$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: 0CQXI3cCrPvXtrLrblDd9R8jtSCm/EX5Dl1aVu1hfUw= Subject key identifier: 51:F3:08:A2:5F:00:F4:92:B3:31:58:5B:2D:F4:57:A5:24:1B:1E:AC Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 05CA Signing time: Mon 02 Oct 2023 22:54:09 +0000 Manifest this update: Mon 02 Oct 2023 22:54:08 +0000 Manifest next update: Mon 09 Oct 2023 22:54:08 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: r0CFs+tScJtMd2/MH66Q+4m58Es6NY9cra556RVArWI=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: 6J3ZJbkLHUoYLFGihGWvxpQWzVCEBy3ORRnmTtz2znc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Oct 2023 21:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Validity Not Before: Oct 2 22:54:08 2023 GMT Not After : Oct 9 22:54:08 2023 GMT Subject: CN=651b4a11-35a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:08:e4:97:08:a5:81:10:b5:b3:99:fc:86: f3:b2:6b:f9:58:6f:ae:86:3f:4e:1c:2f:d8:40:bb: 52:38:92:43:9c:eb:1c:98:a7:bb:9d:56:c0:14:79: 3c:c6:e2:d7:ac:b5:28:dd:e8:b7:3d:bb:8b:92:7f: bb:28:f0:c9:92:fa:3d:a7:be:6f:f4:52:79:14:2e: 59:b1:4c:30:02:9c:ac:07:b0:c3:b6:59:ac:a0:72: 70:8c:75:4d:3e:11:11:3c:de:5e:06:a8:07:39:8f: a7:8c:8e:97:0c:70:be:83:94:0c:4a:e1:7a:c9:de: 68:e3:3c:bc:0d:34:73:bc:e7:79:67:33:4c:fc:3f: 29:87:bd:f3:7f:1b:fd:f6:8f:fb:b9:59:e1:45:ac: a5:0e:15:41:60:b8:1e:3d:82:16:f1:c5:38:3a:29: 81:b4:1c:af:f6:23:3d:48:93:83:a2:f9:2f:d0:74: f3:db:45:86:94:54:df:de:db:db:f7:42:a6:f0:bf: 12:08:03:4a:e1:0b:bc:4e:38:4a:e6:ce:d2:d0:e6: 1c:fa:6b:09:13:8d:1a:1d:46:7f:8c:f4:8d:38:72: af:bc:32:78:93:c6:05:ef:7e:35:ef:89:b8:f1:2d: 4d:c1:de:ea:a8:3f:4a:2c:19:4c:55:c3:43:78:9b: 86:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:08:A2:5F:00:F4:92:B3:31:58:5B:2D:F4:57:A5:24:1B:1E:AC X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:88:a3:2c:88:2c:60:a8:d3:c3:7b:ed:ae:88:a5:56:76:5e: b4:8d:c6:29:d2:b1:c3:45:e1:33:13:24:5c:18:76:c3:aa:a5: 6f:05:98:ba:52:52:46:6d:8b:0d:72:06:9a:47:c7:4b:45:64: b7:3e:2a:e9:84:9b:8a:d7:d1:3f:95:65:38:66:bc:4c:c5:63: a4:b4:2f:ee:c0:d8:a5:cb:56:25:4d:17:fe:70:59:83:ac:02: 10:8b:1b:8e:7f:2a:65:0c:a1:73:b2:c6:6e:1d:f7:67:fd:85: b9:6c:d7:e7:e2:a3:07:4a:7c:9d:e6:75:a0:cf:18:f8:a3:15: d5:6c:b8:85:e8:af:92:1a:6d:7f:12:76:bc:22:74:51:63:66: e5:ec:53:f9:7d:25:74:1a:b2:2a:39:b0:15:25:7f:a7:ae:b3: a6:7c:65:cc:0b:8b:08:45:45:20:7e:c1:30:7d:07:3c:f0:e2: bf:24:90:30:2f:2e:e9:9f:ad:14:e5:40:12:c5:57:e7:7f:02: 8a:d1:ed:e4:d1:ce:13:5e:f9:d9:6f:d6:a5:09:2f:21:82:b5: 84:55:63:0d:a8:a1:81:0e:79:8b:03:e6:89:e2:25:29:23:d1: 31:cb:59:25:58:cf:f3:55:5b:8b:e3:dd:ac:00:4c:03:5e:60: 3c:4d:7b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjMxMDAyMjI1NDA4WhcNMjMxMDA5MjI1NDA4WjAYMRYwFAYD VQQDEw02NTFiNGExMS0zNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt8I5JcIpYEQtbOZ/Ibzsmv5WG+uhj9OHC/YQLtSOJJDnOscmKe7nVbAFHk8 xuLXrLUo3ei3PbuLkn+7KPDJkvo9p75v9FJ5FC5ZsUwwApysB7DDtlmsoHJwjHVN PhERPN5eBqgHOY+njI6XDHC+g5QMSuF6yd5o4zy8DTRzvOd5ZzNM/D8ph73zfxv9 9o/7uVnhRaylDhVBYLgePYIW8cU4OimBtByv9iM9SJODovkv0HTz20WGlFTf3tvb 90Km8L8SCANK4Qu8TjhK5s7S0OYc+msJE40aHUZ/jPSNOHKvvDJ4k8YF734174m4 8S1Nwd7qqD9KLBlMVcNDeJuGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHzCKJf APSSszFYWy30V6UkGx6sMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCiKMsiCxgqNPDe+2uiKVWdl60jcYp0rHDReEzEyRcGHbDqqVvBZi6 UlJGbYsNcgaaR8dLRWS3PirphJuK19E/lWU4ZrxMxWOktC/uwNily1YlTRf+cFmD rAIQixuOfyplDKFzssZuHfdn/YW5bNfn4qMHSnyd5nWgzxj4oxXVbLiF6K+SGm1/ Ena8InRRY2bl7FP5fSV0GrIqObAVJX+nrrOmfGXMC4sIRUUgfsEwfQc88OK/JJAw Ly7pn60U5UASxVfnfwKK0e3k0c4TXvnZb9alCS8hgrWEVWMNqKGBDnmLA+aJ4iUp I9Exy1klWM/zVVuL492sAEwDXmA8TXsW -----END CERTIFICATE-----Generated at Mon Oct 2 23:34:38 2023 by rpki-client on console-fra.rpki-client.org