$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: 9TLu6F8rAoDhCv088vhA5XXKAXoKFyKqr1kVaQndkMo= Subject key identifier: A7:FE:E7:22:ED:BA:E5:29:B9:69:0A:B0:53:2D:93:17:8A:C4:A6:81 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 02D7 Signing time: Sun 05 May 2024 03:30:01 +0000 Manifest this update: Sun 05 May 2024 03:30:01 +0000 Manifest next update: Sun 12 May 2024 03:30:01 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: p/cLstJM76oouKpYYT5ULZ0PmLl2GGgpeoJQQKZ8/dk=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: hUshbpYhNh9vhjlUeV7gU/px7/jJpf/a6PfKWwWwlPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: May 5 03:30:01 2024 GMT Not After : May 12 03:30:01 2024 GMT Subject: CN=6636fd39-ed09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:2c:03:6c:07:07:31:aa:cb:7b:6b:6a:5d: a1:97:f9:b1:b9:b3:39:38:79:58:e7:80:e9:9d:5c: 91:a6:9c:ab:8a:d4:70:11:28:f8:87:d8:0f:e2:1f: 57:77:f8:df:47:96:fa:6b:ff:c1:64:da:28:96:f0: ad:66:f5:e4:22:62:4b:0d:8f:a5:3f:55:0c:7b:c3: 71:65:4b:cc:30:22:df:e1:b7:2e:2a:ce:66:53:b4: 9b:d3:1f:f2:fb:94:df:7c:90:11:94:db:23:fb:be: 23:43:59:53:03:92:e5:b6:60:03:77:eb:5a:80:00: 4f:29:01:52:32:55:04:27:7f:32:6d:fd:89:86:b8: 8b:32:c7:12:69:b2:09:dc:f5:fb:94:69:69:1d:4c: 22:33:cb:f1:cd:a8:b1:eb:ae:80:10:0b:8f:cb:e8: c4:59:7c:0b:0b:b1:ed:7b:30:be:93:7b:f5:be:5a: 87:13:5d:8f:24:7e:0a:7b:dd:f7:71:19:a5:a1:3b: 48:81:9c:2e:ad:d8:34:2d:33:50:4c:e1:07:66:49: fd:ad:99:86:08:ca:ae:c9:b7:8b:b4:19:c3:4c:04: 31:8e:05:83:7a:9f:e8:9a:60:cc:f7:36:20:8a:61: 57:68:de:6a:d0:16:36:b7:8a:bb:be:4c:e6:1d:01: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:E7:22:ED:BA:E5:29:B9:69:0A:B0:53:2D:93:17:8A:C4:A6:81 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:2a:db:15:03:76:6b:ad:a8:66:fa:f9:e5:4b:1f:ed:01: 1b:df:3b:4e:16:8d:56:08:cf:d6:ab:1c:50:f1:b3:ea:ac:14: 6b:0f:ac:56:57:6b:6b:30:0b:9f:ba:3c:e3:17:58:15:01:b2: bb:9a:31:9c:52:c4:06:c2:c5:1d:37:85:86:84:37:ca:dc:69: f8:8c:44:af:93:00:b5:ca:f2:34:dd:9c:bd:fc:22:ad:cd:b9: 33:d3:b4:d0:ff:58:2d:c6:a9:1d:b5:53:7c:c8:c1:b7:6b:98: cb:0c:97:de:a4:15:df:0e:68:f0:56:9d:bb:4e:46:3f:a0:ba: cb:ac:41:65:6d:36:f9:ce:6b:4a:69:bf:b9:ce:f0:86:35:2a: 41:48:e1:82:7d:5c:ca:79:b9:f9:d7:0f:ae:19:32:29:6d:85: 54:b5:b1:6d:19:6e:78:2d:8e:b2:aa:f8:9c:6a:3c:27:23:8d: 65:03:c3:e1:cc:99:c3:51:04:7e:94:a9:31:8c:a8:ee:dc:1e: 1c:73:46:77:87:07:7b:4c:47:77:66:77:1c:20:d5:b9:1a:e6: 84:64:2b:4a:e3:a4:6d:c8:5b:7a:b4:ab:2f:ee:05:7b:47:5a: fe:84:ec:54:7c:85:e2:13:99:5e:67:09:83:ee:41:43:3b:1a: ac:61:ff:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjQwNTA1MDMzMDAxWhcNMjQwNTEyMDMzMDAxWjAYMRYwFAYD VQQDEw02NjM2ZmQzOS1lZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiQsA2wHBzGqy3tral2hl/mxubM5OHlY54DpnVyRppyritRwESj4h9gP4h9X d/jfR5b6a//BZNoolvCtZvXkImJLDY+lP1UMe8NxZUvMMCLf4bcuKs5mU7Sb0x/y +5TffJARlNsj+74jQ1lTA5LltmADd+tagABPKQFSMlUEJ38ybf2JhriLMscSabIJ 3PX7lGlpHUwiM8vxzaix666AEAuPy+jEWXwLC7HtezC+k3v1vlqHE12PJH4Ke933 cRmloTtIgZwurdg0LTNQTOEHZkn9rZmGCMquybeLtBnDTAQxjgWDep/ommDM9zYg imFXaN5q0BY2t4q7vkzmHQEFuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf+5yLt uuUpuWkKsFMtkxeKxKaBMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHGCrbFQN2a62oZvr55Usf7QEb3ztOFo1WCM/WqxxQ8bPqrBRrD6xW V2trMAufujzjF1gVAbK7mjGcUsQGwsUdN4WGhDfK3Gn4jESvkwC1yvI03Zy9/CKt zbkz07TQ/1gtxqkdtVN8yMG3a5jLDJfepBXfDmjwVp27TkY/oLrLrEFlbTb5zmtK ab+5zvCGNSpBSOGCfVzKebn51w+uGTIpbYVUtbFtGW54LY6yqvicajwnI41lA8Ph zJnDUQR+lKkxjKju3B4cc0Z3hwd7TEd3ZnccINW5GuaEZCtK46RtyFt6tKsv7gV7 R1r+hOxUfIXiE5leZwmD7kFDOxqsYf+F -----END CERTIFICATE-----Generated at Sun May 5 04:39:57 2024 by rpki-client on console-ams.rpki-client.org