$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft File: a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json) Hash identifier: EM3bM3Pyz2bJAWhxZAw+fohrhPYJ4KY45Qd9rg6jMPI= Subject key identifier: C5:AA:7F:4E:22:6F:DE:2B:B9:49:0D:3F:05:38:EB:34:4A:A3:02:D9 Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E Certificate issuer: /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft Manifest number: D4 Signing time: Fri 03 May 2024 06:13:08 +0000 Manifest this update: Fri 03 May 2024 06:13:07 +0000 Manifest next update: Fri 10 May 2024 06:13:07 +0000 Files and hashes: 1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: crYSJtOzrCzpXVbWCHsJ7DrUaZiwK+UEPtsbzKmhu7k=) 2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: NLCu2j7NyVCfAMNadoeiUtb8mS5PqTykxmEmvgk0+vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E Validity Not Before: May 3 06:13:07 2024 GMT Not After : May 10 06:13:07 2024 GMT Subject: CN=66348073-463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:06:a9:f1:86:93:c0:a8:6f:dc:03:bf:63: f0:fb:5a:94:42:f2:9d:c6:56:f6:6d:46:09:25:e8: 32:f7:a6:65:db:91:81:f1:e5:de:3e:f0:24:5e:9c: d9:69:db:f1:0d:20:3d:6a:71:ad:f7:f1:f7:16:3c: 71:90:41:ea:04:05:f6:b4:d8:bc:c1:c6:76:d1:bc: 3b:bb:a0:c9:8a:5d:d8:e5:41:c9:96:12:4a:a4:db: ed:a9:c1:bc:6f:c9:a2:0b:42:df:32:d6:de:76:fa: b9:78:e5:95:9d:1d:01:5f:ff:34:d7:09:30:4a:a8: 33:80:e8:e0:47:86:65:a0:19:68:0b:a0:ad:87:b8: b9:0a:87:3b:eb:8a:17:da:d5:20:f3:7b:58:b2:e7: 0d:0a:08:8d:a1:90:68:f5:8e:61:b9:1e:3f:28:7e: b6:fd:1a:16:46:c5:77:17:db:1a:b4:d9:36:6c:d8: b5:28:d6:92:ec:a8:ef:cc:60:32:ee:d4:ba:7b:3e: fd:ac:26:4c:bd:eb:34:ed:7b:03:bf:0b:01:52:2c: 46:91:44:1b:ce:f5:5f:94:40:c5:c1:9f:5f:71:76: 3b:55:61:a3:f5:bf:56:f5:73:37:fe:70:20:d3:e0: 93:42:33:a7:ea:3d:36:06:98:cb:30:c2:10:2d:9b: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:7F:4E:22:6F:DE:2B:B9:49:0D:3F:05:38:EB:34:4A:A3:02:D9 X509v3 Authority Key Identifier: keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:0a:5b:0a:4d:4d:36:79:75:35:b2:a0:bc:09:76:4f:17: 7b:8f:92:67:68:f0:95:a8:aa:e0:07:f2:b0:2d:af:32:2f:35: 48:fa:88:be:15:f5:81:b3:82:38:17:6e:ca:8c:ce:90:9b:cd: a4:4a:9e:63:89:4b:aa:5e:b7:3a:f3:69:47:89:5a:94:66:ec: a2:d2:e3:0d:43:01:b9:87:db:ad:72:2d:cc:d5:77:7d:82:c7: 1e:e3:0f:a3:a0:dc:29:ab:94:c0:cf:43:4f:85:cb:73:17:71: 3e:0e:e6:98:af:09:8a:77:08:3f:d7:73:22:19:76:57:fa:68: 74:bb:7b:8d:df:27:31:f1:b1:e2:bc:13:73:5b:31:d5:31:55: 5a:e0:58:94:5f:37:dd:ff:c9:0d:66:23:bf:5e:7c:d7:1f:55: 71:ca:34:fe:dc:9e:61:6f:11:8d:6e:cf:a4:3a:c5:e7:1f:78: 22:1b:1d:20:bf:99:41:71:0e:c9:08:3c:4d:c4:21:a5:e4:71: d0:a8:b0:b3:41:b1:02:d4:16:a5:1c:1b:ee:e9:bd:79:96:d1: a2:78:ce:87:57:d4:ae:b1:2c:80:67:c0:57:14:b7:f1:35:5b: 93:7b:f8:fd:b6:6d:8e:3d:47:8b:36:43:4e:db:2e:e7:73:7e: f8:62:2f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCRDcxMTAvBgNVBAUTKDZCNDk1NzY2MkFENEMyMUJENDIyQTg3REI0MUI4QkNG QzlENkREOEUwHhcNMjQwNTAzMDYxMzA3WhcNMjQwNTEwMDYxMzA3WjAYMRYwFAYD VQQDEw02NjM0ODA3My00NjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVEGqfGGk8Cob9wDv2Pw+1qUQvKdxlb2bUYJJegy96Zl25GB8eXePvAkXpzZ advxDSA9anGt9/H3FjxxkEHqBAX2tNi8wcZ20bw7u6DJil3Y5UHJlhJKpNvtqcG8 b8miC0LfMtbedvq5eOWVnR0BX/801wkwSqgzgOjgR4ZloBloC6Cth7i5Coc764oX 2tUg83tYsucNCgiNoZBo9Y5huR4/KH62/RoWRsV3F9satNk2bNi1KNaS7KjvzGAy 7tS6ez79rCZMves07XsDvwsBUixGkUQbzvVflEDFwZ9fcXY7VWGj9b9W9XM3/nAg 0+CTQjOn6j02BpjLMMIQLZsiOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWqf04i b94ruUkNPwU46zRKowLZMB8GA1UdIwQYMBaAFGtJV2Yq1MIb1CKofbQbi8/J1t2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUJENy84QTYyQzgyQUM5 NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdodlVJcWg5dEJ1THo4blcz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EwbFhaaXJVd2h2VUlxaDl0QnVMejhuVzNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUJENy84QTYyQzgyQUM5NTgxMUVEOTE4RThDMzRDNEY5QUUwMi9hMGxYWmlyVXdo dlVJcWg5dEJ1THo4blczWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkWQpbCk1NNnl1NbKgvAl2Txd7j5JnaPCVqKrgB/KwLa8yLzVI+oi+ FfWBs4I4F27KjM6Qm82kSp5jiUuqXrc682lHiVqUZuyi0uMNQwG5h9utci3M1Xd9 gsce4w+joNwpq5TAz0NPhctzF3E+DuaYrwmKdwg/13MiGXZX+mh0u3uN3ycx8bHi vBNzWzHVMVVa4FiUXzfd/8kNZiO/XnzXH1VxyjT+3J5hbxGNbs+kOsXnH3giGx0g v5lBcQ7JCDxNxCGl5HHQqLCzQbEC1BalHBvu6b15ltGieM6HV9SusSyAZ8BXFLfx NVuTe/j9tm2OPUeLNkNO2y7nc374Yi8m -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org