$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: lEfKxFXiMtdNrWFm2AVvKDZX8Fajbcr6vhNQiLAPIkk= Subject key identifier: 03:41:71:36:8F:C7:C0:27:17:D9:E5:76:A5:F0:2E:FD:6B:69:56:18 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0902 Signing time: Sat 18 May 2024 21:15:06 +0000 Manifest this update: Sat 18 May 2024 21:15:05 +0000 Manifest next update: Sat 25 May 2024 21:15:05 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: YUEcrAn9LdqUYpiFVaDRAfT7FP2LwFAgFPNgDO/3sN4=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: wD9pnjf/HuWd5KNHwqeLPmfmdJatBwE5mxFSZ4a1GKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: May 18 21:15:05 2024 GMT Not After : May 25 21:15:05 2024 GMT Subject: CN=66491a59-c9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:88:0b:cc:2a:4d:34:74:b5:0b:32:11:73: 43:af:b5:6c:de:6c:8b:8f:49:e4:ad:00:a5:1c:48: 77:3f:e7:3c:f5:59:e1:2b:f1:c1:9a:3d:6b:d3:f7: 70:28:88:81:57:10:db:db:10:0d:bd:d8:14:bf:56: 5a:41:ff:42:05:c4:78:c5:0a:5a:8e:7b:c9:b0:86: ae:42:85:a1:cd:50:8e:6b:8f:7d:29:c5:5c:bd:41: 6b:6e:22:ce:e0:f3:a4:f8:ee:d9:d2:5d:85:74:d8: 9b:b2:cf:7b:54:9f:f0:24:cf:d8:65:63:79:f2:f3: 9b:77:a7:68:a3:69:04:d8:97:3e:56:61:5c:24:37: ca:1b:fb:48:52:f4:5e:eb:d4:78:1d:f4:c9:23:34: 51:7d:33:8d:7d:cb:d0:18:9a:3f:df:b3:2e:e9:ce: 85:cb:49:6d:cb:e3:8a:97:27:e4:59:d2:2c:26:0c: 88:7f:2a:d7:53:29:39:9f:41:31:2a:04:76:7d:89: 5b:c4:4b:a9:53:40:38:84:99:e7:50:b2:dc:3d:53: b6:a7:9c:79:b2:83:d3:e3:81:70:5b:d4:4e:5d:6c: 29:d2:a1:86:e5:b7:6f:30:47:8d:7d:d1:26:a5:3a: 2d:27:bb:bc:8e:9c:70:33:7b:a0:ff:f5:04:5a:32: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:71:36:8F:C7:C0:27:17:D9:E5:76:A5:F0:2E:FD:6B:69:56:18 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9b:6c:49:bf:23:9f:58:e9:93:23:57:8d:6f:48:96:3e:7a: 62:b8:a3:af:31:7c:7b:d3:98:b5:46:4e:65:01:d8:45:17:76: 6f:3c:7c:a8:21:ce:eb:e7:42:2b:b3:df:ae:44:10:2b:0f:dd: ed:75:0d:2a:f9:b7:f2:c6:3c:c1:2f:b6:cb:dd:54:bc:f7:e3: 6f:d8:af:43:ef:8e:33:2e:21:35:cc:a8:07:15:d6:4f:c1:79: 2e:7d:15:a8:ec:90:65:18:a1:ee:c2:ed:f6:6e:d6:78:05:c0: 8e:7e:ba:88:53:42:8b:50:57:e8:6e:87:68:de:41:5c:bf:a4: 2e:08:23:34:74:18:48:e4:43:64:02:1a:05:ff:46:ef:0b:0a: 15:c6:ec:73:b3:35:6f:4a:c8:c0:c5:e1:37:24:96:9e:95:6e: 64:36:a1:7f:bf:2d:91:4b:f6:c7:40:28:71:b0:60:8f:5e:03: cd:eb:7d:f8:1b:c6:8c:16:36:96:a7:3b:24:86:ca:d5:cd:98: ee:e3:54:75:29:5f:b7:1c:33:7b:74:8e:5d:12:d8:95:6e:38: 72:6c:eb:bb:69:65:c5:1d:a0:18:4a:89:64:4e:ab:e3:0c:7d: 1e:1b:25:99:24:34:60:9d:8c:4e:e5:93:5d:8c:86:d8:22:0d: 85:43:b8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjQwNTE4MjExNTA1WhcNMjQwNTI1MjExNTA1WjAYMRYwFAYD VQQDEw02NjQ5MWE1OS1jOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE2IC8wqTTR0tQsyEXNDr7Vs3myLj0nkrQClHEh3P+c89VnhK/HBmj1r0/dw KIiBVxDb2xANvdgUv1ZaQf9CBcR4xQpajnvJsIauQoWhzVCOa499KcVcvUFrbiLO 4POk+O7Z0l2FdNibss97VJ/wJM/YZWN58vObd6doo2kE2Jc+VmFcJDfKG/tIUvRe 69R4HfTJIzRRfTONfcvQGJo/37Mu6c6Fy0lty+OKlyfkWdIsJgyIfyrXUyk5n0Ex KgR2fYlbxEupU0A4hJnnULLcPVO2p5x5soPT44FwW9ROXWwp0qGG5bdvMEeNfdEm pTotJ7u8jpxwM3ug//UEWjI7AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANBcTaP x8AnF9nldqXwLv1raVYYMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbm2xJvyOfWOmTI1eNb0iWPnpiuKOvMXx705i1Rk5lAdhFF3ZvPHyo Ic7r50Irs9+uRBArD93tdQ0q+bfyxjzBL7bL3VS89+Nv2K9D744zLiE1zKgHFdZP wXkufRWo7JBlGKHuwu32btZ4BcCOfrqIU0KLUFfobodo3kFcv6QuCCM0dBhI5ENk AhoF/0bvCwoVxuxzszVvSsjAxeE3JJaelW5kNqF/vy2RS/bHQChxsGCPXgPN6334 G8aMFjaWpzskhsrVzZju41R1KV+3HDN7dI5dEtiVbjhybOu7aWXFHaAYSolkTqvj DH0eGyWZJDRgnYxO5ZNdjIbYIg2FQ7iD -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org