$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: DXMtnyn55PovX5DmvZNI3X5yXB6Li0svSqzu2mkQPPA= Subject key identifier: C0:BD:9A:C9:96:B0:83:81:E0:95:88:57:B6:79:19:88:B5:3D:51:CC Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 2B Signing time: Sun 19 May 2024 08:27:07 +0000 Manifest this update: Sun 19 May 2024 08:27:06 +0000 Manifest next update: Sun 26 May 2024 08:27:06 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 6IE7Olr/6FLYVv2KMYzC9nkV7EfTdrtrjPCppJcJnLI=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: tvAepCJ9vU9LlsSGa7be0kh+waK/rq2mEdxPZDyL1PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: May 19 08:27:06 2024 GMT Not After : May 26 08:27:06 2024 GMT Subject: CN=6649b7db-8024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:d3:31:5d:52:97:19:49:57:44:e0:d3:c2: 2a:c7:79:c4:80:51:ad:eb:96:a8:1b:d3:02:28:96: 30:6e:08:55:ea:c4:fd:78:50:cb:91:f5:b6:0f:3f: e5:96:d6:68:e1:77:12:4a:66:97:32:81:28:c1:4b: ea:8b:e6:59:f4:29:01:f2:5a:24:13:0f:66:22:50: 1a:68:e4:45:b1:a7:fc:8b:53:d9:13:9a:bf:95:09: 94:10:ef:4a:99:07:aa:75:b0:19:d3:7e:82:4f:cf: 6b:b3:73:c9:70:8b:e4:10:41:56:f8:e3:fb:09:17: 0c:80:ef:f0:3f:59:45:1a:bc:4a:00:a1:6e:f7:15: 4a:a9:d9:7a:6c:86:0a:29:7c:7c:d2:a9:3a:54:20: b9:d3:7b:db:f4:2a:df:6b:6f:64:a1:0c:21:03:98: 2e:c8:b3:87:2a:85:96:9b:1e:95:c9:14:91:08:74: 1e:ac:6b:0d:d6:47:8e:8d:7b:e0:e0:37:c9:d6:2e: c4:db:6d:af:dd:2c:e6:c9:57:5c:14:4e:27:22:f1: d0:1f:c5:8f:c6:10:bc:33:df:7c:54:bc:53:b8:04: 93:48:ff:b1:89:b0:59:77:75:97:bb:ab:89:d1:cd: 64:3f:35:2a:bc:56:ea:0f:b0:c2:cb:db:8e:71:6b: 25:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BD:9A:C9:96:B0:83:81:E0:95:88:57:B6:79:19:88:B5:3D:51:CC X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:47:07:07:45:e8:2b:6a:c0:39:44:c3:4a:b2:c7:7f:e5: 6b:ac:20:c3:be:f1:21:55:3a:f2:da:63:f8:87:d8:4f:07:8c: e4:2c:28:b2:0b:1d:71:71:f6:ad:20:ad:64:46:3d:69:86:d2: d8:22:e3:6d:41:43:a8:e3:f0:97:b8:85:ab:67:ba:d5:c4:61: 09:2a:c3:e6:ef:1b:f1:0f:c1:b4:42:29:e5:3d:6c:5c:a0:d5: 77:9a:3b:4b:e2:54:ff:71:9f:45:6a:6c:99:c7:52:0c:f9:d9: 17:f3:8c:23:35:ab:ff:ce:0b:e4:b8:33:10:9f:f7:41:44:ac: 4e:26:70:ae:c0:c0:59:3e:b4:b5:b3:3b:e7:03:02:58:f6:99: 79:d2:32:90:c2:24:c3:a2:5f:26:0a:db:69:22:05:86:85:62: c3:c8:b9:06:9d:79:d9:16:77:f8:b6:77:4a:a6:89:bd:84:33: 38:6f:5b:a8:bc:15:49:31:c2:ee:02:70:3a:71:2a:2e:8a:9b: f8:f4:9d:65:44:d7:0d:63:c5:26:93:7b:e8:fc:77:27:1e:5b: a5:50:d8:9d:48:22:68:c6:59:24:81:42:8b:db:06:74:35:9c: e4:a7:73:b8:74:39:ef:51:a7:51:dd:b8:ed:38:f1:10:26:d9: 3f:09:a5:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUJBRjExMC8GA1UEBRMoQUQxNjEyNDBFOTdBMzJEMTAzMDk5QkE3OEEwMjhDRDA5 RjVGNUI5MzAeFw0yNDA1MTkwODI3MDZaFw0yNDA1MjYwODI3MDZaMBgxFjAUBgNV BAMTDTY2NDliN2RiLTgwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyWdMxXVKXGUlXRODTwirHecSAUa3rlqgb0wIoljBuCFXqxP14UMuR9bYPP+WW 1mjhdxJKZpcygSjBS+qL5ln0KQHyWiQTD2YiUBpo5EWxp/yLU9kTmr+VCZQQ70qZ B6p1sBnTfoJPz2uzc8lwi+QQQVb44/sJFwyA7/A/WUUavEoAoW73FUqp2Xpshgop fHzSqTpUILnTe9v0Kt9rb2ShDCEDmC7Is4cqhZabHpXJFJEIdB6saw3WR46Ne+Dg N8nWLsTbba/dLObJV1wUTici8dAfxY/GELwz33xUvFO4BJNI/7GJsFl3dZe7q4nR zWQ/NSq8VuoPsMLL245xayWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwL2ayZaw g4HglYhXtnkZiLU9UcwwHwYDVR0jBBgwFoAUrRYSQOl6MtEDCZunigKM0J9fW5Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QkFGL0FFRjcwNDkwRDlC RTExRUVBQzVCRDM2REM0RjlBRTAyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclJZU1FPbDZNdEVEQ1p1bmlnS00wSjlmVzVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QkFGL0FFRjcwNDkwRDlCRTExRUVBQzVCRDM2REM0RjlBRTAyL3JSWVNRT2w2TXRF RENadW5pZ0tNMEo5Zlc1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIE3RwcHRegrasA5RMNKssd/5WusIMO+8SFVOvLaY/iH2E8HjOQsKLIL HXFx9q0grWRGPWmG0tgi421BQ6jj8Je4hatnutXEYQkqw+bvG/EPwbRCKeU9bFyg 1XeaO0viVP9xn0VqbJnHUgz52RfzjCM1q//OC+S4MxCf90FErE4mcK7AwFk+tLWz O+cDAlj2mXnSMpDCJMOiXyYK22kiBYaFYsPIuQadedkWd/i2d0qmib2EMzhvW6i8 FUkxwu4CcDpxKi6Km/j0nWVE1w1jxSaTe+j8dyceW6VQ2J1IImjGWSSBQovbBnQ1 nOSnc7h0Oe9Rp1HduO048RAm2T8JpUU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org