$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft File: 9z8-EYZs_PNnOPhCnkwIA7flvYA.mft (raw, json) Hash identifier: gLJM4L75kywIXiEhjUEd+gURxDjtFq8+xdseIebCMoo= Subject key identifier: 20:9A:8F:B7:A7:4C:3D:0B:6E:40:6B:E3:E8:E9:94:7F:07:A7:28:B8 Authority key identifier: F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80 Certificate issuer: /CN=A91D7F76/serialNumber=F73F3E11866CFCF36738F8429E4C0803B7E5BD80 Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft Manifest number: 070C Signing time: Sat 18 May 2024 22:39:41 +0000 Manifest this update: Sat 18 May 2024 22:39:41 +0000 Manifest next update: Sat 25 May 2024 22:39:41 +0000 Files and hashes: 1: 9z8-EYZs_PNnOPhCnkwIA7flvYA.crl (hash: gXTpy1x7sTrLFim0tAtj1ae3VI9gnU+9ot23Jr4ib7o=) 2: 1215F814F8B411EAA6C4ED51C4F9AE02.roa (hash: EE8PcUk4eMMiefCKie//b0DfNzrIcPkOJWhUG9EKyxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.crl rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7F76/serialNumber=F73F3E11866CFCF36738F8429E4C0803B7E5BD80 Validity Not Before: May 18 22:39:41 2024 GMT Not After : May 25 22:39:41 2024 GMT Subject: CN=66492e2d-3adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:cb:88:98:71:2d:7f:15:9f:5b:f9:57:ee: e1:4b:fa:2d:fc:9e:cd:2e:49:1d:62:ef:a3:72:fe: 18:a6:f4:bf:8d:31:27:5a:33:70:7d:33:d2:de:4f: 3d:46:1e:f2:11:84:ae:58:32:5d:a5:8a:c7:dc:5e: e2:09:2c:71:d5:25:de:d0:56:26:be:2b:41:48:54: 77:08:7e:45:6b:5b:9b:c9:66:96:16:8f:48:99:54: 44:12:a3:42:ed:8b:51:93:41:b3:2f:c5:d2:e9:87: 6f:0f:d9:be:0b:25:23:bd:63:5a:5f:71:26:8a:c5: d4:9c:58:38:e2:29:c5:22:de:92:12:57:4d:0c:31: 0e:f4:d1:25:a0:81:1a:ef:98:5e:75:ee:25:c5:ee: d9:7a:ee:3a:bb:25:f7:9b:e3:84:b5:ec:be:e3:f0: 4b:39:13:0b:db:c7:9f:eb:24:1a:e5:c0:de:b5:9a: da:85:58:76:3c:78:ad:cb:bc:3a:ea:52:0f:0a:ef: 69:62:3c:cd:1b:f1:f4:93:42:7c:96:41:46:ac:81: 0e:cf:5b:28:a4:08:d8:ec:f5:95:6e:82:76:ae:98: 3a:fb:08:77:f2:c6:52:9c:ed:6a:09:0d:b8:29:26: 65:ef:f9:48:29:7a:d3:f0:90:87:f2:1d:04:6d:2d: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9A:8F:B7:A7:4C:3D:0B:6E:40:6B:E3:E8:E9:94:7F:07:A7:28:B8 X509v3 Authority Key Identifier: keyid:F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:21:ba:a3:1b:c9:ee:6d:31:96:62:e8:21:5f:f4:ff:ca:e3: 3e:90:c1:fd:11:93:43:a3:67:42:c9:be:84:7b:63:ff:98:89: 23:14:4f:a6:db:0d:cc:51:cd:1f:9c:9c:43:29:ae:0c:15:15: 53:86:2b:24:af:d7:fd:bb:ca:43:0c:11:d5:08:02:0a:2e:ea: b8:40:c6:ec:35:84:91:13:81:57:ca:1b:c9:04:71:04:4e:11: 51:8b:11:58:58:bf:f6:7e:b3:1c:4f:00:d1:b4:5e:48:5d:29: 09:3f:b4:b2:d7:0c:6a:63:3a:96:ca:2f:c0:cf:28:ba:ea:b2: 0d:73:d0:12:61:fe:61:39:67:18:34:f6:22:63:9a:ea:6d:d3: 5d:b2:cc:81:04:76:03:1f:8f:79:ef:cd:c6:ff:4e:ab:ef:ff: c1:e9:fa:02:bc:d2:6a:2b:4c:38:15:8d:81:e9:ca:31:78:ee: 7b:b7:8a:1a:ae:8a:b6:7d:1a:81:b2:e9:84:59:ff:53:ee:ba: f5:30:f7:1f:7d:c7:94:56:32:95:11:89:77:12:59:34:dd:f2: d9:b8:e8:86:3b:70:3c:88:74:6b:d7:9b:4e:cc:10:db:2b:d1: d6:89:d0:99:68:44:d5:c7:35:92:e7:cd:b9:b1:17:71:dd:47: d0:60:bd:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdGNzYxMTAvBgNVBAUTKEY3M0YzRTExODY2Q0ZDRjM2NzM4Rjg0MjlFNEMwODAz QjdFNUJEODAwHhcNMjQwNTE4MjIzOTQxWhcNMjQwNTI1MjIzOTQxWjAYMRYwFAYD VQQDEw02NjQ5MmUyZC0zYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BfLiJhxLX8Vn1v5V+7hS/ot/J7NLkkdYu+jcv4YpvS/jTEnWjNwfTPS3k89 Rh7yEYSuWDJdpYrH3F7iCSxx1SXe0FYmvitBSFR3CH5Fa1ubyWaWFo9ImVREEqNC 7YtRk0GzL8XS6YdvD9m+CyUjvWNaX3EmisXUnFg44inFIt6SEldNDDEO9NEloIEa 75hede4lxe7Zeu46uyX3m+OEtey+4/BLORML28ef6yQa5cDetZrahVh2PHity7w6 6lIPCu9pYjzNG/H0k0J8lkFGrIEOz1sopAjY7PWVboJ2rpg6+wh38sZSnO1qCQ24 KSZl7/lIKXrT8JCH8h0EbS1B5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCaj7en TD0LbkBr4+jplH8Hpyi4MB8GA1UdIwQYMBaAFPc/PhGGbPzzZzj4Qp5MCAO35b2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Y3Ni9EQjAwODYyNEY2 MzIxMUVBOUNGNzA1NjFDNEY5QUUwMi85ejgtRVlac19QTm5PUGhDbmt3SUE3Zmx2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6OC1FWVpzX1BObk9QaENua3dJQTdmbHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Y3Ni9EQjAwODYyNEY2MzIxMUVBOUNGNzA1NjFDNEY5QUUwMi85ejgtRVlac19Q Tm5PUGhDbmt3SUE3Zmx2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArIbqjG8nubTGWYughX/T/yuM+kMH9EZNDo2dCyb6Ee2P/mIkjFE+m 2w3MUc0fnJxDKa4MFRVThiskr9f9u8pDDBHVCAIKLuq4QMbsNYSRE4FXyhvJBHEE ThFRixFYWL/2frMcTwDRtF5IXSkJP7Sy1wxqYzqWyi/Azyi66rINc9ASYf5hOWcY NPYiY5rqbdNdssyBBHYDH495783G/06r7//B6foCvNJqK0w4FY2B6coxeO57t4oa roq2fRqBsumEWf9T7rr1MPcffceUVjKVEYl3Elk03fLZuOiGO3A8iHRr15tOzBDb K9HWidCZaETVxzWS5825sRdx3UfQYL3N -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org