$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: 3CpfyfJLDOe+HG2QbQcHVyCohVkFNBn11kt1HKXoAW8= Subject key identifier: 81:30:21:90:21:93:20:03:D8:80:81:3C:C6:46:89:9B:A0:46:78:6F Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 1A Signing time: Sun 19 May 2024 08:41:28 +0000 Manifest this update: Sun 19 May 2024 08:41:28 +0000 Manifest next update: Sun 26 May 2024 08:41:28 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: UMkHE13Dbc/viUAA6SQL6dOkr3VFl9mbtN7fF/f5Rnk=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: CY+0lVCE8pyV/yuqoYwTYIt3uyuTBJHx9OgX18w8m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: May 19 08:41:28 2024 GMT Not After : May 26 08:41:28 2024 GMT Subject: CN=6649bb38-f34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:d8:ce:70:b5:80:2c:f5:6e:62:4d:56:90: a4:ac:44:4e:fe:0e:35:8f:5d:01:e3:3b:29:22:b6: 58:c0:ef:6f:97:df:14:dd:11:21:e1:e6:18:93:c4: 4a:28:33:f8:6e:60:ee:73:df:59:ac:43:0b:78:ff: 69:e0:72:e5:4c:a7:54:62:dc:47:42:8d:39:f5:a8: 6a:28:ea:bb:64:79:23:2a:93:03:58:6c:f1:02:9f: df:e6:34:a1:ef:92:df:d5:70:f5:84:72:05:dc:85: f2:1c:ba:20:8b:b9:3e:a4:d5:80:01:76:4c:84:b8: f4:39:66:d2:41:ba:ff:15:df:c1:64:97:6e:b3:ab: 8b:3e:38:af:5b:55:3f:4d:9c:6f:ea:00:c2:fc:dd: b0:57:3c:71:e8:51:47:f4:79:b3:43:67:38:03:8a: e0:ee:ec:76:50:09:44:cd:5c:11:95:e0:19:cd:8e: 0c:e1:5f:d7:d9:24:b9:c1:9c:09:a1:f3:74:c6:8d: 1c:c6:f8:c9:c0:70:b1:43:c8:97:44:37:36:5b:9a: 74:e1:89:6d:be:6f:f4:c4:cb:bf:95:9f:2d:08:c0: ea:23:a0:7b:f0:f1:7f:56:b4:bd:23:5d:66:72:b7: 8c:72:de:e4:1d:b8:6a:d4:67:33:f6:f0:84:0e:35: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:21:90:21:93:20:03:D8:80:81:3C:C6:46:89:9B:A0:46:78:6F X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:b0:08:7f:af:89:88:a3:61:3c:ab:f7:b4:fe:89:3c:83: 32:2a:4f:6c:2a:2d:d5:18:92:65:08:b7:28:5a:3c:8f:83:2f: 4b:e2:f6:d4:be:a5:5e:1b:67:2c:47:ff:e0:09:04:0c:a1:70: 33:fe:55:df:cf:fd:fa:2e:6b:41:06:bf:6e:8c:91:f3:1d:89: 7f:70:78:cf:24:d2:f0:c4:2d:32:23:56:2c:0b:f8:ce:50:e6: 8f:a6:d5:82:5d:ae:9f:30:22:90:85:35:75:a1:b4:80:7f:87: 6d:c9:5a:9b:2f:e1:12:af:c4:6e:7b:1e:fc:f9:5d:ec:0a:4c: f6:20:cd:3f:75:07:2a:f4:3c:56:f1:9c:d9:93:5a:bc:34:6c: 4c:8f:c1:5f:1c:1e:86:7c:c5:b8:07:c3:0e:b1:de:84:52:f1: 5f:88:69:97:d4:ad:55:76:de:a7:8a:67:9a:1e:cb:6b:2a:24: 44:e0:35:a4:a3:dc:b8:c9:5d:be:17:c4:7f:57:91:b7:b3:f2: 92:32:0d:cc:3f:a1:35:53:21:9b:51:7c:22:bb:71:9e:16:e3: 5b:c7:50:4e:cd:c9:27:fa:88:af:08:81:84:25:e7:82:02:c3: 3e:be:4a:8e:1d:8e:df:5d:b9:96:e5:c9:86:bd:28:fa:6a:6e: f8:e3:13:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MENDMzExMC8GA1UEBRMoRjQxM0Y1MUQ4N0JCRkY0QjBBNDEwNzIxODc0NzZFQkUw N0QzNjFCRjAeFw0yNDA1MTkwODQxMjhaFw0yNDA1MjYwODQxMjhaMBgxFjAUBgNV BAMTDTY2NDliYjM4LWYzNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA9djOcLWALPVuYk1WkKSsRE7+DjWPXQHjOykitljA72+X3xTdESHh5hiTxEoo M/huYO5z31msQwt4/2ngcuVMp1Ri3EdCjTn1qGoo6rtkeSMqkwNYbPECn9/mNKHv kt/VcPWEcgXchfIcuiCLuT6k1YABdkyEuPQ5ZtJBuv8V38Fkl26zq4s+OK9bVT9N nG/qAML83bBXPHHoUUf0ebNDZzgDiuDu7HZQCUTNXBGV4BnNjgzhX9fZJLnBnAmh 83TGjRzG+MnAcLFDyJdENzZbmnThiW2+b/TEy7+Vny0IwOojoHvw8X9WtL0jXWZy t4xy3uQduGrUZzP28IQONUmxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgTAhkCGT IAPYgIE8xkaJm6BGeG8wHwYDVR0jBBgwFoAU9BP1HYe7/0sKQQchh0duvgfTYb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQ0MzLzI0QjhFMjU4RUU3 QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFli OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUJQMUhZZTdfMHNLUVFjaGgwZHV2Z2ZUWWI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw Q0MzLzI0QjhFMjU4RUU3QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBz S1FRY2hoMGR1dmdmVFliOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfSsAh/r4mIo2E8q/e0/ok8gzIqT2wqLdUYkmUItyhaPI+DL0vi9tS+ pV4bZyxH/+AJBAyhcDP+Vd/P/foua0EGv26MkfMdiX9weM8k0vDELTIjViwL+M5Q 5o+m1YJdrp8wIpCFNXWhtIB/h23JWpsv4RKvxG57Hvz5XewKTPYgzT91Byr0PFbx nNmTWrw0bEyPwV8cHoZ8xbgHww6x3oRS8V+IaZfUrVV23qeKZ5oey2sqJETgNaSj 3LjJXb4XxH9Xkbez8pIyDcw/oTVTIZtRfCK7cZ4W41vHUE7NySf6iK8IgYQl54IC wz6+So4djt9duZblyYa9KPpqbvjjE/U= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org