$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: 7+CNqmKZ/vGY4iGLEASWC6yiipM0c0iCaTLedXAAXFA= Subject key identifier: 15:5B:45:7E:2E:89:54:C1:26:A9:99:43:25:10:53:EC:3E:A1:D0:9C Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 0206 Signing time: Sun 05 May 2024 04:18:52 +0000 Manifest this update: Sun 05 May 2024 04:18:52 +0000 Manifest next update: Sun 12 May 2024 04:18:51 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: 83brPPM2SHSOl3+wuMVFPfPPe+ylK1H4OIx2jwphuR8=) 2: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: 34rrQYul/a6yRoBhv7DIclOFH5GWbWZA8OkkSfiD2ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: May 5 04:18:52 2024 GMT Not After : May 12 04:18:51 2024 GMT Subject: CN=663708ac-83a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:2d:70:a5:0e:d9:90:f6:c4:db:a6:99:ec: 6c:9d:93:55:2c:a5:bb:b6:f5:49:5d:49:e5:7e:27: 61:dc:68:b2:8e:a4:77:eb:33:e7:81:cd:e7:db:97: 04:96:d6:0c:a0:f9:6a:30:31:4a:e5:f7:0f:3f:b0: 8a:dd:6d:18:b0:93:60:b2:a0:98:2a:c6:d2:1f:dd: 2e:00:b5:59:a5:3f:3a:f0:9a:73:32:cb:5d:c9:a0: 79:1c:ba:7a:bd:31:78:22:74:c2:23:b7:e0:10:f2: 94:76:4c:74:8b:61:7d:4d:5e:bb:b9:cc:0d:d2:89: 06:8d:82:f4:16:0c:0e:c5:c0:df:59:81:2d:18:df: 4f:06:be:1a:b1:6e:57:13:70:8a:c6:00:d6:59:b5: 2f:de:5f:63:e3:f2:c4:80:27:37:dd:72:8c:b7:3c: d1:51:3e:71:87:cd:ac:bd:92:49:6c:83:cb:d7:d4: 32:97:28:88:a7:53:7e:d8:03:e6:2f:26:e0:65:37: 1c:61:c5:92:95:f6:cf:91:82:78:22:e9:85:43:e6: d1:46:53:75:26:df:31:93:72:cf:c0:05:88:4e:71: d5:4a:08:b6:37:c0:68:bd:5f:01:ac:10:5c:cc:72: 24:d3:9b:50:f2:51:7e:0d:9c:aa:bd:59:60:30:03: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:45:7E:2E:89:54:C1:26:A9:99:43:25:10:53:EC:3E:A1:D0:9C X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:59:15:8d:a7:1e:e6:0d:de:fd:14:13:8a:5d:bf:80:33:0a: c8:2c:5c:8b:c4:fe:b4:3f:93:17:23:f7:e1:ff:57:50:c6:af: 50:98:cc:38:f9:76:01:47:eb:1c:a0:21:d4:2b:c2:0a:94:8f: 36:5e:48:37:b2:a1:54:9e:96:11:87:73:e3:58:ca:43:43:8e: 52:fc:90:21:cb:9b:46:08:05:af:27:25:70:f4:f0:8a:d3:7d: 68:c1:7a:24:32:e6:6f:47:27:bb:13:20:27:ee:45:80:46:96: a6:c9:ac:61:4b:ac:24:04:62:99:d1:97:4a:70:af:2f:5c:ef: 55:b8:39:f5:8d:97:23:03:8b:dd:80:d1:4e:48:4c:2c:b8:42: 6e:77:58:69:14:f3:7d:3b:43:9a:2d:54:67:0d:11:6a:6d:51: c9:06:bb:0f:53:10:34:aa:6a:0c:b0:1d:83:e6:05:e1:21:28: ff:be:48:c1:ee:c7:27:52:1c:9b:13:92:59:e3:5e:b8:2d:81: 4c:a2:0e:1e:ee:01:14:22:39:57:aa:04:9f:82:a6:23:0b:16: 8b:88:39:12:db:0b:7c:4d:0d:2d:0f:52:f0:8e:96:b1:80:96: 81:92:0d:e4:40:a3:71:65:97:00:aa:a3:50:a0:b2:02:cd:4f: 32:2c:8c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjQwNTA1MDQxODUyWhcNMjQwNTEyMDQxODUxWjAYMRYwFAYD VQQDEw02NjM3MDhhYy04M2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA104tcKUO2ZD2xNummexsnZNVLKW7tvVJXUnlfidh3GiyjqR36zPngc3n25cE ltYMoPlqMDFK5fcPP7CK3W0YsJNgsqCYKsbSH90uALVZpT868JpzMstdyaB5HLp6 vTF4InTCI7fgEPKUdkx0i2F9TV67ucwN0okGjYL0FgwOxcDfWYEtGN9PBr4asW5X E3CKxgDWWbUv3l9j4/LEgCc33XKMtzzRUT5xh82svZJJbIPL19QylyiIp1N+2APm LybgZTccYcWSlfbPkYJ4IumFQ+bRRlN1Jt8xk3LPwAWITnHVSgi2N8BovV8BrBBc zHIk05tQ8lF+DZyqvVlgMAMFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVbRX4u iVTBJqmZQyUQU+w+odCcMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaWRWNpx7mDd79FBOKXb+AMwrILFyLxP60P5MXI/fh/1dQxq9QmMw4 +XYBR+scoCHUK8IKlI82Xkg3sqFUnpYRh3PjWMpDQ45S/JAhy5tGCAWvJyVw9PCK 031owXokMuZvRye7EyAn7kWARpamyaxhS6wkBGKZ0ZdKcK8vXO9VuDn1jZcjA4vd gNFOSEwsuEJud1hpFPN9O0OaLVRnDRFqbVHJBrsPUxA0qmoMsB2D5gXhISj/vkjB 7scnUhybE5JZ4164LYFMog4e7gEUIjlXqgSfgqYjCxaLiDkS2wt8TQ0tD1Lwjpax gJaBkg3kQKNxZZcAqqNQoLICzU8yLIzU -----END CERTIFICATE-----Generated at Sun May 5 05:21:58 2024 by rpki-client on console-fra.rpki-client.org