$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: cyzW79m+WmiUqfvjJ6pTPaCTXDyj90OaLe7WoG110q4= Subject key identifier: 93:DF:D9:6A:83:10:28:F0:4A:86:54:B0:84:5D:88:29:97:82:1F:99 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0B84 Signing time: Sat 18 May 2024 19:23:57 +0000 Manifest this update: Sat 18 May 2024 19:23:57 +0000 Manifest next update: Sat 25 May 2024 19:23:56 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: 1j9eSfDe63FohdlPhsJT4tShe/bWv121j/oD6yn0UOE=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: NcBWc+R/l9a4ARiTsfueJzkOzm3hZiUOoPUxgy8X2fA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: May 18 19:23:57 2024 GMT Not After : May 25 19:23:56 2024 GMT Subject: CN=6649004d-a63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:a3:4e:f1:74:91:8e:6a:99:45:80:17:80: 63:da:1d:64:e8:e3:3c:71:da:8c:09:34:73:4d:3c: 58:0b:d7:31:06:76:83:d3:e3:94:13:a4:d5:14:97: 48:32:2c:63:a1:93:14:e7:d0:6e:d4:29:3b:f5:f9: fa:10:0b:49:f3:3f:a4:b8:7a:96:1e:72:63:4a:af: 6c:40:62:aa:d1:b0:b3:d7:1a:fd:4a:22:59:7b:a3: 97:0b:67:a4:68:af:4c:c0:60:0f:b7:93:bb:3d:d0: 36:0d:37:9f:72:4d:41:c0:d8:ee:e9:26:db:65:67: 68:d3:b4:96:08:ec:8b:25:2f:3b:8b:d6:a9:88:29: f9:7a:b2:4d:aa:c2:f0:4d:e0:9d:8b:f7:62:59:dc: e8:38:c9:af:2f:f3:03:14:89:36:3d:f1:93:18:8a: 64:b9:f4:b2:79:54:96:1f:1d:e0:fc:c5:7b:fa:c3: ed:5c:18:78:1a:b4:77:38:91:b9:4c:13:e9:14:f5: 55:38:08:d5:6a:fc:ff:c2:ff:f2:70:02:1e:64:dd: 04:54:a7:18:9e:58:46:53:ee:d4:24:54:8c:95:e6: 7f:35:27:80:da:dd:9a:af:05:c5:87:13:fa:85:26: 8c:95:61:62:c7:ea:4b:8d:d1:ba:98:49:9e:31:fd: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DF:D9:6A:83:10:28:F0:4A:86:54:B0:84:5D:88:29:97:82:1F:99 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:2d:26:75:b1:7a:b4:67:eb:1b:75:9a:04:7f:da:b6:db: f3:2f:91:74:b9:a0:d5:ff:d5:a6:b4:93:f5:ad:49:be:10:33: 84:ae:0e:9f:7e:6f:d9:76:68:cf:a0:74:dc:e0:6e:99:8e:f3: 0a:46:eb:71:a8:af:b9:04:23:e7:55:01:88:d9:bc:3a:b0:a0: ab:db:25:50:2b:7c:6d:9f:35:38:16:35:09:7b:a6:d5:5c:5c: 06:5e:21:bb:96:96:37:00:1b:08:7a:3b:dd:0e:36:c7:5c:ce: 40:eb:46:d5:b0:5f:11:3f:d7:de:95:31:53:79:9a:14:15:7d: 0a:90:8b:39:7d:ef:21:20:fb:8a:97:5b:e7:36:9a:89:01:15: dc:14:8c:96:f1:d1:a9:52:3f:16:7d:b5:6c:f9:95:57:42:a2: 91:de:18:bf:34:2b:b2:33:c4:b5:17:30:43:f5:a6:37:5f:46: 0b:a6:9c:5f:be:48:11:eb:a5:96:3e:0b:42:ae:ba:aa:39:bb: 53:fc:62:3e:89:d8:35:24:53:15:7c:5d:bc:fb:bc:4a:98:d4: cb:46:af:28:ce:5d:b5:c3:e4:c6:0a:88:c8:49:78:e7:a3:97: 3b:9f:82:17:92:b7:d6:83:b0:14:c5:95:25:05:c0:46:ce:a9: 2f:98:da:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjQwNTE4MTkyMzU3WhcNMjQwNTI1MTkyMzU2WjAYMRYwFAYD VQQDEw02NjQ5MDA0ZC1hNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVujTvF0kY5qmUWAF4Bj2h1k6OM8cdqMCTRzTTxYC9cxBnaD0+OUE6TVFJdI MixjoZMU59Bu1Ck79fn6EAtJ8z+kuHqWHnJjSq9sQGKq0bCz1xr9SiJZe6OXC2ek aK9MwGAPt5O7PdA2DTefck1BwNju6SbbZWdo07SWCOyLJS87i9apiCn5erJNqsLw TeCdi/diWdzoOMmvL/MDFIk2PfGTGIpkufSyeVSWHx3g/MV7+sPtXBh4GrR3OJG5 TBPpFPVVOAjVavz/wv/ycAIeZN0EVKcYnlhGU+7UJFSMleZ/NSeA2t2arwXFhxP6 hSaMlWFix+pLjdG6mEmeMf3OKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPf2WqD ECjwSoZUsIRdiCmXgh+ZMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwCi0mdbF6tGfrG3WaBH/attvzL5F0uaDV/9WmtJP1rUm+EDOErg6f fm/ZdmjPoHTc4G6ZjvMKRutxqK+5BCPnVQGI2bw6sKCr2yVQK3xtnzU4FjUJe6bV XFwGXiG7lpY3ABsIejvdDjbHXM5A60bVsF8RP9felTFTeZoUFX0KkIs5fe8hIPuK l1vnNpqJARXcFIyW8dGpUj8WfbVs+ZVXQqKR3hi/NCuyM8S1FzBD9aY3X0YLppxf vkgR66WWPgtCrrqqObtT/GI+idg1JFMVfF28+7xKmNTLRq8ozl21w+TGCojISXjn o5c7n4IXkrfWg7AUxZUlBcBGzqkvmNpC -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org