$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft File: RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json) Hash identifier: ZUj9qqMvx8ayopL4ETmsHagXKzD8sA/lx3pSaHG/4hE= Subject key identifier: B3:0C:69:32:91:CE:9B:CE:40:CC:A8:F6:F9:1E:DF:CC:A4:6C:0A:2F Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE Certificate issuer: /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft Manifest number: 9F Signing time: Wed 15 May 2024 06:51:41 +0000 Manifest this update: Wed 15 May 2024 06:51:40 +0000 Manifest next update: Wed 22 May 2024 06:51:40 +0000 Files and hashes: 1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: ZfkePksKdgvhTMlH8qtV/Xg7dRZiYFHoHS5SsegRuEM=) 2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: 9Xhq5syXnhM7rA7mq85gbiRpbgozkv4RbS/EX7KACYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE Validity Not Before: May 15 06:51:40 2024 GMT Not After : May 22 06:51:40 2024 GMT Subject: CN=66445b7d-9a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:b7:20:2d:a9:1e:9d:4b:b0:ad:03:2d:a8: 94:d2:ca:20:ee:01:31:44:75:c5:ec:45:ca:26:6b: c3:53:1b:d5:b9:b6:e9:9b:3c:87:b7:21:91:22:de: e2:fc:69:6c:1d:cb:db:20:84:63:5e:f1:aa:5f:0f: 1d:c4:b8:e2:43:d8:4e:4b:19:f5:19:82:70:c9:57: 8e:13:a5:57:4c:e2:e2:2a:26:39:4e:e8:ca:af:ef: 6d:4c:1f:e0:9a:c9:26:d0:88:9c:8a:51:60:5e:01: b0:06:a8:76:e8:93:ec:d1:5f:6b:34:38:13:5e:07: 82:c6:57:1b:be:61:da:38:78:fe:1d:3a:6d:cd:85: 84:a4:31:ea:67:a1:b0:6b:c2:18:43:da:b8:80:98: de:ff:3a:10:0d:ee:8c:cc:7e:73:a1:7c:cf:37:40: 06:4b:ab:b1:7d:7a:7d:5a:f3:7c:23:c6:ae:2c:20: 2d:76:c1:a8:45:e3:58:d0:b7:03:13:4c:6d:a9:5b: 8e:d4:27:68:10:7b:94:15:e2:6f:83:d5:16:64:ab: 9f:fa:00:05:79:f9:ca:c9:4c:c0:50:96:09:60:fe: 20:ad:ab:f0:5a:35:1b:02:04:ce:40:84:77:28:a2: 09:1e:01:21:ad:23:08:bc:85:98:48:72:56:fb:f8: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:69:32:91:CE:9B:CE:40:CC:A8:F6:F9:1E:DF:CC:A4:6C:0A:2F X509v3 Authority Key Identifier: keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e6:16:ab:7f:4e:f3:ca:b4:36:17:e7:ac:ee:dd:b9:b6:bb: 8b:83:80:ec:35:ee:77:1e:6f:9f:ab:c6:77:3a:16:65:6d:3a: a8:c1:cf:60:0b:de:f0:e4:81:fe:8e:89:b4:ee:d8:58:62:66: a6:e7:24:39:2f:16:01:5d:45:4f:b6:85:38:d4:70:bc:d1:09: b7:4e:6e:8c:0b:1b:04:df:a4:56:0d:0f:78:b4:b3:6d:73:c7: c9:82:ba:51:23:e6:74:f2:7b:2d:57:6e:05:25:1a:09:41:47: 21:a7:ca:a7:e0:d8:25:98:38:35:6d:cf:3d:e0:ce:c9:64:bb: 1b:ec:56:26:f3:22:c4:bd:b4:79:f0:f7:e7:5a:2a:24:ca:74: d1:f2:e2:65:eb:54:09:e4:d2:86:b6:c7:da:73:99:2e:65:24: 27:f3:57:1a:ef:57:2a:8a:f0:ec:7d:d9:95:1f:61:b4:73:66: 4b:e5:b0:3d:09:85:1f:a5:89:94:e9:2a:bc:68:cb:7e:a5:e9: c3:39:61:e6:8b:3d:7f:87:2f:ec:00:d4:a7:07:54:5a:aa:76: 8d:b4:f9:7e:79:01:24:fd:d8:7c:e0:0d:8d:17:7e:83:17:a1: 14:1b:52:9b:ec:ba:10:9d:e5:0c:a5:81:37:9e:f6:4e:f8:63: 49:54:ae:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE MjY2M0Q2QUUwHhcNMjQwNTE1MDY1MTQwWhcNMjQwNTIyMDY1MTQwWjAYMRYwFAYD VQQDEw02NjQ0NWI3ZC05YTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDO3IC2pHp1LsK0DLaiU0sog7gExRHXF7EXKJmvDUxvVubbpmzyHtyGRIt7i /GlsHcvbIIRjXvGqXw8dxLjiQ9hOSxn1GYJwyVeOE6VXTOLiKiY5TujKr+9tTB/g mskm0IicilFgXgGwBqh26JPs0V9rNDgTXgeCxlcbvmHaOHj+HTptzYWEpDHqZ6Gw a8IYQ9q4gJje/zoQDe6MzH5zoXzPN0AGS6uxfXp9WvN8I8auLCAtdsGoReNY0LcD E0xtqVuO1CdoEHuUFeJvg9UWZKuf+gAFefnKyUzAUJYJYP4gravwWjUbAgTOQIR3 KKIJHgEhrSMIvIWYSHJW+/h1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMMaTKR zpvOQMyo9vke38ykbAovMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjAwNC8yMDFGNjg2MDFFRjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNH NDUzcUNQNlZCRXpTWmoxcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5harf07zyrQ2F+es7t25truLg4DsNe53Hm+fq8Z3OhZlbTqowc9g C97w5IH+jom07thYYmam5yQ5LxYBXUVPtoU41HC80Qm3Tm6MCxsE36RWDQ94tLNt c8fJgrpRI+Z08nstV24FJRoJQUchp8qn4NglmDg1bc894M7JZLsb7FYm8yLEvbR5 8PfnWiokynTR8uJl61QJ5NKGtsfac5kuZSQn81ca71cqivDsfdmVH2G0c2ZL5bA9 CYUfpYmU6Sq8aMt+penDOWHmiz1/hy/sANSnB1RaqnaNtPl+eQEk/dh84A2NF36D F6EUG1Kb7LoQneUMpYE3nvZO+GNJVK7G -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org