$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: pRiJLZQaH6U3oe4wBMt44mdGCyLZXBdCTjQzoG7Av04= Subject key identifier: 92:C1:C1:EE:F5:23:1E:56:1B:48:6A:B2:99:3D:16:8B:E8:EF:40:29 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 015D Signing time: Fri 03 May 2024 04:58:39 +0000 Manifest this update: Fri 03 May 2024 04:58:39 +0000 Manifest next update: Fri 10 May 2024 04:58:39 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: jX6qAuSsYDtt5drPvB2cQyU9aCb1YLhsHqVU8lzpyTc=) 2: 14C5F2A62F3C11ED84084082C4F9AE02.roa (hash: cAVCV/9lxvq8XlQTFfTG333mCLEGnHm+MmPxBaNaH3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: May 3 04:58:39 2024 GMT Not After : May 10 04:58:39 2024 GMT Subject: CN=66346eff-a005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:8c:4b:6b:29:0d:8d:ac:99:7a:32:32:36: 8a:d4:fc:d3:17:af:23:e4:fa:83:57:c7:d2:86:aa: 2c:4c:b8:b7:4e:2b:b3:0e:c5:10:4d:ea:94:49:89: 37:7f:03:24:78:ce:fc:0c:dd:e3:92:c7:2d:5b:a3: c6:c5:80:80:c8:31:2e:42:d6:f2:6b:fd:4b:41:e6: 39:de:e2:1a:52:c8:48:7d:da:a5:22:21:9e:b1:6a: a7:84:f9:d8:aa:05:06:7a:a9:6a:af:0b:1c:e6:2f: 7a:5e:a8:a3:03:20:3a:a5:cc:ea:97:99:22:8b:4b: 8b:9a:98:99:29:96:6c:1c:2a:ad:50:02:01:a8:5c: 73:4e:46:3f:9b:91:9d:26:d9:93:67:4c:e9:b8:3f: 47:4b:69:42:8d:0f:25:b0:f0:c4:e6:f3:02:f2:8a: 28:aa:f7:49:b6:5b:6b:8a:6d:45:55:d6:83:27:c3: a9:87:8c:d3:9d:3c:37:1a:77:7f:f0:1b:e7:3c:53: a1:93:cb:91:00:3e:b5:9c:4a:94:f7:83:47:33:c3: 1d:57:5f:11:eb:8b:cc:62:b7:d8:6e:0c:ed:62:ee: f9:af:26:ae:44:b2:61:2d:39:09:b4:9f:b9:af:0f: 0c:28:07:b6:85:8d:de:f5:84:a6:26:64:e5:d3:1f: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C1:C1:EE:F5:23:1E:56:1B:48:6A:B2:99:3D:16:8B:E8:EF:40:29 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:56:02:81:b0:2c:45:dd:34:19:c3:e9:b8:ff:53:95:db:f9: 80:f0:22:62:db:d1:b7:fa:72:76:68:d1:b2:58:01:a0:ea:ca: 8d:5f:0d:1f:b3:1a:d8:fa:d4:95:55:d4:81:00:70:12:be:26: 00:68:68:e7:ce:0f:07:d4:d6:2c:3c:4f:27:5c:59:e3:e6:82: 8f:69:61:d1:9e:20:e9:29:27:ae:d2:27:46:66:85:dd:fe:25: 92:11:80:95:72:a3:54:0e:0b:ce:d4:f9:aa:d0:4a:2d:1b:44: 9f:7e:da:0e:f4:c0:46:46:21:26:48:e3:3b:50:6a:25:d8:3e: e1:55:85:78:88:bf:4f:0f:df:5d:0b:af:3f:01:74:5d:da:f1: 11:c7:47:72:cb:9c:cb:b3:2a:46:5f:82:16:d5:3b:c5:64:ee: 73:dc:f0:86:2f:6e:82:71:eb:2d:e9:a4:82:53:d6:14:4e:2b: c5:b0:3d:b7:f1:5a:72:3f:71:a0:ab:21:8d:6e:55:00:f6:83: 28:01:19:cf:6e:88:5a:b9:88:a7:1b:9b:f6:09:e6:ee:ac:c7: 68:7b:ba:86:a2:bb:82:5e:79:1a:48:95:3b:a6:0a:4e:dc:2d: 44:e2:c8:e2:c9:45:18:1a:88:9e:d0:04:3f:e3:15:05:35:bc: ed:53:d6:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjQwNTAzMDQ1ODM5WhcNMjQwNTEwMDQ1ODM5WjAYMRYwFAYD VQQDEw02NjM0NmVmZi1hMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskGMS2spDY2smXoyMjaK1PzTF68j5PqDV8fShqosTLi3TiuzDsUQTeqUSYk3 fwMkeM78DN3jksctW6PGxYCAyDEuQtbya/1LQeY53uIaUshIfdqlIiGesWqnhPnY qgUGeqlqrwsc5i96XqijAyA6pczql5kii0uLmpiZKZZsHCqtUAIBqFxzTkY/m5Gd JtmTZ0zpuD9HS2lCjQ8lsPDE5vMC8oooqvdJtltrim1FVdaDJ8Oph4zTnTw3Gnd/ 8BvnPFOhk8uRAD61nEqU94NHM8MdV18R64vMYrfYbgztYu75ryauRLJhLTkJtJ+5 rw8MKAe2hY3e9YSmJmTl0x+s6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLBwe71 Ix5WG0hqspk9Fovo70ApMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVgKBsCxF3TQZw+m4/1OV2/mA8CJi29G3+nJ2aNGyWAGg6sqNXw0f sxrY+tSVVdSBAHASviYAaGjnzg8H1NYsPE8nXFnj5oKPaWHRniDpKSeu0idGZoXd /iWSEYCVcqNUDgvO1Pmq0EotG0SfftoO9MBGRiEmSOM7UGol2D7hVYV4iL9PD99d C68/AXRd2vERx0dyy5zLsypGX4IW1TvFZO5z3PCGL26Ccest6aSCU9YUTivFsD23 8VpyP3GgqyGNblUA9oMoARnPbohauYinG5v2CeburMdoe7qGoruCXnkaSJU7pgpO 3C1E4sjiyUUYGoie0AQ/4xUFNbztU9ZW -----END CERTIFICATE-----Generated at Fri May 3 06:28:41 2024 by rpki-client on console-fra.rpki-client.org