$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: pOOuMjssF2afbAEjDrCvK5cVoOeSsqCcOXqdaOSPPQ0= Subject key identifier: 9E:6E:0C:62:C4:90:9B:09:D5:A1:A7:6E:4C:CB:4E:7B:4F:FA:27:23 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0A6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0A62 Signing time: Sat 04 May 2024 20:30:18 +0000 Manifest this update: Sat 04 May 2024 20:30:17 +0000 Manifest next update: Sat 11 May 2024 20:30:17 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: l7xtLYZ4VXT1rq53EouwnQw6EUPNBbSSqiI1flzSZeI=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: V3zMPliS6mR8rENzRZbv+Fm8qxtTgdFeCg1XmwCXLvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2666 (0xa6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: May 4 20:30:17 2024 GMT Not After : May 11 20:30:17 2024 GMT Subject: CN=66369ada-136b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:49:d3:d4:58:88:c8:20:22:60:b4:d1:b3: 4e:fe:44:5a:fa:1e:a4:bd:37:e4:d1:b0:af:a6:70: b6:79:c7:dd:65:90:45:a7:50:a9:ea:01:19:d2:d7: 7f:98:92:ca:e0:3c:a6:65:59:e0:52:f1:91:7d:ab: 0f:44:52:f6:9c:2f:8b:e6:01:da:2a:64:b9:e5:f4: 2f:03:ee:89:8e:ac:65:25:90:2d:85:b8:9a:f0:89: be:67:92:34:5a:a0:e3:87:5e:98:c6:35:f6:88:9b: e5:bf:f5:7d:90:5c:d3:40:a3:e1:34:c5:ba:b2:25: da:54:ae:44:1e:4b:3c:1c:6b:3f:93:25:33:a3:0b: a2:6b:27:cd:11:97:7c:d4:da:e6:ed:8d:36:bd:15: de:53:d9:cc:0b:a0:f1:78:6a:9d:08:5b:81:13:a5: c1:c0:b1:86:8b:93:52:bb:4c:59:19:94:96:51:16: 16:c0:81:e6:ac:ba:a5:f8:28:33:28:16:6b:31:f4: 6a:d9:f4:2f:f2:30:1b:e0:55:83:eb:71:e7:45:97: 8f:3d:24:c6:12:21:8e:a3:cd:e9:8f:e5:e3:67:1d: 4b:ed:38:b7:dc:f8:30:f2:79:36:bf:4e:d6:44:70: 75:80:53:0a:bc:29:17:69:c2:9d:29:19:a2:aa:f6: e2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6E:0C:62:C4:90:9B:09:D5:A1:A7:6E:4C:CB:4E:7B:4F:FA:27:23 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bf:ed:6e:ae:ec:da:23:a0:b9:8e:b9:05:6e:0f:3f:f0:53: 04:b4:a5:55:b9:8c:66:28:be:58:22:0d:68:36:47:f4:1a:1b: 43:6c:e2:50:32:8c:10:04:8f:7d:92:c0:4b:41:58:0e:a2:59: 46:31:b1:45:42:4e:57:79:86:70:3f:ec:23:10:85:17:28:d2: 96:b1:45:f1:92:7e:72:6c:12:a0:57:65:ef:f4:20:fd:b8:5e: 8c:8b:04:6c:a0:a1:a8:08:54:46:fd:5c:4f:d3:94:2e:b9:c3: 05:b4:25:d1:0e:83:b3:92:8d:26:6e:05:34:6c:ae:db:35:0a: 04:41:d4:9f:43:bb:31:37:f5:4b:d0:47:a6:df:ca:7c:5a:36: b9:b1:e4:65:94:e0:9c:5a:a5:b1:6f:c4:ad:4f:32:39:c1:71: 37:2d:82:23:fc:36:43:eb:b7:6d:f5:ef:b1:6d:f0:bb:bd:2b: 96:10:9c:14:9f:b6:85:3d:5d:d7:8e:02:04:72:77:a0:7d:ba: 0a:55:5f:1f:4c:00:27:28:67:43:5b:3f:a1:23:f3:e6:d9:8a: 70:04:d7:a0:79:9f:71:75:10:25:a2:06:01:cf:9a:af:60:39: c0:fb:ae:84:b7:02:f1:93:8d:bc:5a:80:c2:25:91:c7:b5:1f: eb:0a:b3:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjQwNTA0MjAzMDE3WhcNMjQwNTExMjAzMDE3WjAYMRYwFAYD VQQDEw02NjM2OWFkYS0xMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOVJ09RYiMggImC00bNO/kRa+h6kvTfk0bCvpnC2ecfdZZBFp1Cp6gEZ0td/ mJLK4DymZVngUvGRfasPRFL2nC+L5gHaKmS55fQvA+6JjqxlJZAthbia8Im+Z5I0 WqDjh16YxjX2iJvlv/V9kFzTQKPhNMW6siXaVK5EHks8HGs/kyUzowuiayfNEZd8 1Nrm7Y02vRXeU9nMC6DxeGqdCFuBE6XBwLGGi5NSu0xZGZSWURYWwIHmrLql+Cgz KBZrMfRq2fQv8jAb4FWD63HnRZePPSTGEiGOo83pj+XjZx1L7Ti33Pgw8nk2v07W RHB1gFMKvCkXacKdKRmiqvbiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5uDGLE kJsJ1aGnbkzLTntP+icjMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFv+1uruzaI6C5jrkFbg8/8FMEtKVVuYxmKL5YIg1oNkf0GhtDbOJQ MowQBI99ksBLQVgOollGMbFFQk5XeYZwP+wjEIUXKNKWsUXxkn5ybBKgV2Xv9CD9 uF6MiwRsoKGoCFRG/VxP05QuucMFtCXRDoOzko0mbgU0bK7bNQoEQdSfQ7sxN/VL 0Eem38p8Wja5seRllOCcWqWxb8StTzI5wXE3LYIj/DZD67dt9e+xbfC7vSuWEJwU n7aFPV3XjgIEcnegfboKVV8fTAAnKGdDWz+hI/Pm2YpwBNegeZ9xdRAlogYBz5qv YDnA+66EtwLxk428WoDCJZHHtR/rCrPQ -----END CERTIFICATE-----Generated at Sat May 4 21:32:57 2024 by rpki-client on console-fra.rpki-client.org