$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: hrtYtjpT0ZM8ZvDcyfOEoJSz8murDutaFT3tCGpnPjc= Subject key identifier: B7:46:A7:BD:B6:84:59:83:1F:3E:6F:BB:59:C6:0B:D1:A4:83:86:52 Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0CC9 Signing time: Sat 18 May 2024 18:47:29 +0000 Manifest this update: Sat 18 May 2024 18:47:29 +0000 Manifest next update: Sat 25 May 2024 18:47:29 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: fd+0R2yZMdHUunqiJydqi871JySUH/e1sULKrP7zZpU=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: tk4NJxynr2F95up2/rGAkszWzlsel4Yt0SsUMh+rFlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: May 18 18:47:29 2024 GMT Not After : May 25 18:47:29 2024 GMT Subject: CN=6648f7c1-95f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:40:80:d8:ce:96:3c:44:15:89:bd:77:e0: a2:dd:8c:9c:c8:e9:0a:2c:18:77:5e:12:d4:90:61: 47:29:2f:34:90:3e:5f:c7:84:fd:8d:a0:88:b9:bf: c7:5f:98:1d:fc:bb:75:72:92:15:15:d0:33:00:28: 7e:15:0a:11:a8:98:7a:d8:cd:11:7a:7d:d3:32:69: 08:c1:62:bf:fb:2c:b5:52:19:20:2d:b5:a1:86:02: ae:92:d0:8a:96:82:03:36:b4:0d:5d:76:22:27:79: ed:0e:96:a4:d0:7e:2a:1c:29:25:35:39:7c:74:ac: 81:3b:a8:43:4d:a2:23:cb:30:2b:38:96:f2:55:1c: ea:f7:84:a1:27:79:d0:b0:2b:d7:e6:d8:8d:81:48: a0:b5:6e:42:98:b9:cf:b4:bc:c2:81:97:c1:7d:fd: 8b:3f:4c:29:fe:4e:ac:13:c3:82:75:d3:be:ab:d7: 0a:74:a5:dd:07:26:ce:80:1a:53:c0:57:69:3d:25: 43:09:ad:33:e4:79:e6:80:de:2a:62:f5:10:73:86: 75:0f:22:be:3b:6d:68:da:67:2a:05:8a:45:c5:ac: e7:45:ef:c0:ff:94:80:ad:00:49:f7:08:9e:16:87: 4e:62:ef:28:37:da:24:2d:29:01:39:09:d9:8d:3b: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:46:A7:BD:B6:84:59:83:1F:3E:6F:BB:59:C6:0B:D1:A4:83:86:52 X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d5:f8:cb:fc:9b:97:79:25:c3:40:77:74:1b:32:f0:c3:e4: c9:ed:a6:f7:04:a1:75:8a:93:08:11:4f:7f:0b:ce:43:8e:cd: 2e:07:e8:52:2e:ac:56:3f:77:1b:79:ca:ea:19:1e:a2:51:fe: f1:1c:d7:88:0c:5e:c0:b1:aa:a9:96:fd:39:cf:b4:11:35:22: 84:9e:b2:35:b1:26:2b:21:25:aa:20:95:6f:60:9e:0e:d7:9d: bc:6f:1d:4a:83:89:f1:ff:83:98:e5:af:02:6b:54:e3:36:4d: 23:74:77:81:39:99:9f:d6:18:dc:14:00:2a:bb:2c:02:b3:d1: 98:b7:f7:ba:f3:8b:42:d5:f5:32:1b:13:da:ac:c2:14:d8:4c: 76:08:ff:69:af:83:56:67:75:9f:92:7c:de:ec:03:d9:cc:e6: 60:b5:0d:2e:3a:52:8d:e0:9b:e8:c4:83:e3:11:93:70:a3:40: 40:eb:b4:12:c8:b7:7a:a8:c7:9a:da:14:a6:54:aa:dc:8c:f5: 20:ed:3a:82:d1:79:06:f9:88:e4:50:e6:37:0d:3d:59:4e:a5: b6:60:cd:05:5c:6e:93:15:9b:c1:fa:c6:48:3e:ee:db:78:4a: 52:ce:ba:36:84:ec:10:87:95:73:37:23:74:bb:75:3b:04:7c: ef:98:e6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjQwNTE4MTg0NzI5WhcNMjQwNTI1MTg0NzI5WjAYMRYwFAYD VQQDEw02NjQ4ZjdjMS05NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq5AgNjOljxEFYm9d+Ci3YycyOkKLBh3XhLUkGFHKS80kD5fx4T9jaCIub/H X5gd/Lt1cpIVFdAzACh+FQoRqJh62M0Ren3TMmkIwWK/+yy1UhkgLbWhhgKuktCK loIDNrQNXXYiJ3ntDpak0H4qHCklNTl8dKyBO6hDTaIjyzArOJbyVRzq94ShJ3nQ sCvX5tiNgUigtW5CmLnPtLzCgZfBff2LP0wp/k6sE8OCddO+q9cKdKXdBybOgBpT wFdpPSVDCa0z5HnmgN4qYvUQc4Z1DyK+O21o2mcqBYpFxaznRe/A/5SArQBJ9wie FodOYu8oN9okLSkBOQnZjTuSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdGp722 hFmDHz5vu1nGC9Gkg4ZSMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ1fjL/JuXeSXDQHd0GzLww+TJ7ab3BKF1ipMIEU9/C85Djs0uB+hS LqxWP3cbecrqGR6iUf7xHNeIDF7Asaqplv05z7QRNSKEnrI1sSYrISWqIJVvYJ4O 1528bx1Kg4nx/4OY5a8Ca1TjNk0jdHeBOZmf1hjcFAAquywCs9GYt/e684tC1fUy GxParMIU2Ex2CP9pr4NWZ3Wfknze7APZzOZgtQ0uOlKN4JvoxIPjEZNwo0BA67QS yLd6qMea2hSmVKrcjPUg7TqC0XkG+YjkUOY3DT1ZTqW2YM0FXG6TFZvB+sZIPu7b eEpSzro2hOwQh5VzNyN0u3U7BHzvmOal -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org