$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft File: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json) Hash identifier: A6pNzetuFG1uFKkt1ch+k1jwA0PXWHHlh8cHKUyBVQ8= Subject key identifier: 88:72:D7:99:71:F6:C6:28:6F:FF:34:4D:20:D9:0A:64:E7:74:C5:8F Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 Certificate issuer: /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft Manifest number: DB Signing time: Sun 19 May 2024 06:05:55 +0000 Manifest this update: Sun 19 May 2024 06:05:55 +0000 Manifest next update: Sun 26 May 2024 06:05:55 +0000 Files and hashes: 1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: R2CtI1YwZ7QpERSIAwThbekRErcMnfrp9LpDO02cqcA=) 2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: n6K4D2BF6Z/jg8pmMgx23T1tIpkzmfvCsXfhNFPSXIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714 Validity Not Before: May 19 06:05:55 2024 GMT Not After : May 26 06:05:55 2024 GMT Subject: CN=664996c3-ad7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:3f:0e:e8:68:e0:70:4d:c6:b8:44:e6:16: 2f:c6:86:fd:6b:ba:74:b1:5b:92:7a:14:9a:6b:e7: b4:a1:c9:96:80:c5:25:dc:e3:a4:d8:ea:15:c0:e6: d4:96:e9:bf:e7:ab:c0:ff:1d:6d:49:48:57:bf:f8: f2:69:35:03:7b:63:1a:3b:36:2f:2e:59:a1:74:fd: d5:93:e3:72:46:3c:0e:57:67:e7:24:18:5f:77:a2: 91:23:65:b7:4f:0a:1b:e1:00:c7:da:d5:9c:cd:d8: 29:4a:37:10:82:33:a7:50:4a:28:c8:f9:7a:0e:77: 21:75:ea:75:e0:54:f4:4b:6b:45:b8:52:da:fa:d0: fa:65:c0:36:c4:f2:57:23:01:97:e1:5d:b3:a9:c6: 5b:62:2f:54:fe:12:20:41:7d:c2:b9:88:51:1a:57: ad:23:84:74:1c:45:09:8d:c8:74:10:05:70:8b:97: d2:09:f7:b1:b2:35:12:ea:9d:78:8c:fe:8b:20:eb: 78:27:46:d7:b3:21:e0:ab:18:7d:ed:cf:45:d8:27: 68:aa:d9:14:30:a1:34:f2:23:1f:18:c5:c7:e7:2d: 3f:9f:96:56:14:a4:cf:6a:c2:cc:95:28:be:c5:66: 91:1f:34:b0:d0:12:43:ad:4a:1d:99:c3:0a:32:e4: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:D7:99:71:F6:C6:28:6F:FF:34:4D:20:D9:0A:64:E7:74:C5:8F X509v3 Authority Key Identifier: keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:27:5e:55:9f:11:ab:51:5a:49:2e:48:10:74:b6:a8:dd:87: b7:0b:4e:ba:5a:02:04:bf:73:af:df:d2:c2:ee:a7:97:fa:50: 44:39:3f:41:44:62:3e:22:13:54:08:3a:75:98:37:32:53:9e: 3c:d7:75:a2:f7:d9:97:29:8d:b8:49:60:46:75:db:46:36:ee: f8:9b:ed:b4:8e:9c:96:24:79:c4:af:8f:ba:83:e2:a7:2c:b6: 78:7b:92:70:da:65:dc:7b:75:60:4c:03:a4:91:87:88:99:6d: 11:5f:42:6f:72:05:14:9a:cd:41:08:32:17:59:ca:5b:c0:1e: 27:59:c2:2f:0f:12:42:56:89:d3:58:28:9a:00:42:70:70:19: 4d:97:c0:7a:6d:15:73:3c:c0:d9:53:a1:0e:d7:ae:7c:f2:a0: c5:aa:93:61:54:14:74:56:29:56:d2:42:07:5e:f4:df:83:e4: ee:d8:b7:10:ac:c9:ce:89:2c:10:bd:e0:6c:44:9a:d1:d0:5a: 3a:a5:c2:0e:40:05:30:f4:33:e0:96:73:1e:93:ce:66:08:64: a7:16:e7:64:45:ce:3e:8b:10:01:7f:15:0c:67:5f:d3:94:41: 43:e0:72:3f:fe:12:d0:ca:3d:b3:d1:1e:c3:4f:fc:26:16:8f: 2d:0f:1d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3 MzJENjc3MTQwHhcNMjQwNTE5MDYwNTU1WhcNMjQwNTI2MDYwNTU1WjAYMRYwFAYD VQQDEw02NjQ5OTZjMy1hZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY0/Duho4HBNxrhE5hYvxob9a7p0sVuSehSaa+e0ocmWgMUl3OOk2OoVwObU lum/56vA/x1tSUhXv/jyaTUDe2MaOzYvLlmhdP3Vk+NyRjwOV2fnJBhfd6KRI2W3 Twob4QDH2tWczdgpSjcQgjOnUEooyPl6Dnchdep14FT0S2tFuFLa+tD6ZcA2xPJX IwGX4V2zqcZbYi9U/hIgQX3CuYhRGletI4R0HEUJjch0EAVwi5fSCfexsjUS6p14 jP6LIOt4J0bXsyHgqxh97c9F2CdoqtkUMKE08iMfGMXH5y0/n5ZWFKTPasLMlSi+ xWaRHzSw0BJDrUodmcMKMuR4TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhy15lx 9sYob/80TSDZCmTndMWPMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3 V3JUNkhDSmNEejF6TFdkeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArJ15VnxGrUVpJLkgQdLao3Ye3C066WgIEv3Ov39LC7qeX+lBEOT9B RGI+IhNUCDp1mDcyU54813Wi99mXKY24SWBGddtGNu74m+20jpyWJHnEr4+6g+Kn LLZ4e5Jw2mXce3VgTAOkkYeImW0RX0JvcgUUms1BCDIXWcpbwB4nWcIvDxJCVonT WCiaAEJwcBlNl8B6bRVzPMDZU6EO16588qDFqpNhVBR0VilW0kIHXvTfg+Tu2LcQ rMnOiSwQveBsRJrR0Fo6pcIOQAUw9DPglnMek85mCGSnFudkRc4+ixABfxUMZ1/T lEFD4HI//hLQyj2z0R7DT/wmFo8tDx29 -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org