$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json) Hash identifier: B+9QlWsldgzZd6xbrzjP2KFyCElgmrecpV6LuzGDuCA= Subject key identifier: DD:C7:1E:67:24:15:12:5D:EE:2A:E7:56:28:C4:AB:C7:52:A7:3A:DE Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft Manifest number: BC Signing time: Sun 05 May 2024 06:31:59 +0000 Manifest this update: Sun 05 May 2024 06:31:59 +0000 Manifest next update: Sun 12 May 2024 06:31:59 +0000 Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: 4x392r32rgOSiQklRNJpSOUEfbRZDt7YKFpOdLEX59U=) 2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: SaqoF9qZaWArmnzurxTGnX6sjuUal5ybDEvQkKwjecE=) 3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: DzBCpboud2zLxpVF1ilPsGBCQ+/vZr9mk3HLW2SW1Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622 Validity Not Before: May 5 06:31:59 2024 GMT Not After : May 12 06:31:59 2024 GMT Subject: CN=663727df-6d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:50:21:6e:d2:83:a9:c1:49:b8:89:f6:ed: 1c:a7:f2:ba:27:59:6b:1b:19:6e:f9:30:fc:9d:ca: 74:4f:3e:d6:0c:9f:9c:62:24:84:0c:76:2a:bb:f0: cc:c2:22:88:0e:a3:eb:f9:03:8d:dc:c0:90:f2:24: 71:fe:f8:e8:07:50:6e:85:5c:8c:2a:aa:14:9c:f1: 21:9e:a7:76:81:4c:29:5c:23:16:35:58:91:85:30: 83:ca:0f:7a:d7:ae:2b:26:72:b6:8c:43:c6:2a:d4: ce:99:d7:5c:f8:21:74:6f:d8:51:b0:9f:23:bd:90: 6b:f3:01:75:91:51:72:7c:19:08:d9:1a:21:37:73: 50:6a:5b:9a:c3:ed:b7:e8:e0:e5:36:ff:1e:58:4e: 26:43:b6:56:cd:2e:62:68:db:7e:6c:ce:36:e6:9e: ea:84:da:67:be:ac:4e:92:19:d2:9c:d5:d6:c1:b2: 4c:8d:0a:80:66:9b:71:eb:47:90:a0:59:74:d9:cb: d6:03:4a:8a:c7:59:6d:2c:7c:d7:fb:88:2c:fe:4c: 7f:69:0c:f6:5f:ba:26:8e:12:70:17:e0:b3:1a:b6: ce:5f:0f:8c:a6:e8:99:8f:15:0d:be:4b:4d:7d:f0: fe:d7:ab:d9:ab:b4:04:d1:a2:4d:e6:97:2f:48:a7: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:1E:67:24:15:12:5D:EE:2A:E7:56:28:C4:AB:C7:52:A7:3A:DE X509v3 Authority Key Identifier: keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8f:c6:89:e7:81:d7:ec:2a:aa:2a:db:d5:5a:64:85:b5:f7: 92:9f:f6:34:e0:4c:22:9b:20:b9:76:11:75:05:85:44:53:f2: 92:dd:bb:81:2d:3e:99:94:93:e2:de:3d:37:f9:5e:c6:da:f3: 49:98:81:5a:7d:e2:c9:ea:58:79:e3:33:71:0b:8a:8a:e5:3b: 27:04:08:99:d9:7a:b4:4d:10:a7:aa:12:5f:95:a8:b2:fd:04: 44:af:98:01:0c:ff:bd:f6:de:16:f3:c9:5b:23:e2:9d:46:e4: 36:b4:8d:9f:aa:58:94:dc:a4:eb:25:fc:05:ed:bd:96:21:ad: 79:01:66:5d:24:31:22:3a:40:46:40:13:6b:80:a2:a6:6d:cb: 9b:3f:25:40:18:ab:1f:58:05:0d:98:68:31:91:7b:fc:18:79: 70:02:0f:d5:35:4a:7a:7c:cd:06:85:15:7d:ee:3c:19:d7:3a: ba:e4:c9:4b:ba:44:71:b1:0e:94:1d:48:fe:ed:e4:1d:4d:d0: 47:39:9d:76:8b:c8:93:63:38:e9:2a:39:b2:39:16:86:95:70: 22:84:95:4e:0f:da:d5:db:b9:dc:4d:77:83:38:96:81:96:eb: 00:f5:32:03:74:2a:a0:4c:d8:70:65:3f:2d:2a:58:71:fc:17: 7f:b9:54:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3 NEI3Qjk2MjIwHhcNMjQwNTA1MDYzMTU5WhcNMjQwNTEyMDYzMTU5WjAYMRYwFAYD VQQDEw02NjM3MjdkZi02ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5AJQIW7Sg6nBSbiJ9u0cp/K6J1lrGxlu+TD8ncp0Tz7WDJ+cYiSEDHYqu/DM wiKIDqPr+QON3MCQ8iRx/vjoB1BuhVyMKqoUnPEhnqd2gUwpXCMWNViRhTCDyg96 164rJnK2jEPGKtTOmddc+CF0b9hRsJ8jvZBr8wF1kVFyfBkI2RohN3NQaluaw+23 6ODlNv8eWE4mQ7ZWzS5iaNt+bM425p7qhNpnvqxOkhnSnNXWwbJMjQqAZptx60eQ oFl02cvWA0qKx1ltLHzX+4gs/kx/aQz2X7omjhJwF+CzGrbOXw+MpuiZjxUNvktN ffD+16vZq7QE0aJN5pcvSKd/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3HHmck FRJd7irnVijEq8dSpzreMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu bnlfajBYcXlROHQwdDdsaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0j8aJ54HX7CqqKtvVWmSFtfeSn/Y04EwimyC5dhF1BYVEU/KS3buB LT6ZlJPi3j03+V7G2vNJmIFafeLJ6lh54zNxC4qK5TsnBAiZ2Xq0TRCnqhJflaiy /QREr5gBDP+99t4W88lbI+KdRuQ2tI2fqliU3KTrJfwF7b2WIa15AWZdJDEiOkBG QBNrgKKmbcubPyVAGKsfWAUNmGgxkXv8GHlwAg/VNUp6fM0GhRV97jwZ1zq65MlL ukRxsQ6UHUj+7eQdTdBHOZ12i8iTYzjpKjmyORaGlXAihJVOD9rV27ncTXeDOJaB lusA9TIDdCqgTNhwZT8tKlhx/Bd/uVQX -----END CERTIFICATE-----Generated at Sun May 5 08:39:05 2024 by rpki-client on console-fra.rpki-client.org