$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: RnySfcVqPkAA86oMcX5AXu1ROuXES86vydwP7g1STlI= Subject key identifier: 54:CA:7E:F9:82:53:40:95:6A:7D:DE:6B:6C:BF:36:C5:67:D9:94:FF Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 099D Signing time: Sat 18 May 2024 20:54:48 +0000 Manifest this update: Sat 18 May 2024 20:54:47 +0000 Manifest next update: Sat 25 May 2024 20:54:47 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: pLpZRlBBPz7jevAmbUveW0nicn7NY2iu5MOjhSvFQAY=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: P2iMsN7m9WDgczYIpcUEjfuzZhtDj4fXKavgsd86PCQ=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: TdaH8RrKPOQ5zjVbsJIwiOwQFx/TPruzytMdwKEiFzo=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: Z5rwHrC448B40suI00nA+b9ZQO0bU/yo217qnIMhWts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: May 18 20:54:47 2024 GMT Not After : May 25 20:54:47 2024 GMT Subject: CN=66491598-efee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:07:91:4c:67:d8:32:d6:ca:50:5e:77:a9: 7f:4e:a6:1a:d8:8c:4f:f9:eb:4d:39:10:19:8d:d7: 0a:49:1f:82:86:52:b0:de:22:6b:77:9e:2f:bd:81: 1e:44:71:43:64:33:39:77:e5:a2:13:bb:ca:6e:00: eb:4b:80:93:5d:7d:a6:c8:4f:c4:18:e8:d3:89:d1: da:14:f0:b4:83:7b:00:c5:18:31:f6:90:f4:43:79: a9:6e:e8:a0:58:26:ed:04:36:02:ed:e4:05:a6:d1: e8:82:0e:bc:d7:33:7b:3a:ea:fb:30:63:34:45:da: 39:dc:79:af:45:b4:cf:1d:ab:d8:40:06:a1:17:a1: de:a1:25:d1:cc:cd:3f:80:1a:9c:1a:6f:d8:b2:db: de:08:c4:e3:89:83:42:f1:a7:7b:c7:a2:58:f9:36: 2f:36:10:01:c7:16:e7:8c:4d:c3:9a:0b:8a:0e:d0: b2:0a:a8:a9:61:f9:a2:e3:b7:ac:4b:26:2a:4f:78: 42:c5:06:aa:0c:2f:e6:0f:47:39:ca:8f:e9:1d:1d: 5e:14:56:c0:18:21:b8:93:2f:1a:a4:71:87:be:54: 77:ff:ba:86:a5:51:6e:fb:d3:95:bf:5f:ab:9a:ef: 0d:63:30:1b:d5:02:2b:b8:26:ff:6e:51:df:41:e7: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:7E:F9:82:53:40:95:6A:7D:DE:6B:6C:BF:36:C5:67:D9:94:FF X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ff:9f:d7:3e:5e:73:34:da:2f:40:64:28:a1:7a:38:f9:c8: a4:b0:3d:f2:6d:b8:c3:66:53:13:c6:73:15:f7:5a:56:ca:7c: 80:ec:d2:aa:8a:4c:c9:c6:d0:36:47:75:3c:24:f1:53:07:2a: 75:40:d2:7f:a5:d2:2f:39:ec:bf:57:56:52:65:d6:5d:96:7a: 9a:07:db:c0:b9:28:45:3d:df:9c:e1:73:fb:2a:c5:52:e6:c5: 76:e4:45:f7:d4:0b:e8:0e:2f:e3:e6:a3:cd:90:2f:de:08:e1: da:6a:f0:ad:f8:ea:fe:99:d2:57:83:23:04:63:12:62:ed:71: 86:27:78:cd:6c:a4:5c:41:d6:cc:1b:5c:cf:e8:0c:e3:15:ba: a2:77:7f:15:22:fa:20:fb:72:04:26:ba:f5:4e:4e:49:4d:de: 67:98:5b:6e:65:f0:63:ac:89:33:6a:75:78:04:d1:db:61:d6: ad:00:02:70:8f:c2:b4:13:25:d4:98:a3:8b:e1:0e:8d:3a:10: 60:65:9b:3e:03:1b:11:5d:17:7b:70:3b:74:c4:8f:2d:78:39: 2f:39:3e:fc:2e:7e:9d:b0:3a:a1:f1:5f:af:21:14:7a:02:a5: 29:0a:8c:47:13:d8:7b:bd:d5:9c:c0:c3:68:c0:1a:00:96:3c: 08:c0:85:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjQwNTE4MjA1NDQ3WhcNMjQwNTI1MjA1NDQ3WjAYMRYwFAYD VQQDEw02NjQ5MTU5OC1lZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqMHkUxn2DLWylBed6l/TqYa2IxP+etNORAZjdcKSR+ChlKw3iJrd54vvYEe RHFDZDM5d+WiE7vKbgDrS4CTXX2myE/EGOjTidHaFPC0g3sAxRgx9pD0Q3mpbuig WCbtBDYC7eQFptHogg681zN7Our7MGM0Rdo53HmvRbTPHavYQAahF6HeoSXRzM0/ gBqcGm/YstveCMTjiYNC8ad7x6JY+TYvNhABxxbnjE3DmguKDtCyCqipYfmi47es SyYqT3hCxQaqDC/mD0c5yo/pHR1eFFbAGCG4ky8apHGHvlR3/7qGpVFu+9OVv1+r mu8NYzAb1QIruCb/blHfQee6FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTKfvmC U0CVan3ea2y/NsVn2ZT/MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa/5/XPl5zNNovQGQooXo4+ciksD3ybbjDZlMTxnMV91pWynyA7NKq ikzJxtA2R3U8JPFTByp1QNJ/pdIvOey/V1ZSZdZdlnqaB9vAuShFPd+c4XP7KsVS 5sV25EX31AvoDi/j5qPNkC/eCOHaavCt+Or+mdJXgyMEYxJi7XGGJ3jNbKRcQdbM G1zP6AzjFbqid38VIvog+3IEJrr1Tk5JTd5nmFtuZfBjrIkzanV4BNHbYdatAAJw j8K0EyXUmKOL4Q6NOhBgZZs+AxsRXRd7cDt0xI8teDkvOT78Ln6dsDqh8V+vIRR6 AqUpCoxHE9h7vdWcwMNowBoAljwIwIXa -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org