$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: wj7GjaBdOdxW923Ooc4b3ofM0JpOEi61w3F1K3+naEc= Subject key identifier: F4:AE:B0:DD:1B:0D:A4:23:8A:2D:E6:51:DA:29:AE:D7:87:5E:C4:A2 Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 0438 Signing time: Sun 05 May 2024 02:06:28 +0000 Manifest this update: Sun 05 May 2024 02:06:28 +0000 Manifest next update: Sun 12 May 2024 02:06:28 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: /KghmYEW+uWzv0Hrm6zdx0VryWjvm/Zw+P3f7kIu43M=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: WvamLc11JxyEWIyMqe8opmhgyjLN2Ey6jEMGnX2GRhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: May 5 02:06:28 2024 GMT Not After : May 12 02:06:28 2024 GMT Subject: CN=6636e9a4-ba6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:59:62:7f:62:61:41:74:a0:87:74:01:86: 0a:53:13:fe:36:ac:cd:2c:35:32:e7:9a:5c:66:60: af:b0:7b:9f:98:ea:39:9a:ce:25:9d:a8:03:c8:0d: 19:f9:ef:77:bb:4b:ea:0e:3d:dd:6d:d8:39:67:1f: 25:5d:d7:08:67:d2:c7:a5:bd:e1:6f:06:1e:da:9a: fe:ea:a7:2f:ac:f9:ea:0a:78:dd:66:44:e7:e7:b5: 3e:08:21:ad:22:5a:96:08:6c:50:d7:86:3d:30:92: e6:79:b1:9b:f5:a2:6c:a6:86:9d:c3:5a:86:3a:79: 46:10:fe:99:b6:40:ce:55:05:c8:a0:be:b2:a8:66: 9a:e4:d2:e8:9c:fc:57:10:c1:47:70:03:08:e3:bc: d0:f8:44:08:91:3c:88:73:ef:b7:78:5f:50:b3:01: 6a:09:8e:fc:50:26:d8:70:f4:13:b9:f3:15:11:9a: 8d:9a:b4:bf:56:9c:cb:75:e2:13:45:cd:3e:dc:a2: 4d:31:4b:dd:17:bb:54:d7:b3:a4:32:1f:ae:20:27: 9b:c8:e7:69:0f:a9:5d:8d:49:9f:57:2e:59:00:a9: 83:fa:57:74:21:93:37:ce:24:86:96:88:e4:6b:9b: 94:6f:ce:fe:c4:90:36:c5:bc:73:86:1a:67:df:21: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:B0:DD:1B:0D:A4:23:8A:2D:E6:51:DA:29:AE:D7:87:5E:C4:A2 X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:65:2a:d5:51:b4:f4:73:4e:bf:cb:7c:5a:70:27:40:43:ed: 02:89:d5:2d:03:99:a7:e9:41:6e:c8:fb:7d:84:81:d6:bd:c1: 07:51:d3:7f:06:20:39:69:13:e1:78:ab:c9:b0:b9:b7:ab:5a: 0d:25:8f:80:d1:46:e4:44:59:74:bc:ed:4f:f0:a6:3e:5c:92: 67:ba:fb:52:40:ce:ed:ac:56:cf:ca:b8:88:6e:bb:c9:53:42: d9:b7:68:19:5b:da:0b:e7:7a:10:83:5f:b9:97:96:ba:ba:19: f9:fb:6f:c2:3d:80:00:21:85:29:56:4e:d6:a5:d4:ea:b8:74: 7e:2b:7c:a7:55:ce:f1:4c:5b:31:04:50:1c:60:3c:c2:bf:82: 2a:e5:23:dc:68:dd:24:1d:78:75:7d:e3:ad:ce:d3:18:eb:0a: 22:69:6b:ad:7b:da:dd:5a:24:d2:fa:69:8c:6c:e1:ff:28:4d: f8:47:19:47:c3:ed:b3:cb:ca:75:f1:40:81:c9:39:07:09:43: 52:8e:25:f6:85:5c:32:10:67:a7:00:38:9e:97:17:37:20:ed: 21:d7:3d:a9:2b:9f:e3:d6:eb:6d:91:d8:13:3e:39:6a:10:21: 71:62:9b:03:e5:e2:2d:4e:dc:5e:57:81:87:65:35:e0:c1:2c: 74:d0:a6:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjQwNTA1MDIwNjI4WhcNMjQwNTEyMDIwNjI4WjAYMRYwFAYD VQQDEw02NjM2ZTlhNC1iYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQhZYn9iYUF0oId0AYYKUxP+NqzNLDUy55pcZmCvsHufmOo5ms4lnagDyA0Z +e93u0vqDj3dbdg5Zx8lXdcIZ9LHpb3hbwYe2pr+6qcvrPnqCnjdZkTn57U+CCGt IlqWCGxQ14Y9MJLmebGb9aJspoadw1qGOnlGEP6ZtkDOVQXIoL6yqGaa5NLonPxX EMFHcAMI47zQ+EQIkTyIc++3eF9QswFqCY78UCbYcPQTufMVEZqNmrS/VpzLdeIT Rc0+3KJNMUvdF7tU17OkMh+uICebyOdpD6ldjUmfVy5ZAKmD+ld0IZM3ziSGlojk a5uUb87+xJA2xbxzhhpn3yEKIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSusN0b DaQjii3mUdoprteHXsSiMB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ZSrVUbT0c06/y3xacCdAQ+0CidUtA5mn6UFuyPt9hIHWvcEHUdN/ BiA5aRPheKvJsLm3q1oNJY+A0UbkRFl0vO1P8KY+XJJnuvtSQM7trFbPyriIbrvJ U0LZt2gZW9oL53oQg1+5l5a6uhn5+2/CPYAAIYUpVk7WpdTquHR+K3ynVc7xTFsx BFAcYDzCv4Iq5SPcaN0kHXh1feOtztMY6woiaWute9rdWiTS+mmMbOH/KE34RxlH w+2zy8p18UCByTkHCUNSjiX2hVwyEGenADielxc3IO0h1z2pK5/j1uttkdgTPjlq ECFxYpsD5eItTtxeV4GHZTXgwSx00KaO -----END CERTIFICATE-----Generated at Sun May 5 03:09:55 2024 by rpki-client on console-ams.rpki-client.org