$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: qHXyPThXpHxsY0ird15EnOzMDnxxtyMENPT3evZk+pE= Subject key identifier: C8:24:64:47:5E:E1:B0:39:CD:68:7C:04:63:69:AF:70:E8:77:12:CD Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0738 Signing time: Sat 18 May 2024 22:28:25 +0000 Manifest this update: Sat 18 May 2024 22:28:24 +0000 Manifest next update: Sat 25 May 2024 22:28:24 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: cLhLxhcgNl5QRWivSAcxUsi3KxR9XHDw6I+y93RS6HM=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: RMR7KwU7xyWXlKtABuhss5yJpFReeaEZyLkq7UcoIo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: May 18 22:28:24 2024 GMT Not After : May 25 22:28:24 2024 GMT Subject: CN=66492b89-7984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:dd:d1:a6:57:29:e2:dc:8f:8d:52:4c:3f: 3a:c4:6e:92:77:99:47:f2:ec:49:05:6b:c5:a4:3e: 95:be:7d:08:9c:48:b9:c5:38:87:6d:bc:a8:ad:e9: f0:d9:c0:a4:98:58:54:f9:bc:fd:7b:97:7e:4e:81: 30:c9:db:7a:08:d7:0c:a3:06:42:72:f4:42:ec:d8: 6a:82:71:ca:b9:03:56:bc:9b:e2:8d:6f:ff:d0:16: 26:da:e4:12:33:07:20:e6:13:32:c1:8c:7f:6c:b8: 36:23:10:45:d3:58:47:54:20:8b:a8:24:1c:13:bc: d3:51:f6:3f:e7:bb:39:74:85:66:08:cd:26:a6:bd: bb:c2:1e:12:ea:4a:e4:d1:07:04:28:ee:89:c0:a5: 8d:e5:72:38:89:61:82:40:5a:3f:cf:96:6d:08:38: 2a:f9:72:39:e6:b1:69:9a:6a:05:cc:9c:2f:30:5b: 7a:73:a6:d9:05:01:d5:1a:78:87:94:fe:d1:f3:16: 31:2e:f4:87:0f:0a:5a:9d:4c:f2:53:56:be:27:e1: b7:84:1c:2d:6a:88:0b:05:81:2d:49:09:73:79:69: f5:84:20:51:b7:dd:dd:40:0a:9e:05:39:9c:5c:3b: 94:f6:a9:18:a2:db:c6:5f:8d:f5:68:38:17:d2:00: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:24:64:47:5E:E1:B0:39:CD:68:7C:04:63:69:AF:70:E8:77:12:CD X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:09:01:6c:b0:23:fa:e9:dd:03:f2:90:a3:e8:a9:48:a5:d3: f2:b4:bb:dc:40:a4:00:b9:8a:e5:7f:55:87:b9:4a:8e:9f:4f: 9b:e3:80:03:69:1f:c5:c0:0c:cc:ca:bd:cc:ae:8d:d2:4d:b1: 96:1c:e4:a6:a0:d6:4b:58:ea:f4:78:8a:a4:6d:f4:c2:d6:c6: 40:3a:03:b1:3b:95:bb:01:be:e3:69:47:9a:aa:f0:5b:b9:11: b3:6b:c1:1d:28:52:5b:2a:92:6b:e6:7b:5b:c1:e6:05:9c:47: 7d:03:39:14:95:4e:d0:a1:07:41:dd:96:bc:6d:24:03:69:c9: 9d:a7:79:cc:b0:d5:be:39:b4:5f:69:aa:9c:17:bb:5e:b6:33: 9e:13:a5:1d:d0:78:ae:55:11:a1:e8:1b:74:6b:81:ed:a7:cf: 3e:a6:57:32:33:ae:55:7c:c6:7a:f7:4c:79:60:19:3a:d2:9d: b8:65:c4:75:6c:f2:75:b6:f4:26:37:7b:a7:67:04:8f:78:17: b9:92:40:85:65:57:4b:9b:79:f6:08:7d:21:da:12:9e:32:ed: d5:14:56:b4:e4:3d:9a:d5:3c:ef:79:19:73:03:0d:fe:df:9f: a1:e7:e5:62:3a:4b:4e:6a:f4:7d:b0:fb:de:c7:ab:b7:23:b4: 65:f2:d4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjQwNTE4MjIyODI0WhcNMjQwNTI1MjIyODI0WjAYMRYwFAYD VQQDEw02NjQ5MmI4OS03OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjbd0aZXKeLcj41STD86xG6Sd5lH8uxJBWvFpD6Vvn0InEi5xTiHbbyorenw 2cCkmFhU+bz9e5d+ToEwydt6CNcMowZCcvRC7NhqgnHKuQNWvJvijW//0BYm2uQS Mwcg5hMywYx/bLg2IxBF01hHVCCLqCQcE7zTUfY/57s5dIVmCM0mpr27wh4S6krk 0QcEKO6JwKWN5XI4iWGCQFo/z5ZtCDgq+XI55rFpmmoFzJwvMFt6c6bZBQHVGniH lP7R8xYxLvSHDwpanUzyU1a+J+G3hBwtaogLBYEtSQlzeWn1hCBRt93dQAqeBTmc XDuU9qkYotvGX431aDgX0gA7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgkZEde 4bA5zWh8BGNpr3DodxLNMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChCQFssCP66d0D8pCj6KlIpdPytLvcQKQAuYrlf1WHuUqOn0+b44AD aR/FwAzMyr3Mro3STbGWHOSmoNZLWOr0eIqkbfTC1sZAOgOxO5W7Ab7jaUeaqvBb uRGza8EdKFJbKpJr5ntbweYFnEd9AzkUlU7QoQdB3Za8bSQDacmdp3nMsNW+ObRf aaqcF7tetjOeE6Ud0HiuVRGh6Bt0a4Htp88+plcyM65VfMZ690x5YBk60p24ZcR1 bPJ1tvQmN3unZwSPeBe5kkCFZVdLm3n2CH0h2hKeMu3VFFa05D2a1TzveRlzAw3+ 35+h5+ViOktOavR9sPvex6u3I7Rl8tSH -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org