$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.mft (raw, json) Hash identifier: VEmZlbVlzYyEQiKjOztdKOModrXevY5co6u0EWKzadA= Subject key identifier: 85:4F:E5:D1:33:B3:64:32:C4:E6:77:A0:A0:06:C6:CD:F1:20:D5:11 Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Certificate issuer: /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft Manifest number: 0A20 Signing time: Sat 18 May 2024 20:34:57 +0000 Manifest this update: Sat 18 May 2024 20:34:57 +0000 Manifest next update: Sat 25 May 2024 20:34:57 +0000 Files and hashes: 1: 9ssujrx6iSv6FcRHs5gkoFjHVa4.crl (hash: DYRoLlUQ8QjNSUWsspcngZz0Z/TL+Gh0fA74szOWnQk=) 2: 2902D956492411EAAC15FB67C4F9AE02.roa (hash: iyBDuVqNep12m68LlOQQc4GekeqfitVWgcg4nl1zeiw=) 3: 82C388B8492511EAB59F4F6EC4F9AE02.roa (hash: //cAWY0jQnyuJnbZCfohs3b8LmaCJANi/dl+jsnUPWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Validity Not Before: May 18 20:34:57 2024 GMT Not After : May 25 20:34:57 2024 GMT Subject: CN=664910f1-d3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:01:c8:bc:a6:86:bd:2b:66:16:f2:f1:15: a7:1e:42:ea:ad:75:7e:3c:d7:34:ed:3a:a9:65:36: 39:78:a0:aa:10:7e:fa:8d:6c:be:58:d3:45:56:72: da:a1:aa:1a:30:40:0b:07:ca:d6:5c:08:90:5a:1f: 2c:ac:4b:88:c5:84:2d:5a:4b:be:4c:53:73:c7:bb: 18:0f:b1:0d:5c:25:c2:5b:4b:4d:68:eb:b0:44:21: c0:b7:c2:22:7b:b3:00:0e:da:06:b8:65:1d:12:c0: bc:dc:a7:b5:2a:c7:f9:da:90:43:02:61:3d:5f:d6: a1:88:2b:43:44:b8:86:35:0b:01:0e:69:97:cc:65: da:e4:8b:43:40:75:c9:4f:0c:ea:68:0c:7c:fa:3a: 97:76:56:9f:00:f6:4d:16:3f:05:10:5a:68:b1:e8: 53:31:32:ff:8a:b2:49:b7:5a:f0:dc:9a:ca:4e:81: c2:ab:fe:74:93:db:b9:5a:33:57:c3:09:9f:fd:e3: 4e:a6:cf:5a:08:32:d9:d4:a2:f9:b9:1a:ce:8e:c4: a8:42:71:75:91:df:01:8b:ff:77:cc:0d:fd:ef:26: 22:05:d7:ad:c3:27:e5:1c:4c:3f:b7:10:e8:73:0f: 06:7f:64:45:ab:25:79:51:6b:85:0c:8d:57:7c:06: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:E5:D1:33:B3:64:32:C4:E6:77:A0:A0:06:C6:CD:F1:20:D5:11 X509v3 Authority Key Identifier: keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:80:bc:7d:38:10:e4:85:90:73:45:71:b5:b6:ff:5f:f5:e0: ab:0c:62:eb:c2:b4:a6:ee:af:09:12:71:31:54:fa:f9:8d:4d: c7:dc:ec:d9:a4:a0:62:ab:fb:c4:ac:93:2f:ea:68:9e:2b:d5: 08:64:d7:7b:0b:9b:bf:60:5c:c3:b1:24:4e:47:83:55:9a:dd: 9a:59:fe:ee:83:ba:ac:45:58:f3:6a:1d:91:c3:28:e7:2f:b5: ab:7b:12:6e:aa:c0:bb:8a:6a:ff:43:85:8e:4e:cb:6e:12:cc: 57:7b:4d:0e:b9:f3:c3:70:84:22:fd:96:58:ea:c2:76:ae:3b: dd:fa:5b:be:59:ed:1d:f8:96:1f:a8:e1:8f:63:3a:b9:db:bb: ce:bc:44:f7:79:46:b2:ac:56:ad:7a:2c:18:f9:3e:af:25:49: 4b:e5:14:51:0f:5e:fc:b3:fe:21:19:c9:b3:a8:c5:20:05:30: 16:58:d6:ec:e9:18:48:00:a5:cc:f1:eb:b4:0f:f6:a6:af:38: 6a:82:e9:50:78:83:20:11:32:5b:b4:70:a3:4e:d5:98:2b:ee: 08:ae:19:2f:7d:b4:29:c7:69:c5:c9:7d:b5:87:47:85:45:29: 48:73:fd:e4:ab:58:09:dd:bd:95:8c:95:ae:07:1d:c7:42:8c: 86:fe:f4:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0N0IzOTgyNEEw NThDNzU1QUUwHhcNMjQwNTE4MjAzNDU3WhcNMjQwNTI1MjAzNDU3WjAYMRYwFAYD VQQDEw02NjQ5MTBmMS1kM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ4ByLymhr0rZhby8RWnHkLqrXV+PNc07TqpZTY5eKCqEH76jWy+WNNFVnLa oaoaMEALB8rWXAiQWh8srEuIxYQtWku+TFNzx7sYD7ENXCXCW0tNaOuwRCHAt8Ii e7MADtoGuGUdEsC83Ke1Ksf52pBDAmE9X9ahiCtDRLiGNQsBDmmXzGXa5ItDQHXJ TwzqaAx8+jqXdlafAPZNFj8FEFposehTMTL/irJJt1rw3JrKToHCq/50k9u5WjNX wwmf/eNOps9aCDLZ1KL5uRrOjsSoQnF1kd8Bi/93zA397yYiBdetwyflHEw/txDo cw8Gf2RFqyV5UWuFDI1XfAaYmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVP5dEz s2QyxOZ3oKAGxs3xINURMB8GA1UdIwQYMBaAFPbLLo68eokr+hXER7OYJKBYx1Wu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVGMy8yNTE5Q0RGMDQ5 MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlTdjZGY1JIczVna29GakhW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlzc3Vqcng2aVN2NkZjUkhzNWdrb0ZqSFZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4NmlT djZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfgLx9OBDkhZBzRXG1tv9f9eCrDGLrwrSm7q8JEnExVPr5jU3H3OzZ pKBiq/vErJMv6mieK9UIZNd7C5u/YFzDsSROR4NVmt2aWf7ug7qsRVjzah2Rwyjn L7WrexJuqsC7imr/Q4WOTstuEsxXe00OufPDcIQi/ZZY6sJ2rjvd+lu+We0d+JYf qOGPYzq527vOvET3eUayrFateiwY+T6vJUlL5RRRD178s/4hGcmzqMUgBTAWWNbs 6RhIAKXM8eu0D/amrzhqgulQeIMgETJbtHCjTtWYK+4IrhkvfbQpx2nFyX21h0eF RSlIc/3kq1gJ3b2VjJWuBx3HQoyG/vTo -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org