$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: o0j2x3WBrFBff3mVnms4ZjrVCxb19dS5ZZ0gJuExyUU= Subject key identifier: 5D:03:9C:C8:CA:2D:10:28:B0:4A:73:D8:8D:B1:20:49:EF:E1:49:28 Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 0146 Signing time: Fri 03 May 2024 05:02:58 +0000 Manifest this update: Fri 03 May 2024 05:02:57 +0000 Manifest next update: Fri 10 May 2024 05:02:57 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: Slpz/mq2wny2AkalH4NCZg2Lms9TniVHkr8dVHcLA6I=) 2: 51DC4CFA3E8911EEBAA0A668C4F9AE02.roa (hash: gETNMennaw10aPiXd21M18PnUZ+N9oPyo2vnsLtZhks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: May 3 05:02:57 2024 GMT Not After : May 10 05:02:57 2024 GMT Subject: CN=66347001-f81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:94:66:cc:38:d9:79:c6:28:43:8a:0f:d2:62: 7f:44:2d:4f:1a:f3:1e:f0:e6:2d:62:a4:49:58:2b: a2:da:19:1e:5b:cf:ee:7e:d8:f3:77:d2:6e:9e:1e: d8:57:0f:37:00:e1:a2:f5:bf:4e:37:ac:5f:65:69: 62:76:b8:83:ad:7f:f2:f8:a3:9d:1b:60:1d:db:08: 1f:cf:3e:ad:4b:ae:3e:79:1c:95:f2:c2:f6:81:cb: 92:2d:8b:09:23:f7:92:00:1e:f4:db:b1:2b:83:e8: 2b:44:2e:f3:c0:97:11:a0:8b:2b:25:eb:fd:91:d1: 9c:06:26:91:0c:10:72:23:bd:e4:d5:56:8e:2f:ff: ef:37:19:e2:38:6d:c3:33:1e:08:1b:cd:4a:a7:1f: f2:dd:46:14:1d:f7:26:ce:09:64:7f:63:ee:8e:bb: a6:5d:05:2c:6e:07:7d:00:6b:49:ab:99:a0:9f:6a: c4:5a:d9:a5:d1:a6:c9:0e:13:60:59:37:bf:5c:10: b3:60:22:fa:08:85:34:1f:6c:02:fa:5d:47:03:16: 6c:74:28:7b:e6:cd:a6:f6:d0:5e:f2:58:e8:81:68: 71:22:8d:93:55:da:db:0f:c0:31:eb:09:4a:24:44: 0f:57:b1:4a:b8:4b:0b:fd:44:ed:14:16:86:60:b2: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:03:9C:C8:CA:2D:10:28:B0:4A:73:D8:8D:B1:20:49:EF:E1:49:28 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:dc:ac:85:45:21:81:3a:48:27:31:c6:95:95:14:c0:69:2e: 76:7c:44:87:10:93:14:1e:8b:3c:a9:81:d9:bd:d2:c1:e2:dc: 32:ad:4d:c9:92:6a:d9:7e:75:e7:47:89:5e:75:fd:d6:2a:b9: 8a:13:73:38:64:d4:5e:1d:cd:c1:bb:1d:a9:fd:c3:0e:82:db: f7:0d:6f:fc:47:e3:16:df:9a:2e:6e:10:9d:e6:fb:c0:14:03: c2:63:05:f5:5d:46:c3:76:77:e9:0b:2b:21:fa:f4:e8:ec:41: b4:36:b9:d9:0a:bf:83:70:8c:a9:53:08:37:69:5d:da:cd:d8: ca:51:ef:47:ba:44:86:1a:c7:34:8b:1d:c8:6e:e7:b0:36:bc: 8c:21:ee:9d:d9:bc:9a:6e:18:c4:b4:47:27:8d:20:12:13:79: 65:6f:53:eb:63:3a:b2:94:13:be:65:f9:54:68:b6:94:92:67: 28:56:71:11:18:e9:ef:9b:38:a0:9c:2d:c4:81:42:b7:72:7c: 9f:1b:81:1c:58:50:e7:da:00:e2:a6:33:a2:27:a2:04:34:59: 31:69:bc:69:18:4a:34:6d:13:e8:01:16:ff:bc:bf:73:da:bb: 52:65:e7:f2:9a:be:f4:fe:2c:c2:34:b9:2a:37:de:6e:5b:61: 6e:a5:a0:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjQwNTAzMDUwMjU3WhcNMjQwNTEwMDUwMjU3WjAYMRYwFAYD VQQDEw02NjM0NzAwMS1mODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55RmzDjZecYoQ4oP0mJ/RC1PGvMe8OYtYqRJWCui2hkeW8/uftjzd9Junh7Y Vw83AOGi9b9ON6xfZWlidriDrX/y+KOdG2Ad2wgfzz6tS64+eRyV8sL2gcuSLYsJ I/eSAB7027Erg+grRC7zwJcRoIsrJev9kdGcBiaRDBByI73k1VaOL//vNxniOG3D Mx4IG81Kpx/y3UYUHfcmzglkf2PujrumXQUsbgd9AGtJq5mgn2rEWtml0abJDhNg WTe/XBCzYCL6CIU0H2wC+l1HAxZsdCh75s2m9tBe8ljogWhxIo2TVdrbD8Ax6wlK JEQPV7FKuEsL/UTtFBaGYLLEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0DnMjK LRAosEpz2I2xIEnv4UkoMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB3KyFRSGBOkgnMcaVlRTAaS52fESHEJMUHos8qYHZvdLB4twyrU3J kmrZfnXnR4ledf3WKrmKE3M4ZNReHc3Bux2p/cMOgtv3DW/8R+MW35oubhCd5vvA FAPCYwX1XUbDdnfpCysh+vTo7EG0NrnZCr+DcIypUwg3aV3azdjKUe9HukSGGsc0 ix3IbuewNryMIe6d2byabhjEtEcnjSASE3llb1PrYzqylBO+ZflUaLaUkmcoVnER GOnvmzignC3EgUK3cnyfG4EcWFDn2gDipjOiJ6IENFkxabxpGEo0bRPoARb/vL9z 2rtSZefymr70/izCNLkqN95uW2FupaCN -----END CERTIFICATE-----Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org