$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft File: RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft (raw, json) Hash identifier: VqbJTYmgeSKJU9pL63sWgOuLB/A3Q+mvNNPcWD7/qQc= Subject key identifier: C2:09:8F:34:2F:A4:B2:88:0C:BD:22:CE:23:DB:63:61:80:35:00:6B Authority key identifier: 44:8A:58:36:37:55:F1:8B:EA:15:89:39:83:B5:E6:93:6D:D2:A2:1F Certificate issuer: /CN=A9171D3B/serialNumber=448A58363755F18BEA15893983B5E6936DD2A21F Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIpYNjdV8YvqFYk5g7Xmk23Soh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft Manifest number: 1351 Signing time: Sat 18 May 2024 18:03:19 +0000 Manifest this update: Sat 18 May 2024 18:03:19 +0000 Manifest next update: Sat 25 May 2024 18:03:19 +0000 Files and hashes: 1: RIpYNjdV8YvqFYk5g7Xmk23Soh8.crl (hash: rL1XrA2ju8dMUpU0A2FTm2gO2HBu7FhbX3LIPjV+Izg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.crl rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIpYNjdV8YvqFYk5g7Xmk23Soh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3B/serialNumber=448A58363755F18BEA15893983B5E6936DD2A21F Validity Not Before: May 18 18:03:19 2024 GMT Not After : May 25 18:03:19 2024 GMT Subject: CN=6648ed67-f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:48:6c:23:7b:f6:fc:56:98:ca:b9:a0:db: de:e9:90:45:33:b1:a5:b3:92:e5:e9:3c:12:7a:0e: 7b:dc:39:0c:98:45:16:9b:ff:80:8f:48:23:9c:28: fb:09:b6:1b:04:5f:38:56:54:fb:c7:61:70:af:55: 07:cb:a2:53:5b:a1:61:55:bb:6a:7d:59:5b:5b:a0: 89:69:94:e5:26:d9:f5:d8:c6:48:ab:9c:97:2d:84: a6:d0:5c:94:8d:e8:a2:a2:5e:ef:6d:ea:87:dc:c3: 0a:73:bb:5a:47:ae:50:bc:cd:24:ee:42:7b:28:61: 39:fe:40:33:fe:b2:e6:25:4f:6f:09:b5:4e:65:0c: 92:17:39:38:67:fc:86:cd:f2:26:72:68:0d:62:d8: fa:7a:3f:14:78:6a:82:af:dc:e2:27:62:d9:ac:57: c4:c3:e9:1c:05:dd:d2:91:db:8f:02:2b:81:fd:b4: 2e:07:df:35:1e:cc:49:87:f4:7d:3e:d2:71:7c:9e: ff:06:71:84:27:77:5e:df:3b:b6:b1:c3:c0:04:0e: e7:1f:1d:28:6a:bb:da:15:b7:84:af:f6:6e:cd:74: 57:e6:1b:a5:49:a4:c7:2c:3e:ed:92:00:e9:7f:78: f5:3b:db:99:74:b2:87:7c:5e:7a:23:94:4c:46:27: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:8F:34:2F:A4:B2:88:0C:BD:22:CE:23:DB:63:61:80:35:00:6B X509v3 Authority Key Identifier: keyid:44:8A:58:36:37:55:F1:8B:EA:15:89:39:83:B5:E6:93:6D:D2:A2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIpYNjdV8YvqFYk5g7Xmk23Soh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/RIpYNjdV8YvqFYk5g7Xmk23Soh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:77:ae:19:6a:81:44:50:61:1b:d0:6d:8c:72:32:fb:80:f4: 3e:bc:ae:df:61:4f:de:4b:d6:e0:92:d6:17:c4:4b:92:4a:fe: bc:fe:23:2a:45:01:ee:e7:ab:12:3a:6d:16:5f:94:30:be:26: c3:29:61:e6:15:2b:4a:23:16:9a:aa:1c:20:41:ec:60:91:65: 99:13:dc:ea:b6:13:95:56:9f:fe:94:a8:a7:c7:fa:b7:09:40: 38:a9:40:8f:c3:a6:05:df:db:5f:48:8b:6c:f5:17:28:e7:3f: bd:64:44:a4:15:91:a6:38:a9:7e:e2:5c:97:28:3f:b9:33:f3: f8:f7:8b:a5:ba:57:a1:a9:ee:7b:96:50:3e:3b:f2:1b:87:68: 38:8b:fd:02:31:9a:72:a6:33:fb:f5:24:51:d6:24:b1:00:35: cd:9f:60:0a:63:e7:3d:68:5b:12:8f:e7:d8:d5:6f:38:a4:e4: 0f:ee:00:c5:a0:31:89:d5:b0:1f:a2:4a:12:d4:1e:97:bc:bd: 31:5f:59:5b:64:67:03:67:6e:ca:c5:c1:4c:8e:b4:97:9c:1b: e2:d6:39:ba:a4:25:92:7b:15:ac:22:8f:89:32:4f:fe:34:f6: 84:34:f7:f6:f4:be:18:4f:e5:3d:ae:b7:bb:30:1f:30:94:0c: 98:95:fd:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0IxMTAvBgNVBAUTKDQ0OEE1ODM2Mzc1NUYxOEJFQTE1ODkzOTgzQjVFNjkz NkREMkEyMUYwHhcNMjQwNTE4MTgwMzE5WhcNMjQwNTI1MTgwMzE5WjAYMRYwFAYD VQQDEw02NjQ4ZWQ2Ny1mNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SZIbCN79vxWmMq5oNve6ZBFM7Gls5Ll6TwSeg573DkMmEUWm/+Aj0gjnCj7 CbYbBF84VlT7x2Fwr1UHy6JTW6FhVbtqfVlbW6CJaZTlJtn12MZIq5yXLYSm0FyU jeiiol7vbeqH3MMKc7taR65QvM0k7kJ7KGE5/kAz/rLmJU9vCbVOZQySFzk4Z/yG zfImcmgNYtj6ej8UeGqCr9ziJ2LZrFfEw+kcBd3SkduPAiuB/bQuB981HsxJh/R9 PtJxfJ7/BnGEJ3de3zu2scPABA7nHx0oarvaFbeEr/ZuzXRX5hulSaTHLD7tkgDp f3j1O9uZdLKHfF56I5RMRideuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIJjzQv pLKIDL0iziPbY2GANQBrMB8GA1UdIwQYMBaAFESKWDY3VfGL6hWJOYO15pNt0qIf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQi9CMjQ5OTg1ODMx MzgxMUU5OURFMzI2NkZDNEY5QUUwMi9SSXBZTmpkVjhZdnFGWWs1ZzdYbWsyM1Nv aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJcFlOamRWOFl2cUZZazVnN1htazIzU29oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQi9CMjQ5OTg1ODMxMzgxMUU5OURFMzI2NkZDNEY5QUUwMi9SSXBZTmpkVjhZ dnFGWWs1ZzdYbWsyM1NvaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkd64ZaoFEUGEb0G2McjL7gPQ+vK7fYU/eS9bgktYXxEuSSv68/iMq RQHu56sSOm0WX5QwvibDKWHmFStKIxaaqhwgQexgkWWZE9zqthOVVp/+lKinx/q3 CUA4qUCPw6YF39tfSIts9Rco5z+9ZESkFZGmOKl+4lyXKD+5M/P494ululehqe57 llA+O/Ibh2g4i/0CMZpypjP79SRR1iSxADXNn2AKY+c9aFsSj+fY1W84pOQP7gDF oDGJ1bAfokoS1B6XvL0xX1lbZGcDZ27KxcFMjrSXnBvi1jm6pCWSexWsIo+JMk/+ NPaENPf29L4YT+U9rre7MB8wlAyYlf3f -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org