$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json) Hash identifier: C7dOuJLI1hkNiCs+kNg4ntHcmsMVoeKBFjhTc6FKHz4= Subject key identifier: C2:AE:15:58:62:F1:99:07:22:D3:0D:B4:98:25:9A:2A:5C:46:16:76 Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Certificate serial: 056D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft Manifest number: 0568 Signing time: Fri 03 May 2024 01:13:46 +0000 Manifest this update: Fri 03 May 2024 01:13:45 +0000 Manifest next update: Fri 10 May 2024 01:13:45 +0000 Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: SBa2gzRcbIP3t2It5PiRNVdRKQj/eGiQy6UnZXGMZ/I=) 2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: gli6G9isd7214k/XwPb4QWIehT/cx5I/c38k571CPVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Validity Not Before: May 3 01:13:45 2024 GMT Not After : May 10 01:13:45 2024 GMT Subject: CN=66343a4a-9f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:a4:6a:62:0e:46:4e:48:d6:e5:49:2d:b6: f5:af:ef:7b:16:92:41:1b:66:3d:aa:3e:d1:69:1c: 60:79:34:c0:5a:d2:00:ee:05:28:5a:dd:35:fc:d0: b8:96:34:8a:75:b4:1d:38:1b:65:7f:25:e3:e8:c7: b1:34:28:9d:dd:0a:2f:51:c3:e1:52:38:a9:32:9a: 9d:7b:25:01:bc:8a:d0:98:60:08:61:e7:ae:42:05: 00:d6:23:c5:ac:90:a9:d6:87:a4:95:85:73:81:7d: 2f:c2:c7:8d:b6:15:5d:fd:df:d4:58:2f:7f:b2:77: 12:6d:bd:c8:84:fc:22:8a:f7:86:8f:4b:ee:e3:56: a8:c3:09:65:c1:b5:60:06:8f:7f:53:05:2c:08:ec: dd:94:47:f6:65:c8:98:22:f9:ee:1c:2e:65:e3:c6: 64:1d:91:d7:81:4e:60:0b:82:9b:af:af:1b:45:33: 05:bc:22:2e:de:fe:dc:f4:00:1f:bc:e3:6e:0a:dc: d7:03:44:f0:ec:5a:40:db:07:84:42:f9:4c:67:d9: 1d:73:d9:d7:c5:7d:72:24:c3:3b:df:77:33:17:c5: 4b:f5:24:a4:52:ab:b0:85:02:50:09:2f:c7:6d:c3: 71:39:7b:24:a2:d1:92:a8:4b:38:2e:69:00:a7:c0: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AE:15:58:62:F1:99:07:22:D3:0D:B4:98:25:9A:2A:5C:46:16:76 X509v3 Authority Key Identifier: keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:ad:14:fb:f6:ff:13:04:4d:1a:bf:43:e3:17:73:04:8c: 5a:d1:6b:3d:36:75:9b:7c:3a:b9:48:d4:62:60:59:fa:18:98: 55:b0:fb:bb:d9:ee:c3:4f:ce:2b:39:73:d6:e6:60:74:7a:35: d1:97:f8:1b:ed:24:db:36:a3:a3:00:a8:ad:41:b6:fe:f8:5a: 24:96:c5:9d:69:55:f0:2d:b7:5b:73:8f:8c:fe:08:1d:ec:b0: a3:5a:c2:67:3b:ac:7e:98:57:7d:19:8e:43:fa:e2:39:d1:64: b8:91:f0:9a:10:dd:af:4e:c6:53:38:e7:a3:44:73:cf:77:ab: c5:e0:33:77:b2:da:f1:a8:c2:ee:5a:1e:95:45:b6:2f:88:c8: 22:03:3e:17:75:a5:6d:6a:b6:83:69:a6:10:5c:fb:21:89:89: be:22:b1:cf:4c:14:5f:68:b6:87:bf:a2:7d:3a:ed:37:e7:f6: 2d:57:8d:cf:3d:d1:9b:2b:e9:55:c4:ed:72:de:58:ba:ca:26: 9c:51:76:2a:3e:4d:94:44:4c:ad:16:c5:a2:21:37:b1:29:e2: 13:f6:be:1b:13:3d:96:8f:1d:d7:9a:9b:99:f1:d9:65:de:fe: 7e:6c:87:62:9e:84:ae:95:51:ab:19:47:89:e6:a5:20:56:4a: 65:31:80:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF MDkxM0M3RjYwHhcNMjQwNTAzMDExMzQ1WhcNMjQwNTEwMDExMzQ1WjAYMRYwFAYD VQQDEw02NjM0M2E0YS05ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupqkamIORk5I1uVJLbb1r+97FpJBG2Y9qj7RaRxgeTTAWtIA7gUoWt01/NC4 ljSKdbQdOBtlfyXj6MexNCid3QovUcPhUjipMpqdeyUBvIrQmGAIYeeuQgUA1iPF rJCp1oeklYVzgX0vwseNthVd/d/UWC9/sncSbb3IhPwiiveGj0vu41aowwllwbVg Bo9/UwUsCOzdlEf2ZciYIvnuHC5l48ZkHZHXgU5gC4Kbr68bRTMFvCIu3v7c9AAf vONuCtzXA0Tw7FpA2weEQvlMZ9kdc9nXxX1yJMM733czF8VL9SSkUquwhQJQCS/H bcNxOXskotGSqEs4LmkAp8BUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKuFVhi 8ZkHItMNtJglmipcRhZ2MB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2 NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODU4MC8zOUY5NjZGODk2NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZ U0ZtYVo5ZnlLVmJna1R4X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/60U+/b/EwRNGr9D4xdzBIxa0Ws9NnWbfDq5SNRiYFn6GJhVsPu7 2e7DT84rOXPW5mB0ejXRl/gb7STbNqOjAKitQbb++FoklsWdaVXwLbdbc4+M/ggd 7LCjWsJnO6x+mFd9GY5D+uI50WS4kfCaEN2vTsZTOOejRHPPd6vF4DN3strxqMLu Wh6VRbYviMgiAz4XdaVtaraDaaYQXPshiYm+IrHPTBRfaLaHv6J9Ou035/YtV43P PdGbK+lVxO1y3li6yiacUXYqPk2UREytFsWiITexKeIT9r4bEz2Wjx3XmpuZ8dll 3v5+bIdinoSulVGrGUeJ5qUgVkplMYCY -----END CERTIFICATE-----Generated at Fri May 3 04:45:17 2024 by rpki-client on console-fra.rpki-client.org