$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: t9+5WCs8OWxB6NKiosh8ibIQcdCPUBE24JffFUH/ZUY= Subject key identifier: 8F:6B:B3:BA:15:0E:64:F1:06:D6:6F:A6:AE:07:9D:07:66:1C:A6:EC Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0ADE Signing time: Sat 18 May 2024 20:04:29 +0000 Manifest this update: Sat 18 May 2024 20:04:29 +0000 Manifest next update: Sat 25 May 2024 20:04:29 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: 1N+7YvKbX+K5FGsHmz2u8D30uetwhfX9YcUHCS24AA4=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: j7UjuVCTVv/7mfOqRurAg480j9GWmLg6ExID4Lwvt4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: May 18 20:04:29 2024 GMT Not After : May 25 20:04:29 2024 GMT Subject: CN=664909cd-f1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:cc:60:dc:01:6f:0b:68:55:9f:25:e8:7b: f0:63:5f:92:3a:3f:77:aa:37:46:d9:d8:71:cb:d2: e4:8c:29:2e:60:19:73:84:09:eb:6f:6e:7b:3c:66: 03:01:1a:7b:bc:26:6f:86:4b:6e:0d:93:f1:2c:54: bc:11:53:ac:25:f0:76:de:55:ef:e7:b9:29:b9:32: 0f:7f:3a:54:ec:cb:1b:dd:29:00:0d:f4:41:da:aa: d2:f3:fd:2c:8d:18:ab:75:72:23:25:02:97:dc:e7: 70:c3:d7:8f:29:a7:19:e6:97:51:76:0b:38:ff:e3: c8:43:6e:c4:1d:7f:71:94:95:a0:34:7c:e7:12:c2: 65:d0:50:9f:d1:6b:10:2e:5f:34:7e:96:45:68:61: a7:1c:ed:5a:9e:f4:98:71:13:a8:1b:23:76:57:eb: 68:03:88:e7:1f:a5:d6:59:6b:73:2f:2d:54:18:58: cc:80:9d:14:73:cb:6f:10:ad:31:7a:da:10:d4:d9: 44:b2:2c:79:a2:6f:b9:e5:d9:01:f8:50:94:ca:89: 48:20:d0:3e:eb:b5:66:87:28:be:cf:63:54:9f:ce: be:05:6f:3d:a3:fd:cb:c6:a0:75:ea:e8:6d:f9:e5: ef:49:e5:f9:dd:a7:59:72:af:b5:25:a8:f6:2a:02: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:B3:BA:15:0E:64:F1:06:D6:6F:A6:AE:07:9D:07:66:1C:A6:EC X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4b:c1:98:95:5b:00:ce:5f:a7:84:da:ff:62:22:ab:7b:c4: 82:46:a5:b6:e2:6e:fe:25:79:b7:64:90:17:d0:87:62:56:0c: 34:c4:6a:5d:0f:44:fa:bc:4a:da:51:7a:c0:fe:5b:ff:28:72: 96:4c:5e:7c:4b:8a:75:1d:f8:e3:84:4a:81:05:cf:7b:e5:bc: ee:f2:67:82:0e:84:df:a8:f8:68:8b:b4:49:1d:86:54:79:0b: 0f:b5:92:ea:a7:d3:b2:70:5e:2b:a5:2f:10:65:da:a8:cb:fd: a4:0a:ef:b7:19:21:23:cc:ea:1c:8a:82:59:d8:24:d4:8e:9a: 43:27:a2:ca:7e:71:cf:d3:75:65:26:f1:96:a9:8e:11:6a:50: 0d:c8:f4:5c:35:7a:ba:f6:47:04:af:71:8b:e4:e6:bd:5a:10: 15:d2:42:d6:68:93:3f:a4:07:a6:ac:bb:64:ae:87:23:c6:04: 45:ec:8f:73:95:b1:41:4e:8d:68:c9:bb:39:30:ff:40:78:2b: 9c:ad:a9:bd:e9:d2:9c:41:16:48:3d:d2:22:46:08:ed:8b:da: e8:78:c9:22:4e:c8:e5:b9:09:96:ac:59:76:ea:ff:0b:89:c1: d1:1f:e0:2f:b6:38:1b:50:c0:b3:49:77:b7:74:ae:12:e3:8f: d0:8e:f3:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjQwNTE4MjAwNDI5WhcNMjQwNTI1MjAwNDI5WjAYMRYwFAYD VQQDEw02NjQ5MDljZC1mMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBnMYNwBbwtoVZ8l6HvwY1+SOj93qjdG2dhxy9LkjCkuYBlzhAnrb257PGYD ARp7vCZvhktuDZPxLFS8EVOsJfB23lXv57kpuTIPfzpU7Msb3SkADfRB2qrS8/0s jRirdXIjJQKX3Odww9ePKacZ5pdRdgs4/+PIQ27EHX9xlJWgNHznEsJl0FCf0WsQ Ll80fpZFaGGnHO1anvSYcROoGyN2V+toA4jnH6XWWWtzLy1UGFjMgJ0Uc8tvEK0x etoQ1NlEsix5om+55dkB+FCUyolIINA+67Vmhyi+z2NUn86+BW89o/3LxqB16uht +eXvSeX53adZcq+1Jaj2KgLCXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9rs7oV DmTxBtZvpq4HnQdmHKbsMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTS8GYlVsAzl+nhNr/YiKre8SCRqW24m7+JXm3ZJAX0IdiVgw0xGpd D0T6vEraUXrA/lv/KHKWTF58S4p1HfjjhEqBBc975bzu8meCDoTfqPhoi7RJHYZU eQsPtZLqp9OycF4rpS8QZdqoy/2kCu+3GSEjzOocioJZ2CTUjppDJ6LKfnHP03Vl JvGWqY4RalANyPRcNXq69kcEr3GL5Oa9WhAV0kLWaJM/pAemrLtkrocjxgRF7I9z lbFBTo1oybs5MP9AeCucram96dKcQRZIPdIiRgjti9roeMkiTsjluQmWrFl26v8L icHRH+AvtjgbUMCzSXe3dK4S44/QjvMH -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org