$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: +8OlMadbKNxIWAlZPro+ENIyKrMn5LzBelpliR5mq6Q= Subject key identifier: D7:D6:E3:62:5B:F9:77:66:B9:99:20:B6:6C:3B:51:54:1C:5B:13:B4 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 06A6 Signing time: Sat 18 May 2024 23:13:40 +0000 Manifest this update: Sat 18 May 2024 23:13:39 +0000 Manifest next update: Sat 25 May 2024 23:13:39 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: ZDGujs/vq3Vb8LPRMgzkQkDr+8tW0WmmPIO8xJcmh24=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: WLw2gLQVSrqgLkHXytyNlHZE1+cACJ0aT8RfJDpK7zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: May 18 23:13:39 2024 GMT Not After : May 25 23:13:39 2024 GMT Subject: CN=66493624-1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:3b:37:7c:64:db:eb:8a:c4:83:ff:18:a9: 96:ee:0d:06:4f:8f:fe:36:96:e1:1c:5d:df:42:fc: b2:17:a8:53:71:c2:52:59:88:10:a5:d9:16:7e:7a: e5:09:bd:57:42:ed:11:64:20:55:a1:8e:2a:5b:e1: d3:30:7c:58:4b:e1:cd:39:fb:cd:58:a4:2f:5f:db: 05:b5:8b:49:f8:9c:81:03:42:f7:8b:5f:74:2e:09: fc:32:23:4c:37:2e:a6:9c:84:ff:a3:87:ca:ea:e5: e9:9a:5b:26:6e:9e:d8:98:0b:38:f6:0a:e9:63:f8: 39:fa:45:0e:a5:61:30:49:62:33:f6:1c:f4:5d:86: 77:52:0c:4f:8b:ae:f7:e3:12:9f:c4:23:30:3a:51: 15:bd:9a:f9:a9:92:c1:3d:ee:13:dc:ab:68:88:f2: 7d:79:28:23:d1:75:c7:b7:ea:18:fe:e4:94:b9:05: 04:9d:75:f4:94:fe:f7:86:9c:aa:f8:f7:c7:52:61: 4c:1f:c7:14:12:d6:ae:46:53:b7:16:ed:ef:32:0a: 92:44:c8:ec:da:79:db:9c:87:ac:cf:aa:10:22:09: bc:e8:0a:ad:6c:15:3d:6a:ca:19:32:17:5a:17:4e: 5b:e7:37:47:30:7c:76:95:94:e8:98:7b:ec:65:c4: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D6:E3:62:5B:F9:77:66:B9:99:20:B6:6C:3B:51:54:1C:5B:13:B4 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:01:a4:22:dc:b5:1e:79:ea:07:ef:b1:28:6e:1e:15:39: 09:55:f2:4a:54:4e:c0:62:5e:a8:86:d1:5f:a5:49:c5:35:f7: 1a:ad:ab:00:79:58:ea:ab:eb:04:51:db:0d:3b:d1:7d:4e:ab: 72:c5:c9:24:ae:98:9a:56:58:2e:75:21:1b:28:36:18:c5:55: 88:b4:ee:34:e3:1c:c6:10:87:0b:6d:83:04:f2:21:a1:51:31: 34:31:66:60:eb:96:69:3a:60:a6:c8:d2:33:0f:93:e6:fd:a6: 8c:c1:66:85:e9:d7:73:bc:1a:24:20:f8:cb:94:b7:91:ab:84: b7:ef:11:5d:3a:e2:06:3e:d1:41:0c:a9:fa:9d:cd:ad:2c:41: e7:0a:fb:b4:5e:db:6a:8f:b3:a2:a9:7f:a1:7b:e1:bf:98:bc: a6:68:63:88:f7:40:43:88:3d:28:2b:a1:fe:87:f2:3c:55:cb: 66:1a:b0:a5:43:e8:e2:e8:32:4c:d5:8d:97:eb:67:aa:d6:0f: ff:02:2d:22:84:91:c8:02:ab:72:e5:04:bf:5b:cd:7f:94:e4: a8:cf:4d:f5:e7:db:6f:0d:d3:f6:10:8d:7c:0a:a5:92:cd:06: 59:e3:98:76:94:8a:63:8c:9d:0e:4f:e0:ce:96:4f:a1:23:20: 1c:e6:44:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjQwNTE4MjMxMzM5WhcNMjQwNTI1MjMxMzM5WjAYMRYwFAYD VQQDEw02NjQ5MzYyNC0xMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYY7N3xk2+uKxIP/GKmW7g0GT4/+NpbhHF3fQvyyF6hTccJSWYgQpdkWfnrl Cb1XQu0RZCBVoY4qW+HTMHxYS+HNOfvNWKQvX9sFtYtJ+JyBA0L3i190Lgn8MiNM Ny6mnIT/o4fK6uXpmlsmbp7YmAs49grpY/g5+kUOpWEwSWIz9hz0XYZ3UgxPi673 4xKfxCMwOlEVvZr5qZLBPe4T3KtoiPJ9eSgj0XXHt+oY/uSUuQUEnXX0lP73hpyq +PfHUmFMH8cUEtauRlO3Fu3vMgqSRMjs2nnbnIesz6oQIgm86AqtbBU9asoZMhda F05b5zdHMHx2lZTomHvsZcS76QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfW42Jb +XdmuZkgtmw7UVQcWxO0MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ1QGkIty1HnnqB++xKG4eFTkJVfJKVE7AYl6ohtFfpUnFNfcarasA eVjqq+sEUdsNO9F9TqtyxckkrpiaVlgudSEbKDYYxVWItO404xzGEIcLbYME8iGh UTE0MWZg65ZpOmCmyNIzD5Pm/aaMwWaF6ddzvBokIPjLlLeRq4S37xFdOuIGPtFB DKn6nc2tLEHnCvu0Xttqj7OiqX+he+G/mLymaGOI90BDiD0oK6H+h/I8VctmGrCl Q+ji6DJM1Y2X62eq1g//Ai0ihJHIAqty5QS/W81/lOSoz03159tvDdP2EI18CqWS zQZZ45h2lIpjjJ0OT+DOlk+hIyAc5kRQ -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org