$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: CrXchvhXxm2FOjtH7BNtS3oFj60t8o9OgM1FNEcDSOs= Subject key identifier: FF:83:24:6D:CF:C9:9C:E1:14:32:25:FE:36:A9:9A:D7:1E:53:AE:A2 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 7B Signing time: Sun 19 May 2024 07:19:38 +0000 Manifest this update: Sun 19 May 2024 07:19:38 +0000 Manifest next update: Sun 26 May 2024 07:19:38 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: S3d6rqBftBUFsd9aKcDNh4Z2mftlNA4jgrQAlSrQI1k=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: W15tb+7+a4VOZZM16otpW1viHRyC/Bw3dBhXfgeUMMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: May 19 07:19:38 2024 GMT Not After : May 26 07:19:38 2024 GMT Subject: CN=6649a80a-886c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:b7:30:ac:ef:5b:d5:fc:d2:32:0e:64:c8: 15:97:86:ea:5c:f6:6b:63:16:52:0f:dd:96:e6:bc: 0f:11:e5:17:fb:7e:1e:00:b9:6c:da:2d:bb:01:3b: 71:6d:6b:d0:7d:bf:aa:19:c2:8d:c6:90:01:f7:6b: 6d:d0:3c:65:87:2f:f5:80:9f:1e:0e:27:bb:cb:e3: f9:77:cd:a7:a0:00:81:ec:66:a8:c4:5e:89:f7:25: 27:9f:82:c3:41:e2:14:6b:bc:3e:ca:58:b6:3b:26: f0:bb:2a:66:c6:83:1c:2d:43:9b:9e:24:12:f9:8e: 76:d9:eb:22:a8:3f:95:60:e2:b1:a8:79:73:8b:4a: 34:e5:81:b9:b5:cd:2b:68:2b:26:dd:12:c0:e0:0e: 00:50:2d:5a:47:d9:a3:c3:2c:93:7a:43:f1:bd:03: a6:91:e4:9a:76:2f:d7:ab:1e:9b:22:78:ab:88:3a: 46:a6:e9:88:b4:f2:75:2c:07:d7:d0:d7:9e:bc:67: 11:f5:4e:8c:49:2f:2b:36:0c:3f:b3:0f:7b:d4:5e: 7f:bd:89:3a:f3:9b:66:ed:48:c1:38:44:7b:55:29: e8:2c:eb:69:69:ff:a7:88:a9:75:b1:ac:dc:14:1b: e8:f1:9f:da:95:3e:d6:9e:e1:50:b9:6c:0a:5d:35: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:24:6D:CF:C9:9C:E1:14:32:25:FE:36:A9:9A:D7:1E:53:AE:A2 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5a:0f:ee:3a:e6:a4:22:00:72:ee:9c:84:5c:fa:97:6a:e7: 52:fc:ae:58:94:e7:b3:98:91:11:4b:07:54:d1:a0:80:e3:1c: ff:2e:77:92:c4:3b:b5:5f:71:df:56:71:6d:2b:84:29:2d:7a: b2:63:42:d8:a7:7e:99:90:36:26:6c:3e:6f:44:fe:00:01:cd: 4e:be:37:76:1f:d5:b1:0d:92:1b:91:eb:63:d9:10:15:f6:d4: 2b:96:a8:d1:64:38:8b:53:f9:5d:bd:4f:1f:ae:84:5d:e8:0f: 80:32:5f:1f:7b:2c:cd:22:f7:34:33:4f:93:6f:06:6b:9b:fb: ae:ab:91:41:59:0c:64:04:cd:47:8f:27:af:f3:ec:bd:bc:75: 3f:9a:c3:62:b3:de:5a:2b:28:bb:29:e6:10:5c:41:8b:63:93: a9:ca:dd:c0:7a:f6:88:ec:02:66:9b:65:8b:88:5e:31:e9:8e: af:11:25:b2:36:3e:1f:81:87:3f:81:57:cb:50:80:63:82:82: db:dd:41:c9:39:d8:43:02:0b:59:0a:3b:18:fb:d8:83:ba:2f: da:a0:0b:d0:aa:fc:07:a5:74:95:4a:75:6f:41:2f:11:36:d5: 33:59:88:56:cc:ea:ef:34:f7:94:a6:51:ed:2a:2c:57:8f:92: da:d5:f7:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzFGOTExMC8GA1UEBRMoRjUxQzFCQ0QwREJDMTM1QTZEOUJDNDVBQjA1OUU2REUy N0U5M0IwMzAeFw0yNDA1MTkwNzE5MzhaFw0yNDA1MjYwNzE5MzhaMBgxFjAUBgNV BAMTDTY2NDlhODBhLTg4NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTvbcwrO9b1fzSMg5kyBWXhupc9mtjFlIP3ZbmvA8R5Rf7fh4AuWzaLbsBO3Ft a9B9v6oZwo3GkAH3a23QPGWHL/WAnx4OJ7vL4/l3zaegAIHsZqjEXon3JSefgsNB 4hRrvD7KWLY7JvC7KmbGgxwtQ5ueJBL5jnbZ6yKoP5Vg4rGoeXOLSjTlgbm1zSto KybdEsDgDgBQLVpH2aPDLJN6Q/G9A6aR5Jp2L9erHpsieKuIOkam6Yi08nUsB9fQ 1568ZxH1ToxJLys2DD+zD3vUXn+9iTrzm2btSME4RHtVKegs62lp/6eIqXWxrNwU G+jxn9qVPtae4VC5bApdNX6lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/4Mkbc/J nOEUMiX+Nqma1x5TrqIwHwYDVR0jBBgwFoAU9RwbzQ28E1ptm8RasFnm3ifpOwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMUY5LzdFNDM3RDA2NUQz QjExRUVBMjE1RkQ3MkM0RjlBRTAyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVJ3YnpRMjhFMXB0bThSYXNGbm0zaWZwT3dNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MUY5LzdFNDM3RDA2NUQzQjExRUVBMjE1RkQ3MkM0RjlBRTAyLzlSd2J6UTI4RTFw dG04UmFzRm5tM2lmcE93TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGtaD+465qQiAHLunIRc+pdq51L8rliU57OYkRFLB1TRoIDjHP8ud5LE O7Vfcd9WcW0rhCkterJjQtinfpmQNiZsPm9E/gABzU6+N3Yf1bENkhuR62PZEBX2 1CuWqNFkOItT+V29Tx+uhF3oD4AyXx97LM0i9zQzT5NvBmub+66rkUFZDGQEzUeP J6/z7L28dT+aw2Kz3lorKLsp5hBcQYtjk6nK3cB69ojsAmabZYuIXjHpjq8RJbI2 Ph+Bhz+BV8tQgGOCgtvdQck52EMCC1kKOxj72IO6L9qgC9Cq/AeldJVKdW9BLxE2 1TNZiFbM6u8095SmUe0qLFePktrV94w= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org