$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: /HnQ/y7MMY1mbaCrTHgvDYKJK+I4qVHZ/nji57cNqb0= Subject key identifier: 11:39:C1:6A:35:B1:FE:C3:F1:6A:9F:4E:D9:B9:44:75:B2:E3:2B:DC Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 05D3 Signing time: Fri 03 May 2024 00:14:08 +0000 Manifest this update: Fri 03 May 2024 00:14:07 +0000 Manifest next update: Fri 10 May 2024 00:14:07 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: S6jxHOJsfrWCTC+RXNjIhzpC51wIQub1Yn+81Z6TzaA=) 2: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: WkicyrZMnc/A3KfnVZpmFid5I7BALmKDtV6vj3aIa1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: May 3 00:14:07 2024 GMT Not After : May 10 00:14:07 2024 GMT Subject: CN=66342c50-00ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:2c:75:85:b7:b7:24:4f:a4:1c:1d:88:d5: 28:6c:3e:32:74:12:43:2e:9c:11:5c:e2:55:ce:32: 08:02:e5:d3:76:27:32:4d:44:0c:2c:7c:de:3d:4b: 97:b9:38:57:99:9e:36:78:51:e3:45:5a:19:f0:9d: bd:a9:9a:f4:44:7b:ba:eb:e9:f7:39:04:ea:fe:6b: f3:ea:32:42:d1:5b:87:1a:bf:ef:f6:f9:48:c5:fd: 6d:60:bd:24:44:29:19:81:95:72:a0:c6:5b:c5:f3: 7d:5a:aa:c3:18:15:f4:e3:95:fc:2b:5d:88:87:5e: 45:19:4d:f6:96:28:bc:ed:91:14:d0:c1:bb:63:6a: 7d:c9:0d:b5:c3:75:7a:50:fa:56:e9:fd:07:d7:df: 85:74:ec:a5:5f:07:14:e5:b8:f4:b5:72:d9:97:22: 17:fe:47:a4:9d:81:4f:13:a4:d9:01:35:69:59:80: 42:9e:89:3e:41:f6:55:85:c5:f8:ab:83:34:21:99: a6:1e:5b:62:1d:87:ff:41:42:44:67:23:ad:8b:8c: 44:cb:fd:4e:11:1c:5f:80:61:c8:01:fa:3e:85:45: c7:a0:93:38:a0:1d:29:8d:9e:d0:55:03:2c:a8:92: e8:05:06:c7:40:55:10:8b:a5:77:dd:1e:87:23:15: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:39:C1:6A:35:B1:FE:C3:F1:6A:9F:4E:D9:B9:44:75:B2:E3:2B:DC X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:37:79:29:e3:b6:8c:17:dd:d0:ff:a7:64:7c:02:d7:a5:26: 14:94:fb:09:f1:64:22:65:8c:10:b4:55:f7:a4:a4:4e:20:1f: 6e:3f:6f:2d:10:0c:30:06:8c:75:70:10:b6:03:23:fa:a4:36: 95:2c:c3:d4:a8:86:cb:d1:b9:54:ac:b8:af:6b:72:7d:27:cc: 65:33:1a:37:a4:81:87:77:92:a2:95:10:41:ac:b9:ee:b7:d5: cd:39:45:81:c2:24:00:d4:7f:01:84:13:a8:ee:0e:77:19:0b: ec:22:4b:43:f0:f1:4c:d8:20:12:43:a9:93:d9:27:77:0a:67: 91:86:b4:e0:8b:14:79:87:c0:c1:ef:51:c3:b3:86:7e:b7:66: 44:c5:40:0c:4d:0a:66:e8:78:02:c5:e3:1c:81:4c:67:6c:45: a5:86:4a:43:60:86:f7:65:37:4d:97:ad:37:85:ae:4d:cb:7a: b8:2c:ea:30:b7:a1:2c:fb:ff:a9:3c:f5:d3:35:52:5a:0c:43: f4:7f:e0:4f:58:71:53:cc:0e:6a:c6:e0:98:49:24:d3:61:ac: fe:34:cf:28:3a:71:e5:db:4a:e3:76:08:30:fc:5b:6f:21:b9: 97:11:9b:e4:29:35:23:46:e5:b1:77:04:63:a4:23:9f:99:3f: 4d:e4:34:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjQwNTAzMDAxNDA3WhcNMjQwNTEwMDAxNDA3WjAYMRYwFAYD VQQDEw02NjM0MmM1MC0wMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNUsdYW3tyRPpBwdiNUobD4ydBJDLpwRXOJVzjIIAuXTdicyTUQMLHzePUuX uThXmZ42eFHjRVoZ8J29qZr0RHu66+n3OQTq/mvz6jJC0VuHGr/v9vlIxf1tYL0k RCkZgZVyoMZbxfN9WqrDGBX045X8K12Ih15FGU32lii87ZEU0MG7Y2p9yQ21w3V6 UPpW6f0H19+FdOylXwcU5bj0tXLZlyIX/keknYFPE6TZATVpWYBCnok+QfZVhcX4 q4M0IZmmHltiHYf/QUJEZyOti4xEy/1OERxfgGHIAfo+hUXHoJM4oB0pjZ7QVQMs qJLoBQbHQFUQi6V33R6HIxXxLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE5wWo1 sf7D8WqfTtm5RHWy4yvcMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPN3kp47aMF93Q/6dkfALXpSYUlPsJ8WQiZYwQtFX3pKROIB9uP28t EAwwBox1cBC2AyP6pDaVLMPUqIbL0blUrLiva3J9J8xlMxo3pIGHd5KilRBBrLnu t9XNOUWBwiQA1H8BhBOo7g53GQvsIktD8PFM2CASQ6mT2Sd3CmeRhrTgixR5h8DB 71HDs4Z+t2ZExUAMTQpm6HgCxeMcgUxnbEWlhkpDYIb3ZTdNl603ha5Ny3q4LOow t6Es+/+pPPXTNVJaDEP0f+BPWHFTzA5qxuCYSSTTYaz+NM8oOnHl20rjdggw/Ftv IbmXEZvkKTUjRuWxdwRjpCOfmT9N5DQ6 -----END CERTIFICATE-----Generated at Fri May 3 01:30:24 2024 by rpki-client on console-fra.rpki-client.org