$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json) Hash identifier: CfBE3+DgYRd/EsIKsGbUxotRb5XKXmLAl2YbY4yA1pk= Subject key identifier: B0:68:61:F3:AE:8B:0C:1D:72:55:7E:07:0B:76:DD:A0:CD:1D:A5:9F Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft Manifest number: 0723 Signing time: Sat 04 May 2024 22:38:49 +0000 Manifest this update: Sat 04 May 2024 22:38:49 +0000 Manifest next update: Sat 11 May 2024 22:38:49 +0000 Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: Agixe4VfVR6c4ynTKW44fcK1G93xl3FJTArZp8JUkk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Validity Not Before: May 4 22:38:49 2024 GMT Not After : May 11 22:38:49 2024 GMT Subject: CN=6636b8f9-9b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:c2:50:ae:91:de:cf:61:24:a0:ed:d6:ec: 59:a4:00:4a:cb:c0:d9:90:1a:cb:a5:42:86:2f:7f: 07:a0:08:cb:f2:50:43:04:f2:2f:21:3a:ce:29:d8: f9:1f:18:85:b3:b2:08:86:4a:6d:0c:54:e6:75:bb: 61:73:24:af:d8:6d:bd:64:45:83:71:e8:a0:91:68: c6:44:1e:82:7a:5e:71:73:7d:40:c3:64:2d:ec:89: d2:76:81:c6:e9:c1:c1:ea:01:b0:83:b2:64:15:47: be:5c:67:c5:36:b2:3b:36:c5:1f:10:e6:27:00:c4: 76:d8:2b:68:e2:ed:dc:f2:3e:67:7d:43:d0:09:ca: f0:b5:79:68:56:26:a9:3d:1d:9f:e5:1b:74:58:af: 19:d6:26:42:4a:a7:48:f3:43:95:d5:4f:81:64:a3: 5a:63:54:f3:ad:42:ae:76:7c:e0:59:01:6f:6d:ae: c2:d9:59:78:24:76:16:2b:2b:5d:6f:ca:4b:04:66: 3c:64:ea:0c:39:ab:68:ee:5c:63:78:d0:fc:29:da: ff:07:cc:aa:28:fa:39:05:e2:22:f6:bb:f4:9f:21: 76:cf:ce:4d:e8:18:5c:b1:d0:42:ad:2f:05:cb:a2: 71:3e:f0:22:8b:3a:07:40:a5:2e:79:c3:ef:4e:5b: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:61:F3:AE:8B:0C:1D:72:55:7E:07:0B:76:DD:A0:CD:1D:A5:9F X509v3 Authority Key Identifier: keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a5:9d:c8:62:94:c9:68:bc:89:8c:9e:fe:6a:f8:88:f6:e5: cc:51:03:4a:9c:ab:40:f5:51:10:e6:4a:f6:8e:c7:1f:74:01: 7c:ee:e2:00:02:a9:92:55:97:d1:04:51:f2:04:60:2b:a6:85: 11:b7:1e:8f:79:81:60:ab:5b:f6:b9:68:a8:c4:94:de:f7:bb: 3e:bf:5c:26:b2:26:89:f7:03:ce:f4:ac:31:dc:2d:f7:3e:2c: 04:ca:16:82:57:ab:44:b3:77:8f:78:b1:92:c8:aa:e9:03:39: 51:92:72:18:bd:4d:21:8d:1d:85:6c:44:ef:e1:30:1a:78:ce: ad:fe:a4:69:f4:be:d0:a6:e8:ad:e6:d6:00:c8:3d:9c:58:58: 77:c3:b3:14:18:6b:81:26:fe:20:f0:15:26:dd:af:13:e2:c4: fc:c3:13:0d:44:a5:29:85:73:b9:10:16:94:e4:7f:63:80:94: c3:74:fa:75:2a:0b:f5:c4:d3:5b:32:11:2c:fc:2b:98:9e:a5: 82:03:9a:7f:bb:63:79:28:a7:e9:f6:da:e3:7e:b3:9d:a5:5f: 7e:51:4e:ce:40:ad:e7:72:f5:91:d9:e0:06:a1:c2:1c:5c:3a: 75:14:dc:ed:1a:a1:89:a9:50:e9:dd:21:6e:f8:fa:47:a9:20: 21:34:fa:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJGRDIxMTAvBgNVBAUTKEIyREE2Q0EyRjE3RURERUVCNEM0NTAzMzYxRjREODgy MjgwQkNBODgwHhcNMjQwNTA0MjIzODQ5WhcNMjQwNTExMjIzODQ5WjAYMRYwFAYD VQQDEw02NjM2YjhmOS05YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyPCUK6R3s9hJKDt1uxZpABKy8DZkBrLpUKGL38HoAjL8lBDBPIvITrOKdj5 HxiFs7IIhkptDFTmdbthcySv2G29ZEWDceigkWjGRB6Cel5xc31Aw2Qt7InSdoHG 6cHB6gGwg7JkFUe+XGfFNrI7NsUfEOYnAMR22Cto4u3c8j5nfUPQCcrwtXloViap PR2f5Rt0WK8Z1iZCSqdI80OV1U+BZKNaY1TzrUKudnzgWQFvba7C2Vl4JHYWKytd b8pLBGY8ZOoMOato7lxjeND8Kdr/B8yqKPo5BeIi9rv0nyF2z85N6BhcsdBCrS8F y6JxPvAiizoHQKUuecPvTlvI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBoYfOu iwwdclV+Bwt23aDNHaWfMB8GA1UdIwQYMBaAFLLabKLxft3utMRQM2H02IIoC8qI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkZEMi9DODFCMjYyOEU1 RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNlNjB4RkF6WWZUWWdpZ0x5 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0cHNvdkYtM2U2MHhGQXpZZlRZZ2lnTHlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkZEMi9DODFCMjYyOEU1RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNl NjB4RkF6WWZUWWdpZ0x5b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/pZ3IYpTJaLyJjJ7+aviI9uXMUQNKnKtA9VEQ5kr2jscfdAF87uIA AqmSVZfRBFHyBGArpoURtx6PeYFgq1v2uWioxJTe97s+v1wmsiaJ9wPO9Kwx3C33 PiwEyhaCV6tEs3ePeLGSyKrpAzlRknIYvU0hjR2FbETv4TAaeM6t/qRp9L7Qpuit 5tYAyD2cWFh3w7MUGGuBJv4g8BUm3a8T4sT8wxMNRKUphXO5EBaU5H9jgJTDdPp1 Kgv1xNNbMhEs/CuYnqWCA5p/u2N5KKfp9trjfrOdpV9+UU7OQK3ncvWR2eAGocIc XDp1FNztGqGJqVDp3SFu+PpHqSAhNPra -----END CERTIFICATE-----Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org