$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: DB3egaoknpr0gszuB+IJo4RcDOlVRIQU+X94AyjKeB8= Subject key identifier: A6:AA:62:4D:74:52:CD:7D:A9:F6:9D:57:2D:C5:E1:DC:D5:98:1A:28 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0A05 Signing time: Thu 02 May 2024 20:46:07 +0000 Manifest this update: Thu 02 May 2024 20:46:06 +0000 Manifest next update: Thu 09 May 2024 20:46:06 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: HcepCHmYi1GVjQz7m63M6Nc4BlAuSYT93EBbZT7CC/A=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: kRARa+uUzxbZ+NEb5MEJFAdFIet/TAzXthEijJD892g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: May 2 20:46:06 2024 GMT Not After : May 9 20:46:06 2024 GMT Subject: CN=6633fb8f-770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:31:a2:2d:4a:3e:e7:a7:86:d9:d6:a5:92: 01:d8:fc:da:72:c2:19:2b:e3:35:c1:63:ae:58:57: a4:2f:14:7b:d8:9d:9e:bc:6e:2d:b1:74:d7:27:54: f5:5b:f6:76:0b:40:9d:fe:71:49:6b:31:86:6b:e4: e8:0a:8c:a3:5b:47:4e:89:8d:81:7b:14:7a:6f:bb: 51:54:28:54:6d:79:df:34:70:c2:64:5a:82:9e:79: 67:47:8e:da:a6:c9:6c:d6:fd:d8:d7:7d:e9:5e:cb: 95:24:c7:b2:7d:d0:fc:ed:5a:1f:24:24:92:5d:b2: 87:85:75:b4:7d:9c:ed:d8:15:cb:7b:98:66:9a:0b: 6b:72:eb:80:95:5b:84:01:37:80:59:35:c2:1b:5b: 18:db:a2:b3:ef:f6:07:b0:ae:f7:e9:1e:a2:17:db: 3f:b7:57:2d:63:03:7f:0b:7b:1a:e9:dd:ce:70:58: 30:3d:bb:a3:f8:45:a8:e2:a0:b0:23:bd:15:ab:92: f4:41:cd:f5:e8:83:9c:64:00:32:4b:b3:99:3f:e0: 74:b4:85:ba:64:84:1f:cd:4d:a2:9a:c7:9f:83:3b: f3:1e:f6:46:a6:a3:64:ff:9b:a0:42:2c:1d:c6:b6: 9c:c5:69:42:78:aa:58:91:5a:a9:b3:46:33:98:f1: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AA:62:4D:74:52:CD:7D:A9:F6:9D:57:2D:C5:E1:DC:D5:98:1A:28 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:82:54:1b:60:d0:1b:88:57:e0:70:dc:c9:fa:7f:72:da:e1: 2a:ff:28:6b:5f:88:5a:24:c9:b9:8f:a0:48:39:06:6f:60:8f: 56:bb:94:aa:40:29:31:ca:dc:21:ad:31:a9:0d:4e:32:bc:91: 1c:63:56:cc:b4:a1:26:06:0b:02:44:16:0e:4b:df:82:20:ad: 91:d0:96:c2:38:59:e7:8f:28:0c:2f:9c:89:27:9c:51:6c:a1: 0f:16:04:11:69:31:d4:26:e5:0f:4c:2b:d2:ab:64:15:d0:fa: c2:86:6c:de:ec:50:5e:50:ad:04:a8:f0:82:89:3b:8d:6b:9b: 6d:10:1c:bb:43:ec:f6:e2:fc:38:ef:18:39:14:4d:63:79:90: 74:42:9c:db:8c:14:e7:25:29:ef:e5:53:00:5d:7c:4a:40:cc: b8:b6:b7:e7:94:56:0a:82:23:a5:01:7e:b4:4f:df:48:e6:e1: 08:20:c3:e1:75:60:d8:48:7c:2e:5b:f0:8d:27:60:7b:ba:ef: b7:0c:d2:65:70:54:10:9b:e4:b4:66:f7:14:97:3a:43:d7:6a: e7:4e:08:ee:82:00:df:84:d3:65:b2:e0:9a:1a:2c:50:96:77: 8a:36:55:1a:c1:78:8a:a8:3e:cb:e6:da:f7:4f:21:2f:b0:35: d7:79:44:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjQwNTAyMjA0NjA2WhcNMjQwNTA5MjA0NjA2WjAYMRYwFAYD VQQDEw02NjMzZmI4Zi03NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaQxoi1KPuenhtnWpZIB2PzacsIZK+M1wWOuWFekLxR72J2evG4tsXTXJ1T1 W/Z2C0Cd/nFJazGGa+ToCoyjW0dOiY2BexR6b7tRVChUbXnfNHDCZFqCnnlnR47a psls1v3Y133pXsuVJMeyfdD87VofJCSSXbKHhXW0fZzt2BXLe5hmmgtrcuuAlVuE ATeAWTXCG1sY26Kz7/YHsK736R6iF9s/t1ctYwN/C3sa6d3OcFgwPbuj+EWo4qCw I70Vq5L0Qc316IOcZAAyS7OZP+B0tIW6ZIQfzU2imsefgzvzHvZGpqNk/5ugQiwd xracxWlCeKpYkVqps0YzmPHcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaqYk10 Us19qfadVy3F4dzVmBooMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYglQbYNAbiFfgcNzJ+n9y2uEq/yhrX4haJMm5j6BIOQZvYI9Wu5Sq QCkxytwhrTGpDU4yvJEcY1bMtKEmBgsCRBYOS9+CIK2R0JbCOFnnjygML5yJJ5xR bKEPFgQRaTHUJuUPTCvSq2QV0PrChmze7FBeUK0EqPCCiTuNa5ttEBy7Q+z24vw4 7xg5FE1jeZB0QpzbjBTnJSnv5VMAXXxKQMy4trfnlFYKgiOlAX60T99I5uEIIMPh dWDYSHwuW/CNJ2B7uu+3DNJlcFQQm+S0ZvcUlzpD12rnTgjuggDfhNNlsuCaGixQ lneKNlUawXiKqD7L5tr3TyEvsDXXeURl -----END CERTIFICATE-----Generated at Thu May 2 22:28:49 2024 by rpki-client on console-ams.rpki-client.org