$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json) Hash identifier: 6XABNUaJNDWwoJH/RdXvHCQ8WOKg44hLpMuCyk58+Q4= Subject key identifier: 5D:D4:92:D0:6B:33:16:DB:A2:DE:79:AB:81:81:75:57:47:A2:D7:2D Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft Manifest number: B0 Signing time: Sun 05 May 2024 06:38:27 +0000 Manifest this update: Sun 05 May 2024 06:38:26 +0000 Manifest next update: Sun 12 May 2024 06:38:26 +0000 Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: Pr1XFf6FUACuls3nWW84/m5mAqG60HQkUmda5/fzTrs=) 2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: sYReBRsO2kMrQYVi7A8dBr3Z4LfBSO6Mhxo6wiqrrO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: May 5 06:38:26 2024 GMT Not After : May 12 06:38:26 2024 GMT Subject: CN=66372963-fd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:9e:4b:2e:c0:ed:22:59:82:10:62:64:0c: db:38:e5:27:30:13:10:2d:11:22:9e:38:66:69:20: 76:bc:66:7e:de:1e:8a:e6:26:47:fc:f0:66:6b:f0: 3f:66:4e:5b:50:3f:01:a1:6b:f5:04:21:30:52:3e: 50:d3:94:90:f4:e5:e0:dd:19:69:4a:36:36:30:b6: 81:92:1e:44:04:af:be:a3:0b:18:4e:14:70:db:cb: ac:ad:a6:43:df:4b:8d:d2:05:6a:ef:2e:cb:53:c6: 2f:ef:3a:d3:65:63:8f:bf:1d:f5:be:c0:45:2b:0e: e6:de:2f:0a:29:e5:b8:f5:b2:11:9c:08:78:d4:67: e8:52:c2:53:98:03:e9:4f:82:02:9f:76:d4:57:9a: 3d:2b:ec:2f:bf:3b:c3:7b:ed:4f:02:f8:dc:26:b3: e4:6f:3c:b9:52:9b:99:5d:e7:66:72:f1:83:13:32: 2d:cd:ff:31:91:06:90:36:d8:42:92:b7:88:d5:7c: 09:04:10:20:ba:d8:82:23:2b:61:1d:52:06:5d:1f: 41:9b:ac:1d:f6:ba:90:5d:b8:a1:3e:c6:52:02:94: e7:56:1d:14:f0:95:14:95:2f:3a:3d:03:9a:74:df: a4:c6:67:aa:e3:ca:76:34:d9:ca:98:3d:a7:49:92: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D4:92:D0:6B:33:16:DB:A2:DE:79:AB:81:81:75:57:47:A2:D7:2D X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:db:21:b0:24:07:ec:d3:9e:93:52:23:e2:1b:77:9b:03: ee:2c:cb:b6:49:1f:e2:52:55:30:b8:a6:95:5b:8f:d2:22:3c: c1:1b:9b:66:da:b7:20:63:a8:ca:15:3c:8b:9c:02:3b:70:af: 4d:f5:73:91:4c:78:3a:b2:69:ed:e5:24:d1:9c:0a:43:c8:e5: 0a:e1:a1:ae:d3:70:62:70:ce:46:ab:a3:79:19:fc:3a:f7:a3: 6d:0f:0e:b2:0a:3a:c4:b0:ed:74:4b:42:eb:6f:dd:c3:db:51: ec:ff:51:12:f7:8b:23:8c:8b:db:e5:71:b5:17:57:fa:f5:c1: f8:b7:d3:7c:24:8a:58:b7:bb:c2:96:74:16:09:5a:b2:bd:ee: 70:85:f4:72:05:3d:86:57:36:9f:2a:b7:4a:f3:ee:3a:7f:14: fb:0b:4e:3f:82:18:77:3d:be:b6:79:1a:62:44:1a:c1:b7:1c: 8a:a3:5c:06:54:08:2a:53:7d:95:c4:18:57:81:fc:ad:eb:9e: 3b:e9:37:4e:78:fa:33:eb:d3:27:e2:73:ca:78:8b:55:08:11: e3:93:46:33:35:fe:70:9a:cf:52:0e:4e:c7:ee:60:53:65:53: 92:b4:e2:28:7e:0b:cf:be:06:5c:db:32:9b:c5:d8:00:cf:1a: 30:ee:a4:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjQwNTA1MDYzODI2WhcNMjQwNTEyMDYzODI2WjAYMRYwFAYD VQQDEw02NjM3Mjk2My1mZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkeeSy7A7SJZghBiZAzbOOUnMBMQLREinjhmaSB2vGZ+3h6K5iZH/PBma/A/ Zk5bUD8BoWv1BCEwUj5Q05SQ9OXg3RlpSjY2MLaBkh5EBK++owsYThRw28usraZD 30uN0gVq7y7LU8Yv7zrTZWOPvx31vsBFKw7m3i8KKeW49bIRnAh41GfoUsJTmAPp T4ICn3bUV5o9K+wvvzvDe+1PAvjcJrPkbzy5UpuZXedmcvGDEzItzf8xkQaQNthC kreI1XwJBBAgutiCIythHVIGXR9Bm6wd9rqQXbihPsZSApTnVh0U8JUUlS86PQOa dN+kxmeq48p2NNnKmD2nSZJatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3UktBr Mxbbot55q4GBdVdHotctMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4 b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwStshsCQH7NOek1Ij4ht3mwPuLMu2SR/iUlUwuKaVW4/SIjzBG5tm 2rcgY6jKFTyLnAI7cK9N9XORTHg6smnt5STRnApDyOUK4aGu03BicM5Gq6N5Gfw6 96NtDw6yCjrEsO10S0Lrb93D21Hs/1ES94sjjIvb5XG1F1f69cH4t9N8JIpYt7vC lnQWCVqyve5whfRyBT2GVzafKrdK8+46fxT7C04/ghh3Pb62eRpiRBrBtxyKo1wG VAgqU32VxBhXgfyt65476TdOePoz69Mn4nPKeItVCBHjk0YzNf5wms9SDk7H7mBT ZVOStOIofgvPvgZc2zKbxdgAzxow7qTA -----END CERTIFICATE-----Generated at Sun May 5 08:21:04 2024 by rpki-client on console-ams.rpki-client.org