$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: AJnI6pGFWWt9+VqzVWG2vHmLxiUDQ+8q6wPPJ0S50uQ= Subject key identifier: E9:E8:8F:A8:4B:48:99:38:5C:7C:CE:B8:05:FE:F0:FF:2D:0C:67:59 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 016C Signing time: Sun 05 May 2024 04:57:18 +0000 Manifest this update: Sun 05 May 2024 04:57:18 +0000 Manifest next update: Sun 12 May 2024 04:57:18 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: 2BzaLAdWI4v4VTTKNdENKiiLtJbRMYR8ozliqaHDeR0=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: g9HS+SRgps9RZhKOWWLH99Ykg9DnbRNJ1pvU0zcEtXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: May 5 04:57:18 2024 GMT Not After : May 12 04:57:18 2024 GMT Subject: CN=663711ae-ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:d9:a8:b9:b9:7a:84:70:a9:58:f1:dd:c4: c2:2d:bf:bc:6d:cd:ac:af:50:61:e9:6e:ff:f9:2d: 06:e6:bf:93:fc:37:67:68:d8:ce:a5:c6:d4:1a:da: f0:83:36:ee:24:7a:83:22:e3:d3:5f:21:ac:0c:b1: 3d:4e:ed:7c:aa:3d:1c:0e:43:d4:14:72:b9:33:7c: d2:3a:da:f5:e5:04:1c:ae:0d:4e:f5:ef:3a:10:49: 79:0c:6b:e5:b2:43:53:f0:30:b3:57:3c:4a:66:0e: 96:9a:bd:f1:33:d2:fe:d9:de:aa:c2:1d:c0:fa:29: 54:cb:68:d1:6b:4b:3e:70:5f:7b:c6:2d:80:24:eb: 80:a6:64:cf:84:a5:f9:46:88:ec:fc:dd:de:94:27: ee:3f:8d:3f:ec:e4:19:17:d1:02:55:48:ae:cc:72: 64:5f:06:01:05:07:3f:28:37:54:f1:aa:46:92:7c: 67:7e:82:e2:43:50:1b:9c:b1:51:e4:28:1a:d3:1e: 12:d1:a4:48:81:ba:08:1d:a8:ba:c5:fc:95:d4:63: a9:8c:bb:d2:7c:47:a0:b7:56:57:18:06:f3:61:13: 32:1c:7c:bf:40:80:b2:53:6b:ad:90:f1:76:68:c2: 2b:af:81:40:74:42:7e:a8:9d:47:55:24:d7:df:cc: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E8:8F:A8:4B:48:99:38:5C:7C:CE:B8:05:FE:F0:FF:2D:0C:67:59 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7c:07:f3:d8:52:34:4d:c0:0c:c0:1d:b8:7d:8d:8d:b6:05: 5a:dd:c0:d7:f3:a4:2c:32:8d:e9:29:3a:b1:fc:b0:79:17:18: 5d:43:e4:a4:23:a6:a1:df:1a:a7:f5:96:8a:9a:52:76:e6:c5: 3b:fd:39:d7:0a:a3:f7:c7:b9:02:8e:33:2a:e3:32:01:20:83: 61:48:e5:63:f0:cd:f1:54:9c:cc:0c:83:c4:9d:82:63:68:9a: 0d:39:d5:1e:79:45:16:d3:76:e9:20:1b:e8:b5:b5:d4:70:2c: aa:cc:9b:f6:7b:cc:a0:ce:74:04:8e:4c:82:22:1d:14:6a:bd: 5f:a0:88:0a:31:67:e8:0d:c9:da:52:29:dd:a7:bd:05:bf:e2: 4f:6e:9d:09:5f:da:89:42:59:82:98:36:d9:78:5a:03:ef:6c: 6e:e6:16:89:70:2f:a1:7f:dd:3e:2d:a4:48:b0:1e:82:40:53: b6:0f:10:38:54:57:58:a9:99:ad:3b:29:2d:30:60:bd:a4:39: 42:df:68:cd:17:8d:4f:b9:d9:54:dc:2b:d3:af:51:8c:1f:ea: c8:f4:72:02:46:81:ea:0a:46:ec:22:25:6e:cf:00:5f:d7:95: e8:4f:a9:03:38:d9:a1:51:d6:e4:0b:f2:83:5d:31:c0:16:a7: 65:b6:10:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjQwNTA1MDQ1NzE4WhcNMjQwNTEyMDQ1NzE4WjAYMRYwFAYD VQQDEw02NjM3MTFhZS1mZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ezZqLm5eoRwqVjx3cTCLb+8bc2sr1Bh6W7/+S0G5r+T/DdnaNjOpcbUGtrw gzbuJHqDIuPTXyGsDLE9Tu18qj0cDkPUFHK5M3zSOtr15QQcrg1O9e86EEl5DGvl skNT8DCzVzxKZg6Wmr3xM9L+2d6qwh3A+ilUy2jRa0s+cF97xi2AJOuApmTPhKX5 Rojs/N3elCfuP40/7OQZF9ECVUiuzHJkXwYBBQc/KDdU8apGknxnfoLiQ1AbnLFR 5Cga0x4S0aRIgboIHai6xfyV1GOpjLvSfEegt1ZXGAbzYRMyHHy/QICyU2utkPF2 aMIrr4FAdEJ+qJ1HVSTX38y1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnoj6hL SJk4XHzOuAX+8P8tDGdZMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+fAfz2FI0TcAMwB24fY2NtgVa3cDX86QsMo3pKTqx/LB5FxhdQ+Sk I6ah3xqn9ZaKmlJ25sU7/TnXCqP3x7kCjjMq4zIBIINhSOVj8M3xVJzMDIPEnYJj aJoNOdUeeUUW03bpIBvotbXUcCyqzJv2e8ygznQEjkyCIh0Uar1foIgKMWfoDcna Uindp70Fv+JPbp0JX9qJQlmCmDbZeFoD72xu5haJcC+hf90+LaRIsB6CQFO2DxA4 VFdYqZmtOyktMGC9pDlC32jNF41PudlU3CvTr1GMH+rI9HICRoHqCkbsIiVuzwBf 15XoT6kDONmhUdbkC/KDXTHAFqdlthD6 -----END CERTIFICATE-----Generated at Sun May 5 06:01:17 2024 by rpki-client on console-fra.rpki-client.org