$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: hWTY1Ekb65lpPfp06qpeQvxBynljVOtw+yqArBidXLM= Subject key identifier: FD:DE:7F:00:61:09:92:3C:8F:94:35:4E:32:E8:2B:EA:35:76:26:01 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0BD8 Signing time: Sat 18 May 2024 19:08:10 +0000 Manifest this update: Sat 18 May 2024 19:08:09 +0000 Manifest next update: Sat 25 May 2024 19:08:09 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: NC16mZDAOPxaD6k+4eBTjtnAzG3RKbCW4z6AVPg8G7A=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: uH0p9W6gyErJqwQXUobMQ4l4IHk3TpFXVC4lxSYw/yc=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: u+aZe6lXhjFNUVJNVlssesIeVBxkNnY96Z5bKTISH7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: May 18 19:08:09 2024 GMT Not After : May 25 19:08:09 2024 GMT Subject: CN=6648fc99-773c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:ef:3e:c0:2d:11:d8:05:a5:99:8f:12:66: e8:ea:90:0d:53:55:c9:8c:d6:ae:72:8c:f2:e9:86: 06:9c:08:75:45:fb:c3:27:4d:87:4f:71:ff:57:af: 6a:0b:bc:8f:80:82:02:73:ac:0a:7b:37:c5:48:8b: 26:ad:c8:37:8f:fe:1f:19:8f:12:d5:a2:a7:29:67: 79:c3:56:89:d6:1c:b5:8b:58:0c:71:cf:ff:2a:96: 92:16:ac:9f:49:2d:81:dc:89:c0:cf:05:1b:3f:93: 25:b3:69:f0:e9:3b:77:83:de:3c:0a:91:43:67:3b: a5:9d:33:4d:39:ac:d8:66:db:8e:c2:7a:b0:7e:a3: c0:87:5d:92:19:05:b7:52:7d:63:75:82:62:4d:3a: 3d:6c:77:5f:cd:b2:cc:77:a0:a5:6f:fb:5e:47:26: 51:72:71:67:a6:8d:b5:85:ec:d5:0a:01:e6:34:53: 3d:d7:71:95:86:95:9c:1f:2d:41:6d:25:26:ee:9f: 1a:eb:48:1b:02:d5:58:42:41:51:78:2c:e1:f1:5f: 6d:c9:3a:c1:42:be:e8:fc:9e:a7:b7:97:26:36:45: 79:2e:4c:5f:b5:7a:bc:a0:74:f6:a3:9a:e7:37:b7: 6f:ca:26:77:61:fb:ec:0d:1d:61:38:c6:f8:ce:e1: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:7F:00:61:09:92:3C:8F:94:35:4E:32:E8:2B:EA:35:76:26:01 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c3:ce:38:e2:df:43:ac:f9:f4:f1:ce:d7:94:ed:60:0b:45: e0:d9:86:32:f2:52:2a:db:59:68:0a:27:09:ed:f1:0d:0d:8a: e6:1d:38:c9:33:ce:8a:ac:79:7c:bf:33:3d:a6:ae:02:f3:a7: 06:17:9d:d4:2f:68:35:44:9c:e7:70:9f:5a:dc:0b:9a:58:51: 14:63:55:5b:62:6b:8d:b9:ef:3a:a2:33:ac:60:af:f0:48:d0: 49:6b:58:ce:50:a1:b7:ed:8e:a1:8c:11:b0:45:5d:6e:0a:5a: c6:fd:c3:de:27:ce:9c:7e:ef:42:c7:90:f5:80:f2:65:5c:71: ef:22:77:5c:fd:21:42:01:80:a5:63:f0:fd:04:b7:e8:b6:d3: 95:7f:62:b2:45:f0:b5:ee:90:ad:c2:22:cf:c6:09:5f:74:07: 4a:2b:a2:25:6d:df:22:5f:b5:09:22:04:a6:69:a2:57:37:8d: 86:dc:31:47:fe:22:9e:74:51:af:5b:be:15:b3:46:0c:7d:cf: 21:0d:bd:77:c5:54:3f:a1:38:00:05:d9:a6:89:68:7b:96:0a: 21:97:8f:cb:e0:47:7f:33:b9:96:91:1e:5b:9c:f2:32:37:24: b3:8b:0f:1c:5d:72:fd:62:75:7f:a3:9c:b1:f0:a3:59:47:24: 12:d1:77:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjQwNTE4MTkwODA5WhcNMjQwNTI1MTkwODA5WjAYMRYwFAYD VQQDEw02NjQ4ZmM5OS03NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyjvPsAtEdgFpZmPEmbo6pANU1XJjNaucozy6YYGnAh1RfvDJ02HT3H/V69q C7yPgIICc6wKezfFSIsmrcg3j/4fGY8S1aKnKWd5w1aJ1hy1i1gMcc//KpaSFqyf SS2B3InAzwUbP5Mls2nw6Tt3g948CpFDZzulnTNNOazYZtuOwnqwfqPAh12SGQW3 Un1jdYJiTTo9bHdfzbLMd6Clb/teRyZRcnFnpo21hezVCgHmNFM913GVhpWcHy1B bSUm7p8a60gbAtVYQkFReCzh8V9tyTrBQr7o/J6nt5cmNkV5LkxftXq8oHT2o5rn N7dvyiZ3YfvsDR1hOMb4zuHPwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3efwBh CZI8j5Q1TjLoK+o1diYBMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWw8444t9DrPn08c7XlO1gC0Xg2YYy8lIq21loCicJ7fENDYrmHTjJ M86KrHl8vzM9pq4C86cGF53UL2g1RJzncJ9a3AuaWFEUY1VbYmuNue86ojOsYK/w SNBJa1jOUKG37Y6hjBGwRV1uClrG/cPeJ86cfu9Cx5D1gPJlXHHvIndc/SFCAYCl Y/D9BLfottOVf2KyRfC17pCtwiLPxglfdAdKK6Ilbd8iX7UJIgSmaaJXN42G3DFH /iKedFGvW74Vs0YMfc8hDb13xVQ/oTgABdmmiWh7lgohl4/L4Ed/M7mWkR5bnPIy NySziw8cXXL9YnV/o5yx8KNZRyQS0Xd9 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org