:36 +0000 Manifest next update: Sun 26 May 2024 03:47:35 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: LKFGW9OAosYppEYcJFXEHBW3V/lGFfBhnj5XItU191Y=) 2: 6AF5A9FAC6C811ECA5A9AB33C4F9AE02.roa (hash: wMOZvvUdhpLnHFRtGb9ZgJxGMkQuxJPR5+ohVmHOlM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: May 19 03:47:36 2024 GMT Not After : May 26 03:47:35 2024 GMT Subject: CN=66497658-74e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:e9:3a:a5:f1:f4:2c:66:bf:ea:d7:da:9e: d5:15:4a:12:96:b9:ee:fd:8a:59:39:09:1e:5a:dd: 5c:b0:ee:7c:61:73:5b:84:f3:52:5f:f8:fe:b5:10: 88:0f:fc:37:e0:46:2f:73:5a:34:b5:b4:48:4f:07: bf:c4:1f:a8:ac:de:3c:07:d8:50:af:df:8c:82:e8: d0:08:d6:49:d9:69:af:b9:8e:8b:81:51:c7:6d:ec: 88:96:0e:32:45:e5:14:e4:cd:22:99:48:8b:de:81: 7f:da:a1:0a:fb:ba:d3:f4:f9:b2:e0:a6:dc:55:65: c4:e5:50:0a:2b:4c:a0:50:c7:50:3b:f6:ed:92:c4: 29:38:ad:77:ee:08:22:02:2e:8c:c3:ae:55:75:b0: e0:7c:4e:1e:a4:d9:3e:f5:98:0e:21:3d:f7:4a:6d: fa:34:70:bc:37:ca:d6:15:a4:cf:94:f0:23:ba:c8: c5:d4:93:4e:94:57:68:2f:11:45:5c:ac:33:60:de: cd:22:10:06:53:be:67:90:e7:cb:30:1d:bc:5e:42: 0d:ac:f4:07:32:b0:16:a2:4a:8d:74:6b:9a:fa:6b: a1:01:a3:47:5b:b4:e1:0d:9f:1e:c9:ae:52:73:9b: a6:9b:7d:bc:9b:2b:cc:f1:58:10:14:6c:12:00:de: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EC:AA:82:42:31:33:80:EB:12:8D:72:E3:57:29:6E:71:A4:5E:53 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:85:0b:05:ec:13:69:2a:55:04:82:6e:07:d8:90:73:c8:e4: 55:1d:7a:b7:e4:ea:df:c5:8b:d3:54:31:d9:97:6e:4d:f7:30: 2a:d0:23:7b:91:55:d6:ab:2e:ea:da:f1:9f:81:fd:34:30:f3: a2:05:5e:ae:0b:27:a0:21:b5:29:5e:0b:cd:25:68:0d:73:a2: 74:d6:19:57:46:16:97:08:cf:1f:7c:66:1a:ae:2c:c8:65:77: 82:00:f9:26:7e:41:a7:c7:50:90:52:9a:ae:5e:25:1c:d4:0c: 58:d4:1d:e0:e5:89:47:4f:6c:c6:61:24:f9:7b:c2:b4:f3:30: 4f:2f:f5:ea:25:5a:b2:96:3e:ff:c0:29:ed:6c:d0:17:8f:66: 5e:7e:a8:98:d5:2a:6b:85:2d:02:ce:a4:3b:d1:4f:4b:ef:5f: 09:eb:36:2f:8b:89:38:da:ba:31:b6:53:26:ed:eb:9b:ce:3c: 4e:cc:14:be:b5:3e:18:3b:14:e2:36:26:a7:d4:b4:f1:e8:7c: 0e:61:6b:9b:8b:e6:26:2e:2f:a3:66:e8:12:e3:8c:b6:48:fe: 7c:9e:b5:f1:db:c2:26:cb:bc:6b:87:03:ae:89:8a:b9:88:3f: 2f:6f:8b:b7:82:1b:65:56:44:12:db:e6:d6:6f:03:4b:a0:8d: 93:02:48:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjQwNTE5MDM0NzM2WhcNMjQwNTI2MDM0NzM1WjAYMRYwFAYD VQQDEw02NjQ5NzY1OC03NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP/pOqXx9Cxmv+rX2p7VFUoSlrnu/YpZOQkeWt1csO58YXNbhPNSX/j+tRCI D/w34EYvc1o0tbRITwe/xB+orN48B9hQr9+MgujQCNZJ2WmvuY6LgVHHbeyIlg4y ReUU5M0imUiL3oF/2qEK+7rT9Pmy4KbcVWXE5VAKK0ygUMdQO/btksQpOK137ggi Ai6Mw65VdbDgfE4epNk+9ZgOIT33Sm36NHC8N8rWFaTPlPAjusjF1JNOlFdoLxFF XKwzYN7NIhAGU75nkOfLMB28XkINrPQHMrAWokqNdGua+muhAaNHW7ThDZ8eya5S c5umm328myvM8VgQFGwSAN6FcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXsqoJC MTOA6xKNcuNXKW5xpF5TMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2hQsF7BNpKlUEgm4H2JBzyORVHXq35OrfxYvTVDHZl25N9zAq0CN7 kVXWqy7q2vGfgf00MPOiBV6uCyegIbUpXgvNJWgNc6J01hlXRhaXCM8ffGYarizI ZXeCAPkmfkGnx1CQUpquXiUc1AxY1B3g5YlHT2zGYST5e8K08zBPL/XqJVqylj7/ wCntbNAXj2ZefqiY1SprhS0CzqQ70U9L718J6zYvi4k42roxtlMm7eubzjxOzBS+ tT4YOxTiNian1LTx6HwOYWubi+YmLi+jZugS44y2SP58nrXx28Imy7xrhwOuiYq5 iD8vb4u3ghtlVkQS2+bWbwNLoI2TAkhH -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org