$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: JPTE57hUkS679utTCWajtX6pAg45JK3QspetGHZyULM= Subject key identifier: 63:29:5E:4C:D0:96:EA:6D:7E:AE:32:32:4B:22:36:04:B1:1C:88:30 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0BE2 Signing time: Sat 18 May 2024 19:03:21 +0000 Manifest this update: Sat 18 May 2024 19:03:21 +0000 Manifest next update: Sat 25 May 2024 19:03:21 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: wr27jrRwrISpRYWVviJzh01Zu3UWXsu1QFDKOZu7wpU=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: pjMkyMYT5Kd5Onu44Wh/MhrOgUl1AW4Ni8kXARqOIXE=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: UlDA7w/+0KHaD2dlRNhXd2T+XWH2yCwy1a4TnLwF5+c=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: KOkcxFkgs+tvKpwVSPTdbjlP2a3aZlPgsitLXyhAd5s=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: ibj8KgitiLOO63xInpDEW7gNAYWQe6nI4+x8vt/ZxMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3066 (0xbfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: May 18 19:03:21 2024 GMT Not After : May 25 19:03:21 2024 GMT Subject: CN=6648fb79-3b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:80:a6:50:59:db:ee:eb:97:86:f0:68:48: a3:a5:82:91:13:a2:b1:eb:17:62:f1:9a:1e:25:ad: 70:cd:e7:ce:b9:a1:f6:cf:ed:e4:ce:59:70:03:16: 45:05:a1:12:80:39:bf:80:5c:6c:9c:ae:e6:65:c5: 6b:41:22:32:75:03:b8:6c:40:7a:f2:ab:95:b7:bc: 93:c5:9a:25:05:90:7c:36:0e:b2:35:3a:fd:7c:1c: bb:28:e3:11:f4:1b:fd:8a:9e:b3:c0:04:aa:fa:97: 93:86:ad:6a:1c:8a:bf:f0:6a:17:94:1d:9b:5d:f5: ef:ba:b5:57:90:4d:b3:f5:b6:81:58:6a:93:e4:d1: c0:eb:ee:2d:b6:36:46:87:13:f7:1a:e4:63:d2:dc: 30:1a:9a:00:c7:eb:f9:77:f1:1c:b1:99:b5:e3:71: 8b:fb:c7:f3:9b:ba:37:d1:9c:0e:0a:d8:9b:b9:0d: 72:57:20:56:d3:a5:03:58:46:fb:6a:78:52:60:2e: 38:f4:62:17:9d:04:b6:90:ce:37:d2:43:e0:dd:6e: d0:7e:eb:bf:38:32:ab:1b:b2:ef:8b:e5:a7:25:15: ac:74:1c:3b:47:fb:c9:00:18:73:15:90:87:1a:4b: ab:42:04:13:ea:ef:d9:ed:a7:da:ec:f5:3c:5f:5a: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:5E:4C:D0:96:EA:6D:7E:AE:32:32:4B:22:36:04:B1:1C:88:30 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:11:e8:0a:52:1b:45:c3:4f:9a:1d:2d:a3:9c:5a:5d:b3: 2b:16:df:b4:02:47:3d:2c:02:92:4e:f0:42:d0:39:73:b8:2e: a8:7e:30:3f:6b:b8:be:7b:a2:28:81:d3:0e:9f:b7:62:55:c9: 03:76:37:d7:ce:cd:33:a6:75:14:b5:e9:7d:ae:0a:2b:32:a1: c3:4a:6d:ad:2c:0b:10:62:82:f8:16:4f:84:b8:f8:35:3b:85: 38:b9:53:c5:ec:71:3a:2a:b3:88:b1:81:00:1a:d2:2e:9b:00: 0f:a1:32:ef:23:51:66:f4:b2:7e:96:01:01:3e:44:f2:56:55: 23:c8:2d:08:da:67:85:2a:a5:92:ac:bf:72:bf:3b:e6:5f:b9: 3b:c4:91:f8:81:e9:d3:69:4d:6f:b2:de:0a:e2:2b:2a:e8:d6: c3:96:f3:d4:a6:d1:71:76:5a:45:a9:d2:ab:7b:39:1f:45:67: 69:30:90:92:8b:84:d9:b8:0b:b0:64:1f:aa:bf:37:56:f5:39: ca:5c:b6:9b:28:60:d4:f5:ff:19:6e:e2:6b:1b:ae:63:00:48: 4f:38:0f:e6:6a:d8:85:ae:1f:8a:c8:f3:dd:9b:2f:ff:03:58: a4:28:2f:39:22:83:95:51:f5:b1:1b:34:2d:50:2a:d3:96:b9: a1:96:3c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjQwNTE4MTkwMzIxWhcNMjQwNTI1MTkwMzIxWjAYMRYwFAYD VQQDEw02NjQ4ZmI3OS0zYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArX+AplBZ2+7rl4bwaEijpYKRE6Kx6xdi8ZoeJa1wzefOuaH2z+3kzllwAxZF BaESgDm/gFxsnK7mZcVrQSIydQO4bEB68quVt7yTxZolBZB8Ng6yNTr9fBy7KOMR 9Bv9ip6zwASq+peThq1qHIq/8GoXlB2bXfXvurVXkE2z9baBWGqT5NHA6+4ttjZG hxP3GuRj0twwGpoAx+v5d/EcsZm143GL+8fzm7o30ZwOCtibuQ1yVyBW06UDWEb7 anhSYC449GIXnQS2kM430kPg3W7Qfuu/ODKrG7Lvi+WnJRWsdBw7R/vJABhzFZCH GkurQgQT6u/Z7afa7PU8X1robwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMpXkzQ luptfq4yMksiNgSxHIgwMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA74hHoClIbRcNPmh0to5xaXbMrFt+0Akc9LAKSTvBC0DlzuC6ofjA/ a7i+e6IogdMOn7diVckDdjfXzs0zpnUUtel9rgorMqHDSm2tLAsQYoL4Fk+EuPg1 O4U4uVPF7HE6KrOIsYEAGtIumwAPoTLvI1Fm9LJ+lgEBPkTyVlUjyC0I2meFKqWS rL9yvzvmX7k7xJH4genTaU1vst4K4isq6NbDlvPUptFxdlpFqdKrezkfRWdpMJCS i4TZuAuwZB+qvzdW9TnKXLabKGDU9f8ZbuJrG65jAEhPOA/matiFrh+KyPPdmy// A1ikKC85IoOVUfWxGzQtUCrTlrmhljyC -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org