$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft File: sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json) Hash identifier: LOcYZh1lcfpDcMXQelcaHzToczF1dEyS4u6hLx+M3eQ= Subject key identifier: 51:87:1E:03:AD:80:46:B4:ED:56:3D:C1:3A:8F:E8:B0:FC:42:E1:CC Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft Manifest number: 0A3B Signing time: Thu 02 May 2024 20:38:14 +0000 Manifest this update: Thu 02 May 2024 20:38:13 +0000 Manifest next update: Thu 09 May 2024 20:38:13 +0000 Files and hashes: 1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: hRpb+jtsLil2o0htRibaV8wdV/fKqiiNoql1jdspWQI=) 2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: LgSw+SYKve1837xCz4iHwQzI8x6segQ79vdF2sZ6C7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Validity Not Before: May 2 20:38:13 2024 GMT Not After : May 9 20:38:13 2024 GMT Subject: CN=6633f9b5-a980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:e0:21:28:89:6b:e4:00:c2:e4:7d:2e:3f: bf:e0:3d:c7:54:32:f4:0f:d3:f9:e3:10:75:2b:c0: 5f:83:03:e2:0d:07:ba:e4:2e:2e:3f:79:03:57:af: da:c1:53:5a:e4:b2:fc:9d:28:ef:75:ef:79:68:5f: d0:83:d8:0b:14:6e:84:89:d0:eb:0e:fd:57:5e:53: 03:5f:97:6f:de:dd:ca:53:de:e1:0d:05:a4:53:ee: 61:c7:44:cb:dd:3d:0a:72:c0:1a:fb:8f:56:a2:13: c1:c4:03:26:9a:77:8e:10:7a:e9:56:3a:7d:bd:18: c4:84:98:0f:03:a9:1a:dd:a2:32:43:d1:8b:46:4b: c4:78:2b:3e:18:ea:82:6a:50:ff:67:05:e3:61:da: 61:13:5a:e8:f9:fe:3c:ca:e8:dc:a9:0d:71:6b:ba: ce:24:cf:fe:96:19:ab:ec:18:1d:9b:64:b6:11:ba: f5:3e:3a:53:da:ce:08:40:20:7e:39:e6:79:c1:31: 9c:be:6e:16:7b:83:80:b6:47:07:9c:49:09:af:63: 1d:e6:81:69:12:1d:80:4f:81:14:39:24:6f:02:32: 8b:d6:38:42:d5:ec:60:e9:c7:d2:f6:79:5d:80:8f: c8:ac:9e:a5:ab:58:7b:e6:d6:b6:86:ae:76:14:ad: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:87:1E:03:AD:80:46:B4:ED:56:3D:C1:3A:8F:E8:B0:FC:42:E1:CC X509v3 Authority Key Identifier: keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:31:f5:05:64:3d:cf:de:7b:29:97:c7:14:93:f5:0e:12: d3:6f:bd:11:7d:44:46:6d:18:27:f9:0e:fd:66:a6:e8:37:23: da:86:76:26:f3:29:dc:39:da:f5:b6:a0:79:a2:cf:54:4c:9a: ec:20:a0:9e:c2:64:dc:43:a8:4c:e9:64:a9:fd:89:bc:85:37: 94:d0:a9:80:96:07:c5:72:dd:d9:98:e4:b7:e8:ab:07:df:87: b7:25:bb:81:d5:33:75:66:e8:f8:af:c6:a3:c5:f4:a5:ce:8f: ac:6f:a4:54:42:a1:51:1c:59:f6:72:33:6f:55:29:65:29:aa: 1a:0c:9a:02:5c:dc:fd:82:a2:d5:f3:2e:fc:65:a5:a9:28:9c: 7e:11:52:1c:16:92:b2:ca:b1:0e:05:0c:92:35:5e:fe:75:74: 0c:8e:dd:b7:36:5d:1e:3b:23:51:e4:6c:48:98:31:12:a4:68: 74:7c:69:55:80:6e:59:50:7a:52:be:cb:16:fb:b3:06:bb:3f: d8:fd:c1:44:8f:20:0e:20:26:33:71:0b:c1:01:d3:cc:cc:31: d3:b3:7a:94:68:ab:fd:e8:30:61:aa:42:d4:3a:aa:1d:e4:af: 80:03:26:06:a6:42:72:6a:9e:e7:5a:b1:f9:5c:0a:57:38:17: fa:93:6b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1 NTEwNENFOTMwHhcNMjQwNTAyMjAzODEzWhcNMjQwNTA5MjAzODEzWjAYMRYwFAYD VQQDEw02NjMzZjliNS1hOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZrgISiJa+QAwuR9Lj+/4D3HVDL0D9P54xB1K8BfgwPiDQe65C4uP3kDV6/a wVNa5LL8nSjvde95aF/Qg9gLFG6EidDrDv1XXlMDX5dv3t3KU97hDQWkU+5hx0TL 3T0KcsAa+49WohPBxAMmmneOEHrpVjp9vRjEhJgPA6ka3aIyQ9GLRkvEeCs+GOqC alD/ZwXjYdphE1ro+f48yujcqQ1xa7rOJM/+lhmr7Bgdm2S2Ebr1PjpT2s4IQCB+ OeZ5wTGcvm4We4OAtkcHnEkJr2Md5oFpEh2AT4EUOSRvAjKL1jhC1exg6cfS9nld gI/IrJ6lq1h75ta2hq52FK1v3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGHHgOt gEa07VY9wTqP6LD8QuHMMB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1 OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI1OS9ENEYyNzU4MjQ1OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnps eUI2M0p0UmtES2xWRUV6cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0zTH1BWQ9z957KZfHFJP1DhLTb70RfURGbRgn+Q79ZqboNyPahnYm 8yncOdr1tqB5os9UTJrsIKCewmTcQ6hM6WSp/Ym8hTeU0KmAlgfFct3ZmOS36KsH 34e3JbuB1TN1Zuj4r8ajxfSlzo+sb6RUQqFRHFn2cjNvVSllKaoaDJoCXNz9gqLV 8y78ZaWpKJx+EVIcFpKyyrEOBQySNV7+dXQMjt23Nl0eOyNR5GxImDESpGh0fGlV gG5ZUHpSvssW+7MGuz/Y/cFEjyAOICYzcQvBAdPMzDHTs3qUaKv96DBhqkLUOqod 5K+AAyYGpkJyap7nWrH5XApXOBf6k2u1 -----END CERTIFICATE-----Generated at Thu May 2 22:13:19 2024 by rpki-client on console-fra.rpki-client.org