$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: OnTRrwjHw2YEt3XInRQCMA3mJOuIKBq/9BvudwPD5c4= Subject key identifier: A1:72:56:FF:D0:FC:61:F6:B9:06:4A:DE:CB:7A:D4:5F:3E:2F:F5:8E Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 9C Signing time: Sun 19 May 2024 06:50:24 +0000 Manifest this update: Sun 19 May 2024 06:50:24 +0000 Manifest next update: Sun 26 May 2024 06:50:24 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: bTX6FPXJ03WL9koN075QheWELYjC8mU0jmayS1IXTFs=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: YbpffVb3zEWlT+M6vE7HwXKJnUyuQDREIaLGZ2+xTRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: May 19 06:50:24 2024 GMT Not After : May 26 06:50:24 2024 GMT Subject: CN=6649a130-5234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:9b:04:86:93:98:66:c2:b0:19:86:72:67: e1:fb:b1:f7:13:d9:83:8f:60:cc:a1:05:9a:b0:2e: cf:15:bb:53:3c:68:79:f3:3e:c5:8e:2f:da:9e:93: 0b:81:e0:94:0c:5b:e0:6a:0f:d5:21:8b:a4:f3:86: 5d:b7:29:70:ab:83:12:d3:17:3f:91:ad:23:82:63: 43:58:f8:f6:82:bb:a2:a7:20:71:a5:2e:5b:f7:3a: a0:e6:6c:50:22:58:24:c9:a9:ab:ea:e9:91:cd:eb: da:3a:10:91:1b:56:1c:0f:37:6d:96:62:d7:ed:d7: 0d:54:ef:a2:36:73:a7:93:31:b6:6c:40:fc:09:1f: b2:6d:86:2f:26:07:cf:75:fc:3a:51:77:97:2d:c9: 2c:7e:f1:72:ea:50:08:cc:95:7b:f7:69:64:31:2d: 86:b4:bb:df:11:db:63:dc:6f:09:38:06:5f:04:5b: c5:96:06:68:21:26:fe:5b:1c:84:bf:a8:33:4d:1b: c4:be:1c:00:b6:9c:dd:07:03:0d:87:10:76:29:d2: 35:26:e4:94:8c:92:9e:23:ac:0c:d0:66:40:bc:cf: d9:2a:66:18:24:8d:42:40:5b:e9:10:52:5a:da:5c: 8d:07:f2:fe:17:af:9c:4b:9d:11:39:06:be:2d:23: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:72:56:FF:D0:FC:61:F6:B9:06:4A:DE:CB:7A:D4:5F:3E:2F:F5:8E X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0b:10:81:08:6a:df:b1:7f:48:3d:47:e9:0a:a7:1a:59:f8: 70:49:31:a1:55:45:2a:4e:f5:e5:fa:e3:49:8a:e2:64:ff:64: d8:c2:94:76:86:6b:ea:8c:ce:28:f0:0f:26:45:2b:34:6e:55: d6:c8:5a:40:7a:ab:c3:ae:2d:ef:32:42:89:35:f4:8d:c5:a1: 04:72:3b:e2:3d:99:e1:56:1f:c1:fb:01:cb:27:e0:0a:c6:af: c3:f7:4b:4e:da:2d:7a:6b:eb:5a:32:db:7f:41:82:47:16:28: ce:f6:0a:42:db:b2:79:03:60:bd:2d:ce:1b:07:7c:01:c9:70: f3:9f:36:7d:5a:f9:02:c9:78:bb:ce:fc:c5:61:70:25:66:54: 4a:33:64:7c:14:79:c2:42:a2:6d:94:00:d9:2e:3c:b3:36:32: 92:c4:68:37:8e:62:4b:bb:8e:89:0d:13:a7:41:ca:fb:25:53: 29:af:ff:1d:8f:0b:a5:b7:22:5e:a6:d9:7d:2c:0c:8a:c6:53: 3f:f4:fe:d5:13:6c:62:6a:2f:04:53:e8:05:9c:52:35:e7:6d: 4d:e8:65:4f:88:54:8c:2a:40:8a:3e:56:2c:c1:e6:66:c8:47: 99:04:dc:10:e2:df:c5:6c:3e:fd:20:8b:68:7e:07:65:2e:30: 8e:92:6b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjQwNTE5MDY1MDI0WhcNMjQwNTI2MDY1MDI0WjAYMRYwFAYD VQQDEw02NjQ5YTEzMC01MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiKbBIaTmGbCsBmGcmfh+7H3E9mDj2DMoQWasC7PFbtTPGh58z7Fji/anpML geCUDFvgag/VIYuk84Zdtylwq4MS0xc/ka0jgmNDWPj2gruipyBxpS5b9zqg5mxQ Ilgkyamr6umRzevaOhCRG1YcDzdtlmLX7dcNVO+iNnOnkzG2bED8CR+ybYYvJgfP dfw6UXeXLcksfvFy6lAIzJV792lkMS2GtLvfEdtj3G8JOAZfBFvFlgZoISb+WxyE v6gzTRvEvhwAtpzdBwMNhxB2KdI1JuSUjJKeI6wM0GZAvM/ZKmYYJI1CQFvpEFJa 2lyNB/L+F6+cS50ROQa+LSP3kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFyVv/Q /GH2uQZK3st61F8+L/WOMB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmCxCBCGrfsX9IPUfpCqcaWfhwSTGhVUUqTvXl+uNJiuJk/2TYwpR2 hmvqjM4o8A8mRSs0blXWyFpAeqvDri3vMkKJNfSNxaEEcjviPZnhVh/B+wHLJ+AK xq/D90tO2i16a+taMtt/QYJHFijO9gpC27J5A2C9Lc4bB3wByXDznzZ9WvkCyXi7 zvzFYXAlZlRKM2R8FHnCQqJtlADZLjyzNjKSxGg3jmJLu46JDROnQcr7JVMpr/8d jwultyJeptl9LAyKxlM/9P7VE2xiai8EU+gFnFI1521N6GVPiFSMKkCKPlYsweZm yEeZBNwQ4t/FbD79IItofgdlLjCOkmsL -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org