$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: EQvl4ajoNM6FqSsqzwPRUAyxohcgkw5lTI2kNMFAP/A= Subject key identifier: F1:03:37:B2:59:27:ED:56:B8:77:EE:A6:F2:96:2A:9F:29:C9:61:65 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 6D Signing time: Sun 19 May 2024 07:30:45 +0000 Manifest this update: Sun 19 May 2024 07:30:45 +0000 Manifest next update: Sun 26 May 2024 07:30:45 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: DSkP0BK35GNyqK/WXG7VbF6PLBlGmyBa/JaQ+3zg0eA=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: jl2fw6z4yQ9tjBtzQlIosdj1rXSh7BuyLIDg4TMeLq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: May 19 07:30:45 2024 GMT Not After : May 26 07:30:45 2024 GMT Subject: CN=6649aaa5-23b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:78:4f:5c:5f:dc:ea:f3:6d:c7:de:4a:df: 86:6d:55:34:db:a0:a2:1c:9c:0c:20:69:b5:3e:85: ad:4e:76:9b:ec:f8:d9:11:aa:c5:2c:2b:d6:12:e5: d5:97:c2:8c:c9:f8:b5:d8:ab:16:be:79:9c:a2:c4: 8a:68:45:42:21:9e:5c:6e:cc:9f:57:e9:43:5a:9e: 58:c0:e8:f9:cd:fa:43:4c:af:75:d3:a0:e8:cf:e6: 23:a8:46:86:75:3d:81:de:b1:1c:88:51:6c:d4:c3: 5f:a4:e7:09:32:9e:53:9c:01:35:ba:c1:6a:f2:9b: 2d:e8:9a:6f:92:80:22:06:0d:49:9b:32:21:3d:78: 78:53:42:b1:6e:e0:64:02:39:19:5c:73:49:72:43: 57:57:52:4d:2f:9b:2b:c9:60:d9:a6:28:b9:fa:de: bd:a1:cc:66:48:27:74:20:1c:7d:05:77:71:8d:4c: b6:6e:f1:1f:bf:47:ec:d2:bc:ea:8f:47:aa:86:96: 31:03:66:02:e2:ab:69:72:50:b5:23:0c:60:63:4d: 9c:02:35:93:69:3a:2a:ab:40:07:e3:0b:a4:da:9c: bb:47:d0:b7:ff:10:8c:8f:a7:dc:a6:1d:e2:9f:2c: 4e:75:9b:be:08:4a:11:e3:27:ee:e1:4d:26:e5:48: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:03:37:B2:59:27:ED:56:B8:77:EE:A6:F2:96:2A:9F:29:C9:61:65 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6c:6a:50:30:7b:0c:e3:50:74:62:fa:8a:e6:5f:a8:75:0e: 58:18:34:14:ac:80:3f:ec:1c:43:04:62:62:b9:7e:e1:03:e9: d0:36:b2:e5:89:da:de:5e:54:20:4a:fd:69:57:32:73:6a:22: 54:90:2b:ef:0c:17:04:5f:84:8c:98:c5:3e:11:c8:ff:02:01: b3:2b:6e:c7:08:bc:24:5e:b2:43:0e:69:1e:29:8e:a8:11:78: 15:4d:86:dc:4f:07:ac:92:ec:4d:71:7a:1d:bb:ad:6e:6c:ec: 7a:05:c0:f7:30:37:bf:41:17:8f:22:fa:3a:27:ff:62:0b:c2: f2:af:a4:ab:75:6c:2b:c6:71:bb:78:d1:cb:5c:e9:89:96:09: 71:d6:91:93:16:00:b4:08:15:38:d3:16:88:61:9c:46:2d:4f: 73:27:35:17:cb:b7:ef:a3:ce:cc:79:82:90:98:14:dc:ce:c9: 57:56:00:51:0d:a8:26:c2:e6:af:67:36:dc:65:d4:07:69:2d: dd:f2:ab:6a:45:bf:00:35:0c:73:69:b2:21:7f:a3:bb:97:c0: c9:03:9f:89:66:04:59:34:87:80:cd:4c:ad:51:09:57:69:74: cd:71:99:e8:03:5d:16:d5:79:43:77:af:f9:c9:2b:63:f2:1b: 50:eb:bd:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTI0NzExMC8GA1UEBRMoRkJENEI0M0I1Njc4RjFBMDZDQzkwN0M0RUQwNEJEQTIx MUQ5REQyQjAeFw0yNDA1MTkwNzMwNDVaFw0yNDA1MjYwNzMwNDVaMBgxFjAUBgNV BAMTDTY2NDlhYWE1LTIzYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmAXhPXF/c6vNtx95K34ZtVTTboKIcnAwgabU+ha1Odpvs+NkRqsUsK9YS5dWX wozJ+LXYqxa+eZyixIpoRUIhnlxuzJ9X6UNanljA6PnN+kNMr3XToOjP5iOoRoZ1 PYHesRyIUWzUw1+k5wkynlOcATW6wWrymy3omm+SgCIGDUmbMiE9eHhTQrFu4GQC ORlcc0lyQ1dXUk0vmyvJYNmmKLn63r2hzGZIJ3QgHH0Fd3GNTLZu8R+/R+zSvOqP R6qGljEDZgLiq2lyULUjDGBjTZwCNZNpOiqrQAfjC6TanLtH0Lf/EIyPp9ymHeKf LE51m74IShHjJ+7hTSblSHBdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8QM3slkn 7Va4d+6m8pYqnynJYWUwHwYDVR0jBBgwFoAU+9S0O1Z48aBsyQfE7QS9ohHZ3Ssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMjQ3L0IxRkM2NDVDNkY0 QTExRUVBODlGMzM2M0M0RjlBRTAyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTlTME8xWjQ4YUJzeVFmRTdRUzlvaEhaM1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MjQ3L0IxRkM2NDVDNkY0QTExRUVBODlGMzM2M0M0RjlBRTAyLy05UzBPMVo0OGFC c3lRZkU3UVM5b2hIWjNTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVsalAwewzjUHRi+ormX6h1DlgYNBSsgD/sHEMEYmK5fuED6dA2suWJ 2t5eVCBK/WlXMnNqIlSQK+8MFwRfhIyYxT4RyP8CAbMrbscIvCReskMOaR4pjqgR eBVNhtxPB6yS7E1xeh27rW5s7HoFwPcwN79BF48i+jon/2ILwvKvpKt1bCvGcbt4 0ctc6YmWCXHWkZMWALQIFTjTFohhnEYtT3MnNRfLt++jzsx5gpCYFNzOyVdWAFEN qCbC5q9nNtxl1AdpLd3yq2pFvwA1DHNpsiF/o7uXwMkDn4lmBFk0h4DNTK1RCVdp dM1xmegDXRbVeUN3r/nJK2PyG1DrvQ4= -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org