$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: EGRy2n6A8WKG2dcMvQUwzL/q+6KZz/bDGp+aBzPhXsk= Subject key identifier: 2A:52:06:EE:06:83:36:10:06:AC:C8:31:DF:72:FE:BF:47:03:95:F7 Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0BD1 Signing time: Sat 18 May 2024 19:07:01 +0000 Manifest this update: Sat 18 May 2024 19:07:00 +0000 Manifest next update: Sat 25 May 2024 19:07:00 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: s66DCoBPbzjO120QxGoeAa5DFGKycczgYgSU640jVfs=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: gtQBI4S78oRGzDerxcGVhnFswIklyjzdp1Q/C1it5xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: May 18 19:07:00 2024 GMT Not After : May 25 19:07:00 2024 GMT Subject: CN=6648fc55-31ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:4d:15:0d:55:d4:6d:44:9a:d0:9c:ad:65: de:e8:da:56:7d:0b:65:b7:ea:c9:08:7c:49:5d:d6: 7e:98:10:59:d1:01:de:9a:93:85:e6:5a:e1:f9:83: f1:45:47:90:fe:26:73:e7:dd:ae:3f:72:8d:d3:4e: 55:44:53:b7:6a:f0:ef:5d:b6:42:2d:77:4a:4f:fc: 98:be:ab:85:97:b8:bc:26:ab:bf:db:66:49:f2:6f: 7e:a1:ad:49:ca:d8:6c:d6:74:89:03:08:76:c4:e7: 1b:3d:0a:7a:50:48:79:98:1e:13:52:16:e6:fc:c6: 18:30:b6:50:17:43:3f:5c:cb:25:bb:13:08:27:cf: d5:3f:62:90:b0:da:e1:b7:18:b7:6e:71:ee:8e:7f: e3:f5:ae:27:b5:97:38:90:b5:36:e3:f0:c6:25:32: 78:1e:5c:14:cb:3f:84:ab:fe:e5:bd:66:26:1d:f9: 1e:f4:18:f4:ff:f4:cf:43:59:f1:c5:33:95:ea:e7: 24:3f:eb:28:82:2a:41:18:8b:a7:52:17:2e:08:ec: 17:4b:d5:1f:0a:d6:99:a0:60:bb:fc:e8:e7:c0:44: 0f:b0:8c:b0:ac:79:55:63:6a:8d:81:e1:7e:28:e0: 70:b6:50:54:c7:13:b3:39:fb:06:55:04:88:ae:b6: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:06:EE:06:83:36:10:06:AC:C8:31:DF:72:FE:BF:47:03:95:F7 X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:dc:ea:79:1c:4d:22:d9:a6:5a:8b:53:85:a2:e9:2e:a1:78: 16:73:cd:0a:cf:5b:ef:13:40:7e:c1:95:4f:88:67:29:71:cb: db:d9:75:b9:75:74:97:83:59:96:c6:44:06:46:03:1b:ba:29: 7f:8f:c5:93:0b:5a:86:87:4e:b1:0c:fc:77:9b:02:fd:18:1d: ba:46:88:dc:a4:e4:4e:c0:96:1b:d5:0c:f2:9e:57:e9:32:f6: db:6b:df:e1:f0:28:99:24:06:25:8e:57:e3:e7:bf:29:77:1d: ed:a8:40:c4:a4:22:58:ce:11:3e:6e:ea:dc:1e:21:07:0c:f1: 35:dd:4d:14:10:52:86:fc:bc:2d:f9:d6:73:76:03:47:8d:66: dd:88:5b:00:22:01:e3:85:c9:02:96:96:4c:f4:a5:4a:ce:24: e9:79:9d:a2:0f:7d:3e:16:b9:c8:9c:c3:f9:0f:c2:e0:7e:d1: 22:ee:c7:a8:3e:1a:a1:e5:99:2c:b5:1e:1f:f6:2e:67:a9:af: e1:9d:ec:71:24:2f:60:fc:e0:df:bc:cb:4d:ac:ea:a0:de:c8: ab:ee:ab:9b:5e:51:bd:80:ea:bd:c7:07:de:a0:b4:1a:ee:b5: 03:88:29:db:b8:d3:1b:ba:c1:71:08:e6:e1:91:49:53:16:6f: a5:b9:b6:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjQwNTE4MTkwNzAwWhcNMjQwNTI1MTkwNzAwWjAYMRYwFAYD VQQDEw02NjQ4ZmM1NS0zMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZVNFQ1V1G1EmtCcrWXe6NpWfQtlt+rJCHxJXdZ+mBBZ0QHempOF5lrh+YPx RUeQ/iZz592uP3KN005VRFO3avDvXbZCLXdKT/yYvquFl7i8Jqu/22ZJ8m9+oa1J yths1nSJAwh2xOcbPQp6UEh5mB4TUhbm/MYYMLZQF0M/XMsluxMIJ8/VP2KQsNrh txi3bnHujn/j9a4ntZc4kLU24/DGJTJ4HlwUyz+Eq/7lvWYmHfke9Bj0//TPQ1nx xTOV6uckP+sogipBGIunUhcuCOwXS9UfCtaZoGC7/OjnwEQPsIywrHlVY2qNgeF+ KOBwtlBUxxOzOfsGVQSIrrbhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpSBu4G gzYQBqzIMd9y/r9HA5X3MB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe3Op5HE0i2aZai1OFoukuoXgWc80Kz1vvE0B+wZVPiGcpccvb2XW5 dXSXg1mWxkQGRgMbuil/j8WTC1qGh06xDPx3mwL9GB26RojcpOROwJYb1Qzynlfp Mvbba9/h8CiZJAYljlfj578pdx3tqEDEpCJYzhE+burcHiEHDPE13U0UEFKG/Lwt +dZzdgNHjWbdiFsAIgHjhckClpZM9KVKziTpeZ2iD30+FrnInMP5D8LgftEi7seo Phqh5ZkstR4f9i5nqa/hnexxJC9g/ODfvMtNrOqg3sir7qubXlG9gOq9xwfeoLQa 7rUDiCnbuNMbusFxCObhkUlTFm+lubYO -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org