$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: nUoC0eUzKZoMhANJ2aZnj8gnXyPRdozKzHJHyo7SuHs= Subject key identifier: FC:32:DB:8A:3E:C2:A4:C1:88:12:70:7B:22:45:6A:79:34:68:DC:5C Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 0389 Signing time: Sun 19 May 2024 02:40:44 +0000 Manifest this update: Sun 19 May 2024 02:40:43 +0000 Manifest next update: Sun 26 May 2024 02:40:43 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: DZKquCDUkGKcar3RYeT2ZNhvYeVG+DPWVoUpzCNmbrI=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: EwzNBthps02CkgOme4DzhDAiGN+jdHa6OMRHAJvDrKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: May 19 02:40:43 2024 GMT Not After : May 26 02:40:43 2024 GMT Subject: CN=664966ab-252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:e0:71:11:42:86:e0:02:1f:a7:5e:38:02: 87:31:af:47:0a:b4:ca:bf:22:f0:6c:8e:73:48:37: 77:79:ad:2e:b1:eb:be:13:22:55:ff:67:fc:c5:b7: 77:1e:c7:5a:a8:a0:63:8f:e8:46:2a:cf:c3:d9:dd: 70:b5:e3:b1:57:a9:21:50:45:2e:8c:33:c3:96:1b: 48:10:dd:40:d4:db:12:26:e0:4d:d1:a1:38:bb:49: 31:7f:34:a6:54:2d:26:c2:1d:09:a1:06:18:33:55: 8b:c9:06:ae:00:e7:42:0a:53:7e:bd:7a:f4:3f:83: ce:68:5a:22:0e:15:e1:2a:a7:4b:c3:fe:20:5b:73: ed:67:6f:aa:32:55:37:b0:0b:ab:35:40:3b:11:0a: 11:68:e6:79:15:f0:e3:28:c9:56:da:66:48:e8:39: 45:6a:bb:1c:ef:29:79:b6:15:27:1b:2a:91:b2:91: 3d:f0:85:b4:07:38:fd:be:fc:d6:23:44:3d:5c:13: aa:4c:67:42:4a:43:37:8e:e6:56:51:ec:a5:b8:28: e3:31:6c:3d:2c:7d:fe:15:06:8d:00:0b:4b:15:9d: 22:19:f2:4b:eb:c9:46:57:1a:36:3a:12:ec:84:e4: cb:80:bf:7f:d8:ef:9f:2c:f5:0e:66:26:d7:0b:86: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:32:DB:8A:3E:C2:A4:C1:88:12:70:7B:22:45:6A:79:34:68:DC:5C X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9b:fc:31:d8:44:04:ed:6e:f9:c6:1e:10:03:87:2c:35:74: bf:d6:0f:48:3a:b1:77:a5:95:36:b2:5a:6f:f1:dc:97:56:b0: 04:06:5b:59:58:30:b4:4f:5d:c6:c4:4b:29:54:71:9a:91:72: 1f:c9:fa:98:c9:f6:3f:e2:73:da:fe:87:50:c6:7f:31:a1:2a: b7:81:59:95:68:37:56:fb:91:24:0e:0a:67:be:24:2a:cf:17: 0f:b5:9e:d1:26:fc:ca:33:f0:36:48:49:ec:22:c0:e5:3f:7d: ec:6e:81:c5:c8:a8:07:6f:ec:52:37:ec:e0:1e:96:0d:1c:80: e7:af:58:9c:1f:cb:38:f2:ab:76:97:83:dc:11:63:fe:37:8d: 93:28:20:6c:cc:3c:aa:7a:12:9a:4b:00:02:03:42:db:eb:3b: 8d:86:96:43:ff:07:b2:a6:87:ff:57:a0:40:2d:2b:1d:92:af: 66:0e:45:42:3d:ea:7b:51:7b:08:40:28:24:31:00:8f:a0:c8: 79:63:a6:2c:df:02:7a:e9:e5:c7:f1:54:e8:20:2f:e3:40:86: d7:63:b1:fb:f2:03:2b:38:25:ba:64:85:f4:98:b4:56:33:0c: bf:3e:0f:b7:3a:4c:cb:2b:7b:d6:17:ef:95:c0:0b:60:7b:be: db:aa:3b:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjQwNTE5MDI0MDQzWhcNMjQwNTI2MDI0MDQzWjAYMRYwFAYD VQQDEw02NjQ5NjZhYi0yNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa7gcRFChuACH6deOAKHMa9HCrTKvyLwbI5zSDd3ea0useu+EyJV/2f8xbd3 HsdaqKBjj+hGKs/D2d1wteOxV6khUEUujDPDlhtIEN1A1NsSJuBN0aE4u0kxfzSm VC0mwh0JoQYYM1WLyQauAOdCClN+vXr0P4POaFoiDhXhKqdLw/4gW3PtZ2+qMlU3 sAurNUA7EQoRaOZ5FfDjKMlW2mZI6DlFarsc7yl5thUnGyqRspE98IW0Bzj9vvzW I0Q9XBOqTGdCSkM3juZWUeyluCjjMWw9LH3+FQaNAAtLFZ0iGfJL68lGVxo2OhLs hOTLgL9/2O+fLPUOZibXC4axRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwy24o+ wqTBiBJweyJFank0aNxcMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcm/wx2EQE7W75xh4QA4csNXS/1g9IOrF3pZU2slpv8dyXVrAEBltZ WDC0T13GxEspVHGakXIfyfqYyfY/4nPa/odQxn8xoSq3gVmVaDdW+5EkDgpnviQq zxcPtZ7RJvzKM/A2SEnsIsDlP33sboHFyKgHb+xSN+zgHpYNHIDnr1icH8s48qt2 l4PcEWP+N42TKCBszDyqehKaSwACA0Lb6zuNhpZD/weypof/V6BALSsdkq9mDkVC Pep7UXsIQCgkMQCPoMh5Y6Ys3wJ66eXH8VToIC/jQIbXY7H78gMrOCW6ZIX0mLRW Mwy/Pg+3OkzLK3vWF++VwAtge77bqjvb -----END CERTIFICATE-----Generated at Sun May 19 03:38:13 2024 by rpki-client on console-ams.rpki-client.org