$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: ywp/M/rCXTztJ8OVCLQWl7K+tK98oASowtzO8vyZJuA= Subject key identifier: 2A:6F:2B:22:6C:EF:51:F1:5C:37:02:F8:9C:10:69:A2:6F:E6:B6:E1 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 04FA Signing time: Tue 07 May 2024 01:14:07 +0000 Manifest this update: Tue 07 May 2024 01:14:06 +0000 Manifest next update: Tue 14 May 2024 01:14:06 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: 2WgeGc3q2mH4dqjlmdgC8D4keQJi885cN3gB7DfT86w=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: yJT8uk9eFGiCrxSvq7jQiJupNQdNXKHbw5qSKvtIGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: May 7 01:14:06 2024 GMT Not After : May 14 01:14:06 2024 GMT Subject: CN=6639805e-6983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:c8:6f:1a:74:b1:99:6d:32:40:5b:9a:5d: fd:4f:6b:7a:27:ca:75:e0:a5:ab:4a:41:9f:21:64: 7a:42:44:a9:d6:34:fa:3f:a4:ad:8d:bb:af:6a:42: fc:70:ba:0f:f9:f0:11:b5:a4:84:eb:59:39:4b:f8: b7:f3:a3:79:0a:0a:fb:51:e6:05:1a:05:c8:91:a4: c2:36:46:18:71:cd:fa:c2:19:71:47:ad:f0:8e:5f: 88:ee:2c:92:32:44:7b:4d:17:71:43:65:7e:23:38: ed:b6:5f:77:fe:f8:2b:81:9e:54:32:a3:3d:25:2e: 5c:0f:1d:e6:2b:4d:43:3f:27:cd:e1:be:1c:b6:9d: ea:d0:4b:4f:da:b6:2c:93:49:b0:cd:36:0c:57:92: 5b:b2:1f:aa:6c:c0:ca:c5:74:68:ef:01:33:d9:c1: 5a:a9:b0:e1:cc:bc:a5:e2:2b:f8:a9:12:0f:c3:70: d6:8e:42:8c:22:30:75:24:00:bd:b3:ab:ff:a1:6a: e5:b5:12:76:c4:2a:68:5e:d9:e1:84:b8:7d:6a:64: 0d:b6:af:5c:2b:1b:90:0b:68:36:69:e0:5a:34:89: ec:08:d8:26:61:79:2a:42:43:f5:8b:ca:88:c3:92: 27:be:48:ee:45:4b:fb:c7:43:16:f6:a5:fe:a9:61: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6F:2B:22:6C:EF:51:F1:5C:37:02:F8:9C:10:69:A2:6F:E6:B6:E1 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f0:c1:d3:82:48:bb:e6:73:57:90:c3:c1:be:7c:1d:15:33: 4a:e4:19:cb:09:83:64:5b:b5:2b:ff:2f:ce:8c:f2:f6:1c:d4: 77:2a:20:f6:22:8a:6a:d3:2b:49:1c:8c:4e:54:b1:bf:2b:be: cb:8b:e5:cf:74:27:2d:db:d9:4e:29:c1:73:73:a7:5e:b1:f4: 03:5e:58:58:96:bb:2d:9b:b0:89:30:13:46:0c:f5:56:d8:8e: ed:21:96:c6:6d:eb:be:8e:86:5a:19:1e:60:f4:08:28:df:ef: ef:a4:a3:3f:52:d1:07:25:cb:e1:84:03:59:eb:b9:0b:04:9c: 0b:7a:40:b9:f6:71:e4:08:0d:65:af:74:1f:9c:83:0f:e6:5f: 57:62:41:bd:77:18:60:3a:3c:f9:91:fe:a0:89:c8:a9:25:4e: 7b:de:0d:77:03:12:30:5f:26:f1:d6:c3:17:6f:a8:f2:1b:04: 68:6e:99:af:9f:4c:02:12:ed:e5:33:4d:60:24:6b:f3:57:79: b2:79:fa:db:29:1f:6b:19:57:83:ad:9e:d0:c6:86:fe:df:84: b1:f2:9d:99:46:bc:6e:66:06:23:13:0f:7c:ab:c8:aa:44:0f: 0d:c8:12:2d:2b:81:5c:18:22:b8:87:51:48:88:cc:4a:48:86: 85:a9:39:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjQwNTA3MDExNDA2WhcNMjQwNTE0MDExNDA2WjAYMRYwFAYD VQQDEw02NjM5ODA1ZS02OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuHIbxp0sZltMkBbml39T2t6J8p14KWrSkGfIWR6QkSp1jT6P6StjbuvakL8 cLoP+fARtaSE61k5S/i386N5Cgr7UeYFGgXIkaTCNkYYcc36whlxR63wjl+I7iyS MkR7TRdxQ2V+Izjttl93/vgrgZ5UMqM9JS5cDx3mK01DPyfN4b4ctp3q0EtP2rYs k0mwzTYMV5Jbsh+qbMDKxXRo7wEz2cFaqbDhzLyl4iv4qRIPw3DWjkKMIjB1JAC9 s6v/oWrltRJ2xCpoXtnhhLh9amQNtq9cKxuQC2g2aeBaNInsCNgmYXkqQkP1i8qI w5InvkjuRUv7x0MW9qX+qWHKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpvKyJs 71HxXDcC+JwQaaJv5rbhMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp8MHTgki75nNXkMPBvnwdFTNK5BnLCYNkW7Ur/y/OjPL2HNR3KiD2 Iopq0ytJHIxOVLG/K77Li+XPdCct29lOKcFzc6desfQDXlhYlrstm7CJMBNGDPVW 2I7tIZbGbeu+joZaGR5g9Ago3+/vpKM/UtEHJcvhhANZ67kLBJwLekC59nHkCA1l r3QfnIMP5l9XYkG9dxhgOjz5kf6gicipJU573g13AxIwXybx1sMXb6jyGwRobpmv n0wCEu3lM01gJGvzV3myefrbKR9rGVeDrZ7Qxob+34Sx8p2ZRrxuZgYjEw98q8iq RA8NyBItK4FcGCK4h1FIiMxKSIaFqTmX -----END CERTIFICATE-----Generated at Tue May 7 01:58:15 2024 by rpki-client on console-fra.rpki-client.org