$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: jnwUyAucbvj7Kh6+p/O7YmLzTKoWIhgleIDzS0bXnW0= Subject key identifier: E7:9C:76:E7:BC:AB:D5:91:EA:62:39:E7:A5:93:5C:95:CA:81:EB:AC Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 33F9 Signing time: Sat 18 May 2024 14:36:30 +0000 Manifest this update: Sat 18 May 2024 14:36:29 +0000 Manifest next update: Sat 25 May 2024 14:36:29 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: yU4vGIR2WMhjmzLRoL8WwR7kGSKVUfmYvYKvI/txh84=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: lt2z/i16iGevd+NyEOesnGgIVVz5szDiZpCP8s2poXc=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: Oshcmtad/KvmUpSI93xZ/kh7sRubX6+t4AuZaFJtzXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13380 (0x3444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: May 18 14:36:29 2024 GMT Not After : May 25 14:36:29 2024 GMT Subject: CN=6648bced-beed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:0a:68:09:c0:6b:fd:7f:e3:81:48:2a:37: 20:e2:02:ce:15:be:9e:f1:7e:5e:36:dd:06:0a:a0: de:86:28:04:c7:ad:00:79:2b:e8:bb:c6:bc:a5:d7: 89:73:74:28:40:0d:b9:aa:82:74:26:db:48:48:62: 91:0c:c6:25:17:46:34:e6:ba:b9:82:9f:68:e3:0a: 67:c9:5b:2a:23:0c:74:cd:d8:31:d8:19:8b:77:ff: 88:2a:12:e3:2d:71:f4:59:bb:ab:87:91:2b:d3:0f: 2f:df:84:f7:ea:d3:3d:da:04:07:17:76:b8:62:fe: 03:24:92:3c:04:6f:a2:3b:14:ea:6f:0d:69:85:53: 4f:2c:59:53:eb:4d:32:44:6e:ba:13:9b:9a:1f:77: f2:96:94:bf:3a:90:fe:27:b0:9f:46:c7:07:ad:e7: 67:4d:44:7e:3c:f7:52:8a:87:6c:1f:6d:a5:1a:bb: ec:bd:fb:06:2b:6f:f6:11:da:18:86:13:4e:4f:c5: 30:57:2d:8d:be:fd:91:e0:e3:f3:b4:45:c0:50:87: d3:21:c7:a4:fb:ea:e4:41:ca:2a:cb:be:07:c7:b3: 9f:34:d5:b3:a3:f5:ec:a0:e4:de:d2:20:50:01:68: 2b:1a:ed:ac:c7:61:cf:6e:99:74:d4:d1:6f:bd:80: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:76:E7:BC:AB:D5:91:EA:62:39:E7:A5:93:5C:95:CA:81:EB:AC X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a1:36:65:5a:3d:15:d7:dd:c0:2a:1c:59:10:1e:11:be:6d: d5:33:7e:7f:82:74:8a:e2:fc:3b:11:2f:37:76:41:05:9c:ce: df:63:62:72:3f:32:bb:f0:7f:52:65:a3:d7:7b:ae:76:ae:1b: c7:06:90:23:b4:bd:9d:bb:84:2a:04:c2:8a:c0:f6:84:fa:80: 80:52:0a:bd:dc:62:e2:c0:b5:a8:e2:0e:f8:08:d4:9d:79:13: f9:5b:92:55:90:6f:9f:00:43:90:28:71:92:20:92:59:55:ac: 04:6f:70:41:d6:bc:be:37:40:5d:98:e3:7d:da:a8:72:6f:19: 7c:e7:13:6d:14:b4:48:aa:a1:e2:1b:60:67:91:b5:df:60:14: 12:39:2d:50:76:32:ab:fd:1f:50:93:c8:28:08:0c:63:91:bd: 13:00:e5:97:26:76:6a:ee:31:d9:37:97:1d:bc:d1:b8:a0:65: f9:0b:2c:6a:dc:f0:1c:53:39:93:a0:78:b5:ec:ce:53:f9:59: d6:e3:1e:a3:ba:14:15:50:04:c7:b6:31:b4:03:01:0c:ae:9f: dc:08:2f:2c:53:f8:d8:64:24:1f:ff:a3:7d:fd:f8:fd:d1:fe: 60:96:a9:8e:10:1d:3f:82:ac:a6:bf:30:0a:81:fa:64:ab:e6: cb:38:d4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjQwNTE4MTQzNjI5WhcNMjQwNTI1MTQzNjI5WjAYMRYwFAYD VQQDEw02NjQ4YmNlZC1iZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3YKaAnAa/1/44FIKjcg4gLOFb6e8X5eNt0GCqDehigEx60AeSvou8a8pdeJ c3QoQA25qoJ0JttISGKRDMYlF0Y05rq5gp9o4wpnyVsqIwx0zdgx2BmLd/+IKhLj LXH0Wburh5Er0w8v34T36tM92gQHF3a4Yv4DJJI8BG+iOxTqbw1phVNPLFlT600y RG66E5uaH3fylpS/OpD+J7CfRscHrednTUR+PPdSiodsH22lGrvsvfsGK2/2EdoY hhNOT8UwVy2Nvv2R4OPztEXAUIfTIcek++rkQcoqy74Hx7OfNNWzo/XsoOTe0iBQ AWgrGu2sx2HPbpl01NFvvYCKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOecdue8 q9WR6mI556WTXJXKgeusMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3oTZlWj0V193AKhxZEB4Rvm3VM35/gnSK4vw7ES83dkEFnM7fY2Jy PzK78H9SZaPXe652rhvHBpAjtL2du4QqBMKKwPaE+oCAUgq93GLiwLWo4g74CNSd eRP5W5JVkG+fAEOQKHGSIJJZVawEb3BB1ry+N0BdmON92qhybxl85xNtFLRIqqHi G2BnkbXfYBQSOS1QdjKr/R9Qk8goCAxjkb0TAOWXJnZq7jHZN5cdvNG4oGX5Cyxq 3PAcUzmToHi17M5T+VnW4x6juhQVUATHtjG0AwEMrp/cCC8sU/jYZCQf/6N9/fj9 0f5glqmOEB0/gqymvzAKgfpkq+bLONR+ -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org