$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: YgjnPX/l5SQfmEQocGsGW11l9Ta0k9EgPOQz33M6GbQ= Subject key identifier: 7D:E0:38:93:D1:0A:5B:9F:B9:12:44:57:41:23:1E:70:71:81:DA:E4 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 047D Signing time: Sun 19 May 2024 01:39:01 +0000 Manifest this update: Sun 19 May 2024 01:39:01 +0000 Manifest next update: Sun 26 May 2024 01:39:01 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: 61GqPRPi2IoBnJOdBm1o3v38TPLTrEM6iuK68YPi2V0=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: UQeEFTuNXAG7b/hVvosRIanvr4I2HKmRXBl53YEBALo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: May 19 01:39:01 2024 GMT Not After : May 26 01:39:01 2024 GMT Subject: CN=66495835-6c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:f8:40:7f:35:0b:ed:24:41:18:65:c9:ee: c1:b1:41:7b:b5:15:20:23:64:bd:32:63:f7:77:0e: c2:ae:bc:84:d9:ac:7c:16:a1:23:b8:33:3c:32:79: f1:b4:16:de:2d:6a:43:da:98:4c:0a:82:a4:5c:88: 4e:bb:69:69:b1:2b:4f:68:29:e8:2d:a7:2b:5c:4e: d2:ac:8e:18:7d:38:97:55:09:e9:fb:bc:23:28:4f: c8:99:30:f5:93:eb:e8:65:bc:22:2a:44:bc:ea:85: 03:06:66:c1:64:c4:66:c2:f9:3b:87:cd:3a:d7:fb: 83:a1:73:38:d5:3f:0c:59:69:e4:c8:8c:34:08:03: 14:02:fd:bd:c5:d0:bb:b0:dd:6d:8d:53:64:97:31: 62:4d:79:42:87:25:7d:6c:a4:31:89:5c:cf:44:22: 7d:bb:1d:67:4e:76:ce:42:f5:f0:6c:d2:8b:b9:69: 8a:8d:4a:84:bb:3d:eb:4e:dd:36:01:f9:35:99:54: ab:00:e4:ca:b1:fe:e3:a4:45:b4:fc:eb:0c:81:22: fb:94:98:29:2e:0f:db:54:f6:fa:f7:83:88:6b:df: ef:71:3e:5d:87:40:cb:1a:3c:91:06:c8:8a:82:b0: a6:f5:d0:31:27:07:db:d5:4f:1b:10:af:ff:51:ca: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:38:93:D1:0A:5B:9F:B9:12:44:57:41:23:1E:70:71:81:DA:E4 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e5:8a:8f:c0:6c:59:cc:6c:88:b2:45:b7:02:15:5d:2e:f1: 60:e4:d1:52:e4:4f:8c:7e:64:4e:b1:cd:30:7f:a2:71:d5:4d: 37:4a:a6:2a:84:8e:e4:4c:0b:2c:c8:83:51:54:5a:2b:dc:2b: ac:27:79:16:7a:4e:aa:11:fa:62:47:01:c7:81:2c:9d:49:6e: e5:3a:23:27:c2:c1:73:4f:83:76:b4:f4:00:8b:19:19:be:45: ee:8b:5c:d5:7d:15:13:1c:4e:9d:4f:6e:03:8b:83:88:5f:b8: 75:09:19:5d:07:16:b5:69:21:2a:6b:3d:de:13:c7:ff:bb:66: 7b:8a:2c:3b:b3:03:92:a3:94:e0:18:c8:e3:b0:85:dd:d0:d9: 08:f6:a0:24:78:aa:8c:09:04:de:1e:c3:33:b1:e1:5e:00:ab: c5:e8:10:ee:2b:66:bf:55:6c:46:58:f2:88:c0:d3:db:cf:dd: c9:29:32:cf:b0:66:35:4e:48:c2:81:81:78:4b:d9:d1:b6:25: 2d:4c:7d:60:fa:e4:c8:6f:da:9b:e6:eb:0c:14:1d:be:28:50: 0d:71:36:c8:38:49:10:38:cf:75:0b:6d:8c:ac:e5:af:37:36: 25:b4:22:0e:b2:74:e9:a8:9e:46:17:b9:89:51:1e:3d:5c:9f: d9:37:ac:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjQwNTE5MDEzOTAxWhcNMjQwNTI2MDEzOTAxWjAYMRYwFAYD VQQDEw02NjQ5NTgzNS02YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv134QH81C+0kQRhlye7BsUF7tRUgI2S9MmP3dw7CrryE2ax8FqEjuDM8Mnnx tBbeLWpD2phMCoKkXIhOu2lpsStPaCnoLacrXE7SrI4YfTiXVQnp+7wjKE/ImTD1 k+voZbwiKkS86oUDBmbBZMRmwvk7h8061/uDoXM41T8MWWnkyIw0CAMUAv29xdC7 sN1tjVNklzFiTXlChyV9bKQxiVzPRCJ9ux1nTnbOQvXwbNKLuWmKjUqEuz3rTt02 Afk1mVSrAOTKsf7jpEW0/OsMgSL7lJgpLg/bVPb694OIa9/vcT5dh0DLGjyRBsiK grCm9dAxJwfb1U8bEK//UcqyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3gOJPR ClufuRJEV0EjHnBxgdrkMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP5YqPwGxZzGyIskW3AhVdLvFg5NFS5E+MfmROsc0wf6Jx1U03SqYq hI7kTAssyINRVFor3CusJ3kWek6qEfpiRwHHgSydSW7lOiMnwsFzT4N2tPQAixkZ vkXui1zVfRUTHE6dT24Di4OIX7h1CRldBxa1aSEqaz3eE8f/u2Z7iiw7swOSo5Tg GMjjsIXd0NkI9qAkeKqMCQTeHsMzseFeAKvF6BDuK2a/VWxGWPKIwNPbz93JKTLP sGY1TkjCgYF4S9nRtiUtTH1g+uTIb9qb5usMFB2+KFANcTbIOEkQOM91C22MrOWv NzYltCIOsnTpqJ5GF7mJUR49XJ/ZN6xR -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org