$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: zpqxecq0VaRpSyU7NJBVaKzrT6txkOyTkWr4ci7C+OE= Subject key identifier: E0:BA:80:2D:FB:C4:1E:0E:06:24:70:52:E6:73:D4:C5:CF:F3:8A:96 Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 08B3 Signing time: Sat 18 May 2024 21:29:23 +0000 Manifest this update: Sat 18 May 2024 21:29:23 +0000 Manifest next update: Sat 25 May 2024 21:29:23 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: 1aOU9YboOrJ0G05eamUdqWRivpuroe9vV6E5F8GYHHA=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: mW/BM1PNVX/5ID+FRZ36Z6Pg2PrZrk5BhqM2+oOu1s8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: May 18 21:29:23 2024 GMT Not After : May 25 21:29:23 2024 GMT Subject: CN=66491db3-60e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:3d:b2:0c:fb:3a:cc:b6:af:c1:b7:dd:72: 61:0e:dd:37:b1:9c:97:7d:0a:2c:24:14:25:5d:96: bc:46:ce:52:c5:19:d4:f3:b3:ea:39:29:5a:c9:8f: 7e:54:26:f2:ce:98:60:10:76:aa:08:8f:3c:58:8e: 48:aa:7a:3e:1e:f8:03:73:a5:20:fd:67:e8:df:11: f4:39:da:18:e4:f4:4e:a4:a3:e2:4a:61:b7:95:fa: b5:13:7c:d0:8f:2e:db:92:e2:78:78:78:eb:41:35: bd:0d:d7:7e:87:2a:d2:78:15:fe:ba:81:19:26:4d: f3:12:ac:6d:f0:a0:66:13:55:f3:3e:27:6c:39:be: 03:33:15:97:52:e3:b5:10:3b:d8:a9:79:94:cc:24: 3d:3b:fb:0e:87:73:1f:0a:f3:77:cc:31:fd:30:3a: 71:cf:ce:3a:2c:fd:29:2e:df:ae:80:bb:b7:d2:9a: 0e:2c:48:e3:e2:e6:0b:f6:28:a2:28:a5:f8:20:d1: 7c:b5:56:f6:ef:86:72:ca:c0:fc:26:89:28:04:48: d2:2f:74:1e:60:c2:4e:a6:77:6c:dc:80:5b:35:56: c2:b7:8f:6a:41:60:e4:ef:a9:2a:77:07:84:58:3c: a6:7e:f3:d8:43:83:8d:63:b7:62:ff:98:6d:06:80: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:80:2D:FB:C4:1E:0E:06:24:70:52:E6:73:D4:C5:CF:F3:8A:96 X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:48:ac:7c:22:0d:7d:92:c5:cf:f1:1d:f8:b7:21:48:f2:62: 53:67:8f:5c:e9:ee:fb:aa:af:9b:1e:48:08:57:9d:4f:14:f0: 29:ec:a5:1c:f8:f0:91:cf:1c:b9:c8:3c:13:e5:3b:fa:d5:d2: e2:5b:c5:e4:d6:a4:7d:17:cd:e4:3c:82:d7:dd:7e:ba:be:4e: 2e:48:23:ac:0c:97:8d:2f:54:a7:b4:8c:2f:2b:42:ef:62:2b: bd:b8:d9:0c:cd:d2:83:ea:bc:73:b6:ce:5d:a6:1c:41:b1:e6: 7e:21:db:cd:71:bb:a6:a6:04:a0:90:fe:97:47:25:64:2b:2c: 69:23:41:f2:a6:4c:be:09:d8:2c:dc:14:1f:9f:67:58:40:d8: f3:78:3c:0e:05:f4:23:4d:51:14:0a:0b:36:0a:fa:e2:14:ad: 65:61:86:5a:d9:40:63:42:62:14:6b:2a:ac:be:ec:38:31:c3: c2:aa:88:e8:15:10:3a:6a:79:4f:90:33:a9:a1:d6:c8:5f:14: df:2e:a9:73:a6:b6:e3:79:b2:74:3c:68:a4:c5:f0:f6:48:b2: 02:59:f7:15:d7:5e:c0:f8:cf:7d:dc:96:e0:0c:62:7e:e6:77: 2e:58:80:2b:57:51:b0:73:d9:ee:4e:0f:14:74:45:f2:36:ca: d6:db:7c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjQwNTE4MjEyOTIzWhcNMjQwNTI1MjEyOTIzWjAYMRYwFAYD VQQDEw02NjQ5MWRiMy02MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk89sgz7Osy2r8G33XJhDt03sZyXfQosJBQlXZa8Rs5SxRnU87PqOSlayY9+ VCbyzphgEHaqCI88WI5Iqno+HvgDc6Ug/Wfo3xH0OdoY5PROpKPiSmG3lfq1E3zQ jy7bkuJ4eHjrQTW9Ddd+hyrSeBX+uoEZJk3zEqxt8KBmE1XzPidsOb4DMxWXUuO1 EDvYqXmUzCQ9O/sOh3MfCvN3zDH9MDpxz846LP0pLt+ugLu30poOLEjj4uYL9iii KKX4INF8tVb274ZyysD8JokoBEjSL3QeYMJOpnds3IBbNVbCt49qQWDk76kqdweE WDymfvPYQ4ONY7di/5htBoAdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC6gC37 xB4OBiRwUuZz1MXP84qWMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxSKx8Ig19ksXP8R34tyFI8mJTZ49c6e77qq+bHkgIV51PFPAp7KUc +PCRzxy5yDwT5Tv61dLiW8Xk1qR9F83kPILX3X66vk4uSCOsDJeNL1SntIwvK0Lv Yiu9uNkMzdKD6rxzts5dphxBseZ+IdvNcbumpgSgkP6XRyVkKyxpI0Hypky+Cdgs 3BQfn2dYQNjzeDwOBfQjTVEUCgs2CvriFK1lYYZa2UBjQmIUayqsvuw4McPCqojo FRA6anlPkDOpodbIXxTfLqlzprbjebJ0PGikxfD2SLICWfcV117A+M993JbgDGJ+ 5ncuWIArV1Gwc9nuTg8UdEXyNsrW23w6 -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org