$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: KnENrM8EF9uC6l+UyqIDRd1T0lihGpLcA2Gi561mE60= Subject key identifier: 0B:11:58:3A:F6:2D:D0:AE:52:C2:75:9B:D5:C7:21:BF:FA:C0:4B:0B Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 06E6 Signing time: Sat 18 May 2024 22:48:50 +0000 Manifest this update: Sat 18 May 2024 22:48:50 +0000 Manifest next update: Sat 25 May 2024 22:48:50 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: vCMLIHg+iiMUVeoC8DqnrvFHKR3WkZceQeuyhBsCc98=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: UJ0bU4f3uH4Z6a7SPUdvCu78gkyrlN+fVyocNr2pahc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: May 18 22:48:50 2024 GMT Not After : May 25 22:48:50 2024 GMT Subject: CN=66493052-05d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:d9:ab:ef:2c:88:38:fe:dd:e7:67:b9:8c: 61:39:47:06:4b:2f:a3:2a:1f:8f:82:46:a6:cb:93: 18:ed:fb:fb:89:88:46:19:c9:82:de:73:70:0d:9a: 38:5b:84:3a:5f:da:08:31:59:2a:51:10:fe:6e:15: 0c:c5:7a:a6:9f:ca:13:cf:76:90:77:62:ca:31:15: d3:b0:be:c0:d7:a6:58:81:1d:23:06:80:f1:6f:10: f4:3a:3b:ef:cd:2d:40:a7:78:67:0b:aa:4c:ab:14: 6b:60:72:c8:cb:00:a6:e8:66:9e:14:2e:7c:d9:74: 36:80:8c:4f:49:90:d8:f1:b4:b2:f2:0a:4f:dd:ce: 9d:49:82:47:70:e0:c6:03:60:87:c7:df:fc:58:17: a1:a9:f8:ec:4c:2b:0a:2c:57:9c:7f:02:c1:e2:07: 4c:cd:74:d1:10:bd:05:2e:82:52:75:2a:8b:c2:23: 54:0b:80:ba:ad:d3:e6:f5:ea:83:0d:5d:95:e4:03: 48:74:28:79:6a:76:0b:7c:5e:e4:3d:14:e0:4c:86: 6b:2a:8d:aa:09:8a:af:8e:f6:0e:50:16:0e:dc:bb: 8a:36:8f:f0:30:2b:f5:5e:11:88:a1:32:2e:57:e2: 57:81:c9:9b:92:c5:f0:37:70:5a:17:3a:6d:b0:78: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:11:58:3A:F6:2D:D0:AE:52:C2:75:9B:D5:C7:21:BF:FA:C0:4B:0B X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:20:1d:0c:9c:41:2f:f0:5f:b9:f8:d4:fa:a3:59:f3:a4:75: 66:3e:d8:c3:72:2b:64:aa:3e:d8:b8:dd:13:d8:a1:9c:38:07: 18:3e:eb:0a:e9:b2:ab:17:a1:3f:fa:3f:33:37:4e:af:90:4b: e1:6f:3e:30:d3:bd:fc:8d:00:e4:89:2f:7c:6f:2a:42:b3:02: ad:18:e2:47:1b:9d:38:dc:c1:8d:e8:31:2d:32:77:7b:7c:f6: 13:0b:13:1d:dc:21:11:9e:24:c4:58:18:bd:88:66:7e:6a:1e: d2:da:f2:f2:27:f9:7d:3a:8e:e4:1c:81:55:3b:57:a5:9f:bd: 03:e9:71:c9:d5:83:9d:45:ab:4c:c7:d0:72:11:6b:c2:dd:c6: 93:d1:7f:03:57:6e:93:c8:c1:df:10:fe:05:d0:31:af:65:8e: f2:6e:72:20:6f:86:53:27:b0:82:8c:39:b7:ad:ce:80:9a:40: 19:6e:83:1b:73:dc:33:be:11:44:20:51:5f:c0:89:53:18:6d: b0:d8:d5:ef:a3:77:ba:14:b1:14:9b:3f:a5:53:c5:15:ad:4d: fb:13:d4:9d:ad:66:04:8c:98:48:a0:9f:43:37:22:16:20:a4: 8e:d8:33:a7:b7:99:5d:e3:24:a9:e8:37:18:d9:5b:ba:d3:db: e7:2e:b0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjQwNTE4MjI0ODUwWhcNMjQwNTI1MjI0ODUwWjAYMRYwFAYD VQQDEw02NjQ5MzA1Mi0wNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsjZq+8siDj+3ednuYxhOUcGSy+jKh+Pgkamy5MY7fv7iYhGGcmC3nNwDZo4 W4Q6X9oIMVkqURD+bhUMxXqmn8oTz3aQd2LKMRXTsL7A16ZYgR0jBoDxbxD0Ojvv zS1Ap3hnC6pMqxRrYHLIywCm6GaeFC582XQ2gIxPSZDY8bSy8gpP3c6dSYJHcODG A2CHx9/8WBehqfjsTCsKLFecfwLB4gdMzXTREL0FLoJSdSqLwiNUC4C6rdPm9eqD DV2V5ANIdCh5anYLfF7kPRTgTIZrKo2qCYqvjvYOUBYO3LuKNo/wMCv1XhGIoTIu V+JXgcmbksXwN3BaFzptsHgCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsRWDr2 LdCuUsJ1m9XHIb/6wEsLMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYIB0MnEEv8F+5+NT6o1nzpHVmPtjDcitkqj7YuN0T2KGcOAcYPusK 6bKrF6E/+j8zN06vkEvhbz4w0738jQDkiS98bypCswKtGOJHG5043MGN6DEtMnd7 fPYTCxMd3CERniTEWBi9iGZ+ah7S2vLyJ/l9Oo7kHIFVO1eln70D6XHJ1YOdRatM x9ByEWvC3caT0X8DV26TyMHfEP4F0DGvZY7ybnIgb4ZTJ7CCjDm3rc6AmkAZboMb c9wzvhFEIFFfwIlTGG2w2NXvo3e6FLEUmz+lU8UVrU37E9SdrWYEjJhIoJ9DNyIW IKSO2DOnt5ld4ySp6DcY2Vu609vnLrBK -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org