$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: 0Uu3yvcGwF7QtdFoQbhYJb5e24ERU2fvDqoLkKvSnsQ= Subject key identifier: 26:8A:6D:32:DE:3D:23:35:70:A8:C6:FF:A0:D1:36:76:E0:5F:F5:74 Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 023A Signing time: Mon 27 May 2024 03:40:15 +0000 Manifest this update: Mon 27 May 2024 03:40:14 +0000 Manifest next update: Mon 03 Jun 2024 03:40:14 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: sisT5cLbvnVRaYiBmU/T2MEKXH057dTw+MUXNpxpIxo=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: W4vLQsN0db4vrYc7K8qOJXeqeIzm3EuC93xYJrRcOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: May 27 03:40:14 2024 GMT Not After : Jun 3 03:40:14 2024 GMT Subject: CN=6654009e-2c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:25:d8:d5:0a:ae:10:db:4e:97:43:3f:53: a6:48:4d:b2:f8:a2:c3:72:d5:cb:65:48:ce:8f:9a: b7:6b:a3:bc:e1:04:b6:78:02:c9:cc:6f:11:33:c7: 0b:3b:ec:f4:3b:32:09:ef:d8:fa:53:4d:1b:cf:cb: ae:d2:bb:23:35:50:c7:28:e3:9a:a9:56:1b:13:7d: c9:91:b4:83:62:54:40:8f:cf:e9:aa:0a:b9:82:93: 69:dc:e5:1f:60:36:e0:71:b3:0d:7d:3c:5e:87:b1: 5f:e6:24:58:98:6a:3c:7c:b0:1a:c7:7d:96:05:7f: 26:35:87:fb:b5:4f:ee:15:35:06:ba:67:bd:04:4f: 6f:8d:dc:9e:a6:6c:c7:16:a1:88:49:9b:eb:75:0c: 77:c2:26:83:5a:6f:04:cf:23:ec:4f:02:e3:4a:c1: 0c:96:43:59:bb:7d:df:3e:29:d2:64:7d:a7:0e:f1: bb:90:07:32:9d:72:2c:32:62:52:73:ff:72:e0:7c: 8a:f4:88:04:43:39:13:19:89:2f:7f:84:0b:ba:a1: 2b:ca:bc:53:d7:05:d0:d0:98:df:7e:99:f3:58:c3: df:d7:ea:e4:63:a0:ae:27:5c:52:f1:b4:60:af:e9: 0e:24:fa:fe:8b:7a:90:34:20:00:19:4a:43:3d:a8: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:6D:32:DE:3D:23:35:70:A8:C6:FF:A0:D1:36:76:E0:5F:F5:74 X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:d0:7d:66:e0:8d:e4:59:cc:af:68:da:84:4e:2e:7a:15: 6b:38:d4:6b:04:14:6f:ee:b7:75:e1:e7:c6:4b:01:2b:4b:a7: 6a:bb:e1:5c:8c:d0:e9:66:f9:e1:b1:7a:af:45:22:0a:28:0e: bd:55:f7:9c:7f:04:c9:cd:84:ed:73:5e:3a:ab:37:5d:86:a2: 43:28:d3:5d:04:68:a2:31:a9:84:f4:7f:f6:d6:9a:71:42:e8: d1:49:6d:3c:a5:5b:58:6c:02:33:eb:f5:71:77:08:66:ff:ac: 4f:17:65:3e:58:3f:26:96:74:10:90:ff:cb:39:79:e1:28:b7: 53:0d:38:24:9a:34:78:a8:2c:56:04:39:58:4a:59:4f:42:9c: 47:cf:0f:fb:db:12:99:2d:a2:2d:a1:d7:52:ce:46:ed:09:7e: 28:10:78:c4:36:51:26:fd:ca:07:ec:5e:b4:5d:3d:5a:4a:06: 32:4a:98:f2:8f:81:07:ce:be:0b:69:87:d4:85:6a:7a:7f:32: 05:51:64:af:78:73:2a:3f:a7:d0:7b:3d:b2:49:fb:eb:1d:88: 17:77:99:dc:01:91:68:86:77:40:d6:42:9e:08:10:77:8f:9e: 10:49:3c:90:3e:86:a1:1d:fa:ab:21:0b:b1:93:51:6f:83:b8: f7:62:12:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjQwNTI3MDM0MDE0WhcNMjQwNjAzMDM0MDE0WjAYMRYwFAYD VQQDEw02NjU0MDA5ZS0yYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpUl2NUKrhDbTpdDP1OmSE2y+KLDctXLZUjOj5q3a6O84QS2eALJzG8RM8cL O+z0OzIJ79j6U00bz8uu0rsjNVDHKOOaqVYbE33JkbSDYlRAj8/pqgq5gpNp3OUf YDbgcbMNfTxeh7Ff5iRYmGo8fLAax32WBX8mNYf7tU/uFTUGume9BE9vjdyepmzH FqGISZvrdQx3wiaDWm8EzyPsTwLjSsEMlkNZu33fPinSZH2nDvG7kAcynXIsMmJS c/9y4HyK9IgEQzkTGYkvf4QLuqEryrxT1wXQ0JjffpnzWMPf1+rkY6CuJ1xS8bRg r+kOJPr+i3qQNCAAGUpDPaiEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaKbTLe PSM1cKjG/6DRNnbgX/V0MB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkf9B9ZuCN5FnMr2jahE4uehVrONRrBBRv7rd14efGSwErS6dqu+Fc jNDpZvnhsXqvRSIKKA69VfecfwTJzYTtc146qzddhqJDKNNdBGiiMamE9H/21ppx QujRSW08pVtYbAIz6/Vxdwhm/6xPF2U+WD8mlnQQkP/LOXnhKLdTDTgkmjR4qCxW BDlYSllPQpxHzw/72xKZLaItoddSzkbtCX4oEHjENlEm/coH7F60XT1aSgYySpjy j4EHzr4LaYfUhWp6fzIFUWSveHMqP6fQez2ySfvrHYgXd5ncAZFohndA1kKeCBB3 j54QSTyQPoahHfqrIQuxk1Fvg7j3YhLT -----END CERTIFICATE-----Generated at Mon May 27 04:53:37 2024 by rpki-client on console-fra.rpki-client.org