$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: sDlF7gczypN+HHlfsYb8+L52m2mCzb6qqWo0EJkG7bA= Subject key identifier: 32:6F:D6:F9:8C:00:E0:12:7A:6D:86:44:77:F6:4E:1A:95:35:CC:86 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 171F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 1719 Signing time: Sat 18 May 2024 17:04:24 +0000 Manifest this update: Sat 18 May 2024 17:04:23 +0000 Manifest next update: Sat 25 May 2024 17:04:23 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: HoItJVNUAQEmGMh0h4XoHpQNabE1PVv54Q2z08Se5UQ=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: Uf986y6Mi5kvjc/iNbx/Jr+Q6wzAToORrIe+TwahKDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5919 (0x171f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: May 18 17:04:23 2024 GMT Not After : May 25 17:04:23 2024 GMT Subject: CN=6648df97-fd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:aa:a3:5e:7f:97:6b:71:f2:bf:67:9e:a8: a3:a5:16:c8:cd:c1:b1:83:c0:2d:b5:6f:42:97:01: d5:f4:f6:f9:9a:34:ba:73:84:dc:3d:8e:1c:c9:92: 69:fb:ad:bd:b5:ea:4f:6e:f5:95:fb:26:5c:46:4d: 57:ec:a8:7f:ed:3d:c3:f2:aa:15:53:ac:3c:47:e2: 9c:3c:4c:4a:2e:ec:3c:c8:6a:32:c8:21:dd:cf:94: 1d:bd:a0:8b:5d:1c:35:78:f4:19:2b:fe:33:e5:4b: 12:b0:54:03:a7:50:8d:a9:5b:ed:e5:0d:cc:5c:be: 18:b8:14:9f:94:8f:e5:20:1c:57:1e:2e:c3:8d:d5: 58:f5:10:05:f2:d1:30:8e:e3:83:cc:dc:65:f6:b2: d6:f3:30:18:48:08:0b:f0:6f:c0:10:2a:a8:4d:12: fd:62:f9:fa:d3:4c:27:7c:aa:17:f6:94:a9:b0:ad: 1b:5f:f5:03:a5:92:ad:7a:ce:12:16:1a:04:ed:f2: 4f:56:80:a4:d5:48:b9:c1:85:92:34:17:ff:2c:90: e4:de:cc:0a:5d:97:52:db:2b:dc:ed:79:ee:11:04: 8e:85:6f:1f:ac:f1:66:98:77:b9:ea:32:2b:27:68: 51:21:56:b0:6d:a5:63:a8:8c:78:7c:da:32:13:e4: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6F:D6:F9:8C:00:E0:12:7A:6D:86:44:77:F6:4E:1A:95:35:CC:86 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a1:3f:88:dd:08:70:a9:f5:63:0f:7d:d8:b4:40:a2:24:10: 5e:7a:13:f6:9b:a5:d6:68:c3:28:aa:0b:17:5b:de:83:87:fd: ce:13:93:68:bb:08:cb:23:12:21:cf:bb:44:6e:3a:c1:d1:a2: 3d:07:56:f2:dc:6d:e4:be:da:fd:98:e7:cf:f8:55:25:21:05: 0e:fd:81:23:34:7d:3d:03:cb:cb:25:b2:18:93:10:bf:52:13: 3b:1b:e1:78:7e:a6:dc:a7:2e:30:42:87:05:d1:47:cb:4c:ce: 34:54:a0:7e:85:db:7d:e3:75:20:08:d4:8d:f8:aa:b5:df:a7: 5d:17:ea:fa:e3:74:8c:38:f0:4a:72:0d:1c:ce:5e:f4:60:30: c8:e9:75:67:e8:b2:86:a2:0a:78:db:4f:54:67:34:d8:7d:18: e8:9e:e5:3c:4c:71:ed:a3:49:0e:bf:b2:0c:3f:00:b2:59:55: 8a:35:7b:1e:fe:e4:2c:13:a5:57:2b:60:12:49:4f:5a:24:1d: d9:9e:55:8a:93:7f:fb:07:ec:38:bc:2b:07:fc:d8:69:7d:f1: 81:bf:8c:4d:12:53:f0:05:14:cd:cd:0c:11:89:87:3e:b2:5e: 57:d9:44:9d:55:1f:ba:32:90:7d:68:22:91:50:f1:06:2a:87: 0c:02:11:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjQwNTE4MTcwNDIzWhcNMjQwNTI1MTcwNDIzWjAYMRYwFAYD VQQDEw02NjQ4ZGY5Ny1mZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R6qo15/l2tx8r9nnqijpRbIzcGxg8AttW9ClwHV9Pb5mjS6c4TcPY4cyZJp +629tepPbvWV+yZcRk1X7Kh/7T3D8qoVU6w8R+KcPExKLuw8yGoyyCHdz5QdvaCL XRw1ePQZK/4z5UsSsFQDp1CNqVvt5Q3MXL4YuBSflI/lIBxXHi7DjdVY9RAF8tEw juODzNxl9rLW8zAYSAgL8G/AECqoTRL9Yvn600wnfKoX9pSpsK0bX/UDpZKtes4S FhoE7fJPVoCk1Ui5wYWSNBf/LJDk3swKXZdS2yvc7XnuEQSOhW8frPFmmHe56jIr J2hRIVawbaVjqIx4fNoyE+Q6cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJv1vmM AOASem2GRHf2ThqVNcyGMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAloT+I3QhwqfVjD33YtECiJBBeehP2m6XWaMMoqgsXW96Dh/3OE5No uwjLIxIhz7tEbjrB0aI9B1by3G3kvtr9mOfP+FUlIQUO/YEjNH09A8vLJbIYkxC/ UhM7G+F4fqbcpy4wQocF0UfLTM40VKB+hdt943UgCNSN+Kq136ddF+r643SMOPBK cg0czl70YDDI6XVn6LKGogp4209UZzTYfRjonuU8THHto0kOv7IMPwCyWVWKNXse /uQsE6VXK2ASSU9aJB3ZnlWKk3/7B+w4vCsH/NhpffGBv4xNElPwBRTNzQwRiYc+ sl5X2USdVR+6MpB9aCKRUPEGKocMAhGh -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org