$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft File: 9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json) Hash identifier: o88gQVjyTGuCWyPA4sBxVVsgR21zHmaFhMCkd3UhiJ0= Subject key identifier: 0A:BD:13:E1:C9:0E:AC:76:A4:12:58:FD:78:8C:81:5E:B1:E6:3C:66 Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft Manifest number: 06C3 Signing time: Sat 18 May 2024 23:03:12 +0000 Manifest this update: Sat 18 May 2024 23:03:11 +0000 Manifest next update: Sat 25 May 2024 23:03:11 +0000 Files and hashes: 1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: j8iYhowYgnc5ZOW5BftN7P4T6+INoRGzRrG0hCZE9UA=) 2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: coNsqWlIs1IR7kR/A8Mb6dILYr6YwFGx5wxCyfnD3SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Validity Not Before: May 18 23:03:11 2024 GMT Not After : May 25 23:03:11 2024 GMT Subject: CN=664933b0-231e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:ce:6a:0d:db:45:cc:40:64:06:93:c7:37: d3:75:3b:80:3e:6b:c1:b4:eb:fa:fa:1c:b1:a5:2e: 84:7d:25:2e:7a:c5:20:b4:f4:79:61:c2:bf:3f:20: fa:78:dc:33:2a:90:89:dc:a9:6f:1c:7a:98:8d:ca: 8f:f0:f5:94:5a:b4:c8:0e:13:71:d8:74:e0:27:ff: e1:0a:dd:6e:46:9e:2e:1d:6c:9d:b6:e1:41:eb:ae: e0:13:dd:ad:60:56:6d:3a:52:95:28:c7:fd:5f:6c: 36:06:8b:5f:36:bc:97:d1:f3:86:c7:3d:4b:04:66: e5:a4:88:17:84:01:4a:a1:c3:33:cd:aa:81:5b:a9: c3:46:33:e4:59:b0:25:d4:fb:05:cc:1a:85:64:01: 92:cf:4c:c1:55:04:c5:c3:94:5e:9d:63:14:ad:da: bf:da:a2:8f:fd:3c:61:0e:b6:67:53:90:7e:9d:d4: b1:34:6f:30:b8:1d:c7:49:d4:65:d1:bd:84:ef:97: 8f:74:e3:11:23:ef:a8:37:2b:96:ed:e5:01:22:8e: 60:40:1e:92:ac:cd:61:3b:68:a9:96:59:27:47:30: ad:77:e7:e3:f0:ed:c7:8a:1b:08:b9:90:1a:41:e4: a4:59:bb:76:e2:e0:4c:4b:b5:71:d3:e9:ab:8c:d3: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:13:E1:C9:0E:AC:76:A4:12:58:FD:78:8C:81:5E:B1:E6:3C:66 X509v3 Authority Key Identifier: keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:9d:74:63:95:f8:67:de:91:97:c0:e0:85:5b:da:a3:69: 3e:ee:2b:f9:1a:99:42:15:28:57:4a:5d:a7:87:29:1c:2a:5a: 3a:d8:8d:4e:91:4e:f0:f9:b2:84:b4:b1:f8:bb:52:e4:66:53: 29:c5:99:09:a7:59:04:00:8d:64:a1:7e:f2:e1:56:36:a8:d1: 70:c5:82:ca:e7:cc:18:07:7e:5b:9a:d2:67:9a:43:32:7c:20: ad:f2:e2:20:57:d7:3f:ef:90:04:a1:3d:b3:a6:8e:72:09:d4: 1d:47:b3:42:d5:71:56:bc:16:72:1a:b2:4d:50:22:66:01:81: 32:a1:d4:5a:b3:02:bc:97:10:03:93:3c:60:15:c3:2e:59:05: 05:23:21:74:71:54:0b:72:bb:0c:2f:a4:0a:c2:53:8b:84:51: 58:84:57:27:d1:60:ba:50:14:09:b4:28:58:40:2f:ec:a8:87: ce:63:60:50:c9:1f:10:96:b9:26:6f:f9:ec:e3:1a:ed:8b:e8: 2c:11:8f:e1:7f:e0:44:d2:f5:80:da:d4:0b:60:b1:dc:bf:af: 55:92:32:80:db:e3:eb:a3:48:1f:ab:cb:70:05:27:9b:0b:98: 6c:7c:0e:4e:4e:97:21:6b:bf:17:4f:dc:1f:7a:30:de:58:98: 73:21:d6:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk5MEUxMTAvBgNVBAUTKEY1RDA0NzQ5MERFM0E0RURDRkRDMzdGNkVDQUI5NDkz OERBN0M2RjYwHhcNMjQwNTE4MjMwMzExWhcNMjQwNTI1MjMwMzExWjAYMRYwFAYD VQQDEw02NjQ5MzNiMC0yMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WHOag3bRcxAZAaTxzfTdTuAPmvBtOv6+hyxpS6EfSUuesUgtPR5YcK/PyD6 eNwzKpCJ3KlvHHqYjcqP8PWUWrTIDhNx2HTgJ//hCt1uRp4uHWydtuFB667gE92t YFZtOlKVKMf9X2w2BotfNryX0fOGxz1LBGblpIgXhAFKocMzzaqBW6nDRjPkWbAl 1PsFzBqFZAGSz0zBVQTFw5RenWMUrdq/2qKP/TxhDrZnU5B+ndSxNG8wuB3HSdRl 0b2E75ePdOMRI++oNyuW7eUBIo5gQB6SrM1hO2ipllknRzCtd+fj8O3HihsIuZAa QeSkWbt24uBMS7Vx0+mrjNOlyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq9E+HJ Dqx2pBJY/XiMgV6x5jxmMB8GA1UdIwQYMBaAFPXQR0kN46Ttz9w39uyrlJONp8b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkwRS83RTQ2NEIzNDEw NTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBPM1AzRGYyN0t1VWs0Mm54 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlkQkhTUTNqcE8zUDNEZjI3S3VVazQybnh2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTkwRS83RTQ2NEIzNDEwNTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBP M1AzRGYyN0t1VWs0Mm54dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAam510Y5X4Z96Rl8DghVvao2k+7iv5GplCFShXSl2nhykcKlo62I1O kU7w+bKEtLH4u1LkZlMpxZkJp1kEAI1koX7y4VY2qNFwxYLK58wYB35bmtJnmkMy fCCt8uIgV9c/75AEoT2zpo5yCdQdR7NC1XFWvBZyGrJNUCJmAYEyodRaswK8lxAD kzxgFcMuWQUFIyF0cVQLcrsML6QKwlOLhFFYhFcn0WC6UBQJtChYQC/sqIfOY2BQ yR8Qlrkmb/ns4xrti+gsEY/hf+BE0vWA2tQLYLHcv69VkjKA2+Pro0gfq8twBSeb C5hsfA5OTpcha78XT9wfejDeWJhzIdZQ -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org