$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: khZatCDc10OFvM6jfR06eqCqAdX3Sx8UGjDnaXIbVgg= Subject key identifier: 66:5D:50:56:25:26:1E:F5:C4:3A:40:CF:A6:0C:A5:B9:E9:0C:02:1F Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 09FC Signing time: Thu 02 May 2024 21:09:49 +0000 Manifest this update: Thu 02 May 2024 21:09:49 +0000 Manifest next update: Thu 09 May 2024 21:09:49 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: Zb4zue8H8Ss0Qi1plNcXE4qGWotpdfUVWBaCWtLKrJI=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: yJ71VBH0x6Cizy3pLk3TQDQEwieJvCbqnha729ASJmU=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: SeaNTqd0MT2Mb0YJWYURazfx/oLk37QwRX3zpyKaSjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: May 2 21:09:49 2024 GMT Not After : May 9 21:09:49 2024 GMT Subject: CN=6634011d-97dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:18:6a:53:29:72:94:9b:0e:f4:51:ee:c8: fe:5e:d4:ee:78:5e:ba:03:a7:73:ee:2d:af:cb:c1: 98:1a:60:a7:1a:6a:d5:62:03:6e:c3:94:60:a7:51: e0:df:4d:bd:d7:8c:5d:ff:b7:30:1e:6b:8f:74:0d: cd:a2:8d:91:cd:0e:59:44:e0:69:9a:4a:b6:10:6a: 1c:d7:de:66:2f:33:d2:15:c9:12:58:13:d0:ac:34: b9:29:e5:99:78:0f:e3:90:4c:7b:fc:07:26:93:6b: 55:aa:6c:ee:98:03:09:50:8f:39:21:a9:fe:98:82: eb:b4:75:fc:36:b6:97:91:65:2b:40:ae:3a:9c:7a: 4a:ad:aa:a4:b2:23:93:25:24:92:4e:4f:db:e6:fd: 82:2d:96:f2:22:d7:55:bf:e9:a3:9d:66:8f:03:58: 6c:a7:77:28:82:82:bf:69:2e:b2:39:f1:5f:98:0d: 2b:e2:58:ad:72:e0:bc:51:1f:63:b0:56:2a:02:76: 29:a2:6e:00:15:7e:14:af:0f:26:d9:5c:b8:a2:b1: 24:93:b6:ec:59:c9:0f:8d:11:54:63:07:01:42:b0: f7:ef:7d:bf:b2:ac:d0:0d:fe:85:6b:75:3c:6d:3e: df:92:27:65:37:fc:5b:42:b8:5d:c4:44:90:38:34: 3b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:50:56:25:26:1E:F5:C4:3A:40:CF:A6:0C:A5:B9:E9:0C:02:1F X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:1d:83:44:49:61:ee:8b:f1:4c:b5:a9:35:d4:b9:47:92:fa: 51:84:ce:1d:8d:d1:87:bf:74:d4:2a:33:cf:d8:33:38:11:b8: ca:cc:27:cd:d9:5d:14:b8:42:1c:91:24:23:1d:f5:8f:c1:cb: bb:24:cf:d4:6e:49:ee:2c:18:44:7e:73:57:ad:d2:e6:1d:5e: f5:df:4a:af:d3:3a:d9:02:89:2c:0a:4c:d3:b3:6e:b2:7f:98: de:a6:87:cf:52:60:0f:a8:6c:e4:19:2e:af:b3:6c:28:c1:72: 4a:77:c0:61:f0:85:06:34:df:59:5e:6c:5a:df:2f:e1:f2:6d: ee:ba:52:20:33:09:9a:73:69:93:dd:94:84:d7:0a:6e:77:97: d9:fc:59:71:ac:58:40:b3:8d:1b:01:aa:d8:ae:05:a3:e4:ca: 57:37:14:fa:54:01:d2:fc:31:e4:8f:5e:82:b5:41:14:90:d4: 19:e5:94:4c:a4:32:0b:26:02:6e:6e:b4:64:89:b5:38:ac:8d: 3e:96:ba:e6:69:f4:f9:07:c8:37:d5:53:c3:ba:b4:3d:e8:30: f8:88:65:b1:07:6d:5d:28:a0:91:1f:78:bd:34:c6:48:65:c4: 5e:d3:e5:49:22:fc:41:3b:48:18:40:b9:75:38:65:e6:ae:c7: 89:91:f5:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjQwNTAyMjEwOTQ5WhcNMjQwNTA5MjEwOTQ5WjAYMRYwFAYD VQQDEw02NjM0MDExZC05N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukUYalMpcpSbDvRR7sj+XtTueF66A6dz7i2vy8GYGmCnGmrVYgNuw5Rgp1Hg 302914xd/7cwHmuPdA3Noo2RzQ5ZROBpmkq2EGoc195mLzPSFckSWBPQrDS5KeWZ eA/jkEx7/Acmk2tVqmzumAMJUI85Ian+mILrtHX8NraXkWUrQK46nHpKraqksiOT JSSSTk/b5v2CLZbyItdVv+mjnWaPA1hsp3cogoK/aS6yOfFfmA0r4litcuC8UR9j sFYqAnYpom4AFX4Urw8m2Vy4orEkk7bsWckPjRFUYwcBQrD3732/sqzQDf6Fa3U8 bT7fkidlN/xbQrhdxESQODQ73wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZdUFYl Jh71xDpAz6YMpbnpDAIfMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZHYNESWHui/FMtak11LlHkvpRhM4djdGHv3TUKjPP2DM4EbjKzCfN 2V0UuEIckSQjHfWPwcu7JM/UbknuLBhEfnNXrdLmHV7130qv0zrZAoksCkzTs26y f5jepofPUmAPqGzkGS6vs2wowXJKd8Bh8IUGNN9ZXmxa3y/h8m3uulIgMwmac2mT 3ZSE1wpud5fZ/FlxrFhAs40bAarYrgWj5MpXNxT6VAHS/DHkj16CtUEUkNQZ5ZRM pDILJgJubrRkibU4rI0+lrrmafT5B8g31VPDurQ96DD4iGWxB21dKKCRH3i9NMZI ZcRe0+VJIvxBO0gYQLl1OGXmrseJkfVY -----END CERTIFICATE-----Generated at Thu May 2 22:13:14 2024 by rpki-client on console-fra.rpki-client.org