$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: gmeUNv25bYBzYWUb6rE0KHEA7qWv40IiqZdAYWVKDvQ= Subject key identifier: 37:A6:90:FF:27:44:A2:24:F8:8B:58:0D:8E:D6:48:5D:C7:64:EE:CB Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 0127 Signing time: Sun 05 May 2024 05:09:01 +0000 Manifest this update: Sun 05 May 2024 05:09:01 +0000 Manifest next update: Sun 12 May 2024 05:09:01 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: dWr/Nzz+6jQWVqa9JzPTODMZS20vP9HCivoQzPbsgQI=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: EqhmN9adTHMLhbtfwGN3BFVZjDVghXr2ZIvmAXphnYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: May 5 05:09:01 2024 GMT Not After : May 12 05:09:01 2024 GMT Subject: CN=6637146d-7765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:f9:36:9c:45:95:46:a9:e9:6f:73:f2:99: f4:0a:44:20:5a:c0:5b:53:1a:ac:3a:97:62:88:5b: 22:b3:80:ff:d0:c5:8b:f1:d1:ed:d4:8c:db:99:13: d5:8c:2d:df:95:9b:1a:21:a8:a2:e8:5b:4a:2e:3a: d6:6e:47:96:ee:be:03:17:f1:71:bd:93:a0:9b:ec: 47:31:6a:a6:75:c0:f3:7f:13:a9:e9:e5:90:68:74: 35:48:87:6e:6a:38:0a:26:11:a0:07:04:2a:f6:64: f4:fe:50:d7:b2:10:2b:c2:d0:2e:d7:50:b9:5e:b7: 91:be:50:4e:7b:d1:19:08:ed:28:8b:f3:82:47:71: 22:10:3f:d5:f6:5a:6b:19:b7:6b:07:f9:28:35:a8: b7:49:3f:a5:ad:79:e4:3d:4e:cc:2d:45:3a:b3:bf: 84:99:2e:75:e2:69:18:01:c7:bc:c6:f1:39:cb:9c: bb:bc:7a:76:7a:70:80:0a:f1:8f:73:e7:ff:6b:68: 32:ed:89:37:99:79:a2:3c:bf:f3:43:8f:f3:05:5e: 03:ee:bb:e7:f7:9e:8b:b3:de:44:ee:92:37:48:cc: e0:f2:69:df:e2:9b:5f:5b:79:28:bf:15:58:bd:a2: 8f:c3:15:24:02:ac:25:a2:c4:fc:7e:16:78:29:9b: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A6:90:FF:27:44:A2:24:F8:8B:58:0D:8E:D6:48:5D:C7:64:EE:CB X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7a:71:2f:76:e3:47:20:8d:21:91:0c:9b:66:b0:5a:d0:f4: c6:40:81:b2:c7:9c:c8:3c:58:92:4c:be:2f:f3:dd:50:64:2f: 60:91:b3:ec:ce:00:36:7e:4d:bb:fb:84:0c:5e:99:5b:6d:7a: 33:59:28:d9:b7:51:21:44:02:11:2d:42:e0:14:f2:6b:23:33: fe:ab:d3:55:df:08:1b:df:56:0f:56:07:c5:77:1a:94:a2:46: 67:21:10:a1:1e:f5:42:c9:d6:89:4a:b1:a8:0e:a6:81:7f:0f: 80:3f:9d:3f:41:92:db:3e:23:85:9d:0d:d6:3e:84:36:18:07: 54:72:f6:bf:42:2e:55:66:4f:a2:36:8e:cf:ac:3f:fe:d6:02: d9:4c:9a:4d:cd:d4:17:57:dd:ef:c1:00:69:2c:37:45:04:71: 6a:d2:c6:96:ac:94:85:38:bc:97:d4:3b:56:9d:61:c1:3d:23: fc:ef:08:04:2e:bb:f2:9d:c1:6d:17:01:20:1d:87:35:a8:0e: 18:9f:c8:64:60:32:3a:8a:ed:dd:db:f9:da:34:72:a7:52:ee: 28:fd:4e:88:77:f2:54:91:4c:a3:7a:2f:a7:5a:b2:5c:af:61: 6e:a9:5b:f9:10:87:80:7e:7c:8d:b4:4d:a0:b8:4c:58:25:24: ae:a6:6f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjQwNTA1MDUwOTAxWhcNMjQwNTEyMDUwOTAxWjAYMRYwFAYD VQQDEw02NjM3MTQ2ZC03NzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPv5NpxFlUap6W9z8pn0CkQgWsBbUxqsOpdiiFsis4D/0MWL8dHt1IzbmRPV jC3flZsaIaii6FtKLjrWbkeW7r4DF/FxvZOgm+xHMWqmdcDzfxOp6eWQaHQ1SIdu ajgKJhGgBwQq9mT0/lDXshArwtAu11C5XreRvlBOe9EZCO0oi/OCR3EiED/V9lpr GbdrB/koNai3ST+lrXnkPU7MLUU6s7+EmS514mkYAce8xvE5y5y7vHp2enCACvGP c+f/a2gy7Yk3mXmiPL/zQ4/zBV4D7rvn956Ls95E7pI3SMzg8mnf4ptfW3kovxVY vaKPwxUkAqwlosT8fhZ4KZsDyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDemkP8n RKIk+ItYDY7WSF3HZO7LMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNenEvduNHII0hkQybZrBa0PTGQIGyx5zIPFiSTL4v891QZC9gkbPs zgA2fk27+4QMXplbbXozWSjZt1EhRAIRLULgFPJrIzP+q9NV3wgb31YPVgfFdxqU okZnIRChHvVCydaJSrGoDqaBfw+AP50/QZLbPiOFnQ3WPoQ2GAdUcva/Qi5VZk+i No7PrD/+1gLZTJpNzdQXV93vwQBpLDdFBHFq0saWrJSFOLyX1DtWnWHBPSP87wgE LrvyncFtFwEgHYc1qA4Yn8hkYDI6iu3d2/naNHKnUu4o/U6Id/JUkUyjei+nWrJc r2FuqVv5EIeAfnyNtE2guExYJSSupm8n -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org