$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: 7OrOcn2frn9zh5Jua9CRVEwbvxJUOmDhl9Xlg4ng9GI= Subject key identifier: 85:D6:DF:26:A8:54:7B:A8:59:45:2B:A1:66:0D:6C:74:3D:F4:5F:B8 Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 06D0 Signing time: Sat 18 May 2024 22:56:51 +0000 Manifest this update: Sat 18 May 2024 22:56:51 +0000 Manifest next update: Sat 25 May 2024 22:56:51 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: OhYBr+eGosD3LKneTjFn5NldPHq3rUJuFJu5KNR9pxw=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: 28zzKXSsP9euZLQheJMd1ApjifbGW5va3zP1N3tNY78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: May 18 22:56:51 2024 GMT Not After : May 25 22:56:51 2024 GMT Subject: CN=66493233-76f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:84:73:3b:48:f8:d2:a1:a4:7e:a7:1f:39: 83:55:7a:a3:4f:20:e4:52:d4:e3:d0:f3:be:c8:52: c5:a3:ec:f5:76:87:31:9d:3a:e8:29:d3:73:c4:06: 34:e4:cd:c1:94:4c:ad:af:5a:51:85:79:cb:57:e8: a9:cd:27:df:81:2d:95:bb:69:0d:1a:9c:37:30:3b: eb:08:2e:73:d2:3a:e5:47:17:b8:31:4d:94:6d:eb: 6b:d9:67:52:ec:bc:50:b7:dc:4b:6d:14:5e:d5:37: 22:da:e3:9e:b2:7a:b5:04:a6:f9:7f:0e:78:1a:4d: 86:89:55:34:5a:1c:71:86:20:d0:17:8b:7f:e0:20: db:bd:d1:87:c4:f0:a2:1a:77:71:da:d6:fb:3b:31: ee:b9:51:22:5c:ac:35:1c:62:33:ff:6a:11:cd:db: 15:c4:1f:db:66:c9:58:1c:59:98:5a:42:f5:0c:df: 0d:fe:af:4e:22:03:de:f2:9d:bd:f5:cc:06:45:b1: 53:ee:70:96:56:0d:74:3a:3e:fc:3a:bd:48:aa:aa: 6b:21:c4:19:a7:1e:70:dd:94:2a:47:2a:20:5f:39: 63:cc:0f:1e:e4:24:fc:10:31:2f:fb:98:a3:34:85: 7b:0b:16:cb:6f:ad:b3:b7:86:01:04:fd:97:7d:0c: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:DF:26:A8:54:7B:A8:59:45:2B:A1:66:0D:6C:74:3D:F4:5F:B8 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e8:3c:1b:ea:63:ec:73:25:34:12:da:e7:a7:95:99:b2:08: 99:d5:21:8f:68:e7:65:70:d9:8b:95:39:3b:0b:39:4d:95:6f: 22:46:62:62:18:ab:43:e2:28:ab:d7:4f:88:3c:1f:0b:cd:79: 51:c0:3e:f6:17:e5:40:64:79:cd:28:fe:12:60:55:3b:96:8b: 94:44:c0:8a:08:6e:5f:eb:db:3d:91:79:af:13:02:68:7a:e8: bc:09:ee:54:20:61:f1:d1:48:f3:3a:4f:6b:94:7e:d0:fd:18: 7d:43:2e:b3:68:38:1c:38:49:1a:04:76:3c:9e:32:49:cc:2f: 9b:c9:41:e5:d5:89:73:66:0f:95:c7:f3:e0:4e:04:03:92:06: 0b:be:13:97:48:39:91:ac:a2:13:b1:9e:4f:21:9f:c3:8a:ba: 83:1f:0e:a3:1a:84:1c:f1:4d:98:4c:99:d7:c7:68:dc:ea:84: 22:3d:1c:a6:e9:da:2b:51:17:d5:93:50:5b:46:71:e6:02:c5: 4f:bc:74:73:d5:a6:8d:0f:57:a4:7e:47:c6:36:c1:25:90:20: 12:b5:02:7e:8a:1b:6c:d6:1b:51:4e:35:a3:cd:f9:26:d0:9f: 7c:06:81:97:ff:17:0e:ff:30:45:30:54:08:46:7e:7f:ce:6b: 94:1e:09:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjQwNTE4MjI1NjUxWhcNMjQwNTI1MjI1NjUxWjAYMRYwFAYD VQQDEw02NjQ5MzIzMy03NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWSEcztI+NKhpH6nHzmDVXqjTyDkUtTj0PO+yFLFo+z1docxnTroKdNzxAY0 5M3BlEytr1pRhXnLV+ipzSffgS2Vu2kNGpw3MDvrCC5z0jrlRxe4MU2Ubetr2WdS 7LxQt9xLbRRe1Tci2uOesnq1BKb5fw54Gk2GiVU0WhxxhiDQF4t/4CDbvdGHxPCi Gndx2tb7OzHuuVEiXKw1HGIz/2oRzdsVxB/bZslYHFmYWkL1DN8N/q9OIgPe8p29 9cwGRbFT7nCWVg10Oj78Or1IqqprIcQZpx5w3ZQqRyogXzljzA8e5CT8EDEv+5ij NIV7CxbLb62zt4YBBP2XfQxfiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXW3yao VHuoWUUroWYNbHQ99F+4MB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK6Dwb6mPscyU0Etrnp5WZsgiZ1SGPaOdlcNmLlTk7CzlNlW8iRmJi GKtD4iir10+IPB8LzXlRwD72F+VAZHnNKP4SYFU7louURMCKCG5f69s9kXmvEwJo eui8Ce5UIGHx0UjzOk9rlH7Q/Rh9Qy6zaDgcOEkaBHY8njJJzC+byUHl1YlzZg+V x/PgTgQDkgYLvhOXSDmRrKITsZ5PIZ/DirqDHw6jGoQc8U2YTJnXx2jc6oQiPRym 6dorURfVk1BbRnHmAsVPvHRz1aaND1ekfkfGNsElkCAStQJ+ihts1htRTjWjzfkm 0J98BoGX/xcO/zBFMFQIRn5/zmuUHgnk -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org