$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft File: SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json) Hash identifier: EWDW1AzY4zJwH18obOqvsbSloN6N06Rqz+fF14Xc/zc= Subject key identifier: 66:95:D2:7A:24:8A:99:CB:8F:65:BF:2C:2E:80:F2:00:C7:12:A0:19 Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft Manifest number: 03F7 Signing time: Fri 03 May 2024 02:18:43 +0000 Manifest this update: Fri 03 May 2024 02:18:43 +0000 Manifest next update: Fri 10 May 2024 02:18:43 +0000 Files and hashes: 1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: p27MOUnuD+a3Zu4nHyzua0+EV5azKAwYHksxF4zfT5c=) 2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: nHCadaN1Xc+Cwq5DpcBPhTIrPdhEpzVlr5N0hOLv0SY=) 3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: 7M33YTa8Ps11HunXEcyKgTV4o/04RKVc8VqGhI0g1ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Validity Not Before: May 3 02:18:43 2024 GMT Not After : May 10 02:18:43 2024 GMT Subject: CN=66344983-db4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:d5:ac:01:2d:98:c8:4f:47:8d:0f:d5:5c: c2:8a:ba:e9:e6:a9:8f:9d:5a:9a:9b:57:aa:d4:d1: d3:29:84:16:72:13:ff:a9:87:e4:a6:b4:df:01:4e: 3b:0d:90:a1:eb:33:c4:23:0f:ea:80:39:dc:42:83: 30:c9:b9:f7:06:7d:cc:9a:e2:7f:22:a7:d9:cf:c5: f8:b5:a7:d2:e0:1a:90:01:13:68:94:e7:8d:e3:5e: 40:70:1b:6f:2a:33:33:63:cd:e6:17:53:6d:53:4d: 5b:f7:fa:f0:0c:02:f1:4e:03:15:f8:a1:e9:d1:ca: e8:52:70:6f:cc:fa:de:2f:4c:d8:a0:93:78:cd:ae: fe:de:ed:4d:02:a9:68:e4:d4:8c:e5:6d:7b:87:9a: 92:5c:80:35:0f:0a:da:dc:8c:5e:2e:6c:7c:70:7b: 69:ac:39:70:df:9f:46:85:4f:7e:a4:c7:ce:04:5e: 0b:4f:03:2b:a2:c7:18:70:f5:99:29:df:25:e5:c4: 4c:cd:76:c6:86:f3:d1:be:50:a8:cc:26:27:40:46: ca:4d:e7:11:65:19:6c:5a:d5:2f:02:2e:21:42:37: fa:2e:52:b1:94:38:36:13:c2:fd:f5:a6:20:67:7a: 1f:e5:5a:7a:7f:82:ee:be:a6:7e:22:35:38:b3:96: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:D2:7A:24:8A:99:CB:8F:65:BF:2C:2E:80:F2:00:C7:12:A0:19 X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0c:37:ec:93:f1:7f:82:43:47:5a:56:28:06:b4:c9:62:e2: db:7c:be:cf:28:df:f7:6e:44:e4:fd:54:de:57:a2:ca:93:ed: 40:1d:aa:29:02:7a:cc:47:76:56:b0:34:e3:bb:43:58:4f:4d: 64:30:2a:ff:b7:06:0c:81:b1:2a:7b:98:6e:08:bf:a4:5a:57: 0b:07:98:15:6b:99:28:e0:ae:9d:10:84:6b:0f:bd:95:9d:73: fc:6d:01:cf:cc:cf:0b:69:ac:3f:c3:bd:f4:3c:45:da:65:40: 7a:18:08:ff:95:30:e7:7d:fd:10:06:59:d1:cc:33:db:60:66: 13:db:ff:1c:df:26:dc:ff:9c:36:34:da:0c:01:33:2f:dc:4d: db:db:81:d3:0f:00:f7:cf:2d:d6:23:14:fd:e9:88:dd:a0:5b: e5:38:9a:0d:51:84:55:7b:2c:51:47:7c:64:79:30:23:df:36: 31:51:67:a1:d9:9b:73:5f:4b:34:cd:26:55:7a:50:7a:4e:10: de:33:7c:ae:b6:55:fe:74:e3:37:67:2a:82:83:37:30:4d:6a: ca:65:0e:42:73:29:bd:c1:65:d9:16:87:0c:29:d6:7d:9c:68: 95:7a:bf:34:15:7a:98:f7:42:f6:a0:2d:91:78:d1:1f:cf:7c: 84:95:bc:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjQwNTAzMDIxODQzWhcNMjQwNTEwMDIxODQzWjAYMRYwFAYD VQQDEw02NjM0NDk4My1kYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuHVrAEtmMhPR40P1VzCirrp5qmPnVqam1eq1NHTKYQWchP/qYfkprTfAU47 DZCh6zPEIw/qgDncQoMwybn3Bn3MmuJ/IqfZz8X4tafS4BqQARNolOeN415AcBtv KjMzY83mF1NtU01b9/rwDALxTgMV+KHp0croUnBvzPreL0zYoJN4za7+3u1NAqlo 5NSM5W17h5qSXIA1Dwra3IxeLmx8cHtprDlw359GhU9+pMfOBF4LTwMroscYcPWZ Kd8l5cRMzXbGhvPRvlCozCYnQEbKTecRZRlsWtUvAi4hQjf6LlKxlDg2E8L99aYg Z3of5Vp6f4LuvqZ+IjU4s5brFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaV0nok ipnLj2W/LC6A8gDHEqAZMB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjM3My8yQzAwNkJCODJCMkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1 OXFzVEpIVFRIckRmem0zSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKDDfsk/F/gkNHWlYoBrTJYuLbfL7PKN/3bkTk/VTeV6LKk+1AHaop AnrMR3ZWsDTju0NYT01kMCr/twYMgbEqe5huCL+kWlcLB5gVa5ko4K6dEIRrD72V nXP8bQHPzM8Laaw/w730PEXaZUB6GAj/lTDnff0QBlnRzDPbYGYT2/8c3ybc/5w2 NNoMATMv3E3b24HTDwD3zy3WIxT96YjdoFvlOJoNUYRVeyxRR3xkeTAj3zYxUWeh 2ZtzX0s0zSZVelB6ThDeM3yutlX+dOM3ZyqCgzcwTWrKZQ5Ccym9wWXZFocMKdZ9 nGiVer80FXqY90L2oC2ReNEfz3yElbz9 -----END CERTIFICATE-----Generated at Fri May 3 04:45:08 2024 by rpki-client on console-fra.rpki-client.org