$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json) Hash identifier: 7mMK3sG0jJvczYVJPWg/aRYqQF2oG8fhaJC6fEwoC0U= Subject key identifier: 31:6A:D7:94:2C:8C:45:89:FD:39:24:19:95:9E:F4:6F:04:FD:47:CB Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft Manifest number: 0131 Signing time: Wed 29 May 2024 05:32:25 +0000 Manifest this update: Wed 29 May 2024 05:32:25 +0000 Manifest next update: Wed 05 Jun 2024 05:32:25 +0000 Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: uAN7pRH7eEMw+hcFOuk6Keazx3v9KSy9wMlCAbi65IY=) 2: FCCF8F6E5B8111ED85FB0456C4F9AE02.roa (hash: qp0p19FgxJZz7DqlZ+b6D0Wx5IorPdvXYrQ3BI/Cxqg=) 3: 9712CDA05B8411ED86486677C4F9AE02.roa (hash: 6gTLTXRF2NvIWrnjZ56KbV4EZOnMg4hlapiVBI7hRTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913 Validity Not Before: May 29 05:32:25 2024 GMT Not After : Jun 5 05:32:25 2024 GMT Subject: CN=6656bde9-1bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:eb:d1:3b:d0:ff:4d:88:c5:ee:b2:69:07: 46:45:fa:26:c8:96:42:39:0b:f1:70:4d:74:c4:d3: e2:9e:8a:de:fc:71:ac:42:d7:b7:ec:67:a3:6a:48: 3c:6e:9c:2b:33:fd:39:a4:6a:61:e9:7f:49:cf:93: 5f:01:e4:ef:7b:a1:da:2f:a2:6b:36:df:30:d2:b5: 87:b5:60:5b:60:75:a0:53:de:7e:c9:6f:75:6b:23: 69:d1:d5:b2:0b:18:f1:28:03:0d:81:24:4c:f7:15: 77:57:5d:38:50:1d:9b:66:5b:08:23:7d:65:a8:e8: 66:74:4e:71:ed:bf:1c:ee:1a:86:d5:a3:69:ec:49: a7:dc:30:b4:3c:c0:bf:ee:14:65:31:e6:1a:fa:56: f4:71:c6:d6:d2:75:90:71:d7:7b:51:cc:8d:f6:3e: 4b:4a:97:45:9a:ed:c8:8a:cc:de:cb:35:7e:88:3c: 52:a4:0a:a9:88:03:48:cf:0c:aa:56:00:ce:f2:a9: 8b:78:8e:ef:dd:31:e6:e8:e6:4f:86:25:8c:27:cd: f9:aa:e3:57:fa:02:95:fa:0d:fb:07:90:4a:9a:a0: ea:ff:f9:5c:fc:14:95:8d:e8:7f:7c:80:20:93:b1: 59:a2:02:e0:72:46:9b:0e:b1:8c:4f:fa:f1:f1:aa: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6A:D7:94:2C:8C:45:89:FD:39:24:19:95:9E:F4:6F:04:FD:47:CB X509v3 Authority Key Identifier: keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:76:02:ce:77:6d:7e:3b:f8:fd:bd:11:98:cc:ce:e1:50: 5b:1b:79:f7:8c:19:dd:80:c1:17:f9:a6:d6:71:54:b4:31:aa: a7:47:9f:35:d4:21:98:75:88:6a:64:45:64:f0:5f:22:b9:27: 8f:5d:80:8f:df:91:23:44:d8:9a:73:62:6d:96:64:5b:1f:99: 5a:20:a7:6f:c9:1a:7d:9e:57:79:33:cd:04:93:87:df:72:75: 79:5a:b9:91:7f:8a:b9:31:0a:84:1f:76:ac:d4:c8:fa:f6:72: 32:11:8b:d0:16:6f:fd:22:33:a3:14:85:5f:40:c6:ce:bc:fd: 02:a5:23:67:69:3c:33:67:29:d8:a7:22:26:e1:3d:b3:f0:11: 3f:67:06:39:78:02:d9:8c:1d:7b:81:54:59:a9:50:55:5c:0c: 66:1e:cc:b4:e0:0e:0d:ae:39:0b:c6:0f:df:ab:86:b8:74:55: 1a:47:3f:19:3c:02:9d:48:92:b9:ad:e6:15:0d:3a:16:dd:68: a4:b0:fb:8e:93:11:f1:7c:2a:f7:03:61:93:2e:80:47:f4:37: 79:74:f1:4c:ad:48:b1:b1:d0:fc:da:12:a3:38:00:4d:9a:8c: 73:9c:c3:48:8f:61:1d:aa:9e:bc:c6:cc:31:08:b2:9b:37:b2: f1:ea:15:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY5MDkxMTAvBgNVBAUTKDNCNDhBQjg2MTY1MkZBRUVEN0UxRDEyNTgzRjE2QkI3 RkJCMjg5MTMwHhcNMjQwNTI5MDUzMjI1WhcNMjQwNjA1MDUzMjI1WjAYMRYwFAYD VQQDEw02NjU2YmRlOS0xYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYvr0TvQ/02Ixe6yaQdGRfomyJZCOQvxcE10xNPinore/HGsQte37Gejakg8 bpwrM/05pGph6X9Jz5NfAeTve6HaL6JrNt8w0rWHtWBbYHWgU95+yW91ayNp0dWy CxjxKAMNgSRM9xV3V104UB2bZlsII31lqOhmdE5x7b8c7hqG1aNp7Emn3DC0PMC/ 7hRlMeYa+lb0ccbW0nWQcdd7UcyN9j5LSpdFmu3IiszeyzV+iDxSpAqpiANIzwyq VgDO8qmLeI7v3THm6OZPhiWMJ835quNX+gKV+g37B5BKmqDq//lc/BSVjeh/fIAg k7FZogLgckabDrGMT/rx8aoQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFq15Qs jEWJ/TkkGZWe9G8E/UfLMB8GA1UdIwQYMBaAFDtIq4YWUvru1+HRJYPxa7f7sokT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjkwOS85QUJBQ0FDODRE Q0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11N1g0ZEVsZ19GcnRfdXlp Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL08waXJoaFpTLXU3WDRkRWxnX0ZydF91eWlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjkwOS85QUJBQ0FDODREQ0IxMUVEODI5NjFCMzZDNEY5QUUwMi9PMGlyaGhaUy11 N1g0ZEVsZ19GcnRfdXlpUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAu3YCzndtfjv4/b0RmMzO4VBbG3n3jBndgMEX+abWcVS0MaqnR581 1CGYdYhqZEVk8F8iuSePXYCP35EjRNiac2JtlmRbH5laIKdvyRp9nld5M80Ek4ff cnV5WrmRf4q5MQqEH3as1Mj69nIyEYvQFm/9IjOjFIVfQMbOvP0CpSNnaTwzZynY pyIm4T2z8BE/ZwY5eALZjB17gVRZqVBVXAxmHsy04A4NrjkLxg/fq4a4dFUaRz8Z PAKdSJK5reYVDToW3WiksPuOkxHxfCr3A2GTLoBH9Dd5dPFMrUixsdD82hKjOABN moxznMNIj2Edqp68xswxCLKbN7Lx6hUt -----END CERTIFICATE-----Generated at Wed May 29 06:12:15 2024 by rpki-client on console-ams.rpki-client.org