$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: E9KyRsYTVELI9MJsK+PWI455MRzAdrvRxiRdwNkMl+M= Subject key identifier: 0E:CA:9F:89:C2:6D:9B:A6:2E:F1:53:EF:0C:48:29:2A:3D:6D:5E:1A Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0210 Signing time: Sun 19 May 2024 04:06:34 +0000 Manifest this update: Sun 19 May 2024 04:06:34 +0000 Manifest next update: Sun 26 May 2024 04:06:34 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: ubEseU7eZc/LV4c5rA3bMOlYpwEk+qDmeCpwVxXfr5w=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: PUc54q2WTiia3AT9HsSdWhbagSjmonMUemo/1oF5Qio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: May 19 04:06:34 2024 GMT Not After : May 26 04:06:34 2024 GMT Subject: CN=66497aca-4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:ca:4f:5a:86:61:f7:52:75:be:db:b0:f7: 18:e1:d7:66:aa:1c:93:bf:cb:ea:09:7f:83:dd:10: 0b:32:d5:db:75:75:f0:d0:9a:c3:19:eb:52:f3:24: da:fa:87:2c:07:68:49:75:d0:b7:d3:2e:8d:3f:4b: a6:e1:76:11:44:99:99:e5:37:b5:1a:0a:48:59:88: 39:e3:36:69:99:40:e7:78:f3:29:d3:25:d9:2a:d6: 8a:16:5f:f7:a0:08:ea:f3:83:64:f1:72:00:7f:26: e0:b1:34:32:d6:7a:0e:14:09:2d:c5:c7:d1:f5:7b: e5:46:a1:42:06:65:59:43:fb:e2:fb:cd:f3:d3:81: 0d:f4:f0:0a:b2:58:6b:32:b3:a1:75:cb:da:fd:94: 7b:35:22:6d:7e:cd:e8:87:fa:c6:47:0e:b7:fc:b9: 41:58:7e:27:18:7d:52:38:46:1f:ee:5b:a9:c1:f0: ef:59:8a:a8:57:c6:7a:d4:22:6d:e5:f7:0a:d6:c0: c9:f5:6a:40:c4:9a:80:6c:95:18:db:6a:f1:b7:d0: 29:36:e8:bf:b9:e1:e3:7a:9c:1a:54:b4:63:6e:f5: 63:0e:88:fc:e1:43:ee:4d:80:68:67:5a:32:e1:b6: 2e:f0:0f:70:9f:c1:de:b6:2f:22:23:43:47:28:70: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:9F:89:C2:6D:9B:A6:2E:F1:53:EF:0C:48:29:2A:3D:6D:5E:1A X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:e6:14:92:c5:90:2c:42:2b:1f:ce:23:53:f9:9f:41:47: 05:51:06:6d:3c:d4:b2:eb:5a:78:96:c0:dc:5f:c9:06:4c:75: ae:af:7f:2f:02:c9:63:ce:6d:6c:dc:ea:50:8b:45:f4:6f:db: 89:64:d5:99:d8:d5:c3:47:f5:58:32:65:06:0f:5f:09:fe:db: 97:36:8c:ba:4c:22:9f:b9:64:b9:3c:54:f0:f2:d4:e6:99:e0: df:80:9c:3a:e8:c1:18:7a:52:59:38:49:fd:93:88:5a:50:0c: 4b:9e:59:47:e2:5f:dd:70:4d:99:45:de:fe:d4:02:7e:72:b1: 1b:8b:e3:b3:5f:de:32:b7:0d:70:2c:be:71:2a:80:12:33:e8: a1:98:2d:d0:fd:b9:0b:e8:99:ab:24:21:f5:7e:5d:24:ad:43: 1d:2e:9c:ad:b3:ea:16:ef:bb:27:77:97:1d:a1:8f:39:8a:bf: 9a:2d:23:88:c4:cb:07:56:ee:6e:a8:b5:66:5e:1c:e2:62:b7: 24:81:c2:3a:16:8d:62:4d:d8:14:2e:57:cc:14:96:81:ed:6c: e9:20:5b:ea:89:13:f2:2f:86:68:06:d5:4e:96:40:ab:7d:60: 8e:d1:c1:1f:41:87:dd:53:61:16:45:2f:4d:a5:da:f7:07:0b: 0d:e3:0e:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjQwNTE5MDQwNjM0WhcNMjQwNTI2MDQwNjM0WjAYMRYwFAYD VQQDEw02NjQ5N2FjYS00MDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZHKT1qGYfdSdb7bsPcY4ddmqhyTv8vqCX+D3RALMtXbdXXw0JrDGetS8yTa +ocsB2hJddC30y6NP0um4XYRRJmZ5Te1GgpIWYg54zZpmUDnePMp0yXZKtaKFl/3 oAjq84Nk8XIAfybgsTQy1noOFAktxcfR9XvlRqFCBmVZQ/vi+83z04EN9PAKslhr MrOhdcva/ZR7NSJtfs3oh/rGRw63/LlBWH4nGH1SOEYf7lupwfDvWYqoV8Z61CJt 5fcK1sDJ9WpAxJqAbJUY22rxt9ApNui/ueHjepwaVLRjbvVjDoj84UPuTYBoZ1oy 4bYu8A9wn8Heti8iI0NHKHCFpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7Kn4nC bZumLvFT7wxIKSo9bV4aMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDEuYUksWQLEIrH84jU/mfQUcFUQZtPNSy61p4lsDcX8kGTHWur38v Asljzm1s3OpQi0X0b9uJZNWZ2NXDR/VYMmUGD18J/tuXNoy6TCKfuWS5PFTw8tTm meDfgJw66MEYelJZOEn9k4haUAxLnllH4l/dcE2ZRd7+1AJ+crEbi+OzX94ytw1w LL5xKoASM+ihmC3Q/bkL6JmrJCH1fl0krUMdLpyts+oW77snd5cdoY85ir+aLSOI xMsHVu5uqLVmXhziYrckgcI6Fo1iTdgULlfMFJaB7WzpIFvqiRPyL4ZoBtVOlkCr fWCO0cEfQYfdU2EWRS9Npdr3BwsN4w7X -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org