$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: 3GCuaTFm2ryRtFjon29mwGBTGtyvBVw91BgyA8+U8WI= Subject key identifier: 49:AF:C6:9A:50:7F:8C:6F:46:70:B7:02:35:E9:E8:53:24:3B:72:5B Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 0124 Signing time: Sun 19 May 2024 05:17:32 +0000 Manifest this update: Sun 19 May 2024 05:17:31 +0000 Manifest next update: Sun 26 May 2024 05:17:31 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: oiJxJdelTpmIO1nRRBR0C9TlxMaEqsBVW2W+LmUsmg4=) 2: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: +egsiZQuK0DvlIDs69wUvlKJ0oetMgci2jecNO2W5BY=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: KlICDI7CttOBxnlmouufoikQHOv6fc+7+U3kFci82ro=) 4: C82A0778680811EE88B5527CC4F9AE02.roa (hash: iT0U9lnLZYbIpbQMpMgZSE264DaSr6jhkfqcGbR6zSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: May 19 05:17:31 2024 GMT Not After : May 26 05:17:31 2024 GMT Subject: CN=66498b6c-e21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:4a:2e:92:a0:a6:28:66:54:99:bc:e3:cb: 6c:ae:96:51:83:06:bc:bb:41:f6:4c:a8:6f:0f:21: ce:34:9d:58:96:73:a3:ba:db:e6:f4:93:4b:d3:81: 45:ab:4b:68:7c:6a:21:08:74:a4:99:79:86:22:d6: 47:13:b5:09:ac:26:f8:5d:2d:c1:d5:23:d6:52:10: cb:b3:3a:ff:ad:40:6d:c8:03:b4:ec:d8:ad:1c:15: 40:83:7d:ae:8d:5f:78:fb:10:e3:d3:f7:ab:8c:10: b8:9c:59:b8:38:f6:3c:01:a4:26:0d:2d:ba:07:59: e6:90:b5:76:75:09:46:5e:f6:3c:af:f2:1c:34:56: cc:f3:d9:45:e2:5c:a5:92:b6:32:d3:a7:78:8a:87: 83:62:bc:93:0e:6d:b8:49:aa:de:d2:bf:9b:1c:68: d6:70:b6:f7:2f:25:57:1a:07:88:10:49:b5:6d:79: 57:20:80:65:96:a2:2c:fa:f5:15:37:ef:8b:c0:91: 76:a2:9e:d8:73:62:46:6e:29:00:62:e8:a5:2b:57: 3a:71:63:c4:86:c8:f7:3d:d0:6c:0b:df:f3:62:87: 0d:0a:38:cd:92:dd:31:39:5c:ce:07:47:5b:2c:1a: 68:36:4f:89:21:c9:a5:b8:6e:24:20:65:6c:ec:ba: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:C6:9A:50:7F:8C:6F:46:70:B7:02:35:E9:E8:53:24:3B:72:5B X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c3:1d:89:d4:2e:4b:88:2c:3e:f8:e3:cc:cd:bb:ee:21:4c: 2b:6e:a9:30:fd:57:3b:13:9a:02:ee:10:9a:2f:cb:5d:5c:f1: c0:fb:e7:a1:c9:02:ed:83:75:46:c6:87:af:5b:49:c9:3d:6b: 2c:c6:51:59:cf:e8:3c:eb:59:d1:2c:95:04:76:f7:e1:d1:5e: 36:4b:21:11:74:9f:84:92:cf:59:6a:03:3c:dc:1e:88:83:f7: e1:d1:04:b2:4f:93:c8:20:42:f2:c5:40:5b:f6:35:b5:23:91: e3:a9:fa:11:73:b1:a6:8f:c2:81:09:6b:15:e1:46:d2:7b:fb: b2:f8:33:81:43:6a:17:90:ef:eb:e8:15:1c:b2:6f:02:da:40: 75:b8:a8:84:0c:b4:88:77:27:49:e6:04:0b:72:f4:17:01:f3: 84:26:f8:ff:77:64:5f:d5:e8:ec:22:cf:46:f5:e6:08:b1:10: 53:12:a6:2e:ce:93:9e:91:60:a1:0b:b7:61:a3:f6:56:87:4b: 96:51:28:c3:58:62:3f:00:6e:fb:83:b6:6e:ac:ed:18:27:fb: 32:2b:26:00:ac:70:c8:58:dc:87:6a:e6:ff:d7:e1:b4:19:b9: 76:5e:43:26:40:95:fd:74:af:66:d0:49:47:b2:cb:77:4d:f8: a4:7d:e8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjQwNTE5MDUxNzMxWhcNMjQwNTI2MDUxNzMxWjAYMRYwFAYD VQQDEw02NjQ5OGI2Yy1lMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuBKLpKgpihmVJm848tsrpZRgwa8u0H2TKhvDyHONJ1YlnOjutvm9JNL04FF q0tofGohCHSkmXmGItZHE7UJrCb4XS3B1SPWUhDLszr/rUBtyAO07NitHBVAg32u jV94+xDj0/erjBC4nFm4OPY8AaQmDS26B1nmkLV2dQlGXvY8r/IcNFbM89lF4lyl krYy06d4ioeDYryTDm24Sare0r+bHGjWcLb3LyVXGgeIEEm1bXlXIIBllqIs+vUV N++LwJF2op7Yc2JGbikAYuilK1c6cWPEhsj3PdBsC9/zYocNCjjNkt0xOVzOB0db LBpoNk+JIcmluG4kIGVs7LpkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmvxppQ f4xvRnC3AjXp6FMkO3JbMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhwx2J1C5LiCw++OPMzbvuIUwrbqkw/Vc7E5oC7hCaL8tdXPHA++eh yQLtg3VGxoevW0nJPWssxlFZz+g861nRLJUEdvfh0V42SyERdJ+Eks9ZagM83B6I g/fh0QSyT5PIIELyxUBb9jW1I5HjqfoRc7Gmj8KBCWsV4UbSe/uy+DOBQ2oXkO/r 6BUcsm8C2kB1uKiEDLSIdydJ5gQLcvQXAfOEJvj/d2Rf1ejsIs9G9eYIsRBTEqYu zpOekWChC7dho/ZWh0uWUSjDWGI/AG77g7ZurO0YJ/syKyYArHDIWNyHaub/1+G0 Gbl2XkMmQJX9dK9m0ElHsst3Tfikfeil -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org