$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: XCj+TlGanKajZPPIgVa4xeSpTXg+RxkUc7Fw/SVq1IA= Subject key identifier: E0:6B:A5:9F:25:5D:B3:79:2B:50:A3:5A:DA:7A:5A:AB:A2:CD:EC:8B Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 8F Signing time: Fri 17 May 2024 07:10:17 +0000 Manifest this update: Fri 17 May 2024 07:10:17 +0000 Manifest next update: Fri 24 May 2024 07:10:17 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: OCVQsEtAISgllaX2ZkaZnXQzTCf6QNH2Ss/F2h8J7MY=) 2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: yCpdd0ApGXCaNr+r6yqFGujZvhPfpxEkOzMygG6s3vQ=) 3: 6BC6F8426D8F11EE9980E23FC4F9AE02.roa (hash: 3LHbih6jiCy+yFOZGlCJzqmcW+w6GM0QByW0VjjI4Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: May 17 07:10:17 2024 GMT Not After : May 24 07:10:17 2024 GMT Subject: CN=664702d9-56f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:1c:fe:92:52:1d:75:5f:fb:52:65:4d:11: eb:ac:66:8a:6c:2c:0a:96:51:76:74:b3:98:6f:7e: 3a:38:46:7f:66:7a:3a:dc:6b:71:9d:be:0c:41:29: 1e:93:47:75:b4:d5:ef:1b:a9:99:b3:cd:26:48:fb: 13:0f:c6:b3:10:97:7b:e9:1a:35:71:43:da:bc:d9: 30:88:ee:11:b0:26:34:01:57:8f:65:80:3e:29:f2: 8f:73:9a:07:d8:1c:f7:4e:98:f3:a4:7d:80:78:8d: 4f:33:59:21:e1:77:8e:f2:b3:43:5d:62:5a:a7:b4: d5:62:1f:0e:1d:bf:89:e8:58:b7:a6:32:33:f7:da: 61:96:33:7d:a5:0c:49:0d:6d:c9:04:b2:bd:bf:fe: e5:50:8e:bb:80:6b:c4:0b:db:34:87:f0:26:f9:65: c9:d0:bd:01:0b:dd:b7:e8:54:b9:8d:55:0e:a5:f4: e5:53:bf:d3:c9:24:9d:3a:ea:68:1c:0d:d7:ec:6f: f0:cd:f9:11:b8:eb:26:ae:d7:1c:59:ce:23:9d:52: 8e:7b:6b:87:be:14:a6:a5:cc:fb:72:ae:0b:63:09: 01:b5:d7:ee:c0:87:41:e2:69:d6:9d:8e:5a:ef:de: a9:8b:01:97:e0:39:0f:10:25:bf:32:e9:b4:d3:cf: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:A5:9F:25:5D:B3:79:2B:50:A3:5A:DA:7A:5A:AB:A2:CD:EC:8B X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:77:64:78:78:cf:0f:3f:c5:be:5b:04:db:0a:d5:74:d3:68: 3e:fc:c0:80:db:90:78:ba:e7:23:df:d6:e0:25:7b:83:c8:8d: b0:3f:47:a8:a3:ce:36:7a:16:6f:ac:6c:bb:65:37:b1:b7:51: a6:30:09:66:b5:73:9c:9e:de:4f:6a:aa:92:29:5b:79:27:b0: d9:33:a3:f5:c9:63:47:0f:48:af:6d:c1:d5:d2:62:fe:c4:03: 10:d9:df:23:df:23:f9:d0:a3:f0:af:f2:02:c1:80:df:40:dd: 81:ee:a0:00:a3:e7:f9:d8:33:29:30:9b:8f:9b:fc:03:de:5b: 2d:e4:5e:bc:08:16:ed:0d:91:cf:96:56:1c:38:95:48:00:b7: a2:b9:69:86:42:3f:2c:3b:d8:a1:3f:3b:0b:98:b2:cc:b6:2d: eb:73:8a:17:1a:90:84:dd:a5:8a:ad:15:53:1d:d4:d1:d1:f5: 76:41:7b:4d:15:18:97:dd:db:43:e5:36:0d:11:c0:c9:31:6e: f6:6d:3b:0e:59:9c:71:81:d4:9e:cf:77:6f:6b:45:86:09:ae: 27:5b:58:72:3a:8b:ac:a6:7b:92:f1:8d:45:70:cb:a9:f4:49: 80:20:68:74:22:2a:c7:eb:d7:ef:c3:a2:67:54:b9:1c:41:4a: 4a:db:07:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjQwNTE3MDcxMDE3WhcNMjQwNTI0MDcxMDE3WjAYMRYwFAYD VQQDEw02NjQ3MDJkOS01NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo60c/pJSHXVf+1JlTRHrrGaKbCwKllF2dLOYb346OEZ/Zno63Gtxnb4MQSke k0d1tNXvG6mZs80mSPsTD8azEJd76Ro1cUPavNkwiO4RsCY0AVePZYA+KfKPc5oH 2Bz3TpjzpH2AeI1PM1kh4XeO8rNDXWJap7TVYh8OHb+J6Fi3pjIz99phljN9pQxJ DW3JBLK9v/7lUI67gGvEC9s0h/Am+WXJ0L0BC9236FS5jVUOpfTlU7/TySSdOupo HA3X7G/wzfkRuOsmrtccWc4jnVKOe2uHvhSmpcz7cq4LYwkBtdfuwIdB4mnWnY5a 796piwGX4DkPECW/Mum0089fTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBrpZ8l XbN5K1CjWtp6WquizeyLMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmd2R4eM8PP8W+WwTbCtV002g+/MCA25B4uucj39bgJXuDyI2wP0eo o842ehZvrGy7ZText1GmMAlmtXOcnt5PaqqSKVt5J7DZM6P1yWNHD0ivbcHV0mL+ xAMQ2d8j3yP50KPwr/ICwYDfQN2B7qAAo+f52DMpMJuPm/wD3lst5F68CBbtDZHP llYcOJVIALeiuWmGQj8sO9ihPzsLmLLMti3rc4oXGpCE3aWKrRVTHdTR0fV2QXtN FRiX3dtD5TYNEcDJMW72bTsOWZxxgdSez3dva0WGCa4nW1hyOouspnuS8Y1FcMup 9EmAIGh0IirH69fvw6JnVLkcQUpK2wcC -----END CERTIFICATE-----Generated at Fri May 17 08:13:47 2024 by rpki-client on console-fra.rpki-client.org