$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: fvSGjNTe4Pik0pi+OZHp9pfS72IgExjQyB8erjo/XDQ= Subject key identifier: 18:B3:6B:BC:B2:37:B8:5B:4A:B8:0A:0A:08:1B:59:D7:3D:3C:40:48 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0B89 Signing time: Sat 18 May 2024 19:22:24 +0000 Manifest this update: Sat 18 May 2024 19:22:24 +0000 Manifest next update: Sat 25 May 2024 19:22:24 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: gf2f7poga3FR/8HN7hfX0HbArd/kgvx95pxJxjEfOLg=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: zDl80I2OXRgu8XAGzajWbluuoVqJ4qa8l1cE9aEJ0WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: May 18 19:22:24 2024 GMT Not After : May 25 19:22:24 2024 GMT Subject: CN=6648fff0-dadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:37:9d:2c:48:63:8a:8b:84:ac:bd:e7:7d: f9:ce:17:e0:4a:6b:af:1f:54:d5:e8:4b:2b:f3:5c: 7d:55:77:ec:42:03:d5:bb:23:58:55:1b:44:f4:5b: 7e:15:18:11:f7:9b:5b:57:a0:c0:b2:51:b6:b5:c1: 93:ef:7e:0f:cf:1f:49:c5:52:41:1c:0a:d8:37:47: f0:f1:69:45:7f:18:00:78:ec:ba:13:d6:3e:5e:81: 34:94:43:9e:3e:73:1a:8f:6d:4a:1c:99:a8:41:d0: 19:0b:d0:29:b5:e6:da:40:7b:9c:ec:26:f0:dc:fb: ea:95:55:5b:74:82:ba:68:01:2a:21:b0:f0:88:56: 3c:d2:cb:96:00:3b:50:0e:2e:79:0e:85:82:45:82: f3:34:b7:7f:08:66:6b:f2:30:92:a3:a5:cd:15:7b: ab:97:05:1f:59:c9:8c:f9:6b:f2:a3:17:b1:37:28: e1:c6:8d:06:69:52:51:04:45:4d:40:56:63:98:c3: f9:ab:3f:8f:53:0e:a1:08:a6:3d:39:a5:b1:d6:4c: 57:67:fa:13:8d:53:eb:1b:ac:1d:f2:9b:be:57:24: 3a:f5:d9:46:cd:ee:54:26:4e:2c:de:06:67:d9:3e: 9b:2b:1b:50:de:7e:d9:d2:e2:c5:9e:98:99:42:a0: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:6B:BC:B2:37:B8:5B:4A:B8:0A:0A:08:1B:59:D7:3D:3C:40:48 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:79:1b:59:cd:36:2a:97:d9:47:16:c4:c0:04:d9:fa:28:4e: 0d:85:a3:57:7a:63:6a:8a:77:ce:d1:64:c8:b4:60:37:62:f3: d9:f2:8a:8c:58:42:71:48:b3:46:d8:5f:11:71:19:9b:14:90: ec:85:10:50:ee:82:ae:02:25:08:97:5d:94:d2:8b:55:2e:e9: 9c:4b:0d:6f:73:c5:12:7c:0b:4f:ba:f4:56:7d:29:94:5b:9b: d5:03:34:71:79:01:74:f6:a9:7a:51:fc:71:fe:ef:05:71:45: c1:8c:9f:c4:5d:ad:0f:c0:17:69:dd:0f:2e:c7:e4:2f:68:6f: 51:00:aa:25:6e:3d:03:84:2f:4c:9b:a1:36:f5:c7:76:23:57: 6a:73:03:67:c0:10:96:4d:92:1b:d6:85:ff:2e:b3:63:1c:21: 51:37:1f:db:a9:c6:af:77:a3:c5:07:38:57:ce:64:35:6a:08: 31:8a:f4:dc:30:69:97:37:fc:e1:1d:4f:4d:5c:64:07:3e:0b: 69:36:01:77:93:70:af:d8:e3:43:6e:e4:94:30:0a:a2:07:ae: 63:0c:2e:59:2f:ad:bc:46:e6:00:1a:30:db:b6:5f:26:20:36: 17:aa:8a:4b:59:f3:60:1c:bf:37:4f:a5:88:46:00:62:0d:66: 55:b4:87:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjQwNTE4MTkyMjI0WhcNMjQwNTI1MTkyMjI0WjAYMRYwFAYD VQQDEw02NjQ4ZmZmMC1kYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL43nSxIY4qLhKy95335zhfgSmuvH1TV6Esr81x9VXfsQgPVuyNYVRtE9Ft+ FRgR95tbV6DAslG2tcGT734Pzx9JxVJBHArYN0fw8WlFfxgAeOy6E9Y+XoE0lEOe PnMaj21KHJmoQdAZC9AptebaQHuc7Cbw3PvqlVVbdIK6aAEqIbDwiFY80suWADtQ Di55DoWCRYLzNLd/CGZr8jCSo6XNFXurlwUfWcmM+WvyoxexNyjhxo0GaVJRBEVN QFZjmMP5qz+PUw6hCKY9OaWx1kxXZ/oTjVPrG6wd8pu+VyQ69dlGze5UJk4s3gZn 2T6bKxtQ3n7Z0uLFnpiZQqAXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiza7yy N7hbSrgKCggbWdc9PEBIMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3eRtZzTYql9lHFsTABNn6KE4NhaNXemNqinfO0WTItGA3YvPZ8oqM WEJxSLNG2F8RcRmbFJDshRBQ7oKuAiUIl12U0otVLumcSw1vc8USfAtPuvRWfSmU W5vVAzRxeQF09ql6Ufxx/u8FcUXBjJ/EXa0PwBdp3Q8ux+QvaG9RAKolbj0DhC9M m6E29cd2I1dqcwNnwBCWTZIb1oX/LrNjHCFRNx/bqcavd6PFBzhXzmQ1aggxivTc MGmXN/zhHU9NXGQHPgtpNgF3k3Cv2ONDbuSUMAqiB65jDC5ZL628RuYAGjDbtl8m IDYXqopLWfNgHL83T6WIRgBiDWZVtIe4 -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org