$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json) Hash identifier: r390tsD9mKbWBbT1IoB1TIoBqIlDDDJsxROOYqe58ss= Subject key identifier: 60:9B:1D:CB:1F:3A:3D:39:91:90:D1:86:15:1F:26:5C:41:95:2F:9F Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft Manifest number: 011D Signing time: Sun 19 May 2024 05:10:33 +0000 Manifest this update: Sun 19 May 2024 05:10:32 +0000 Manifest next update: Sun 26 May 2024 05:10:32 +0000 Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: 3o6cPZUcQUZTK8UpSjcSuTGq7rjrYa32Qr6OoXzT9vY=) 2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: eDs+FODPLbK7SjrVCnnoIgwxQiFL07sdUe8HcBgP7UM=) 3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: pujMxtoo+tJ02ejKBhAkFQHZrtWu3mNa4zr0PAQ/itc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Validity Not Before: May 19 05:10:32 2024 GMT Not After : May 26 05:10:32 2024 GMT Subject: CN=664989c9-23dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:9a:8d:52:91:90:ed:40:37:49:32:c0:88: c5:dc:87:89:8f:3a:ed:b0:3e:71:d3:5b:ce:69:c2: 50:83:8e:75:48:9c:5d:a3:30:b8:fc:a2:a9:7c:53: ec:25:1f:56:36:d0:d9:e4:74:cf:f2:87:9a:df:ad: 18:b6:c8:2a:66:c3:8b:e0:17:cd:9f:9e:60:20:60: 68:b1:28:b6:9b:c6:f0:ec:03:ff:87:6c:23:c8:a7: 32:17:10:ca:bd:4a:ae:92:8d:6b:c2:14:70:76:31: c0:12:9d:b7:1e:ee:d7:29:3a:b6:e6:22:0c:79:d2: fe:1a:f3:ab:7e:d1:39:c5:0e:f6:d2:7e:46:bb:fe: 77:59:b9:9c:b2:a1:38:11:fb:f8:cc:97:9d:f3:ee: df:c3:5f:9e:4d:75:c3:54:bf:fe:58:a5:a8:35:d0: f2:fb:a6:e1:ff:d6:12:f9:c6:d6:c5:74:34:ef:d6: b2:b4:69:29:88:b3:85:73:73:d7:32:a9:f4:8a:c1: 7c:ea:b8:19:55:cf:52:ee:b9:05:e1:0d:5a:d5:ca: 1a:32:c6:ec:a3:96:09:3c:8b:fe:f2:ae:d5:a6:99: 38:94:8d:cb:cd:d2:20:32:3c:1b:7b:18:59:36:3d: 84:12:df:21:70:ec:08:c3:3a:ef:dc:74:5a:00:3f: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9B:1D:CB:1F:3A:3D:39:91:90:D1:86:15:1F:26:5C:41:95:2F:9F X509v3 Authority Key Identifier: keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:45:e1:2c:85:8c:1d:53:4a:97:d0:d2:5b:f4:e9:6b:11: 6f:72:86:b5:5c:eb:e0:14:54:74:a6:25:12:66:e0:16:db:45: c4:f8:41:a9:2a:e3:a4:11:45:db:20:43:6e:bd:a4:7b:48:39: ff:58:e3:e0:5d:19:f2:0e:b0:1d:f4:82:cd:49:f5:2a:7e:7b: b4:8c:00:af:2e:8c:7a:1b:70:f9:e5:86:65:e5:52:ad:cf:b4: 50:9b:7d:0d:1d:35:06:68:16:12:25:af:f4:67:76:79:2b:68: a4:f6:93:38:f8:dd:a1:2f:53:d5:be:bc:ec:3b:c1:f1:36:72: 9b:c4:0c:6c:38:be:6d:02:cd:a5:6c:9b:90:cf:6a:71:3c:8d: b3:eb:5e:3b:59:26:95:11:b6:f0:6b:79:2b:16:45:59:d0:3c: c3:16:5f:a0:f7:66:36:0d:85:68:5d:76:9d:2b:32:d0:44:c1: 3a:55:5e:e3:7d:5f:ea:26:bf:59:57:08:3f:5f:52:bc:42:cb: 98:8a:64:5b:28:cc:ab:10:ff:96:65:e8:2c:11:04:b7:9a:a7: 1d:98:ef:d3:29:77:35:ef:bd:9d:d9:2f:65:90:b8:c2:a7:58: 6a:ba:29:75:c8:ff:62:e5:f8:e3:76:ca:fe:34:1f:48:eb:96: e6:32:90:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD MzEyQzZCRUIwHhcNMjQwNTE5MDUxMDMyWhcNMjQwNTI2MDUxMDMyWjAYMRYwFAYD VQQDEw02NjQ5ODljOS0yM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXeajVKRkO1AN0kywIjF3IeJjzrtsD5x01vOacJQg451SJxdozC4/KKpfFPs JR9WNtDZ5HTP8oea360YtsgqZsOL4BfNn55gIGBosSi2m8bw7AP/h2wjyKcyFxDK vUquko1rwhRwdjHAEp23Hu7XKTq25iIMedL+GvOrftE5xQ720n5Gu/53WbmcsqE4 Efv4zJed8+7fw1+eTXXDVL/+WKWoNdDy+6bh/9YS+cbWxXQ079aytGkpiLOFc3PX Mqn0isF86rgZVc9S7rkF4Q1a1coaMsbso5YJPIv+8q7Vppk4lI3LzdIgMjwbexhZ Nj2EEt8hcOwIwzrv3HRaAD/srwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCbHcsf Oj05kZDRhhUfJlxBlS+fMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtlEXhLIWMHVNKl9DSW/TpaxFvcoa1XOvgFFR0piUSZuAW20XE+EGp KuOkEUXbIENuvaR7SDn/WOPgXRnyDrAd9ILNSfUqfnu0jACvLox6G3D55YZl5VKt z7RQm30NHTUGaBYSJa/0Z3Z5K2ik9pM4+N2hL1PVvrzsO8HxNnKbxAxsOL5tAs2l bJuQz2pxPI2z6147WSaVEbbwa3krFkVZ0DzDFl+g92Y2DYVoXXadKzLQRME6VV7j fV/qJr9ZVwg/X1K8QsuYimRbKMyrEP+WZegsEQS3mqcdmO/TKXc1772d2S9lkLjC p1hquil1yP9i5fjjdsr+NB9I65bmMpAm -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org