$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft File: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft (raw, json) Hash identifier: KDvZdl2zQGAfDKFMrPGEzFeb5dpgO8gsTUeUkIbGI5g= Subject key identifier: BB:E1:E6:23:5A:19:2E:09:36:12:1E:63:69:5A:65:3F:71:35:70:53 Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC Certificate issuer: /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft Manifest number: 0659 Signing time: Mon 06 May 2024 23:41:45 +0000 Manifest this update: Mon 06 May 2024 23:41:45 +0000 Manifest next update: Mon 13 May 2024 23:41:45 +0000 Files and hashes: 1: 0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl (hash: mY9kzWUsEspVKopoquyTyVvpqBWqxcFyvlwXT2hQPQw=) 2: 7AD47B2234EE11EE927E9F6AC4F9AE02.roa (hash: QChP7wZDX3OK2X+vnot3Rv1St2Y6Cc+E+ff1NZZ5nZo=) 3: 1D4A72B2350811EE96CD9F16C4F9AE02.roa (hash: BDH8SKiJ7MQ/EI011YGzmBhbAD++HA//ZDEjoMjomV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC Validity Not Before: May 6 23:41:45 2024 GMT Not After : May 13 23:41:45 2024 GMT Subject: CN=66396ab9-84dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:3d:7e:40:73:c8:3a:88:17:69:3e:c9:4c: f0:d5:7a:94:bb:ab:49:7d:d3:d6:9e:b1:0b:05:37: 9e:ea:d7:8d:bb:03:22:29:e7:21:18:42:f0:f1:0d: f6:c1:1b:27:6b:ed:73:18:dd:3a:0d:c2:aa:f4:13: da:66:3e:c0:dc:17:44:14:f2:2d:a7:04:bf:f4:fe: 82:4d:74:c0:e9:f9:4e:c9:0a:2e:48:b5:6f:4e:d7: fd:6d:3b:d4:77:9a:a9:3b:45:a0:87:51:fe:d9:3d: 09:b9:a5:01:10:9b:29:e0:5c:0a:d0:6e:15:b6:94: 71:84:95:cb:57:94:ef:62:e4:0e:9a:18:92:0a:6f: 4c:9c:2b:d0:52:93:05:e4:60:e2:12:c8:b4:b8:62: e5:6b:2f:bf:55:87:9b:b4:df:2c:db:06:83:66:d8: b8:b6:2a:42:44:53:84:0d:c0:ef:28:21:18:a6:37: 96:c5:6c:cb:86:65:c0:21:f3:02:52:ce:36:87:5f: 69:08:bd:39:10:56:e1:c1:e8:07:4a:fa:80:72:3d: df:b7:ca:e0:a0:c3:bb:9b:e1:bb:d9:65:2d:9b:48: 96:d1:27:b8:dd:80:bb:b3:10:88:1f:da:ca:c2:15: 54:a9:01:4a:80:da:ac:33:79:10:bf:91:fd:fe:27: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:E6:23:5A:19:2E:09:36:12:1E:63:69:5A:65:3F:71:35:70:53 X509v3 Authority Key Identifier: keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:60:0e:c9:a5:dd:11:2c:e7:e2:92:1f:0b:86:55:b5:0c:eb: 6a:5b:a4:c8:5b:cf:28:65:79:2f:b7:de:6c:5d:9e:97:55:2c: ba:01:2d:42:c7:57:cd:aa:82:b2:ee:9f:00:00:00:19:83:a9: 4c:a2:f1:01:f5:57:17:d0:45:63:12:3f:01:c6:10:3c:aa:f1: 01:bf:68:59:ba:e1:75:07:a7:de:2b:9f:f2:1b:db:28:cb:aa: 9e:fb:b0:1c:4e:f7:fd:36:2c:4e:fc:a0:2e:a9:02:86:df:ec: c8:58:be:d4:93:c6:17:b7:66:86:09:e3:1a:2c:5c:5d:a8:58: 66:a3:c5:4b:e7:c8:dc:e9:81:f3:9f:ff:00:3d:5a:d8:ef:45: d1:66:63:1f:69:d6:42:8b:8a:0d:d4:e4:68:bb:31:17:47:c5: 55:cc:af:9f:dd:06:05:36:51:f2:9d:50:f3:f1:82:fd:98:ed: 1f:88:e6:d6:5e:5e:05:0c:7b:c8:a8:1d:9f:fe:de:07:d8:25: bc:41:1e:f4:d1:11:ea:c3:09:8b:fd:cf:45:29:82:9a:91:0e: c2:d5:bf:7f:d0:9a:0b:91:8c:1e:30:de:17:26:e8:c2:7b:46: 5b:62:18:3a:fb:66:34:2b:f0:36:a3:79:cb:9a:e0:fd:cc:56: 56:1f:e4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwNzcxMTAvBgNVBAUTKEQwNDlGMTVDNUIwMDQxOTgzRThCMzVDNTE3QjY1MTcx RjcxNjVDREMwHhcNMjQwNTA2MjM0MTQ1WhcNMjQwNTEzMjM0MTQ1WjAYMRYwFAYD VQQDEw02NjM5NmFiOS04NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ug9fkBzyDqIF2k+yUzw1XqUu6tJfdPWnrELBTee6teNuwMiKechGELw8Q32 wRsna+1zGN06DcKq9BPaZj7A3BdEFPItpwS/9P6CTXTA6flOyQouSLVvTtf9bTvU d5qpO0Wgh1H+2T0JuaUBEJsp4FwK0G4VtpRxhJXLV5TvYuQOmhiSCm9MnCvQUpMF 5GDiEsi0uGLlay+/VYebtN8s2waDZti4tipCRFOEDcDvKCEYpjeWxWzLhmXAIfMC Us42h19pCL05EFbhwegHSvqAcj3ft8rgoMO7m+G72WUtm0iW0Se43YC7sxCIH9rK whVUqQFKgNqsM3kQv5H9/icDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvh5iNa GS4JNhIeY2laZT9xNXBTMB8GA1UdIwQYMBaAFNBJ8VxbAEGYPos1xRe2UXH3Flzc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA3Ny85ODBDQThGRTNB RDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFaZy1pelhGRjdaUmNmY1dY TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFbnhYRnNBUVpnLWl6WEZGN1pSY2ZjV1hOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA3Ny85ODBDQThGRTNBRDcxMUVCQTI5MjFBNEFDNEY5QUUwMi8wRW54WEZzQVFa Zy1pelhGRjdaUmNmY1dYTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeYA7Jpd0RLOfikh8LhlW1DOtqW6TIW88oZXkvt95sXZ6XVSy6AS1C x1fNqoKy7p8AAAAZg6lMovEB9VcX0EVjEj8BxhA8qvEBv2hZuuF1B6feK5/yG9so y6qe+7AcTvf9NixO/KAuqQKG3+zIWL7Uk8YXt2aGCeMaLFxdqFhmo8VL58jc6YHz n/8APVrY70XRZmMfadZCi4oN1ORouzEXR8VVzK+f3QYFNlHynVDz8YL9mO0fiObW Xl4FDHvIqB2f/t4H2CW8QR700RHqwwmL/c9FKYKakQ7C1b9/0JoLkYweMN4XJujC e0ZbYhg6+2Y0K/A2o3nLmuD9zFZWH+S2 -----END CERTIFICATE-----Generated at Tue May 7 01:58:14 2024 by rpki-client on console-fra.rpki-client.org