$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: inUMOzolnD/TAc2uPLJEcgnEzBUlUOIBAD3bpqpW+v0= Subject key identifier: 35:74:A1:D0:70:43:A9:3C:CF:CF:DF:AB:5E:4D:99:B7:3F:CF:60:F0 Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: 16 Signing time: Sun 19 May 2024 08:45:36 +0000 Manifest this update: Sun 19 May 2024 08:45:36 +0000 Manifest next update: Sun 26 May 2024 08:45:36 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: VWr7pgP//N0oRcfC9XWrUpKcQ5Cwc1Khete9zTAq2B4=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: HUL9A15K3QXg4KiojfWyiL6fLdOjifKgkpo2+Is4ENA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: May 19 08:45:36 2024 GMT Not After : May 26 08:45:36 2024 GMT Subject: CN=6649bc30-60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:69:51:69:99:08:25:6f:7c:dc:a1:08:14: 63:2f:be:14:66:08:66:f0:14:19:e0:d2:4a:d9:08: d2:ac:a1:57:62:c7:e8:c1:80:90:34:5f:ff:3c:bc: 5f:0d:92:ef:e3:59:6c:bd:86:28:0c:1d:2a:04:9e: e7:f9:d4:d6:11:2b:9d:3c:b8:f8:63:4a:78:e7:ce: 35:03:a3:08:cb:e5:2b:97:c7:f5:ff:69:ac:d6:0f: 68:12:c6:23:28:d9:9b:cb:d7:d5:2a:9c:0e:98:f9: 33:a2:a9:96:c3:f2:d2:fd:fd:45:0c:3f:dd:62:90: ed:eb:d2:0a:5e:3f:0f:11:e4:5a:f6:9f:5e:eb:4c: 19:b6:40:0e:24:2b:09:bf:52:49:1d:95:a5:5a:70: 5d:f8:dc:88:00:3f:32:ca:f0:20:50:de:75:74:d4: e5:95:92:8e:1c:44:55:8e:19:01:c4:99:02:e4:b9: e2:f8:70:f3:f3:47:89:cf:78:25:64:a0:d8:13:9d: e4:1e:51:18:29:0d:7f:33:83:f5:35:79:25:f2:bc: bf:dd:94:81:a7:da:df:1b:08:1e:9e:73:05:9f:0c: d0:68:de:65:e8:09:02:d7:5c:90:f7:13:69:77:13: da:cd:10:4f:49:c9:ab:65:b8:e6:29:b9:c7:db:16: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:A1:D0:70:43:A9:3C:CF:CF:DF:AB:5E:4D:99:B7:3F:CF:60:F0 X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c9:47:f0:7f:16:27:0e:92:27:5c:d6:59:84:0d:8d:82:ee: 43:8c:58:04:87:7f:44:1e:1d:74:c6:0d:3a:96:7f:d0:de:13: bc:e6:07:30:27:de:df:ee:3d:46:f6:36:ed:f2:5d:21:0c:c1: 40:c5:7c:56:44:ca:a7:01:02:9a:2d:a3:e6:77:fa:aa:14:47: 9d:1e:b0:71:fc:7a:0c:7b:a2:e5:fe:3d:7e:59:57:ee:b7:39: f8:e6:92:d1:c7:c4:2b:ee:85:a5:1b:b5:08:a9:7f:d5:fd:10: e7:fc:7e:fc:43:82:30:11:77:9a:55:9e:5b:58:15:8c:7f:7a: e1:92:68:35:67:30:36:60:a7:4b:f3:e6:fd:ff:5e:71:a6:52: 53:89:ea:c0:41:e9:0f:4c:01:6e:e5:57:96:83:f9:d8:90:ca: bd:6d:5e:2d:2f:78:01:8e:84:83:14:94:d6:bb:b0:79:bc:fc: 6c:43:e1:e9:7d:3d:03:86:70:17:bd:a3:0a:4b:ec:18:66:c3: 44:49:ae:74:ab:eb:88:48:0b:05:a5:3b:02:87:d7:8e:5f:7f: 60:c6:b8:13:63:f1:4d:b9:49:36:c8:93:b2:87:e9:25:50:08: 2f:4c:da:a8:de:dd:5d:c7:b6:0d:0b:53:28:31:9a:23:8e:73: cd:b6:21:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDczQTExMC8GA1UEBRMoRjU1MDJBNEQ3RDE0QTZBQTYzRTVGRkFCRjkzNkUxNTJB OERGODAzQjAeFw0yNDA1MTkwODQ1MzZaFw0yNDA1MjYwODQ1MzZaMBgxFjAUBgNV BAMTDTY2NDliYzMwLTYwZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZD2lRaZkIJW983KEIFGMvvhRmCGbwFBng0krZCNKsoVdix+jBgJA0X/88vF8N ku/jWWy9higMHSoEnuf51NYRK508uPhjSnjnzjUDowjL5SuXx/X/aazWD2gSxiMo 2ZvL19UqnA6Y+TOiqZbD8tL9/UUMP91ikO3r0gpePw8R5Fr2n17rTBm2QA4kKwm/ UkkdlaVacF343IgAPzLK8CBQ3nV01OWVko4cRFWOGQHEmQLkueL4cPPzR4nPeCVk oNgTneQeURgpDX8zg/U1eSXyvL/dlIGn2t8bCB6ecwWfDNBo3mXoCQLXXJD3E2l3 E9rNEE9JyatluOYpucfbFjnnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNXSh0HBD qTzPz9+rXk2Ztz/PYPAwHwYDVR0jBBgwFoAU9VAqTX0Upqpj5f+r+TbhUqjfgDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNzNBL0VCNEEzQURBRjY0 MTExRUVCQjExRUY1M0M0RjlBRTAyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdE cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVZBcVRYMFVwcXBqNWYtci1UYmhVcWpmZ0RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NzNBL0VCNEEzQURBRjY0MTExRUVCQjExRUY1M0M0RjlBRTAyLzlWQXFUWDBVcHFw ajVmLXItVGJoVXFqZmdEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7JR/B/FicOkidc1lmEDY2C7kOMWASHf0QeHXTGDTqWf9DeE7zmBzAn 3t/uPUb2Nu3yXSEMwUDFfFZEyqcBApoto+Z3+qoUR50esHH8egx7ouX+PX5ZV+63 OfjmktHHxCvuhaUbtQipf9X9EOf8fvxDgjARd5pVnltYFYx/euGSaDVnMDZgp0vz 5v3/XnGmUlOJ6sBB6Q9MAW7lV5aD+diQyr1tXi0veAGOhIMUlNa7sHm8/GxD4el9 PQOGcBe9owpL7Bhmw0RJrnSr64hICwWlOwKH145ff2DGuBNj8U25STbIk7KH6SVQ CC9M2qje3V3Htg0LUygxmiOOc822IRU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org