$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: SC9wrfov5Ijd/8OpQ7PcR0c3CPtXYK8FJeWSNVJcgn8= Subject key identifier: DB:E1:60:88:A8:BA:63:EF:B7:52:CD:D5:E2:AF:D1:AB:CB:43:D0:3B Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1460 Signing time: Sat 18 May 2024 17:23:15 +0000 Manifest this update: Sat 18 May 2024 17:23:15 +0000 Manifest next update: Sat 25 May 2024 17:23:15 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: JWGUhHK6XfvGx4eu8Rl88064KiiVzYZVnZ2LpX7zysc=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: j96PTlFpoRCT0sM9GV/HTNOgabv8BE28v1KYhTEUe9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5225 (0x1469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: May 18 17:23:15 2024 GMT Not After : May 25 17:23:15 2024 GMT Subject: CN=6648e403-5f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:1a:b8:7a:eb:a0:d5:c1:7c:aa:67:ff:e7: e3:e8:ce:aa:df:b2:2e:4a:71:1b:5f:ec:d7:09:96: bf:46:c4:36:0d:09:99:a5:8e:43:ec:6c:56:c3:5a: c6:39:55:40:c3:b3:7b:8e:2d:0f:84:b0:b3:a8:92: a3:c4:ef:93:88:f7:10:c7:11:53:44:55:6f:9c:37: fe:8f:f7:16:81:45:0f:94:77:94:ef:20:44:8a:00: 93:51:ec:ce:e3:ce:d3:54:67:c7:3d:24:d6:2d:d4: 15:bb:28:05:a1:7e:fe:5c:8f:a7:a9:ff:a8:75:40: 7f:94:c4:5d:fd:d5:7a:ec:66:93:8a:30:60:7c:2f: 8a:36:fe:19:a0:f1:eb:0a:41:84:48:08:c8:c7:b8: 62:14:d9:66:f6:10:6a:e6:80:7c:37:75:ce:88:67: da:cb:b6:a6:f9:be:25:5e:8e:a1:e2:96:a4:0a:fe: f1:1f:bf:e1:01:77:83:07:4d:72:71:7a:72:c4:48: b9:6f:bf:a0:1f:05:b5:87:d2:88:32:95:1e:dd:ee: 14:b8:cb:0e:f4:07:62:37:de:aa:45:e8:da:54:3d: e6:b6:cf:f6:0f:90:0f:91:5a:23:5b:37:6c:49:31: b2:47:5c:93:d8:b1:a1:8e:24:7e:01:0a:73:27:a1: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E1:60:88:A8:BA:63:EF:B7:52:CD:D5:E2:AF:D1:AB:CB:43:D0:3B X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ab:b3:54:d9:cf:41:3d:e7:2a:d7:ca:ac:47:de:42:50:d9: ce:93:17:e2:86:42:f0:be:db:ef:63:8e:55:26:91:dd:94:23: 3e:e7:34:31:45:04:b7:fa:b1:32:c5:ca:fc:a9:f6:90:82:61: 9c:d3:91:b3:09:1b:c7:3e:dc:59:86:10:6d:de:f3:58:6e:87: 09:47:1d:ac:1a:23:a4:ed:4e:3e:33:66:4f:86:eb:c4:21:79: a7:0a:42:d8:f3:3a:7c:63:6f:83:1e:b1:38:6f:4f:58:3b:dd: a8:89:f6:9c:4c:af:0c:e1:80:9f:58:9b:da:44:54:3e:9e:2c: ec:3a:22:03:5b:99:7a:71:cb:d4:63:fb:50:f7:67:36:30:e9: 70:ed:9e:85:e4:7b:06:d6:85:c3:dd:a4:14:79:ed:70:7a:7b: 0d:40:f2:d7:f3:8b:92:9b:88:63:d8:51:6e:96:27:b4:3d:36: 78:7d:48:03:b6:34:78:5e:04:a6:3b:97:da:2b:fb:f6:9d:7b: ce:4e:3b:6f:b2:9c:92:cb:81:c8:3b:c6:6a:1b:46:7e:dc:b5: 15:54:4c:41:a3:b1:31:c7:76:75:1b:fe:03:c2:f3:4b:53:47: 50:15:42:91:8e:ad:09:8d:ec:59:ce:f2:ec:8d:e9:a6:f9:68: 2b:cc:ed:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjQwNTE4MTcyMzE1WhcNMjQwNTI1MTcyMzE1WjAYMRYwFAYD VQQDEw02NjQ4ZTQwMy01ZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsugauHrroNXBfKpn/+fj6M6q37IuSnEbX+zXCZa/RsQ2DQmZpY5D7GxWw1rG OVVAw7N7ji0PhLCzqJKjxO+TiPcQxxFTRFVvnDf+j/cWgUUPlHeU7yBEigCTUezO 487TVGfHPSTWLdQVuygFoX7+XI+nqf+odUB/lMRd/dV67GaTijBgfC+KNv4ZoPHr CkGESAjIx7hiFNlm9hBq5oB8N3XOiGfay7am+b4lXo6h4pakCv7xH7/hAXeDB01y cXpyxEi5b7+gHwW1h9KIMpUe3e4UuMsO9AdiN96qRejaVD3mts/2D5APkVojWzds STGyR1yT2LGhjiR+AQpzJ6HhEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvhYIio umPvt1LN1eKv0avLQ9A7MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcq7NU2c9BPecq18qsR95CUNnOkxfihkLwvtvvY45VJpHdlCM+5zQx RQS3+rEyxcr8qfaQgmGc05GzCRvHPtxZhhBt3vNYbocJRx2sGiOk7U4+M2ZPhuvE IXmnCkLY8zp8Y2+DHrE4b09YO92oifacTK8M4YCfWJvaRFQ+nizsOiIDW5l6ccvU Y/tQ92c2MOlw7Z6F5HsG1oXD3aQUee1wensNQPLX84uSm4hj2FFulie0PTZ4fUgD tjR4XgSmO5faK/v2nXvOTjtvspySy4HIO8ZqG0Z+3LUVVExBo7Exx3Z1G/4DwvNL U0dQFUKRjq0JjexZzvLsjemm+WgrzO2j -----END CERTIFICATE-----Generated at Sat May 18 18:12:34 2024 by rpki-client on console-fra.rpki-client.org