$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: g4mpQM7ipZzavOzkm0H9I6DBzk4o9jUXZIuXCRjwsMU= Subject key identifier: 96:3D:68:19:0D:65:2B:18:A1:C1:6C:2B:68:ED:53:63:E0:C1:04:A1 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0382 Signing time: Fri 03 May 2024 02:47:58 +0000 Manifest this update: Fri 03 May 2024 02:47:58 +0000 Manifest next update: Fri 10 May 2024 02:47:58 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: oexHBP1FxCz7oTW9PEbBLD3heBBmQlaQ4IEp/RULfAw=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: EwzNBthps02CkgOme4DzhDAiGN+jdHa6OMRHAJvDrKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: May 3 02:47:58 2024 GMT Not After : May 10 02:47:58 2024 GMT Subject: CN=6634505e-e32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:54:28:94:9c:d4:50:c1:1b:74:30:40:a3:cc: 45:28:60:b9:4b:0b:6c:d5:04:2a:fc:01:28:28:a8: 86:f5:2d:c5:c5:66:64:bf:6f:3f:9d:ed:88:80:14: df:66:00:35:88:94:ae:24:d5:d8:89:9c:87:d1:e1: 03:a4:12:91:b8:c5:d1:81:00:8f:61:1a:a9:f8:62: 2c:cc:59:8e:5e:e5:f9:49:92:6c:8f:9d:54:f3:7f: 5b:b8:12:f5:26:48:7a:a8:99:35:5d:3a:b5:0a:1c: 0e:00:18:eb:7a:ce:9b:86:32:62:f4:3c:a2:67:84: a9:93:d3:ad:b8:c3:25:7c:11:f9:10:b1:81:a2:60: 3f:e7:b1:31:14:28:94:49:93:5f:7b:19:e8:b8:e9: a3:d8:5e:bd:14:8b:07:ee:16:dc:4e:63:d9:0e:de: 75:55:4b:6b:1c:b6:c6:69:19:cc:57:75:31:45:2f: e8:f8:a0:55:40:85:7a:d3:ee:3c:6e:e4:67:0c:ca: f1:b4:55:6c:16:bc:6d:1d:cd:3f:50:20:69:78:05: 58:30:d6:0c:2c:5c:3a:cb:6b:37:4e:40:3b:cb:41: 40:69:b2:42:d8:a6:7b:77:e1:5c:99:c6:14:44:aa: 3d:67:14:0c:f4:57:a8:80:76:0f:c7:8d:ee:cd:4b: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:68:19:0D:65:2B:18:A1:C1:6C:2B:68:ED:53:63:E0:C1:04:A1 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f4:75:72:0b:f5:c1:06:6b:84:9f:9b:da:29:fb:c5:06:7d: eb:1b:86:93:a2:ac:53:cf:39:d6:99:be:ec:f2:b1:05:bf:e1: d1:a7:d5:47:bd:a1:b5:d7:0f:53:31:d4:30:91:12:c6:87:a4: 6e:cf:9a:f3:47:aa:8c:8b:cb:df:17:de:2d:3a:68:fe:95:e2: 0c:6c:3d:ff:d6:a9:c5:fb:7b:32:ba:d6:69:4c:1d:43:43:fb: ce:91:85:a4:3c:f2:42:62:67:fd:17:1e:0c:61:c0:9d:c6:79: bb:16:0f:f3:b2:d2:f1:70:e0:ad:b0:14:e0:b3:9e:81:f2:85: c0:fc:b3:ea:52:05:01:bb:35:7f:80:5e:0b:c3:17:6f:97:4f: f1:18:96:85:f3:97:24:06:02:65:94:86:07:51:95:0f:3a:17: 41:39:7e:75:ca:09:89:ab:c6:13:29:c6:98:b7:c3:a8:5b:27: 5e:1a:5b:97:14:fb:dd:79:25:99:6c:33:3c:b4:78:24:81:8a: 98:9a:fc:0d:88:4f:3b:a3:73:44:7e:bf:e5:7d:f3:f4:77:7c: 6c:dd:34:a2:53:17:94:a6:2c:6b:b4:ef:fa:52:2f:86:ec:1a: 7c:06:11:19:ac:8f:b8:d9:39:b2:4d:bd:df:51:fc:51:75:20: f5:2a:2f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjQwNTAzMDI0NzU4WhcNMjQwNTEwMDI0NzU4WjAYMRYwFAYD VQQDEw02NjM0NTA1ZS1lMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lQolJzUUMEbdDBAo8xFKGC5Swts1QQq/AEoKKiG9S3FxWZkv28/ne2IgBTf ZgA1iJSuJNXYiZyH0eEDpBKRuMXRgQCPYRqp+GIszFmOXuX5SZJsj51U839buBL1 Jkh6qJk1XTq1ChwOABjres6bhjJi9DyiZ4Spk9OtuMMlfBH5ELGBomA/57ExFCiU SZNfexnouOmj2F69FIsH7hbcTmPZDt51VUtrHLbGaRnMV3UxRS/o+KBVQIV60+48 buRnDMrxtFVsFrxtHc0/UCBpeAVYMNYMLFw6y2s3TkA7y0FAabJC2KZ7d+FcmcYU RKo9ZxQM9FeogHYPx43uzUsXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY9aBkN ZSsYocFsK2jtU2PgwQShMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA89HVyC/XBBmuEn5vaKfvFBn3rG4aToqxTzznWmb7s8rEFv+HRp9VH vaG11w9TMdQwkRLGh6Ruz5rzR6qMi8vfF94tOmj+leIMbD3/1qnF+3syutZpTB1D Q/vOkYWkPPJCYmf9Fx4MYcCdxnm7Fg/zstLxcOCtsBTgs56B8oXA/LPqUgUBuzV/ gF4Lwxdvl0/xGJaF85ckBgJllIYHUZUPOhdBOX51ygmJq8YTKcaYt8OoWydeGluX FPvdeSWZbDM8tHgkgYqYmvwNiE87o3NEfr/lffP0d3xs3TSiUxeUpixrtO/6Ui+G 7Bp8BhEZrI+42TmyTb3fUfxRdSD1Ki+A -----END CERTIFICATE-----Generated at Fri May 3 04:45:10 2024 by rpki-client on console-fra.rpki-client.org