$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: HRqep3tet3FdYU9G98YCdVzLBOTzq7rUfpZ8KZHsZPI= Subject key identifier: 82:05:A4:26:BC:E1:C5:57:BB:12:C1:B4:CD:F0:F0:A0:81:2C:71:40 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: CC Signing time: Sun 05 May 2024 06:19:46 +0000 Manifest this update: Sun 05 May 2024 06:19:45 +0000 Manifest next update: Sun 12 May 2024 06:19:45 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: Xr2eWvwlHFmRiwZCNy+ThpFO83b0eBMZPLEPfbDtvSA=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: ZFOIV6D/1mwtehXiBOGpEO/D359oTLwlftiwuF6vQmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: May 5 06:19:45 2024 GMT Not After : May 12 06:19:45 2024 GMT Subject: CN=66372502-f266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:71:80:cb:6f:ef:2b:ba:42:57:a9:32:a4: 62:47:f7:72:36:7f:ab:98:ff:88:ad:59:31:3d:83: d4:a6:bc:23:4e:8e:f0:fd:2d:d0:9e:70:cf:5b:0a: e1:2f:a3:ab:fe:d4:a5:8c:66:92:45:1d:84:80:e4: e5:37:a9:4f:73:19:e8:06:f8:4e:55:0d:de:b5:27: a4:19:60:fc:10:ae:28:ff:fe:d5:01:8f:9a:cd:17: 18:f0:1e:d8:5d:92:52:ec:c8:1f:2f:2f:e2:01:77: 27:d1:50:8b:79:10:0f:15:55:c4:ce:25:50:9e:a8: 28:07:de:62:df:92:07:54:60:bd:b8:11:e6:e4:64: 85:ff:e4:1e:54:9f:54:90:ab:6d:2d:62:b5:1d:d0: 9c:18:2e:f2:cd:89:0c:58:bd:28:c4:f6:8e:ce:12: f8:63:dc:7d:5f:0f:b3:4c:f5:48:af:d1:34:36:2b: 34:b8:e2:fe:e5:ed:fc:ae:fa:70:1c:0a:2a:9a:4a: 8b:e6:aa:35:48:3a:36:54:5d:89:2a:b8:9f:f0:04: 4d:da:64:6d:61:9c:4c:fa:20:30:87:92:8e:3f:9b: 04:15:8f:e1:c5:f1:72:ae:27:20:dc:c3:87:71:d1: b1:84:27:4f:14:04:b7:3f:06:c6:d7:d1:7f:96:38: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:A4:26:BC:E1:C5:57:BB:12:C1:B4:CD:F0:F0:A0:81:2C:71:40 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4f:75:15:52:5d:ab:9f:5f:da:ef:29:72:da:09:c2:32:24: 5a:c2:98:86:44:02:31:18:49:ca:02:5c:b6:78:e6:74:ed:ad: 56:fd:68:da:92:13:56:47:c4:9d:65:56:e4:26:e1:3c:22:ba: cc:ed:c4:a2:f1:11:7c:6f:78:ce:2c:03:11:6a:73:ce:4d:c4: 84:08:df:98:91:62:c5:d2:3b:14:6c:4d:dd:40:0b:e8:10:3b: e0:66:0d:13:b2:af:23:ee:78:76:94:0c:d1:24:56:6c:2b:5b: f2:cd:48:8f:8d:46:9c:5d:02:03:d2:77:e6:1e:9f:0a:52:9e: e0:c5:c4:6e:21:42:7f:0b:13:85:bc:17:18:7b:4f:72:fa:73: ec:41:39:f1:c6:6c:25:bb:30:e6:a6:5e:1f:b1:a5:1c:c0:44: 9a:47:34:60:8f:21:df:ad:e1:ce:30:46:4d:23:68:53:60:85: 1f:02:69:c1:76:a6:af:e8:da:cb:35:b5:82:6d:d7:27:12:2e: 49:07:65:54:65:01:0b:99:a4:e7:60:48:6a:28:78:17:86:ce: 11:60:e0:d5:70:70:53:05:ce:fa:a6:70:d5:1b:4e:ae:99:66: db:33:9e:75:d6:3d:31:aa:17:d1:59:68:3e:93:27:88:de:8c: 3b:be:ac:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjQwNTA1MDYxOTQ1WhcNMjQwNTEyMDYxOTQ1WjAYMRYwFAYD VQQDEw02NjM3MjUwMi1mMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcFxgMtv7yu6QlepMqRiR/dyNn+rmP+IrVkxPYPUprwjTo7w/S3QnnDPWwrh L6Or/tSljGaSRR2EgOTlN6lPcxnoBvhOVQ3etSekGWD8EK4o//7VAY+azRcY8B7Y XZJS7MgfLy/iAXcn0VCLeRAPFVXEziVQnqgoB95i35IHVGC9uBHm5GSF/+QeVJ9U kKttLWK1HdCcGC7yzYkMWL0oxPaOzhL4Y9x9Xw+zTPVIr9E0Nis0uOL+5e38rvpw HAoqmkqL5qo1SDo2VF2JKrif8ARN2mRtYZxM+iAwh5KOP5sEFY/hxfFyricg3MOH cdGxhCdPFAS3PwbG19F/ljhX/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIFpCa8 4cVXuxLBtM3w8KCBLHFAMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkT3UVUl2rn1/a7yly2gnCMiRawpiGRAIxGEnKAly2eOZ07a1W/Wja khNWR8SdZVbkJuE8IrrM7cSi8RF8b3jOLAMRanPOTcSECN+YkWLF0jsUbE3dQAvo EDvgZg0Tsq8j7nh2lAzRJFZsK1vyzUiPjUacXQID0nfmHp8KUp7gxcRuIUJ/CxOF vBcYe09y+nPsQTnxxmwluzDmpl4fsaUcwESaRzRgjyHfreHOMEZNI2hTYIUfAmnB dqav6NrLNbWCbdcnEi5JB2VUZQELmaTnYEhqKHgXhs4RYODVcHBTBc76pnDVG06u mWbbM5511j0xqhfRWWg+kyeI3ow7vqz/ -----END CERTIFICATE-----Generated at Sun May 5 08:39:00 2024 by rpki-client on console-fra.rpki-client.org