$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: y1+ShPZOUaUWxnXT8lNts3rLtsDI4x2BI+qD99R1Cw0= Subject key identifier: 6F:A8:AB:5B:E9:C8:85:2B:0B:EA:F3:F6:B2:E3:7D:16:5E:8C:B9:F3 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 44 Signing time: Wed 15 May 2024 08:09:43 +0000 Manifest this update: Wed 15 May 2024 08:09:43 +0000 Manifest next update: Wed 22 May 2024 08:09:43 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: ARQeEcCa+rBKBt8HA1Cv5qhrPX/uX15YNKSkBotRZHs=) 2: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: P/J87XG2tUJ42Y/89cbaFjR+kvi3mKnv0hb1x1rqHAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: May 15 08:09:43 2024 GMT Not After : May 22 08:09:43 2024 GMT Subject: CN=66446dc7-ed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:bc:78:b4:c5:5c:8a:61:27:6c:52:9b:42: 8e:63:a9:b1:ba:c7:d5:c4:47:1f:1e:fd:62:57:15: 7e:87:46:e7:56:75:97:ca:03:9a:cb:6f:5b:21:9b: ab:6d:cf:f9:ec:12:82:50:cf:01:a7:80:5a:d2:bc: e6:54:4f:8b:93:37:dc:b5:11:bd:79:1a:ed:d2:37: 7f:b6:a1:d7:9b:67:3a:c0:52:01:a6:89:03:55:72: 82:99:fe:97:28:e9:ba:0e:88:a6:36:1b:95:b5:00: 00:71:98:92:02:df:c5:1c:65:8c:06:9a:15:bc:b0: ba:da:0c:14:d1:d9:49:66:4c:6b:b2:84:a3:0d:8f: 4b:68:00:59:8e:36:38:9d:02:a9:ed:da:bd:e4:76: d1:1b:a1:52:94:e7:ad:11:95:15:89:ee:83:e2:9e: b7:8a:b7:69:a5:10:4a:b6:24:33:e3:5b:3f:5a:81: 5e:b5:c4:99:af:93:90:da:4f:d3:27:2c:9b:97:25: 4e:c5:a0:b3:2d:cb:7f:ff:5e:a0:0a:1d:72:af:69: bb:86:ba:69:ca:65:84:ce:49:f0:93:93:50:6e:15: d7:ef:23:cd:55:1a:c9:e7:3a:33:e7:a3:33:ff:e2: 8a:ea:4e:ee:97:48:62:4b:2b:5a:f2:72:f9:7b:4f: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A8:AB:5B:E9:C8:85:2B:0B:EA:F3:F6:B2:E3:7D:16:5E:8C:B9:F3 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:a8:fa:c6:c0:c7:68:5d:dd:7d:59:f1:70:f0:1a:a2:21: e5:7e:d9:5b:35:41:eb:fd:5d:a4:68:50:6b:87:fa:ec:62:3b: 85:b2:49:26:b6:66:91:3e:f2:1f:22:6e:b8:9f:40:dd:3d:91: 80:a2:7d:9e:bc:3d:35:b7:ab:d6:64:a1:73:c7:c3:55:a8:9d: 5e:5f:d4:c8:a0:42:04:97:3f:11:b7:3d:c9:b6:2b:7c:37:8f: 1a:d7:86:b5:04:d4:ec:33:f5:25:ec:ec:22:f8:79:0d:47:30: 5c:7a:a5:4f:aa:6f:31:98:8d:50:9f:56:63:e1:f9:0a:29:86: 0f:b2:46:14:5a:7f:61:02:a5:14:8b:2c:1d:1f:42:fd:a2:33: a6:de:8b:fd:29:0d:39:b5:51:f8:97:7a:c6:62:33:d0:37:09: 8d:cf:27:90:3a:4b:8d:e1:89:21:0a:75:09:83:6a:c5:fc:cf: 43:b3:38:bc:af:14:e8:ad:f9:d2:0b:d4:5f:f0:2e:8b:c0:d9: ad:ce:c2:a2:ba:46:be:aa:96:f2:82:e6:62:aa:b2:90:75:05: fb:f3:6a:bb:0d:e9:8d:2f:4b:6d:31:6a:f4:83:7e:f1:a2:89: 80:c5:c6:f3:88:04:e8:ed:af:27:e0:5f:4a:9d:f2:ca:c5:94: 2f:04:01:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEFGNTExMC8GA1UEBRMoOTdEMTFBRTIxMkNCMjEzREY5NjUyRjVCQjYyNDhFNDBD RTBDMjlGQTAeFw0yNDA1MTUwODA5NDNaFw0yNDA1MjIwODA5NDNaMBgxFjAUBgNV BAMTDTY2NDQ2ZGM3LWVkNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwrx4tMVcimEnbFKbQo5jqbG6x9XERx8e/WJXFX6HRudWdZfKA5rLb1shm6tt z/nsEoJQzwGngFrSvOZUT4uTN9y1Eb15Gu3SN3+2odebZzrAUgGmiQNVcoKZ/pco 6boOiKY2G5W1AABxmJIC38UcZYwGmhW8sLraDBTR2UlmTGuyhKMNj0toAFmONjid Aqnt2r3kdtEboVKU560RlRWJ7oPinreKt2mlEEq2JDPjWz9agV61xJmvk5DaT9Mn LJuXJU7FoLMty3//XqAKHXKvabuGumnKZYTOSfCTk1BuFdfvI81VGsnnOjPnozP/ 4orqTu6XSGJLK1rycvl7T9UlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb6irW+nI hSsL6vP2suN9Fl6MufMwHwYDVR0jBBgwFoAUl9Ea4hLLIT35ZS9btiSOQM4MKfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QUY1LzFCMUMyNDY2QUI1 NzExRUU4MThBMjgzRUM0RjlBRTAyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDlFYTRoTExJVDM1WlM5YnRpU09RTTRNS2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 QUY1LzFCMUMyNDY2QUI1NzExRUU4MThBMjgzRUM0RjlBRTAyL2w5RWE0aExMSVQz NVpTOWJ0aVNPUU00TUtmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/VqPrGwMdoXd19WfFw8BqiIeV+2Vs1Qev9XaRoUGuH+uxiO4WySSa2 ZpE+8h8ibrifQN09kYCifZ68PTW3q9ZkoXPHw1WonV5f1MigQgSXPxG3Pcm2K3w3 jxrXhrUE1Owz9SXs7CL4eQ1HMFx6pU+qbzGYjVCfVmPh+Qophg+yRhRaf2ECpRSL LB0fQv2iM6bei/0pDTm1UfiXesZiM9A3CY3PJ5A6S43hiSEKdQmDasX8z0OzOLyv FOit+dIL1F/wLovA2a3OwqK6Rr6qlvKC5mKqspB1BfvzarsN6Y0vS20xavSDfvGi iYDFxvOIBOjtryfgX0qd8srFlC8EAeI= -----END CERTIFICATE-----Generated at Wed May 15 09:28:10 2024 by rpki-client on console-fra.rpki-client.org