$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: wCDyfLbLR58lCudWKCyZT9/971jWxI6Q4K5li7nmIWI= Subject key identifier: 9C:68:46:9F:8C:7B:27:E0:05:13:CC:E4:E1:84:71:08:F7:10:84:E8 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 1045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 103E Signing time: Sat 04 May 2024 18:08:18 +0000 Manifest this update: Sat 04 May 2024 18:08:17 +0000 Manifest next update: Sat 11 May 2024 18:08:17 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: w26uXeBr5GlCP2cr5nRL2fHUIPk8JZ3+DOZDCfWMKcY=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: /8SNajGFBQS2U2jNwz98Lv+owsRVOQ+nqM0OpiGoj94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4165 (0x1045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: May 4 18:08:17 2024 GMT Not After : May 11 18:08:17 2024 GMT Subject: CN=66367991-6899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:68:e6:6c:72:90:a8:fd:3f:48:83:15:79: 8f:39:41:83:df:57:04:0b:fa:ef:e1:bd:f2:47:5f: 6f:bd:e0:0c:0d:17:0c:a6:c9:91:d4:27:f9:3e:7e: de:3b:e2:c7:63:44:dc:b0:08:89:ee:67:d1:27:76: 84:0d:1b:4a:a2:dd:c0:3e:b2:32:1d:03:17:98:fe: 13:9e:0c:56:b1:50:6c:ed:de:8f:1b:fc:20:c4:2e: 85:56:8c:96:56:5d:55:8d:4d:16:08:0c:12:8f:2c: b6:de:03:83:dc:d0:a5:e1:9a:56:8b:db:fb:29:50: 0f:7c:da:c6:88:27:91:c0:27:b0:76:07:c6:a0:4e: 67:9a:e6:3b:93:88:a3:a8:bb:aa:1d:d9:28:e9:f7: 9e:e9:81:ab:27:9b:4b:f5:8b:ea:4f:2c:aa:2f:20: f8:73:f1:31:68:cc:11:1f:4e:09:ef:a7:69:36:d7: 04:9e:34:da:b7:4c:fd:1e:e3:29:b7:a5:83:79:b8: b9:0a:35:58:82:b9:c7:49:b4:4a:9a:a6:87:e2:74: 42:13:66:f6:e2:e1:00:f6:25:c1:90:eb:b0:6a:2c: 59:c3:a9:c9:1b:20:ea:e7:6c:ce:1f:46:a7:3a:57: ab:41:92:df:33:73:b6:29:df:aa:b5:cc:15:79:4e: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:46:9F:8C:7B:27:E0:05:13:CC:E4:E1:84:71:08:F7:10:84:E8 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:7e:65:1b:46:85:ce:9c:da:c5:00:3e:3d:d1:42:9f:3b: 9d:61:ed:7b:50:0e:e2:6c:87:86:d1:1a:2c:a8:5e:eb:ba:9e: 0d:8b:33:33:f2:89:b8:35:35:66:ce:80:f5:82:e0:13:48:20: 32:69:fc:5a:2f:06:d3:85:b9:15:32:24:3f:59:b8:57:6a:93: ba:e0:ce:81:ac:1b:c0:be:13:43:5e:41:23:f2:3a:fa:12:16: b8:42:66:2d:45:23:47:1b:cf:62:54:87:6d:d9:f5:09:f7:95: 3c:2d:e4:19:e5:05:0a:0e:c6:90:89:a5:b2:e8:dc:db:5e:8a: 8f:6d:81:95:09:c9:51:ea:b5:40:55:24:88:40:ef:fe:3b:d0: 6f:34:d2:df:a1:e2:39:d9:a9:68:d6:77:ff:af:ea:d0:62:af: 39:9f:a5:32:17:d3:c2:07:b9:9c:a7:8b:4c:13:78:b0:d3:3d: 8c:2d:0f:aa:82:2b:de:8d:ce:73:dc:6a:83:4a:fa:1a:1d:72: 0f:b9:50:04:9c:da:62:1e:7b:fa:e2:e4:c7:e7:bc:d5:ac:1f: 4a:90:c2:ed:14:30:28:c3:f9:00:f0:9a:bf:f9:83:7d:cb:eb: 68:5e:2c:a8:f0:db:27:ce:2c:67:5d:23:80:b7:35:f8:4f:3f: 6b:42:f4:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjQwNTA0MTgwODE3WhcNMjQwNTExMTgwODE3WjAYMRYwFAYD VQQDEw02NjM2Nzk5MS02ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlto5mxykKj9P0iDFXmPOUGD31cEC/rv4b3yR19vveAMDRcMpsmR1Cf5Pn7e O+LHY0TcsAiJ7mfRJ3aEDRtKot3APrIyHQMXmP4TngxWsVBs7d6PG/wgxC6FVoyW Vl1VjU0WCAwSjyy23gOD3NCl4ZpWi9v7KVAPfNrGiCeRwCewdgfGoE5nmuY7k4ij qLuqHdko6fee6YGrJ5tL9YvqTyyqLyD4c/ExaMwRH04J76dpNtcEnjTat0z9HuMp t6WDebi5CjVYgrnHSbRKmqaH4nRCE2b24uEA9iXBkOuwaixZw6nJGyDq52zOH0an OlerQZLfM3O2Kd+qtcwVeU5qAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxoRp+M eyfgBRPM5OGEcQj3EIToMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCT35lG0aFzpzaxQA+PdFCnzudYe17UA7ibIeG0RosqF7rup4NizMz 8om4NTVmzoD1guATSCAyafxaLwbThbkVMiQ/WbhXapO64M6BrBvAvhNDXkEj8jr6 Eha4QmYtRSNHG89iVIdt2fUJ95U8LeQZ5QUKDsaQiaWy6NzbXoqPbYGVCclR6rVA VSSIQO/+O9BvNNLfoeI52alo1nf/r+rQYq85n6UyF9PCB7mcp4tME3iw0z2MLQ+q givejc5z3GqDSvoaHXIPuVAEnNpiHnv64uTH57zVrB9KkMLtFDAow/kA8Jq/+YN9 y+toXiyo8NsnzixnXSOAtzX4Tz9rQvRH -----END CERTIFICATE-----Generated at Sat May 4 20:37:05 2024 by rpki-client on console-fra.rpki-client.org