$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: 68BHaIV3mPZoDtJIAHdOjzTr73UjefHXGxqxBP4moj4= Subject key identifier: 12:EF:08:12:21:96:BC:61:CA:AF:C7:4D:C1:76:2D:86:4C:62:AF:DA Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 05A5 Signing time: Sun 05 May 2024 00:28:48 +0000 Manifest this update: Sun 05 May 2024 00:28:47 +0000 Manifest next update: Sun 12 May 2024 00:28:47 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: Sc25kKm9ZS2+5Jro/KuKs/EoQttuLoLCFGEi2jp/LRc=) 2: 406C49067FB011EB92379937C4F9AE02.roa (hash: 0ossOkUAWoJyMXHO/vsMbGmRVqnumnMvXWcRgIyy14Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: May 5 00:28:47 2024 GMT Not After : May 12 00:28:47 2024 GMT Subject: CN=6636d2c0-2df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:24:e9:9a:27:7d:a5:54:06:bf:34:90:91: f4:ae:0e:1d:31:39:26:88:2e:b8:00:e1:90:b2:d7: a6:12:d0:20:c6:5a:c2:60:c9:0a:b1:fd:15:87:03: de:4a:94:47:78:48:19:8f:e3:f1:8b:ec:3d:0f:5f: 95:45:fb:31:05:56:18:59:52:5d:c7:2f:13:6c:f9: a5:de:e7:90:77:32:9d:56:64:44:ae:f9:f0:4c:2e: f3:b9:1f:16:55:10:6f:06:4e:f7:bc:3b:3b:cd:e2: 44:68:64:f5:ba:91:cb:14:75:af:ed:b6:bb:19:63: 9e:00:eb:ae:38:6b:07:bb:dd:7d:03:65:10:57:e0: ff:a3:55:8b:22:78:b9:f2:74:a2:23:02:1e:b8:b3: 52:1c:8f:6a:20:4c:cb:ff:6e:1a:e2:65:24:1c:ea: 28:96:3f:47:d4:0b:73:d6:2c:81:9c:7b:cf:f1:e4: ff:9f:79:e0:c8:9e:3b:7e:5c:7d:4f:15:91:cc:1a: ea:d1:c8:8c:5e:fa:5f:a4:9f:33:5f:32:8b:3e:72: 3a:bc:56:b8:94:1c:17:3d:97:85:fe:82:04:5f:61: 8d:7a:83:fc:42:fe:11:82:1f:62:ac:a1:22:ca:37: 0a:7c:2d:a3:62:3c:88:49:3e:6f:94:e9:c9:cf:17: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EF:08:12:21:96:BC:61:CA:AF:C7:4D:C1:76:2D:86:4C:62:AF:DA X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:42:19:d6:52:3a:93:bd:6b:8a:2f:97:96:5d:f8:c7:c7:8c: b4:f9:05:5c:60:c8:2e:1e:94:6c:5d:37:98:12:f2:30:92:8d: c5:b3:83:58:41:05:b7:27:a1:02:31:71:77:77:ac:16:cf:dd: 7f:40:5e:f9:47:9b:bc:6d:e0:91:5b:db:74:46:aa:d8:53:e5: de:16:33:cc:a9:35:f7:a4:5f:a7:7d:a6:21:3f:62:4e:e0:2c: 2d:4c:fa:db:c9:18:53:66:14:82:de:db:aa:5a:4a:ce:0f:bb: cd:ef:43:48:37:46:84:ca:a9:d1:33:6a:3f:f4:80:ad:ec:ed: 49:ac:b6:ed:67:2b:cd:12:e3:ba:51:c9:b7:b4:91:97:f5:5d: 8b:76:13:c8:06:1c:76:8e:9b:29:39:77:b0:a8:d2:c5:20:7c: a6:7c:c9:84:72:2d:e5:b4:b3:54:72:81:17:b2:85:ec:d3:c1: a8:61:65:8b:bb:58:0f:ab:8f:64:6b:70:0a:32:3c:d9:77:a6: 8f:7c:b8:93:18:6d:19:1b:10:c4:69:cd:fe:9e:16:5b:18:ae: a2:bd:6d:75:31:ef:2c:d4:73:12:20:7a:39:d6:0f:e1:7f:cb: ce:01:20:ec:39:27:50:a4:a7:0d:aa:8a:39:77:fa:1d:10:ea: ad:8d:b6:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjQwNTA1MDAyODQ3WhcNMjQwNTEyMDAyODQ3WjAYMRYwFAYD VQQDEw02NjM2ZDJjMC0yZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uck6ZonfaVUBr80kJH0rg4dMTkmiC64AOGQstemEtAgxlrCYMkKsf0VhwPe SpRHeEgZj+Pxi+w9D1+VRfsxBVYYWVJdxy8TbPml3ueQdzKdVmRErvnwTC7zuR8W VRBvBk73vDs7zeJEaGT1upHLFHWv7ba7GWOeAOuuOGsHu919A2UQV+D/o1WLIni5 8nSiIwIeuLNSHI9qIEzL/24a4mUkHOoolj9H1Atz1iyBnHvP8eT/n3ngyJ47flx9 TxWRzBrq0ciMXvpfpJ8zXzKLPnI6vFa4lBwXPZeF/oIEX2GNeoP8Qv4Rgh9irKEi yjcKfC2jYjyIST5vlOnJzxfTjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLvCBIh lrxhyq/HTcF2LYZMYq/aMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6QhnWUjqTvWuKL5eWXfjHx4y0+QVcYMguHpRsXTeYEvIwko3Fs4NY QQW3J6ECMXF3d6wWz91/QF75R5u8beCRW9t0RqrYU+XeFjPMqTX3pF+nfaYhP2JO 4CwtTPrbyRhTZhSC3tuqWkrOD7vN70NIN0aEyqnRM2o/9ICt7O1JrLbtZyvNEuO6 Ucm3tJGX9V2LdhPIBhx2jpspOXewqNLFIHymfMmEci3ltLNUcoEXsoXs08GoYWWL u1gPq49ka3AKMjzZd6aPfLiTGG0ZGxDEac3+nhZbGK6ivW11Me8s1HMSIHo51g/h f8vOASDsOSdQpKcNqoo5d/odEOqtjbYZ -----END CERTIFICATE-----Generated at Sun May 5 01:13:17 2024 by rpki-client on console-ams.rpki-client.org