$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft File: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json) Hash identifier: R+Y6224a2N4itjE13GLPvXIZ0zPTN6/f0TP46XWEhJ4= Subject key identifier: 46:07:1E:60:1B:7F:45:15:23:D8:37:96:9C:90:E9:EA:0B:80:E1:AB Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E Certificate issuer: /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft Manifest number: 0B41 Signing time: Sat 18 May 2024 19:43:05 +0000 Manifest this update: Sat 18 May 2024 19:43:05 +0000 Manifest next update: Sat 25 May 2024 19:43:05 +0000 Files and hashes: 1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: YzmgkrOP5JjdWQttm9pKZ7IPO744DT7Q+Y/dCamMBPo=) 2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: y22YhOw1VGtA5Oe8Ng0sBNuwh8oyHjHQVLHiFJU/Qio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E Validity Not Before: May 18 19:43:05 2024 GMT Not After : May 25 19:43:05 2024 GMT Subject: CN=664904c9-a9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:ef:3b:c6:de:1d:a5:7e:1a:a0:b2:25:59: 8e:a4:36:05:8c:f7:99:b5:69:d6:52:6b:c6:0d:8f: 1a:a8:b2:60:6a:2c:39:5d:f4:4b:82:c3:8b:ca:6f: a5:b9:6a:c2:62:4b:33:0b:18:fa:fd:2b:13:c5:8b: 69:95:18:45:13:14:ec:4e:d6:b4:99:5c:1e:4e:c0: 39:00:62:cd:08:4b:b3:7c:14:79:05:ad:21:95:8b: 0e:04:d1:e0:e6:6c:07:f6:b0:f3:72:27:46:6b:ae: 21:bc:aa:5d:64:1a:90:c5:44:b5:cb:65:cc:e3:97: 1b:74:a3:4b:cd:60:79:be:7e:1b:2f:1d:f0:71:e7: f3:8a:0b:e4:21:00:9c:88:08:ad:66:6a:12:55:ae: a6:94:ba:c7:77:fa:42:24:37:ba:08:5e:1b:5e:4d: 6c:68:f2:cf:18:62:38:a1:c2:5c:87:08:35:0b:ec: ed:1c:5e:cb:a6:f9:77:1d:5a:35:66:ab:80:2c:6b: 3f:c4:4b:4a:e9:85:5e:81:08:0b:48:1b:5b:a9:00: 4f:9d:2f:da:3a:ae:68:3b:67:0d:38:4c:a8:e4:56: 49:ca:11:b2:2b:13:42:28:50:66:c9:ee:97:8a:10: 74:f2:cb:12:c1:9a:20:a6:c0:a9:b6:42:78:63:5f: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:07:1E:60:1B:7F:45:15:23:D8:37:96:9C:90:E9:EA:0B:80:E1:AB X509v3 Authority Key Identifier: keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:18:f0:ae:b6:c7:9c:45:02:3a:94:d0:9f:4f:4d:82:dd:88: 40:fe:52:a3:0e:8d:48:7a:de:49:cd:e4:4b:4f:70:77:64:75: 1c:39:e2:29:cf:d7:19:55:26:35:4d:fc:65:0c:02:ed:3e:52: 8b:34:ee:da:6e:d2:fe:94:43:ff:3c:89:05:3f:83:64:27:9d: 49:b6:38:91:61:54:b2:e5:f5:6d:fd:2e:73:f0:98:28:f6:be: dc:a2:77:ec:10:82:7d:85:7a:81:74:ec:a5:8b:02:d2:5e:27: 36:98:ac:49:b1:63:c3:66:97:2f:49:b5:9f:a4:09:74:e0:55: 69:4f:24:4e:ff:b3:0d:81:0f:0c:7c:c9:2b:6a:59:b7:70:61: c7:e5:3c:8e:2f:c6:66:4b:3f:96:f8:5f:d7:b5:da:02:8f:63: 28:30:f6:85:b0:b7:2d:0e:2c:b7:92:78:1e:05:ec:e4:cc:02: 5a:dc:78:b4:38:19:15:de:99:25:a2:99:1a:15:5f:7f:3a:c4: 73:c7:3f:f2:3f:34:11:a0:1b:59:ce:e2:cd:5d:a0:91:35:63: f5:d5:7a:7f:17:0c:65:4f:4f:7d:ad:d8:b0:04:0d:7d:8f:ab: 84:86:33:ef:f1:48:d3:a2:e3:5c:a1:2c:fe:2c:54:d4:69:7a: d9:df:4a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4 QzRGM0M3NEUwHhcNMjQwNTE4MTk0MzA1WhcNMjQwNTI1MTk0MzA1WjAYMRYwFAYD VQQDEw02NjQ5MDRjOS1hOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFDvO8beHaV+GqCyJVmOpDYFjPeZtWnWUmvGDY8aqLJgaiw5XfRLgsOLym+l uWrCYkszCxj6/SsTxYtplRhFExTsTta0mVweTsA5AGLNCEuzfBR5Ba0hlYsOBNHg 5mwH9rDzcidGa64hvKpdZBqQxUS1y2XM45cbdKNLzWB5vn4bLx3wcefzigvkIQCc iAitZmoSVa6mlLrHd/pCJDe6CF4bXk1saPLPGGI4ocJchwg1C+ztHF7Lpvl3HVo1 ZquALGs/xEtK6YVegQgLSBtbqQBPnS/aOq5oO2cNOEyo5FZJyhGyKxNCKFBmye6X ihB08ssSwZogpsCptkJ4Y19H5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYHHmAb f0UVI9g3lpyQ6eoLgOGrMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbGPCutsecRQI6lNCfT02C3YhA/lKjDo1Iet5JzeRLT3B3ZHUcOeIp z9cZVSY1TfxlDALtPlKLNO7abtL+lEP/PIkFP4NkJ51JtjiRYVSy5fVt/S5z8Jgo 9r7confsEIJ9hXqBdOyliwLSXic2mKxJsWPDZpcvSbWfpAl04FVpTyRO/7MNgQ8M fMkralm3cGHH5TyOL8ZmSz+W+F/XtdoCj2MoMPaFsLctDiy3kngeBezkzAJa3Hi0 OBkV3pklopkaFV9/OsRzxz/yPzQRoBtZzuLNXaCRNWP11Xp/FwxlT099rdiwBA19 j6uEhjPv8UjTouNcoSz+LFTUaXrZ30rZ -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org