$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json) Hash identifier: SUoWQgRf28HXuuimgs0cuw4QfCuLYfSX0VWdNhqv7n8= Subject key identifier: 8C:29:26:2C:17:74:DF:33:FF:F9:36:CA:E7:A0:91:9D:75:FC:D5:E6 Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft Manifest number: 0A91 Signing time: Thu 30 May 2024 20:38:27 +0000 Manifest this update: Thu 30 May 2024 20:38:27 +0000 Manifest next update: Thu 06 Jun 2024 20:38:27 +0000 Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: 54rhStO+dEaTe22vncKUzbumgLmeOJsaxHrebtGX1HU=) 2: A79D17F2361111EA95391375C4F9AE02.roa (hash: p66qkovQD+y8kyu8b01IhCcUiOjmRpwpO7Lv11hX31A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: May 30 20:38:27 2024 GMT Not After : Jun 6 20:38:27 2024 GMT Subject: CN=6658e3c3-6ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:76:4d:4f:26:56:92:dd:e9:8c:61:8a:b1: cf:b8:24:f6:9b:13:3a:e3:8f:c6:1f:da:36:6f:26: 80:30:63:7a:e0:7f:12:e9:d4:23:74:df:a5:c1:a5: c9:5a:41:33:bd:26:21:e1:04:c4:32:81:9a:e2:14: 42:d5:7e:c5:96:ed:d0:42:5d:98:74:49:62:6e:c5: 74:d8:da:e5:60:36:1f:5a:12:dc:7c:a6:a4:d1:dd: c0:9a:36:d4:ab:f5:f4:46:ac:32:f9:45:cf:89:30: a6:10:7e:d0:4e:89:96:d7:44:4d:07:fd:c2:fc:93: 28:0e:8b:d9:a4:ef:7b:b7:fa:ec:b3:c1:6e:bc:93: d8:aa:18:78:98:da:9f:a8:cb:76:71:a1:c2:20:9f: 10:ad:69:a8:69:54:22:2b:ae:01:45:e8:e5:ea:5f: d9:f0:a5:fe:f8:26:fc:5d:b8:d4:c3:01:60:88:20: d5:32:17:d3:02:af:18:5c:92:58:3e:df:67:da:93: 4f:6d:8c:32:2d:4d:07:17:ed:21:7c:84:1c:76:a4: 39:14:36:69:f6:79:20:d6:0d:75:48:77:ad:be:79: 71:a0:d5:36:0d:44:52:ec:b1:26:a8:8f:dc:b9:18: 6b:b3:29:9d:38:11:c8:78:ad:58:bb:19:45:f8:00: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:26:2C:17:74:DF:33:FF:F9:36:CA:E7:A0:91:9D:75:FC:D5:E6 X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:6c:f5:b0:3a:a2:ad:bc:91:dc:a1:cd:60:cb:ab:4d:32: 39:66:e1:e8:86:2f:bc:02:eb:3a:a3:e5:af:f6:e5:61:ab:4f: be:7c:95:09:59:dd:1f:a2:e8:70:f0:10:b0:87:10:ea:dc:7c: 1c:e3:82:a9:6c:07:89:e2:61:c6:c1:e7:d6:08:d0:4a:8b:c2: 1b:a4:54:3c:53:88:49:3b:db:d7:1e:51:e1:8f:f7:07:db:03: 1f:bb:0a:84:b4:d2:2b:63:6a:7c:5b:7c:26:fc:bd:f8:57:6d: 23:4e:a1:ac:8c:f9:cc:03:5d:7b:82:dc:fe:21:92:f5:fd:cd: 52:3f:f8:b5:5c:30:58:ca:ec:c6:c9:74:e6:f3:69:e7:9a:b1: 09:fb:19:84:21:6d:df:e0:22:cd:cd:10:03:f3:f3:a5:2f:53: 0f:cc:43:6d:a5:3a:94:93:8e:49:28:0c:4f:ea:32:cf:e9:1f: b3:92:7b:b1:1b:23:83:de:91:50:9f:73:fb:6b:e1:18:f6:9b: 0d:38:bb:dc:3d:3b:34:bf:2c:c8:aa:ef:dd:69:59:6f:26:b5: 7b:14:22:c6:58:e2:d2:d4:4d:3b:35:a3:a4:18:c3:fc:d7:89: ef:bd:e0:76:01:1f:cd:79:5a:b3:a3:3d:8f:53:a5:60:5a:f1: 39:5a:ce:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjQwNTMwMjAzODI3WhcNMjQwNjA2MjAzODI3WjAYMRYwFAYD VQQDEw02NjU4ZTNjMy02YWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24t2TU8mVpLd6YxhirHPuCT2mxM644/GH9o2byaAMGN64H8S6dQjdN+lwaXJ WkEzvSYh4QTEMoGa4hRC1X7Flu3QQl2YdElibsV02NrlYDYfWhLcfKak0d3AmjbU q/X0Rqwy+UXPiTCmEH7QTomW10RNB/3C/JMoDovZpO97t/rss8FuvJPYqhh4mNqf qMt2caHCIJ8QrWmoaVQiK64BRejl6l/Z8KX++Cb8XbjUwwFgiCDVMhfTAq8YXJJY Pt9n2pNPbYwyLU0HF+0hfIQcdqQ5FDZp9nkg1g11SHetvnlxoNU2DURS7LEmqI/c uRhrsymdOBHIeK1YuxlF+AAbGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwpJiwX dN8z//k2yuegkZ11/NXmMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE1MS9GOTI1QjM1MDM2MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1 d0xWLVdiUm4wVlQ2M3JPWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsZ2z1sDqirbyR3KHNYMurTTI5ZuHohi+8Aus6o+Wv9uVhq0++fJUJ Wd0fouhw8BCwhxDq3Hwc44KpbAeJ4mHGwefWCNBKi8IbpFQ8U4hJO9vXHlHhj/cH 2wMfuwqEtNIrY2p8W3wm/L34V20jTqGsjPnMA117gtz+IZL1/c1SP/i1XDBYyuzG yXTm82nnmrEJ+xmEIW3f4CLNzRAD8/OlL1MPzENtpTqUk45JKAxP6jLP6R+zknux GyOD3pFQn3P7a+EY9psNOLvcPTs0vyzIqu/daVlvJrV7FCLGWOLS1E07NaOkGMP8 14nvveB2AR/NeVqzoz2PU6VgWvE5Ws5z -----END CERTIFICATE-----Generated at Thu May 30 21:49:34 2024 by rpki-client on console-ams.rpki-client.org