$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft File: RxYGeFsy9N8-yUPyp4fbohJpbh8.mft (raw, json) Hash identifier: snjwXYxAc60wekmW8T2Z0D4ukAkiJc9vyeLUBwT6Mq4= Subject key identifier: 5D:DE:97:DA:0B:15:C2:44:67:7D:AD:CA:C3:23:D1:1B:54:45:C3:CF Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F Certificate issuer: /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F Certificate serial: 24E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft Manifest number: 24C9 Signing time: Wed 22 May 2024 16:06:07 +0000 Manifest this update: Wed 22 May 2024 16:06:07 +0000 Manifest next update: Wed 29 May 2024 16:06:07 +0000 Files and hashes: 1: RxYGeFsy9N8-yUPyp4fbohJpbh8.crl (hash: E5KdD5mWyYA5M2YC0b6NUPbktDogd8xlKk8TCsxKToc=) 2: 9E7A9830049911E89DF5A065C4F9AE02.roa (hash: TTyQzKMXjkPWyXvajVKaBFtUmzYEXlg1V3ki4Q5gLXA=) 3: A6A6CE0A54EC11E791C3F825C4F9AE02.roa (hash: 4QcgdmcvyPNdPhT87G+sQdUMVg68ImM1OW15fSmBLuk=) 4: 58EB6F3E115511EC97960769C4F9AE02.roa (hash: UeXSFF+zo/4rj+qYv4V/Cq4ESD6uTAvgoBhZgRFq1yI=) 5: 598E740E5A6011EDAF6FC679C4F9AE02.roa (hash: 3eeHDdujkj77hyV5pPsFs+/eKETlfaPERkEWNCG2P6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 15:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9447 (0x24e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F Validity Not Before: May 22 16:06:07 2024 GMT Not After : May 29 16:06:07 2024 GMT Subject: CN=664e17ef-9a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:58:78:22:f9:71:4f:f1:f4:85:2e:a8:f4:96: e4:29:93:09:fc:fc:50:87:ea:ba:f5:02:db:8b:60: 71:19:33:44:38:83:16:9c:6b:b2:80:00:4a:35:6e: e6:30:4d:94:d3:d2:59:05:68:22:53:57:3c:96:77: f4:61:c1:62:19:c1:15:56:60:76:de:b4:29:b1:e3: c5:88:62:8e:81:8f:60:80:52:cc:b4:85:e5:0e:8b: ec:00:ee:70:92:f6:b8:3b:1c:f7:b5:62:1e:a1:d7: d0:b3:f2:bb:3c:91:ff:8d:fd:e5:5e:70:7e:23:5e: fc:7e:cc:04:6c:32:b6:22:42:bc:45:fa:a5:ad:3c: 6c:f2:d7:19:4b:eb:3d:39:da:74:bc:42:8e:05:87: 76:66:74:69:fa:2c:c4:b6:63:16:aa:c2:79:c6:74: 34:d4:55:8f:fa:d3:b2:49:27:5b:86:0b:fa:ed:97: 23:9c:a9:1b:5e:2f:65:d0:be:31:a9:71:38:83:26: f2:dd:51:52:bf:e6:f8:93:71:f3:75:83:c9:40:09: 75:fc:ea:ac:3f:f7:a7:a2:6b:26:be:5c:82:53:77: dc:b3:3b:97:99:96:8b:ea:d2:0b:3d:68:0f:40:22: 59:85:21:6a:dc:03:56:ac:e0:4f:f7:dd:b8:30:24: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:97:DA:0B:15:C2:44:67:7D:AD:CA:C3:23:D1:1B:54:45:C3:CF X509v3 Authority Key Identifier: keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:85:72:2f:ea:c4:e9:9f:85:51:c4:e6:bb:09:42:5e:d0:44: 16:21:91:40:1c:66:c4:83:af:ed:7a:92:c6:b2:72:92:99:ad: af:ee:1d:8b:dd:af:51:1d:80:cc:b9:94:6f:31:d3:a9:89:09: 81:43:26:72:a4:6c:62:72:93:b4:a1:1d:68:61:1f:0f:af:86: 20:34:fc:8a:e8:2e:e8:ff:fb:77:9b:f5:0a:70:32:03:20:0b: e4:c2:1d:f5:5d:33:f6:e2:97:fa:96:6e:1b:7e:53:b6:4c:18: e4:6c:e5:4c:35:68:dc:45:50:76:d6:cc:ac:7b:5f:0e:c4:7c: 51:ac:8e:9b:fa:5f:08:d5:f7:ac:e3:f0:83:1f:43:45:da:14: 5b:12:49:37:b7:bc:82:9e:c2:50:85:84:94:e3:21:00:d7:c7: 89:36:53:6d:22:e6:9b:52:e1:f8:14:9e:6e:bc:10:60:98:ef: 32:1b:3b:88:e3:7f:d1:73:b4:fd:83:5c:4e:c5:a2:d8:d2:12: e5:f6:1f:8b:ba:6c:eb:47:38:da:cc:a4:55:65:ec:01:12:ac: 22:0f:ee:2f:12:3e:d9:78:ad:a5:97:6b:39:0b:95:6c:09:79: 47:21:49:3b:0a:ce:bf:cc:80:0c:e8:46:7c:2b:99:a3:80:bd: 68:30:8a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNGMkE3ODdEQkEy MTI2OTZFMUYwHhcNMjQwNTIyMTYwNjA3WhcNMjQwNTI5MTYwNjA3WjAYMRYwFAYD VQQDEw02NjRlMTdlZi05YTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1h4IvlxT/H0hS6o9JbkKZMJ/PxQh+q69QLbi2BxGTNEOIMWnGuygABKNW7m ME2U09JZBWgiU1c8lnf0YcFiGcEVVmB23rQpsePFiGKOgY9ggFLMtIXlDovsAO5w kva4Oxz3tWIeodfQs/K7PJH/jf3lXnB+I178fswEbDK2IkK8RfqlrTxs8tcZS+s9 Odp0vEKOBYd2ZnRp+izEtmMWqsJ5xnQ01FWP+tOySSdbhgv67ZcjnKkbXi9l0L4x qXE4gyby3VFSv+b4k3HzdYPJQAl1/OqsP/enomsmvlyCU3fcszuXmZaL6tILPWgP QCJZhSFq3ANWrOBP9924MCT68QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3el9oL FcJEZ32tysMj0RtURcPPMB8GA1UdIwQYMBaAFEcWBnhbMvTfPslD8qeH26ISaW4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyOC9GQUVGOENCRTEz NDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlOOC15VVB5cDRmYm9oSnBi aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4WUdlRnN5OU44LXlVUHlwNGZib2hKcGJoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkIyOC9GQUVGOENCRTEzNDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlO OC15VVB5cDRmYm9oSnBiaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/hXIv6sTpn4VRxOa7CUJe0EQWIZFAHGbEg6/tepLGsnKSma2v7h2L 3a9RHYDMuZRvMdOpiQmBQyZypGxicpO0oR1oYR8Pr4YgNPyK6C7o//t3m/UKcDID IAvkwh31XTP24pf6lm4bflO2TBjkbOVMNWjcRVB21syse18OxHxRrI6b+l8I1fes 4/CDH0NF2hRbEkk3t7yCnsJQhYSU4yEA18eJNlNtIuabUuH4FJ5uvBBgmO8yGzuI 43/Rc7T9g1xOxaLY0hLl9h+LumzrRzjazKRVZewBEqwiD+4vEj7ZeK2ll2s5C5Vs CXlHIUk7Cs6/zIAM6EZ8K5mjgL1oMIqa -----END CERTIFICATE-----Generated at Wed May 22 16:49:05 2024 by rpki-client on console-fra.rpki-client.org