$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: YsgqxPnsQ0FY1wZLN7UWhD/Gkwo+h6uP62l/QtadyU8= Subject key identifier: D3:85:04:7A:62:DE:8B:A6:0F:55:19:8A:A4:16:09:7A:47:FD:CE:3B Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 01BA Signing time: Tue 07 May 2024 04:29:06 +0000 Manifest this update: Tue 07 May 2024 04:29:05 +0000 Manifest next update: Tue 14 May 2024 04:29:05 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: Td/sl3hn7Ip53NwcNZ3zuUOX3VYHaebcjJCxNQvCrns=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: wk4FNHWSIyIsPuLHnvDSegYUJ/QvZebAuM5TzFH/P5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: May 7 04:29:05 2024 GMT Not After : May 14 04:29:05 2024 GMT Subject: CN=6639ae11-022e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:36:a5:b2:df:7f:30:55:29:ef:9b:17:9a: eb:3a:94:2a:4c:d0:46:1b:0c:88:9b:5c:7c:63:49: c7:ac:97:5a:f2:37:f7:b9:ba:c8:ad:95:1a:9e:ca: 29:0f:75:5e:11:3b:4e:7b:85:fc:ec:1c:8b:ee:07: 78:19:1d:57:41:26:15:7d:e0:50:8e:69:d0:e8:79: 20:44:c7:0c:bb:3b:48:d1:af:8c:72:b2:fd:52:d1: 4c:a9:7f:37:9c:16:d4:47:17:91:f6:4a:97:5c:82: a2:23:10:c5:fe:50:e6:30:93:0c:18:7b:c5:d1:f4: 76:68:7b:4f:57:5f:25:c7:3a:1f:51:e6:19:39:b8: 2b:68:c2:db:e6:98:db:f5:85:ad:8c:ac:85:19:34: 4a:4d:09:1f:b5:a7:df:f4:3e:03:1a:85:73:e8:ee: 65:d6:a5:dc:b0:f4:32:6c:2f:10:9d:40:b2:d4:61: 60:c7:b4:3b:2e:47:97:17:d9:45:48:ff:be:cc:c6: b8:22:89:0b:75:19:7b:e0:59:e5:b5:d1:8b:b0:eb: b9:5b:fa:57:2f:a3:78:97:71:68:cb:7e:42:38:f4: 58:4c:03:e3:5d:a5:06:0e:3b:80:f0:44:b3:1b:5f: af:dd:f5:f5:27:a8:9d:5a:ba:80:5b:cd:a3:c0:03: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:04:7A:62:DE:8B:A6:0F:55:19:8A:A4:16:09:7A:47:FD:CE:3B X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0e:88:95:11:23:6b:4a:96:82:ad:56:22:a3:5e:ed:36:9f: 03:29:53:3e:f8:28:e4:f6:ab:49:8d:b6:91:90:0f:b0:4e:dc: 0a:66:3b:f9:bc:ff:a8:fc:53:e4:0b:e0:31:9d:12:64:0f:64: 66:db:17:fa:38:e9:79:2a:f5:0c:71:e9:09:ab:e5:38:76:07: 67:aa:96:c9:05:8e:95:34:bc:78:80:e6:1c:b1:e3:55:c2:3a: 98:b8:08:d7:ef:d8:cd:73:e5:75:1f:ee:c4:a5:74:3f:ba:2b: 83:20:0e:b0:cd:04:67:9c:8b:3d:f3:8d:98:8e:00:52:24:71: b9:e6:c9:ed:1d:0b:b1:f3:d4:ca:cb:64:f0:ed:f8:c8:21:05: d5:20:76:52:64:42:0d:d0:7b:d3:dd:72:4e:af:f5:b6:f9:ed: ae:ce:e6:01:1a:9e:12:4d:85:05:99:fb:74:af:94:1a:34:ac: 77:67:b7:f0:9c:92:2c:b5:96:b2:b2:52:95:cc:19:70:00:c6: ac:fa:94:4e:7e:5e:4f:3b:83:86:8a:02:32:0d:64:78:86:92: 2d:c6:fe:36:79:ba:4f:64:31:02:29:4d:ce:c5:57:d3:8d:79: b5:21:6b:44:01:c0:5f:d7:8d:5b:94:9d:bb:9b:ca:50:97:b1: 64:c8:38:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjQwNTA3MDQyOTA1WhcNMjQwNTE0MDQyOTA1WjAYMRYwFAYD VQQDEw02NjM5YWUxMS0wMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx042pbLffzBVKe+bF5rrOpQqTNBGGwyIm1x8Y0nHrJda8jf3ubrIrZUansop D3VeETtOe4X87ByL7gd4GR1XQSYVfeBQjmnQ6HkgRMcMuztI0a+McrL9UtFMqX83 nBbURxeR9kqXXIKiIxDF/lDmMJMMGHvF0fR2aHtPV18lxzofUeYZObgraMLb5pjb 9YWtjKyFGTRKTQkftaff9D4DGoVz6O5l1qXcsPQybC8QnUCy1GFgx7Q7LkeXF9lF SP++zMa4IokLdRl74FnltdGLsOu5W/pXL6N4l3Foy35COPRYTAPjXaUGDjuA8ESz G1+v3fX1J6idWrqAW82jwAPKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOFBHpi 3oumD1UZiqQWCXpH/c47MB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmDoiVESNrSpaCrVYio17tNp8DKVM++Cjk9qtJjbaRkA+wTtwKZjv5 vP+o/FPkC+AxnRJkD2Rm2xf6OOl5KvUMcekJq+U4dgdnqpbJBY6VNLx4gOYcseNV wjqYuAjX79jNc+V1H+7EpXQ/uiuDIA6wzQRnnIs9842YjgBSJHG55sntHQux89TK y2Tw7fjIIQXVIHZSZEIN0HvT3XJOr/W2+e2uzuYBGp4STYUFmft0r5QaNKx3Z7fw nJIstZayslKVzBlwAMas+pROfl5PO4OGigIyDWR4hpItxv42ebpPZDECKU3OxVfT jXm1IWtEAcBf141blJ27m8pQl7FkyDji -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org