$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: psPi2vo/SLCG7TcDV5nao/mb9TMXLs9bnqSFkSkbRII= Subject key identifier: A6:8E:F6:40:48:BD:9B:E0:CA:91:0E:6C:E0:12:DB:DA:48:DD:46:0F Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0C85 Signing time: Sat 18 May 2024 18:51:29 +0000 Manifest this update: Sat 18 May 2024 18:51:28 +0000 Manifest next update: Sat 25 May 2024 18:51:28 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: VqbSUHxq73I9rGqXO4m2mNpdmLeLSLKjgw53ewazM64=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: 3NvJFO+he2ACqNiLgD+llzSbjPgJVQ7hiMX5hEMIbGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: May 18 18:51:28 2024 GMT Not After : May 25 18:51:28 2024 GMT Subject: CN=6648f8b1-0b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:de:36:59:ee:98:60:cb:10:92:b0:7f:f8:68: 91:a3:e5:c2:b3:3c:b5:05:ef:40:bc:17:24:1e:91: d0:15:7e:08:b7:f8:eb:25:fb:b1:d0:8c:41:f8:c0: 17:41:76:fd:24:b6:ac:4a:5b:e0:f7:2a:6c:54:95: 74:79:89:89:68:ee:ac:a1:5c:31:8c:8f:60:ba:a0: 39:68:14:f5:97:2c:7a:1e:db:9b:b7:33:ec:ae:14: 67:2a:cc:a7:e7:9e:c1:aa:33:bc:af:09:2a:1a:ca: 87:04:ae:ff:f3:d0:2e:b2:fa:a8:58:91:5e:83:80: a8:4c:e1:ee:7e:c6:b1:d6:09:24:9d:f1:8a:1f:2b: dc:de:e8:96:1d:21:58:ae:ae:5b:3d:3d:8f:3b:5e: cc:12:f3:e3:77:20:0d:12:0d:f3:1d:1f:7f:2a:81: d5:3e:47:55:2c:67:34:d0:c3:c7:5e:99:ff:e4:00: 34:0e:3f:82:5b:72:ce:0f:61:76:90:b1:7c:fb:5b: 46:e7:b4:a0:29:83:76:a6:2c:fc:46:57:50:5e:22: c4:3b:06:ec:b7:3f:8a:52:e5:07:38:75:9a:4a:2a: 0d:e2:c7:6c:cb:fd:48:2c:8e:71:e2:4b:f6:af:4f: 71:87:58:f7:ea:48:1f:03:3e:06:7e:c2:04:c0:ab: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:F6:40:48:BD:9B:E0:CA:91:0E:6C:E0:12:DB:DA:48:DD:46:0F X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:52:b6:d1:ed:28:b5:a9:fe:be:8e:11:38:fd:0f:36:03: 8b:f0:ce:f7:e7:48:1f:55:8f:3c:99:04:4e:1c:7a:ac:b5:25: d4:62:ae:e4:c8:8b:e5:34:7a:52:3c:12:59:c4:2a:c2:d1:72: 73:97:54:66:50:90:b4:9d:08:bc:16:b1:29:b8:4e:f4:f9:ab: 34:86:8a:43:58:eb:b6:a5:14:06:a6:cd:32:e1:d4:85:31:d6: 46:2b:5c:29:95:38:c7:ab:9f:97:09:37:11:0f:c4:d2:be:92: 3c:c1:d6:fc:78:66:14:9d:01:aa:01:ae:26:93:bd:40:f3:7d: a7:52:db:b4:f3:a4:58:4d:a3:29:26:e0:32:b7:a9:69:6b:cc: 33:ce:c9:c4:73:92:ba:0c:21:3d:a3:38:1c:d4:f9:02:b8:34: ac:26:91:61:fd:a6:fe:96:a8:78:80:10:34:34:2e:8e:29:39: 26:b8:ab:55:88:eb:40:e3:cd:2f:35:6b:e1:41:2a:af:f2:59: ad:9a:ef:ca:4b:ef:ff:8a:96:51:21:8b:8a:0d:7c:4f:09:1b: 84:ef:c8:4b:12:1b:ae:a4:fe:f7:bc:64:48:df:6b:c1:bb:77: d7:ed:3c:59:d9:17:22:29:c0:3f:0f:e6:9e:f4:2b:94:36:56: e4:c0:38:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjQwNTE4MTg1MTI4WhcNMjQwNTI1MTg1MTI4WjAYMRYwFAYD VQQDEw02NjQ4ZjhiMS0wYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6d42We6YYMsQkrB/+GiRo+XCszy1Be9AvBckHpHQFX4It/jrJfux0IxB+MAX QXb9JLasSlvg9ypsVJV0eYmJaO6soVwxjI9guqA5aBT1lyx6HtubtzPsrhRnKsyn 557BqjO8rwkqGsqHBK7/89AusvqoWJFeg4CoTOHufsax1gkknfGKHyvc3uiWHSFY rq5bPT2PO17MEvPjdyANEg3zHR9/KoHVPkdVLGc00MPHXpn/5AA0Dj+CW3LOD2F2 kLF8+1tG57SgKYN2piz8RldQXiLEOwbstz+KUuUHOHWaSioN4sdsy/1ILI5x4kv2 r09xh1j36kgfAz4GfsIEwKt3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaO9kBI vZvgypEObOAS29pI3UYPMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoMVK20e0otan+vo4ROP0PNgOL8M7350gfVY88mQROHHqstSXUYq7k yIvlNHpSPBJZxCrC0XJzl1RmUJC0nQi8FrEpuE70+as0hopDWOu2pRQGps0y4dSF MdZGK1wplTjHq5+XCTcRD8TSvpI8wdb8eGYUnQGqAa4mk71A832nUtu086RYTaMp JuAyt6lpa8wzzsnEc5K6DCE9ozgc1PkCuDSsJpFh/ab+lqh4gBA0NC6OKTkmuKtV iOtA480vNWvhQSqv8lmtmu/KS+//ipZRIYuKDXxPCRuE78hLEhuupP73vGRI32vB u3fX7TxZ2RciKcA/D+ae9CuUNlbkwDi8 -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org