$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: lJBbtBNcxfip1NnNPEhahbP8kIyt+E0zyRiiSEt9jGE= Subject key identifier: 53:6D:C7:EF:ED:EA:30:50:5B:08:55:D6:50:C1:AF:C1:74:9E:ED:31 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 06FA Signing time: Sat 18 May 2024 22:45:06 +0000 Manifest this update: Sat 18 May 2024 22:45:05 +0000 Manifest next update: Sat 25 May 2024 22:45:05 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: X+GkkDFAeKtt52R1faOqwxrem04Iq4bK1WkBDAGp0Pc=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: /bFK6mYJTCXC/pV1oiZj4Bqj+TrA/G35/V0Xsbj2Yz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: May 18 22:45:05 2024 GMT Not After : May 25 22:45:05 2024 GMT Subject: CN=66492f71-13bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:53:89:a7:0c:69:48:86:94:68:22:6f:2d: 8e:b4:60:19:3b:4f:df:97:ee:06:9c:97:cf:f8:db: dd:fe:67:dd:9d:7b:87:a2:e1:ae:99:c7:0a:f5:4e: ea:44:fe:4e:7b:8a:92:8a:d0:0c:02:c6:29:15:92: 27:26:db:78:fd:f3:83:f5:e6:26:9e:5c:7b:03:65: 20:99:42:59:bf:4c:f8:1d:f5:73:00:28:3d:de:7b: ca:e6:b9:79:00:4a:30:6c:99:59:20:ee:63:a3:0b: 6c:a5:09:9b:41:f9:c4:4b:a0:ee:8c:30:86:da:71: 2a:2c:d2:b1:30:c4:84:56:a7:a1:79:81:02:be:5e: bf:2c:d8:e3:90:bd:6b:3c:c2:74:54:e2:15:5b:e7: 80:b0:6f:68:5b:1a:2d:bc:a9:aa:cc:db:94:11:07: 6c:71:2c:ec:bb:f5:ff:1b:f4:1d:8f:1f:9e:4a:50: 2e:4a:c8:7a:8d:1a:b8:02:a9:c9:16:69:9e:fb:42: 5e:f0:0b:08:38:00:d0:f0:c9:11:7f:f7:14:35:e0: 85:02:d8:1c:4c:3c:e0:b2:81:70:d6:3e:f0:9b:c7: 17:a4:38:45:b0:b4:dc:57:3c:ae:38:5a:ce:2b:cb: 73:81:2a:5e:23:2f:c6:c7:21:d0:e5:d2:ce:f5:2f: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:C7:EF:ED:EA:30:50:5B:08:55:D6:50:C1:AF:C1:74:9E:ED:31 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:59:c9:89:44:a2:26:42:a5:cf:1f:de:a8:b8:69:b7:b5:13: 1a:c8:80:11:12:c3:f0:09:49:d3:8f:63:96:76:67:27:ca:94: 74:6b:f9:ff:39:e1:c4:75:cb:f5:a6:51:f0:ef:bb:e4:49:9a: b0:f1:4f:a2:aa:f4:57:c0:06:5a:66:a8:1a:71:93:cb:f5:49: ce:6f:1f:1c:2f:e6:63:60:47:ef:a3:df:e8:01:65:ef:8c:ef: f5:ea:9b:be:ca:04:a0:5f:aa:5f:6b:7c:76:a6:6b:4a:a5:b5: eb:c5:97:3e:d8:37:30:d7:51:0f:7b:2d:e6:39:b6:6a:f9:92: 33:f8:ed:82:1a:2e:07:33:d3:c2:62:7f:b3:25:ff:00:ed:8d: 4a:77:36:61:fd:23:d2:db:ae:32:50:8f:41:26:36:75:a5:5f: e0:06:9b:f8:cd:2b:8f:fe:b6:45:9f:be:93:bd:41:93:a8:18: 22:6c:06:49:63:55:dd:e9:f7:cc:79:6d:48:a5:01:0d:c8:16: 60:68:61:19:b5:58:38:bf:78:64:3b:c8:6d:30:e8:50:8c:9f: 1e:f9:a4:d7:3d:5a:90:c6:ce:80:c5:8d:c7:ad:89:48:e3:84: fb:45:ef:32:b1:dd:1c:d0:a2:d5:2e:f6:7c:01:06:49:31:3e: 0e:7b:df:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjQwNTE4MjI0NTA1WhcNMjQwNTI1MjI0NTA1WjAYMRYwFAYD VQQDEw02NjQ5MmY3MS0xM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fBTiacMaUiGlGgiby2OtGAZO0/fl+4GnJfP+Nvd/mfdnXuHouGumccK9U7q RP5Oe4qSitAMAsYpFZInJtt4/fOD9eYmnlx7A2UgmUJZv0z4HfVzACg93nvK5rl5 AEowbJlZIO5jowtspQmbQfnES6DujDCG2nEqLNKxMMSEVqeheYECvl6/LNjjkL1r PMJ0VOIVW+eAsG9oWxotvKmqzNuUEQdscSzsu/X/G/Qdjx+eSlAuSsh6jRq4AqnJ Fmme+0Je8AsIOADQ8MkRf/cUNeCFAtgcTDzgsoFw1j7wm8cXpDhFsLTcVzyuOFrO K8tzgSpeIy/GxyHQ5dLO9S8xLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNtx+/t 6jBQWwhV1lDBr8F0nu0xMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/WcmJRKImQqXPH96ouGm3tRMayIAREsPwCUnTj2OWdmcnypR0a/n/ OeHEdcv1plHw77vkSZqw8U+iqvRXwAZaZqgacZPL9UnObx8cL+ZjYEfvo9/oAWXv jO/16pu+ygSgX6pfa3x2pmtKpbXrxZc+2Dcw11EPey3mObZq+ZIz+O2CGi4HM9PC Yn+zJf8A7Y1KdzZh/SPS264yUI9BJjZ1pV/gBpv4zSuP/rZFn76TvUGTqBgibAZJ Y1Xd6ffMeW1IpQENyBZgaGEZtVg4v3hkO8htMOhQjJ8e+aTXPVqQxs6AxY3HrYlI 44T7Re8ysd0c0KLVLvZ8AQZJMT4Oe99Q -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org