$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: SnMsErDn8F6sMaDiOnbkma+wQ7+w7zAThot6gPl6OaQ= Subject key identifier: 10:EA:72:34:B9:55:46:25:C2:47:1F:9A:C7:0D:87:27:19:9A:DE:A8 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0A40 Signing time: Sat 18 May 2024 20:30:29 +0000 Manifest this update: Sat 18 May 2024 20:30:28 +0000 Manifest next update: Sat 25 May 2024 20:30:28 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: pB12qhKuNb8FCSfbzWXOVcGet2cHLzasrmWbGwDcRaY=) 2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: QXqLhSGDZF+DtJ6p9go76wpNIwevUBavVoyccuwJbig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: May 18 20:30:28 2024 GMT Not After : May 25 20:30:28 2024 GMT Subject: CN=66490fe5-f83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:92:55:83:64:25:6b:78:77:16:97:eb:46: 03:a3:67:d6:0e:4f:2e:b0:46:f4:ed:0e:1b:c7:b5: b1:2b:6b:4f:37:fa:17:44:a1:8f:97:62:a5:92:d6: 82:43:f3:f8:f8:dd:75:8e:34:18:f2:8d:a9:75:22: d1:c0:db:82:10:23:23:34:05:3f:8a:b3:84:ea:d7: 2f:75:dc:f6:0d:9c:25:f3:b8:b2:25:ea:e3:05:ef: 6b:77:9b:a7:a1:8e:fe:87:fa:4b:d0:30:3d:b4:1d: 9e:06:a5:85:b8:38:97:1b:1d:37:43:cc:d6:3a:71: 7a:2d:38:08:1a:44:c7:80:5d:ad:1c:12:0e:ba:a3: ba:6a:0e:ce:d7:46:23:8a:ea:66:63:3e:0f:dd:96: 43:e8:68:92:ff:d0:58:8e:33:fa:55:3a:60:42:84: e3:ce:88:08:a6:e1:48:de:29:1d:28:c8:19:43:b3: 6f:8d:d6:df:4e:ec:30:da:f1:05:73:90:cb:54:2a: dc:26:51:da:52:8c:74:55:f2:3c:40:b5:17:70:b5: b1:72:af:c7:5d:05:ff:8d:44:58:52:20:cd:40:94: 52:08:09:4e:43:d2:21:0b:bd:f3:86:0c:68:ba:f7: 22:67:3d:a2:64:d0:35:2e:b2:e2:ea:22:e6:2f:e8: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:72:34:B9:55:46:25:C2:47:1F:9A:C7:0D:87:27:19:9A:DE:A8 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ea:93:26:82:b9:dc:35:75:2f:91:73:d5:55:9d:76:33:bb: 5c:38:ec:88:cb:4e:aa:7d:cd:67:62:d9:ac:d4:41:ed:37:d8: 49:f0:f6:a4:8b:bd:41:78:a3:c7:bc:81:7f:af:75:24:1a:30: 70:6b:e5:3e:92:2a:e5:91:eb:78:76:c1:a5:78:66:fb:e7:2f: 5b:84:0e:e5:c2:f6:01:e5:76:40:74:58:a9:ac:05:01:17:6c: ac:ea:1e:06:09:36:e1:79:09:e0:fb:d2:8d:f4:6d:0a:00:7a: 63:37:56:f4:2a:cb:7e:5f:ca:e2:f6:f3:4a:39:24:2d:94:0f: b9:2b:38:17:8c:33:11:33:19:72:c9:65:f4:f4:b6:24:77:f0: aa:27:5a:4c:90:66:8b:bd:36:cb:7f:68:e1:83:97:65:1c:79: c2:1e:88:86:30:ee:59:db:d8:cd:72:90:63:6b:41:f5:be:b1: b6:d3:4c:86:68:10:ee:20:71:3b:e0:5e:28:55:c9:a2:81:c6: 23:69:b9:20:eb:77:b1:a0:3d:ef:9d:28:12:1e:88:bb:07:07: 46:32:14:6f:84:41:eb:d8:ef:e9:3d:d2:11:9e:1e:96:94:73: de:6d:98:36:e3:a1:25:1c:cb:96:3f:f3:76:db:cb:ee:c9:6d: dd:8d:63:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjQwNTE4MjAzMDI4WhcNMjQwNTI1MjAzMDI4WjAYMRYwFAYD VQQDEw02NjQ5MGZlNS1mODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAeSVYNkJWt4dxaX60YDo2fWDk8usEb07Q4bx7WxK2tPN/oXRKGPl2KlktaC Q/P4+N11jjQY8o2pdSLRwNuCECMjNAU/irOE6tcvddz2DZwl87iyJerjBe9rd5un oY7+h/pL0DA9tB2eBqWFuDiXGx03Q8zWOnF6LTgIGkTHgF2tHBIOuqO6ag7O10Yj iupmYz4P3ZZD6GiS/9BYjjP6VTpgQoTjzogIpuFI3ikdKMgZQ7NvjdbfTuww2vEF c5DLVCrcJlHaUox0VfI8QLUXcLWxcq/HXQX/jURYUiDNQJRSCAlOQ9IhC73zhgxo uvciZz2iZNA1LrLi6iLmL+g30wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDqcjS5 VUYlwkcfmscNhycZmt6oMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl6pMmgrncNXUvkXPVVZ12M7tcOOyIy06qfc1nYtms1EHtN9hJ8Pak i71BeKPHvIF/r3UkGjBwa+U+kirlket4dsGleGb75y9bhA7lwvYB5XZAdFiprAUB F2ys6h4GCTbheQng+9KN9G0KAHpjN1b0Kst+X8ri9vNKOSQtlA+5KzgXjDMRMxly yWX09LYkd/CqJ1pMkGaLvTbLf2jhg5dlHHnCHoiGMO5Z29jNcpBja0H1vrG200yG aBDuIHE74F4oVcmigcYjabkg63exoD3vnSgSHoi7BwdGMhRvhEHr2O/pPdIRnh6W lHPebZg246ElHMuWP/N228vuyW3djWNM -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org