$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: 4jxhb3SqD8qcpQ7Kjxvp0cF7ZnUbCNHTXKna2UQj7Yw= Subject key identifier: 88:42:AC:7C:21:19:2A:CD:52:8C:73:AC:3F:7D:68:2E:36:8E:F9:E3 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0B6F Signing time: Sat 18 May 2024 19:32:55 +0000 Manifest this update: Sat 18 May 2024 19:32:54 +0000 Manifest next update: Sat 25 May 2024 19:32:54 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: /8u2lTFKdluktPaEK8/uRoBBwpht9Kso5nM1GX17jcg=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: ReXGjvFy+TWrsr7RgwOcoe4seJnPX23TJX01LZAfVPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: May 18 19:32:54 2024 GMT Not After : May 25 19:32:54 2024 GMT Subject: CN=66490266-30ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:cb:19:89:37:65:44:25:71:0e:af:48:59: cc:7e:d4:37:c6:b8:f2:f7:69:5e:62:34:1f:b8:08: 0c:45:57:3f:84:90:6b:43:9a:ff:f2:f1:93:30:0d: d0:eb:2b:0f:fa:11:df:67:97:81:a9:2e:4e:fc:d5: c4:76:86:5e:d7:38:d9:13:64:c0:e1:34:e3:a2:51: 52:37:42:f2:64:d4:d0:ca:8b:e9:75:5f:94:8e:e1: 55:d4:4e:1e:36:03:b1:3a:0e:5e:fa:72:d3:20:5e: 07:44:55:00:92:ec:0a:7d:be:1d:db:ee:87:0e:57: 05:18:ed:7d:43:29:45:a5:83:96:c4:ea:49:38:fe: e5:47:ba:b7:c1:77:78:0a:9e:b6:8a:50:74:09:e6: 70:31:55:b6:e5:88:be:62:8d:54:e8:51:23:3a:43: 52:51:02:4c:f6:32:3a:86:42:16:ec:81:fe:3f:47: bd:58:12:8f:06:5f:55:3e:d1:93:32:9a:9b:27:6e: bb:a4:29:ac:bd:a3:90:39:44:7f:c1:dd:2a:1a:f8: a3:fc:3b:d5:49:28:38:cf:da:4d:36:65:9b:c7:7e: ba:a3:4d:7d:fa:cf:46:75:b9:02:ba:7f:d5:34:38: 9f:e5:ef:79:16:dd:0e:08:b2:e1:06:31:26:01:ad: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:AC:7C:21:19:2A:CD:52:8C:73:AC:3F:7D:68:2E:36:8E:F9:E3 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e4:05:cc:04:68:08:11:fa:0c:7a:5a:0b:a9:7c:0d:6c:26: 89:b0:27:60:c9:43:b6:b0:2f:d3:3d:21:71:66:31:05:ed:29: 8a:c6:fe:06:c6:65:6b:43:63:d7:ff:eb:d0:6b:92:f0:1a:c8: 7f:0b:2f:d6:b7:00:87:80:5d:5b:8f:a4:7c:0f:92:97:f5:8f: 5a:9c:2a:1e:68:c7:2a:5f:3a:76:4a:2f:86:c5:bf:f2:ca:77: 86:e7:03:40:be:4f:a9:95:45:6f:3c:f4:92:77:fc:35:71:f2: 76:8b:65:6e:93:0a:21:0f:fe:7a:5a:d6:3a:e0:da:38:c4:56: 92:7b:66:e5:f9:2c:24:43:14:0b:94:47:7a:82:ce:9f:cc:c8: 91:b3:96:0c:e2:de:30:7a:92:bb:c9:5e:88:e6:49:16:c6:8d: be:94:eb:a6:b9:4e:bb:7e:8b:7c:4f:13:54:67:29:56:a0:c5: bd:8f:ea:f1:37:f7:e3:fa:88:80:dc:ec:29:99:b1:e6:83:1d: e5:fe:54:36:2d:c9:33:d0:2c:19:ad:e8:fb:6b:fe:48:9d:4e: 8e:e6:fa:0c:38:48:52:cd:1c:31:f4:ef:0f:54:c7:ab:ab:91: 0e:ec:e8:42:e1:d4:b0:72:37:90:93:59:9f:64:6d:50:08:77: 1b:ee:2f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjQwNTE4MTkzMjU0WhcNMjQwNTI1MTkzMjU0WjAYMRYwFAYD VQQDEw02NjQ5MDI2Ni0zMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4TLGYk3ZUQlcQ6vSFnMftQ3xrjy92leYjQfuAgMRVc/hJBrQ5r/8vGTMA3Q 6ysP+hHfZ5eBqS5O/NXEdoZe1zjZE2TA4TTjolFSN0LyZNTQyovpdV+UjuFV1E4e NgOxOg5e+nLTIF4HRFUAkuwKfb4d2+6HDlcFGO19QylFpYOWxOpJOP7lR7q3wXd4 Cp62ilB0CeZwMVW25Yi+Yo1U6FEjOkNSUQJM9jI6hkIW7IH+P0e9WBKPBl9VPtGT MpqbJ267pCmsvaOQOUR/wd0qGvij/DvVSSg4z9pNNmWbx366o019+s9GdbkCun/V NDif5e95Ft0OCLLhBjEmAa3hwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhCrHwh GSrNUoxzrD99aC42jvnjMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM5AXMBGgIEfoMeloLqXwNbCaJsCdgyUO2sC/TPSFxZjEF7SmKxv4G xmVrQ2PX/+vQa5LwGsh/Cy/WtwCHgF1bj6R8D5KX9Y9anCoeaMcqXzp2Si+Gxb/y yneG5wNAvk+plUVvPPSSd/w1cfJ2i2VukwohD/56WtY64No4xFaSe2bl+SwkQxQL lEd6gs6fzMiRs5YM4t4wepK7yV6I5kkWxo2+lOumuU67fot8TxNUZylWoMW9j+rx N/fj+oiA3OwpmbHmgx3l/lQ2Lckz0CwZrej7a/5InU6O5voMOEhSzRwx9O8PVMer q5EO7OhC4dSwcjeQk1mfZG1QCHcb7i9/ -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org