$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: 1rr0jNyFXvsrwwh+S3z2CkwX/MFA8Y8LUxSoA8csKdM= Subject key identifier: C8:9E:72:B1:E2:04:C2:B0:7D:A4:D3:CA:DB:FB:A2:99:E1:8D:4B:6D Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: 14 Signing time: Wed 15 May 2024 08:57:07 +0000 Manifest this update: Wed 15 May 2024 08:57:07 +0000 Manifest next update: Wed 22 May 2024 08:57:07 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: o4yGO32N4t2dhEFZNJtCvd6waZF6LP2k92w9CwLcvsQ=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: HUL9A15K3QXg4KiojfWyiL6fLdOjifKgkpo2+Is4ENA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: May 15 08:57:07 2024 GMT Not After : May 22 08:57:07 2024 GMT Subject: CN=664478e3-e3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:21:e8:a5:0a:4f:b3:7b:2d:ec:3f:0d:27:b4: fc:3f:b5:30:f6:ce:66:4c:07:c5:9f:ce:09:c5:f6: c3:4f:35:08:67:f6:a6:76:c1:c1:b4:33:63:d0:5f: cf:3d:99:64:1d:5d:0b:6a:64:7c:8f:a8:18:49:5f: 36:11:45:43:06:58:82:ae:ae:b4:2d:16:b9:7d:80: 1f:ce:9f:50:8e:e1:73:fc:78:33:b8:73:6c:ba:65: 0e:5c:ee:8b:a8:03:9b:a7:1e:58:37:36:b5:bb:ab: b6:32:5f:a5:86:1e:e3:2b:c4:60:fe:69:87:34:2a: 93:1e:a5:c9:18:ab:da:72:f0:59:a4:d6:ba:1b:3e: 42:19:57:5d:92:03:a9:dc:28:bb:56:cd:86:64:8b: 63:1f:47:8e:60:a3:fe:49:3a:8d:0e:48:70:2d:f2: 60:fa:c7:dd:47:09:70:6a:0c:70:29:18:c2:20:f1: dd:8a:05:86:5d:85:f0:13:f9:33:a7:7d:cc:4f:2c: 24:e1:d8:d4:0c:ca:27:ca:54:51:3a:56:c4:9f:b0: 78:00:d8:a6:0d:c2:ce:e7:72:7e:94:7e:88:c3:d2: 1d:28:70:ef:f7:86:4d:e1:b3:49:14:e7:4d:51:21: 50:33:e7:fd:64:20:e7:5d:a1:1d:36:0d:d5:0d:ee: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:72:B1:E2:04:C2:B0:7D:A4:D3:CA:DB:FB:A2:99:E1:8D:4B:6D X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d4:74:a6:d9:c7:a2:69:8e:86:d2:60:3f:c5:4d:01:a5:7e: 45:60:be:de:05:c3:f7:3a:7a:43:f1:59:29:a5:d2:95:bb:f3: e2:74:6e:b5:59:ed:ed:5a:1d:62:62:66:be:6f:56:30:ac:a7: 6f:03:a4:96:b1:91:2f:c5:db:bb:de:4d:a2:ce:82:e4:9c:ed: 5f:74:a8:d4:61:35:86:39:f7:f6:ef:5d:d8:1a:b3:e5:9e:e5: 23:0c:e6:22:50:32:98:ee:25:22:ff:25:60:44:b3:9e:5e:34: c5:2d:85:db:27:95:5a:40:1a:a0:9f:33:64:1a:90:01:db:c1: 8c:15:78:fe:2b:42:c9:e5:ad:95:0b:42:d3:e9:8f:24:cf:1f: 5f:16:1e:5b:32:78:38:ef:df:4e:26:f0:4e:94:e4:33:95:25: e2:e4:ea:ed:10:ca:c4:26:88:37:d1:b8:bc:3a:2d:ca:16:95: f4:cd:0e:5e:36:86:bf:dd:ca:f5:e1:6f:36:2a:1b:e2:6c:f3: 47:c4:59:13:7d:f6:de:6a:ce:10:a8:12:b5:3a:e9:74:d9:1c: f0:db:cd:d2:66:7d:d4:42:64:65:ec:b2:9f:96:7b:38:8e:cd: 97:2a:97:5f:d9:13:27:c0:26:ee:a2:c6:a2:e1:15:0d:e7:4c: 20:6c:91:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDczQTExMC8GA1UEBRMoRjU1MDJBNEQ3RDE0QTZBQTYzRTVGRkFCRjkzNkUxNTJB OERGODAzQjAeFw0yNDA1MTUwODU3MDdaFw0yNDA1MjIwODU3MDdaMBgxFjAUBgNV BAMTDTY2NDQ3OGUzLWUzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqIeilCk+zey3sPw0ntPw/tTD2zmZMB8WfzgnF9sNPNQhn9qZ2wcG0M2PQX889 mWQdXQtqZHyPqBhJXzYRRUMGWIKurrQtFrl9gB/On1CO4XP8eDO4c2y6ZQ5c7ouo A5unHlg3NrW7q7YyX6WGHuMrxGD+aYc0KpMepckYq9py8Fmk1robPkIZV12SA6nc KLtWzYZki2MfR45go/5JOo0OSHAt8mD6x91HCXBqDHApGMIg8d2KBYZdhfAT+TOn fcxPLCTh2NQMyifKVFE6VsSfsHgA2KYNws7ncn6UfojD0h0ocO/3hk3hs0kU501R IVAz5/1kIOddoR02DdUN7isHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyJ5yseIE wrB9pNPK2/uimeGNS20wHwYDVR0jBBgwFoAU9VAqTX0Upqpj5f+r+TbhUqjfgDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNzNBL0VCNEEzQURBRjY0 MTExRUVCQjExRUY1M0M0RjlBRTAyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdE cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVZBcVRYMFVwcXBqNWYtci1UYmhVcWpmZ0RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NzNBL0VCNEEzQURBRjY0MTExRUVCQjExRUY1M0M0RjlBRTAyLzlWQXFUWDBVcHFw ajVmLXItVGJoVXFqZmdEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3UdKbZx6JpjobSYD/FTQGlfkVgvt4Fw/c6ekPxWSml0pW78+J0brVZ 7e1aHWJiZr5vVjCsp28DpJaxkS/F27veTaLOguSc7V90qNRhNYY59/bvXdgas+We 5SMM5iJQMpjuJSL/JWBEs55eNMUthdsnlVpAGqCfM2QakAHbwYwVeP4rQsnlrZUL QtPpjyTPH18WHlsyeDjv304m8E6U5DOVJeLk6u0QysQmiDfRuLw6LcoWlfTNDl42 hr/dyvXhbzYqG+Js80fEWRN99t5qzhCoErU66XTZHPDbzdJmfdRCZGXssp+WeziO zZcql1/ZEyfAJu6ixqLhFQ3nTCBskWI= -----END CERTIFICATE-----Generated at Wed May 15 11:17:40 2024 by rpki-client on console-ams.rpki-client.org