$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: paxyc0RjVzbzoQZ8bK9KyIEW67eSnUzNXXpsVUZshy4= Subject key identifier: 13:A3:2D:D8:2D:9B:DD:74:FD:A0:DE:79:41:2D:16:F4:72:88:9E:EF Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 0199 Signing time: Fri 03 May 2024 04:47:50 +0000 Manifest this update: Fri 03 May 2024 04:47:50 +0000 Manifest next update: Fri 10 May 2024 04:47:50 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: kRyZ/+4kVkulXgnGePw/VMGQlfx6qIA1y3zprTJX6SY=) 2: 4D05FAAC61A111ED83B4EF11C4F9AE02.roa (hash: jUDo9GxDqvQcg1plB3lvHLCNmGIcg9xjOw0bISxW0So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: May 3 04:47:50 2024 GMT Not After : May 10 04:47:50 2024 GMT Subject: CN=66346c76-a8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:3a:c9:ba:5f:33:5e:d5:90:5f:73:e8:b3: 7d:f7:ff:40:53:97:46:60:17:a4:ed:1b:b8:ff:71: 4a:ba:ef:e4:1f:eb:a7:d7:73:22:4f:4c:f3:08:0f: 30:79:f3:54:62:8e:4a:1d:26:b3:6b:a2:a9:7d:66: 4e:8d:b7:49:c5:7d:20:62:b7:6a:22:33:36:aa:d0: be:3f:b7:69:ec:cd:92:e1:76:7a:ff:de:99:72:42: 0d:d4:53:57:8f:e4:d4:28:3a:bb:e2:16:96:2a:7e: ca:64:d1:6a:37:0c:73:5d:5e:18:3e:7f:19:43:9a: bc:f3:80:fb:e8:36:33:3a:cb:43:8c:19:61:3f:1d: a9:e4:59:0e:e8:e5:d6:ec:23:c0:41:0e:b6:82:9c: a6:df:4b:aa:f2:cc:67:74:c5:e4:04:a3:5f:6a:d2: 6a:0d:d4:1c:b2:08:95:c1:41:1b:aa:90:75:96:b9: ac:65:2e:e9:2f:e7:ab:48:70:62:e1:c5:7a:bc:8c: fb:08:21:23:4d:15:19:b9:96:ba:9e:a1:f5:db:06: 55:0b:cf:42:e1:7c:b5:4e:b8:2e:96:b4:4b:a1:24: cd:54:59:40:ae:89:f8:a7:5f:19:49:0f:9e:ad:9a: a3:f8:bc:41:9f:09:43:1f:f7:ba:df:5a:4a:34:7f: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A3:2D:D8:2D:9B:DD:74:FD:A0:DE:79:41:2D:16:F4:72:88:9E:EF X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:b8:cd:f5:e1:51:87:57:6a:54:a4:73:8c:d2:6f:c3:ed: 36:a6:80:2e:f9:0f:e1:69:6f:73:11:91:6d:4a:33:48:6e:a7: 93:1c:6c:63:13:68:09:4f:f8:b9:fb:ad:d3:22:52:e1:fd:87: 98:7a:de:48:09:76:60:7a:a4:57:d1:f1:2a:b6:b0:75:52:a9: ce:29:a9:3f:aa:43:34:e7:c3:b1:27:19:03:d6:7d:b2:c7:e5: 43:47:0b:52:8a:39:52:c4:c6:ed:7d:df:67:5e:c0:ab:aa:9d: 45:35:33:b8:6c:69:73:2d:33:59:4d:73:8c:f5:be:f0:74:26: 23:ae:35:76:ed:27:ab:0a:8d:99:27:12:fd:51:e6:ef:54:fa: c6:b5:39:01:8c:99:d4:22:67:b3:b5:72:7c:73:56:cc:84:0b: 7a:e1:bf:69:da:3b:ca:8e:c3:e5:76:38:57:d1:fe:89:cf:4b: df:af:39:c6:26:73:e3:fd:e1:67:ff:a8:ef:2c:be:b7:61:88: d3:cf:11:82:c3:44:59:66:0c:66:ff:bc:84:80:da:ad:77:2b: a9:71:94:92:4c:7e:f8:9b:05:31:f5:13:50:8e:ac:5f:7c:5c: d6:b3:57:ce:6e:95:c7:26:a7:a8:e6:74:55:25:0a:89:f3:5c: 66:ab:ce:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjQwNTAzMDQ0NzUwWhcNMjQwNTEwMDQ0NzUwWjAYMRYwFAYD VQQDEw02NjM0NmM3Ni1hOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss06ybpfM17VkF9z6LN99/9AU5dGYBek7Ru4/3FKuu/kH+un13MiT0zzCA8w efNUYo5KHSaza6KpfWZOjbdJxX0gYrdqIjM2qtC+P7dp7M2S4XZ6/96ZckIN1FNX j+TUKDq74haWKn7KZNFqNwxzXV4YPn8ZQ5q884D76DYzOstDjBlhPx2p5FkO6OXW 7CPAQQ62gpym30uq8sxndMXkBKNfatJqDdQcsgiVwUEbqpB1lrmsZS7pL+erSHBi 4cV6vIz7CCEjTRUZuZa6nqH12wZVC89C4Xy1TrgulrRLoSTNVFlAron4p18ZSQ+e rZqj+LxBnwlDH/e631pKNH/8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOjLdgt m910/aDeeUEtFvRyiJ7vMB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ5LjN9eFRh1dqVKRzjNJvw+02poAu+Q/haW9zEZFtSjNIbqeTHGxj E2gJT/i5+63TIlLh/YeYet5ICXZgeqRX0fEqtrB1UqnOKak/qkM058OxJxkD1n2y x+VDRwtSijlSxMbtfd9nXsCrqp1FNTO4bGlzLTNZTXOM9b7wdCYjrjV27SerCo2Z JxL9UebvVPrGtTkBjJnUImeztXJ8c1bMhAt64b9p2jvKjsPldjhX0f6Jz0vfrznG JnPj/eFn/6jvLL63YYjTzxGCw0RZZgxm/7yEgNqtdyupcZSSTH74mwUx9RNQjqxf fFzWs1fObpXHJqeo5nRVJQqJ81xmq86l -----END CERTIFICATE-----Generated at Fri May 3 05:32:34 2024 by rpki-client on console-ams.rpki-client.org