$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: jsRzH+PHTZbKpXHer71zdcqeluvXWPyP94DYnwt4eyY= Subject key identifier: 6F:DB:71:6B:7E:A0:D0:9C:C4:82:66:0B:CD:4C:30:D4:C8:A6:1F:7E Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 07D6 Signing time: Sat 18 May 2024 21:59:17 +0000 Manifest this update: Sat 18 May 2024 21:59:16 +0000 Manifest next update: Sat 25 May 2024 21:59:16 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: FL4z6UQgwlKa16p50oZ/815UrXsJR1dh9f2aOTu69C0=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: a2EPeLHdFjtrPqywCW9FnHZ9hQ6h1a/us9daozIFsxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: May 18 21:59:16 2024 GMT Not After : May 25 21:59:16 2024 GMT Subject: CN=664924b5-7a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:eb:87:fc:db:69:c0:5e:04:16:7c:bf:e4: 5f:39:bc:ef:83:24:28:77:ee:4e:e0:30:0e:45:59: ab:e0:73:60:8e:33:22:5a:c0:33:5b:1d:05:9b:7c: 40:b3:66:46:cf:56:bf:3e:2b:b2:70:7d:76:8d:03: 1f:a1:25:47:3b:7e:70:57:91:0f:45:17:f3:68:e8: 3c:ea:26:73:85:9e:19:49:0f:b7:6b:9b:a0:b9:ff: 15:6b:f8:77:af:44:2a:bc:d6:af:03:86:97:8f:ac: a2:3a:19:06:22:7e:8b:b7:51:fa:3f:38:fc:64:8a: 21:37:e4:6f:59:0c:1e:76:c3:6f:6c:ef:b3:38:d0: ff:b1:15:a0:56:bf:1b:da:ac:2d:46:a0:b6:1d:27: fc:25:0b:b1:4d:48:8d:d3:95:49:ac:9f:38:c5:c3: 50:46:4e:13:d4:eb:1b:0c:a2:b0:4c:2e:5b:cd:b3: ed:82:1d:2e:fc:e2:e1:0a:55:9a:d7:9e:dd:33:e8: 6a:b8:26:06:45:66:1f:e6:cb:27:09:d0:59:d9:67: f1:50:fc:e3:4b:68:ed:05:3a:6f:58:97:11:ce:93: 99:5d:93:59:39:9f:f5:77:33:af:53:1f:ae:84:72: bf:dd:71:28:1e:ff:8f:ee:88:69:ff:81:a3:bd:09: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DB:71:6B:7E:A0:D0:9C:C4:82:66:0B:CD:4C:30:D4:C8:A6:1F:7E X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:98:5a:3f:75:76:cc:72:e6:a1:50:f5:36:0d:8e:8e:88:f0: 73:a6:33:ba:7a:3e:fe:dd:7f:1e:51:2d:12:10:6c:31:74:1a: 5f:90:5e:46:82:8f:40:49:cb:93:1a:4c:e8:34:89:ea:f8:71: 20:59:af:67:e5:8b:f0:3c:e5:49:1b:58:eb:89:6a:b6:e3:3d: a7:43:1d:78:38:f0:26:bf:0f:40:ff:eb:d4:5d:db:f7:be:66: 6a:7d:a0:82:34:b2:b7:c3:06:87:6f:01:84:2e:cf:c9:f5:b4: a2:cc:4d:51:e0:b5:50:54:0f:58:e8:e6:62:42:0f:bc:cf:bb: f4:12:a6:4e:af:08:a7:97:61:d2:70:6e:c1:86:30:eb:93:0b: a1:be:92:4f:46:ed:8e:e3:e8:f5:ff:b1:e3:c5:47:1a:d1:f1: 38:27:fb:48:86:1e:97:8b:6e:f9:74:e0:a6:b7:3f:fc:27:38: 07:fe:ab:2e:8a:a2:ef:93:e4:d3:f5:3b:6f:e2:ea:43:34:50: 27:8b:92:63:dd:2c:c6:f1:e1:0b:2a:00:91:f1:6d:cf:59:0f: 12:26:db:f6:bc:fa:34:60:0a:14:e8:6b:00:5b:86:46:07:10: 55:d1:27:09:13:7d:a5:3a:4f:03:a8:b6:16:cf:ad:29:4f:0c: 20:3c:f6:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjQwNTE4MjE1OTE2WhcNMjQwNTI1MjE1OTE2WjAYMRYwFAYD VQQDEw02NjQ5MjRiNS03YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXbrh/zbacBeBBZ8v+RfObzvgyQod+5O4DAORVmr4HNgjjMiWsAzWx0Fm3xA s2ZGz1a/PiuycH12jQMfoSVHO35wV5EPRRfzaOg86iZzhZ4ZSQ+3a5uguf8Va/h3 r0QqvNavA4aXj6yiOhkGIn6Lt1H6Pzj8ZIohN+RvWQwedsNvbO+zOND/sRWgVr8b 2qwtRqC2HSf8JQuxTUiN05VJrJ84xcNQRk4T1OsbDKKwTC5bzbPtgh0u/OLhClWa 157dM+hquCYGRWYf5ssnCdBZ2WfxUPzjS2jtBTpvWJcRzpOZXZNZOZ/1dzOvUx+u hHK/3XEoHv+P7ohp/4GjvQlD7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/bcWt+ oNCcxIJmC81MMNTIph9+MB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfmFo/dXbMcuahUPU2DY6OiPBzpjO6ej7+3X8eUS0SEGwxdBpfkF5G go9AScuTGkzoNInq+HEgWa9n5YvwPOVJG1jriWq24z2nQx14OPAmvw9A/+vUXdv3 vmZqfaCCNLK3wwaHbwGELs/J9bSizE1R4LVQVA9Y6OZiQg+8z7v0EqZOrwinl2HS cG7BhjDrkwuhvpJPRu2O4+j1/7HjxUca0fE4J/tIhh6Xi275dOCmtz/8JzgH/qsu iqLvk+TT9Ttv4upDNFAni5Jj3SzG8eELKgCR8W3PWQ8SJtv2vPo0YAoU6GsAW4ZG BxBV0ScJE32lOk8DqLYWz60pTwwgPPaM -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org