$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json) Hash identifier: /U7Uu5L1VoSOlnapPTzbxU7d6k88wvhri2Ju+vpa6YA= Subject key identifier: C0:B4:2B:1B:52:83:3B:19:E4:C5:AB:74:1F:BC:AD:B9:8C:55:A1:A4 Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft Manifest number: 08FC Signing time: Sat 18 May 2024 21:18:10 +0000 Manifest this update: Sat 18 May 2024 21:18:09 +0000 Manifest next update: Sat 25 May 2024 21:18:09 +0000 Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: HzW5Kgc12jnDjFrCAAU62B+kK84olQVQUQMEn5l5GmY=) 2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: cmgG299OngXHgb8B4Pq7fkieTX+aOQOIHfQQXpkXXJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55 Validity Not Before: May 18 21:18:09 2024 GMT Not After : May 25 21:18:09 2024 GMT Subject: CN=66491b12-3e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:e2:c9:c3:68:0c:9d:cb:be:c9:39:d3:69: 21:a3:3b:9a:92:a3:9e:13:07:55:97:55:3e:fe:e0: 0a:41:fc:a1:b3:ed:16:12:a4:37:af:f1:05:9c:27: 8b:ca:00:d2:2d:6a:9a:cb:79:65:3b:17:a0:05:ab: dc:3e:31:5d:30:4d:ea:be:87:fd:d5:1d:d2:43:6d: 91:fc:2a:31:43:49:72:b0:e6:09:3b:11:7a:22:b1: a3:d8:64:02:a8:ec:98:8c:62:aa:dc:be:a9:e2:a9: b9:17:de:ba:8d:5f:b9:e8:f8:94:3f:24:b3:12:1d: 82:6c:63:d3:cb:ab:62:b2:13:5e:8e:6f:8d:99:ea: 9e:7f:22:d6:1a:75:85:99:f0:d1:92:75:da:66:c7: 2d:c8:d2:6e:2d:3d:73:75:6d:47:7b:26:39:70:80: 3f:24:34:60:2d:94:7f:30:96:bc:f6:24:b0:e9:0d: 30:02:7e:d6:94:54:c8:ed:d9:60:9b:9b:09:55:d3: 5b:45:b7:9a:1a:8f:f1:44:bd:64:5f:c7:98:d1:eb: 5d:6f:d3:66:83:91:72:5c:20:be:6c:e4:93:42:ef: b8:38:f5:98:f7:b9:64:ad:66:26:3a:a2:8f:b1:26: e5:c1:79:3b:63:74:1a:1f:13:07:aa:6d:43:5d:af: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B4:2B:1B:52:83:3B:19:E4:C5:AB:74:1F:BC:AD:B9:8C:55:A1:A4 X509v3 Authority Key Identifier: keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:24:59:ee:b8:35:a1:fa:ae:84:81:8e:8e:33:e9:ab:1b:03: 39:48:d2:e7:43:30:13:9b:4f:88:f2:fd:3f:de:49:7d:49:5d: e2:f6:a6:f3:11:f3:68:39:83:23:72:d7:3f:ea:48:40:5c:ff: e9:fe:6d:59:a2:5d:90:cc:46:10:34:f7:a2:9a:7a:a3:76:bb: 3c:ed:55:41:6a:98:4d:dc:e9:6c:81:56:ce:15:4c:14:34:07: ac:f5:68:57:a1:db:85:cf:b6:5c:1b:2d:b5:df:9c:5a:45:fb: e7:47:45:05:ca:75:53:0f:45:b0:f5:1e:48:aa:cb:6c:61:6e: 4d:b0:9f:a5:c2:d5:47:0b:ce:59:e1:30:c8:a5:fa:4e:45:38: 14:93:10:8b:84:30:54:11:7f:aa:3f:32:ae:fc:8f:8d:7c:08: 71:1f:5e:f3:73:b7:bd:50:75:89:b0:50:02:35:aa:66:c8:74: d3:c5:56:85:6a:33:85:df:ac:2b:0f:ea:2a:3a:f0:fc:f4:c6: d9:3f:ef:da:41:7c:63:fe:e3:a6:6b:e5:41:5a:e6:c4:ad:b6: 52:18:7d:e8:c3:22:2e:d7:56:e4:3c:e5:fb:18:ee:a1:04:ba: aa:71:17:41:52:c9:71:5d:2e:da:8c:02:0f:45:76:ce:0b:9a: f5:07:9e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU0MDQ3RDI3Q0VGNzM0NkY0MTc1RUZBQzczNDQ5NEFE QkIwNTdCNTUwHhcNMjQwNTE4MjExODA5WhcNMjQwNTI1MjExODA5WjAYMRYwFAYD VQQDEw02NjQ5MWIxMi0zZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8jiycNoDJ3Lvsk502khozuakqOeEwdVl1U+/uAKQfyhs+0WEqQ3r/EFnCeL ygDSLWqay3llOxegBavcPjFdME3qvof91R3SQ22R/CoxQ0lysOYJOxF6IrGj2GQC qOyYjGKq3L6p4qm5F966jV+56PiUPySzEh2CbGPTy6tishNejm+NmeqefyLWGnWF mfDRknXaZsctyNJuLT1zdW1HeyY5cIA/JDRgLZR/MJa89iSw6Q0wAn7WlFTI7dlg m5sJVdNbRbeaGo/xRL1kX8eY0etdb9Nmg5FyXCC+bOSTQu+4OPWY97lkrWYmOqKP sSblwXk7Y3QaHxMHqm1DXa+N3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC0KxtS gzsZ5MWrdB+8rbmMVaGkMB8GA1UdIwQYMBaAFFQEfSfO9zRvQXXvrHNElK27BXtV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS81MzQ0NzJDQzgz QjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05HOUJkZS1zYzBTVXJic0Zl MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBUjlKODczTkc5QmRlLXNjMFNVcmJzRmUxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS81MzQ0NzJDQzgzQjkxMUVBODUyQTE1NzZDNEY5QUUwMi9WQVI5Sjg3M05H OUJkZS1zYzBTVXJic0ZlMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJFnuuDWh+q6EgY6OM+mrGwM5SNLnQzATm0+I8v0/3kl9SV3i9qbz EfNoOYMjctc/6khAXP/p/m1Zol2QzEYQNPeimnqjdrs87VVBaphN3OlsgVbOFUwU NAes9WhXoduFz7ZcGy2135xaRfvnR0UFynVTD0Ww9R5IqstsYW5NsJ+lwtVHC85Z 4TDIpfpORTgUkxCLhDBUEX+qPzKu/I+NfAhxH17zc7e9UHWJsFACNapmyHTTxVaF ajOF36wrD+oqOvD89MbZP+/aQXxj/uOma+VBWubErbZSGH3owyIu11bkPOX7GO6h BLqqcRdBUslxXS7ajAIPRXbOC5r1B54S -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org