$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft File: 10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json) Hash identifier: kMO8q7J/Aciuy/zQhBRkbSosaZCsJVShkSD2WWIeRD8= Subject key identifier: 64:2E:C5:21:64:46:A4:2E:AB:3E:52:F5:BD:72:F5:7F:25:12:C2:4C Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C Certificate issuer: /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft Manifest number: 32 Signing time: Wed 15 May 2024 08:38:27 +0000 Manifest this update: Wed 15 May 2024 08:38:26 +0000 Manifest next update: Wed 22 May 2024 08:38:26 +0000 Files and hashes: 1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: KrLWxEJOE1gC/X2/GUz3DZcmkAV8Apeo6agVs6IU7E4=) 2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: wWpGWXc0da4NayJh8tXlJgOGWzmykFbxwGJAc8cXKN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C Validity Not Before: May 15 08:38:26 2024 GMT Not After : May 22 08:38:26 2024 GMT Subject: CN=66447482-fe1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:77:56:2c:3c:cf:bc:79:d1:22:e1:03:32: 7b:82:e2:9f:c6:8e:06:74:03:29:6d:b6:5b:02:dd: e2:1c:55:88:58:f1:d9:bc:cb:6e:4c:fc:23:90:40: a6:02:f1:c3:7b:b8:8e:8f:1b:13:32:c0:1b:24:a4: 64:da:78:72:37:04:e6:cb:40:81:ee:75:94:04:58: a7:56:36:d1:ba:f7:d6:79:d5:60:46:df:34:6b:e5: 23:3b:11:fd:ea:be:57:51:ca:77:30:21:2c:14:b0: 04:27:ed:ef:c4:eb:a4:55:b8:44:9c:98:b4:ab:8d: a5:d0:a4:81:86:cf:62:b1:42:07:d2:7f:a6:05:76: ea:c3:91:c5:b2:e8:bb:54:57:b1:52:f2:00:44:2e: e8:9b:08:63:53:4c:29:8c:1c:81:41:63:68:3b:5e: 4e:4a:e3:03:bc:34:0c:33:eb:63:0a:1c:71:b3:07: 0f:dd:bb:10:07:be:82:31:c8:98:f6:ea:e1:ab:f7: a2:49:92:1a:38:f0:f0:a6:e2:c7:75:fc:d1:54:05: f2:ea:46:e6:9f:66:2b:2c:17:02:25:da:c2:16:2b: 21:08:89:83:c0:78:8d:9a:15:ba:8b:36:30:41:83: 0c:f6:38:a2:4c:c7:d9:51:53:fd:9f:bb:ef:5b:46: c3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:C5:21:64:46:A4:2E:AB:3E:52:F5:BD:72:F5:7F:25:12:C2:4C X509v3 Authority Key Identifier: keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:62:9c:f0:80:05:c5:a9:fa:f3:15:ca:9c:0b:72:4f:90:da: 79:83:13:30:16:95:4c:c4:03:34:ed:ad:8e:4d:c0:63:05:eb: 09:7b:2f:4a:f9:b9:a2:fb:6a:f5:df:96:66:b9:37:71:13:a9: 10:e4:55:5d:45:57:07:9b:32:73:e1:26:24:fe:98:42:e0:3c: 70:b7:fd:ee:ab:ed:7e:14:bd:d4:50:e4:03:b0:cd:01:a7:cb: b6:ec:a7:90:da:0d:2b:79:4a:0b:e8:44:97:73:fa:9a:67:c7: d0:a3:22:a7:c5:8d:2c:67:fb:cd:49:02:37:25:3c:28:f8:24: 88:d6:d0:9b:d3:8a:03:64:3b:a6:73:24:16:a2:4f:9a:71:68: 3e:96:ed:ce:c0:4c:19:32:17:0e:91:26:de:14:91:c9:c5:6e: 6d:c4:c2:db:cc:a9:1f:7b:38:71:80:a3:0a:17:e9:a4:5e:6b: da:6d:fa:af:b5:0b:55:b8:73:24:6c:21:58:1c:61:7b:29:23: 94:40:d6:a8:8e:ad:2d:e7:16:0f:f2:24:9f:20:7c:56:27:64: f2:31:25:c7:2a:23:a3:6d:df:9d:a7:c1:c5:ce:8d:20:37:1c: 57:4a:10:d1:09:35:a1:84:3a:8f:0b:d5:4d:39:74:df:86:6c: 21:0c:8c:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUJBRjExMC8GA1UEBRMoRDc0NzQwMTE0Q0JBRjRGNTk5QUE3RTVEQzM0MTJFMTIy RkE4NzE0QzAeFw0yNDA1MTUwODM4MjZaFw0yNDA1MjIwODM4MjZaMBgxFjAUBgNV BAMTDTY2NDQ3NDgyLWZlMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYGndWLDzPvHnRIuEDMnuC4p/GjgZ0AylttlsC3eIcVYhY8dm8y25M/COQQKYC 8cN7uI6PGxMywBskpGTaeHI3BObLQIHudZQEWKdWNtG699Z51WBG3zRr5SM7Ef3q vldRyncwISwUsAQn7e/E66RVuEScmLSrjaXQpIGGz2KxQgfSf6YFdurDkcWy6LtU V7FS8gBELuibCGNTTCmMHIFBY2g7Xk5K4wO8NAwz62MKHHGzBw/duxAHvoIxyJj2 6uGr96JJkho48PCm4sd1/NFUBfLqRuafZissFwIl2sIWKyEIiYPAeI2aFbqLNjBB gwz2OKJMx9lRU/2fu+9bRsNBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZC7FIWRG pC6rPlL1vXL1fyUSwkwwHwYDVR0jBBgwFoAU10dAEUy69PWZqn5dw0EuEi+ocUww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QkFGL0NERjNEQTE2RDIy QjExRUU5OEFDREI0M0M0RjlBRTAyLzEwZEFFVXk2OVBXWnFuNWR3MEV1RWktb2NV dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTBkQUVVeTY5UFdacW41ZHcwRXVFaS1vY1V3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QkFGL0NERjNEQTE2RDIyQjExRUU5OEFDREI0M0M0RjlBRTAyLzEwZEFFVXk2OVBX WnFuNWR3MEV1RWktb2NVdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpinPCABcWp+vMVypwLck+Q2nmDEzAWlUzEAzTtrY5NwGMF6wl7L0r5 uaL7avXflma5N3ETqRDkVV1FVwebMnPhJiT+mELgPHC3/e6r7X4UvdRQ5AOwzQGn y7bsp5DaDSt5SgvoRJdz+ppnx9CjIqfFjSxn+81JAjclPCj4JIjW0JvTigNkO6Zz JBaiT5pxaD6W7c7ATBkyFw6RJt4UkcnFbm3EwtvMqR97OHGAowoX6aRea9pt+q+1 C1W4cyRsIVgcYXspI5RA1qiOrS3nFg/yJJ8gfFYnZPIxJccqI6Nt352nwcXOjSA3 HFdKENEJNaGEOo8L1U05dN+GbCEMjGg= -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org