$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: Ie54i7xPiL1mGpKohhdmqZy6wCxR9IMrXRSwlivw/Ro= Subject key identifier: 95:34:EC:B5:2E:C8:C9:27:9A:EA:AD:5D:1E:0E:A4:18:8D:54:03:63 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2A05 Signing time: Thu 02 May 2024 15:51:59 +0000 Manifest this update: Thu 02 May 2024 15:51:58 +0000 Manifest next update: Thu 09 May 2024 15:51:58 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: TZrHLAZwGToh7aT9S+gS/O4s5QK/6KFnNwzovTA0+8o=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: l1nTT7+xnT2KZzHtRz1G5Vgt1HM0tCreeyUhAS32YVM=) 3: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: x+l1AZhaE2EQsLNkr34oVRQM5UjzndUuKfVANsc9uB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10815 (0x2a3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: May 2 15:51:58 2024 GMT Not After : May 9 15:51:58 2024 GMT Subject: CN=6633b69f-a8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:ef:65:18:0b:5f:37:b3:fb:2c:79:ec:2d: 8f:f5:ce:fc:91:3b:64:69:17:91:5a:bd:81:b1:79: 08:6b:8d:4b:2e:e4:59:e3:7a:34:db:5e:9b:52:b9: 91:23:cd:c1:6d:55:f4:1f:05:59:65:bd:ca:34:c9: db:a3:58:6f:4f:a9:3d:a4:98:9d:77:33:42:aa:fd: f7:0b:a8:e6:f7:d3:b6:7a:90:51:c8:b6:f4:fc:aa: e2:f5:e8:d8:59:76:e8:2a:11:2c:1e:06:eb:6d:b9: 5e:02:8a:15:72:0d:75:54:b9:52:0e:cd:2b:69:3e: b6:36:cf:4b:0e:29:bb:2d:07:34:cc:00:e6:bb:39: dc:8f:f8:d1:c0:24:f2:a4:f0:9b:27:b7:f9:37:79: cb:1d:9e:a5:b4:bd:c4:35:ca:e3:37:27:49:b4:00: 72:a7:ee:7c:5c:f8:c8:bc:17:35:63:dc:f9:93:7f: f3:cc:3c:a7:be:c1:8a:2d:df:ce:4a:2c:1a:4e:2b: ef:48:14:53:16:b4:05:2b:4b:3d:5f:a3:9e:db:37: f0:cd:fd:00:66:e8:30:ac:86:45:d2:4f:56:eb:b5: 0b:93:dd:de:0d:b6:de:86:c5:a8:63:fa:eb:70:96: 02:7e:7c:1c:05:96:f9:08:36:22:da:3a:98:f3:e8: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:EC:B5:2E:C8:C9:27:9A:EA:AD:5D:1E:0E:A4:18:8D:54:03:63 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:9c:83:ac:15:ca:15:18:83:c0:1f:a7:3d:89:a2:1a:ca: 19:4c:d7:db:6e:80:7d:32:13:0a:68:c8:3a:3a:a8:0a:74:40: 38:34:37:2e:25:5d:30:56:5f:e0:5b:7c:82:1c:8f:06:c1:b5: 5c:57:0e:6c:e9:9b:e5:1a:63:cb:a1:e9:ff:26:73:30:c2:93: 2a:ed:0b:dc:e4:fc:d7:5d:86:d2:5c:f5:b5:01:1a:b0:72:05: f1:d1:ad:c9:24:f5:3b:17:62:74:48:60:82:b0:1a:bb:8a:39: bb:4c:b9:d7:56:f0:d2:7d:a0:bf:63:72:38:fa:31:7f:3a:b3: f6:66:e4:d9:27:01:14:2f:f0:73:7f:82:c9:b5:e5:f7:23:ae: dd:3f:35:a4:e5:93:09:38:a5:03:f7:3b:5b:69:9d:5a:c1:b3: 85:02:85:88:37:1a:36:16:55:b5:35:96:08:8d:d2:37:13:67: 40:49:72:5a:68:86:2e:d6:38:56:8d:4e:dc:b4:3c:6d:0e:f7: b0:76:6d:71:8c:0c:73:f0:96:11:fc:c8:b8:78:4e:1c:71:52: 17:03:bb:b1:c3:0a:9d:c5:2c:3c:45:e6:ab:ae:a6:19:dd:16: a1:69:eb:b2:bb:4e:ac:b8:09:30:45:e6:73:70:63:57:79:78: ca:ac:de:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjQwNTAyMTU1MTU4WhcNMjQwNTA5MTU1MTU4WjAYMRYwFAYD VQQDEw02NjMzYjY5Zi1hOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SvvZRgLXzez+yx57C2P9c78kTtkaReRWr2BsXkIa41LLuRZ43o0216bUrmR I83BbVX0HwVZZb3KNMnbo1hvT6k9pJiddzNCqv33C6jm99O2epBRyLb0/Kri9ejY WXboKhEsHgbrbbleAooVcg11VLlSDs0raT62Ns9LDim7LQc0zADmuzncj/jRwCTy pPCbJ7f5N3nLHZ6ltL3ENcrjNydJtAByp+58XPjIvBc1Y9z5k3/zzDynvsGKLd/O SiwaTivvSBRTFrQFK0s9X6Oe2zfwzf0AZugwrIZF0k9W67ULk93eDbbehsWoY/rr cJYCfnwcBZb5CDYi2jqY8+ioZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU07LUu yMknmuqtXR4OpBiNVANjMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChupyDrBXKFRiDwB+nPYmiGsoZTNfbboB9MhMKaMg6OqgKdEA4NDcu JV0wVl/gW3yCHI8GwbVcVw5s6ZvlGmPLoen/JnMwwpMq7Qvc5PzXXYbSXPW1ARqw cgXx0a3JJPU7F2J0SGCCsBq7ijm7TLnXVvDSfaC/Y3I4+jF/OrP2ZuTZJwEUL/Bz f4LJteX3I67dPzWk5ZMJOKUD9ztbaZ1awbOFAoWINxo2FlW1NZYIjdI3E2dASXJa aIYu1jhWjU7ctDxtDvewdm1xjAxz8JYR/Mi4eE4ccVIXA7uxwwqdxSw8RearrqYZ 3Rahaeuyu06suAkwReZzcGNXeXjKrN4L -----END CERTIFICATE-----Generated at Thu May 2 17:43:04 2024 by rpki-client on console-fra.rpki-client.org