$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: tj956nd3XHbD5cjFN2nTqXqaZHmTe/KFCPVzPHA2yX4= Subject key identifier: F8:58:01:F6:01:FA:05:3B:33:1C:70:F4:C0:60:D9:47:B7:77:B4:5D Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0E7A Signing time: Sat 18 May 2024 18:23:18 +0000 Manifest this update: Sat 18 May 2024 18:23:18 +0000 Manifest next update: Sat 25 May 2024 18:23:18 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: q6yZC2ycOltsnCO8LxLMnkR5M9LuC8KRlDG2n4OEpcw=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: Gaf+j9rDnpN+cGLQYN+sPh2LrlTD2+IvghDdYTEnv1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3715 (0xe83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: May 18 18:23:18 2024 GMT Not After : May 25 18:23:18 2024 GMT Subject: CN=6648f216-2bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:72:fd:96:e8:12:7b:83:1b:80:68:eb:0a: e6:09:bc:43:fc:65:2c:90:4f:b0:f6:30:d6:59:e4: d2:8e:7c:03:6f:9f:ab:be:f4:fd:34:59:e2:ff:49: 7e:2e:6a:6b:46:d6:f7:10:ed:73:40:42:e5:ad:49: 15:b7:7c:7d:2a:e5:49:4a:af:55:cc:ec:d4:03:28: 82:5b:d5:82:35:f8:d8:45:03:90:2a:f0:70:c3:8c: 77:eb:28:96:3d:81:74:a8:52:17:71:15:ac:47:24: c6:6a:68:67:60:72:e0:a8:7e:64:9c:3a:1f:9d:19: a1:82:c8:67:f2:79:cb:a0:c0:91:68:17:b9:2e:9e: f9:a2:e0:b7:e3:5f:74:a5:47:df:1d:52:b3:74:19: ec:26:7e:c3:02:d6:d7:ec:cb:e6:ab:70:6b:d6:96: 9d:9e:59:fd:2e:48:b4:d9:d8:0e:2f:3b:97:da:8a: 9a:92:4b:1c:02:81:a6:95:ec:eb:e2:38:61:f4:cf: 6e:b9:39:a7:f3:78:d2:34:36:50:d6:66:c4:59:eb: b2:94:27:b6:9b:cb:fc:30:94:c7:c2:10:e4:43:3b: 94:e2:83:e5:a3:4a:35:7f:6d:76:b8:07:e1:45:f7: 7e:a8:b8:43:48:5b:8a:c7:31:73:6e:38:11:d1:08: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:01:F6:01:FA:05:3B:33:1C:70:F4:C0:60:D9:47:B7:77:B4:5D X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5c:6a:d6:2b:93:78:54:d4:80:67:ab:2a:dd:d4:ce:3c:ed: 50:b9:ca:75:fc:64:d6:02:56:f9:fc:4c:a4:1d:37:82:e8:ae: 39:c0:1a:ea:56:23:32:a2:e9:f7:d1:11:98:7f:16:ad:e1:82: b8:f3:7d:3b:26:07:1b:a0:92:da:8f:e0:20:03:cb:bd:11:03: 18:6e:7f:c7:ee:59:c2:f3:df:7b:21:5e:39:d7:61:ef:d0:23: 08:8d:cf:e3:be:d2:ee:88:f9:aa:37:34:66:74:62:09:91:47: 8e:e0:a1:a2:a5:6c:6c:21:ef:0b:1e:1b:92:1a:df:1c:b5:0a: 65:24:61:da:c4:e4:7c:0e:ba:21:07:c3:57:a3:9f:9d:30:04: 86:6f:cb:a3:17:e9:81:04:6e:66:12:3e:78:f7:b9:ad:e7:ef: ee:8b:68:59:e5:b2:98:f4:0d:ec:5f:27:1d:fd:1a:fc:11:c7: 44:7a:c0:d5:af:f5:fa:ab:f5:a9:b3:f2:9b:2e:66:c4:be:93: 01:6a:c5:53:c8:17:79:b1:bb:05:6e:71:32:bf:92:2e:8b:e5: f8:13:c8:de:0b:94:7e:b0:f3:53:6f:15:97:a2:27:40:6a:fd: 10:a9:5d:93:88:d0:26:f7:93:2b:cb:5b:14:62:87:72:71:0f: 6f:08:f2:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjQwNTE4MTgyMzE4WhcNMjQwNTI1MTgyMzE4WjAYMRYwFAYD VQQDEw02NjQ4ZjIxNi0yYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApS5y/ZboEnuDG4Bo6wrmCbxD/GUskE+w9jDWWeTSjnwDb5+rvvT9NFni/0l+ LmprRtb3EO1zQELlrUkVt3x9KuVJSq9VzOzUAyiCW9WCNfjYRQOQKvBww4x36yiW PYF0qFIXcRWsRyTGamhnYHLgqH5knDofnRmhgshn8nnLoMCRaBe5Lp75ouC34190 pUffHVKzdBnsJn7DAtbX7Mvmq3Br1padnln9Lki02dgOLzuX2oqakkscAoGmlezr 4jhh9M9uuTmn83jSNDZQ1mbEWeuylCe2m8v8MJTHwhDkQzuU4oPlo0o1f212uAfh Rfd+qLhDSFuKxzFzbjgR0QiRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhYAfYB +gU7Mxxw9MBg2Ue3d7RdMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyXGrWK5N4VNSAZ6sq3dTOPO1Qucp1/GTWAlb5/EykHTeC6K45wBrq ViMyoun30RGYfxat4YK48307JgcboJLaj+AgA8u9EQMYbn/H7lnC8997IV4512Hv 0CMIjc/jvtLuiPmqNzRmdGIJkUeO4KGipWxsIe8LHhuSGt8ctQplJGHaxOR8Droh B8NXo5+dMASGb8ujF+mBBG5mEj5497mt5+/ui2hZ5bKY9A3sXycd/Rr8EcdEesDV r/X6q/Wps/KbLmbEvpMBasVTyBd5sbsFbnEyv5Iui+X4E8jeC5R+sPNTbxWXoidA av0QqV2TiNAm95Mry1sUYodycQ9vCPLp -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org