$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: JHbd/YHoi4NrdSNk3yXdIhA3LVMUnPudklV1ZA2RwSI= Subject key identifier: EF:09:EB:B9:DF:28:E1:49:D2:9B:5A:7E:08:EC:98:69:5A:FF:57:22 Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0E3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 15C3 Signing time: Mon 06 May 2024 18:30:09 +0000 Manifest this update: Mon 06 May 2024 18:30:08 +0000 Manifest next update: Mon 13 May 2024 18:30:08 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: 52AoMvMI4W4Yi31GbuCmCQE0sX/Yd90QvCIma+T6l3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: May 6 18:30:08 2024 GMT Not After : May 13 18:30:08 2024 GMT Subject: CN=663921b1-732e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:c1:7b:06:97:31:79:d4:01:b0:1a:15:e4: 60:c5:82:60:6a:f2:a4:4b:36:f3:b7:9a:1e:72:eb: de:87:2b:cc:9c:67:0f:3b:0f:66:e3:ec:dd:94:fe: 9e:46:49:cf:e5:2c:52:88:2b:ab:97:ea:92:0f:d5: 86:c7:74:0a:4f:3e:02:b1:7c:67:8d:b0:04:0c:10: 63:ce:5a:df:45:89:cb:f2:61:9a:19:40:ed:e3:02: f4:d5:47:8f:ae:a2:e2:f3:b5:79:d0:e4:bf:ed:af: 5f:c4:1b:e6:54:49:3e:b4:72:48:c4:2b:f0:e2:cb: e4:25:17:a6:b4:5b:e3:ab:3a:24:19:d3:f7:69:e5: 8f:3f:4f:10:40:7b:4f:86:e7:5f:38:76:80:89:fd: aa:93:c3:29:b0:03:04:28:d7:e5:b1:9c:b8:67:24: ec:cd:be:78:4d:14:0f:17:d6:6f:a9:8a:14:8b:eb: 66:26:5d:2e:41:81:d7:5d:47:a9:66:4a:11:82:61: 71:73:8b:34:5f:ba:7e:4d:cb:43:03:cf:0a:b8:88: 21:4b:11:aa:a5:0c:67:c9:66:dc:a8:54:43:62:c3: b6:54:91:6a:3b:e8:7f:5b:72:3e:08:b9:51:0c:4e: 3c:46:00:73:33:8e:b0:5e:8c:ba:18:69:b4:98:25: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:EB:B9:DF:28:E1:49:D2:9B:5A:7E:08:EC:98:69:5A:FF:57:22 X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:89:e8:9b:fd:4f:c4:31:9c:ea:3c:a3:c0:b8:e2:d0:3f:02: 2a:c5:5e:5c:68:7c:a6:1f:dd:ae:02:de:1e:7c:67:2e:7e:36: 5d:37:e1:ff:07:b8:df:da:b6:b5:02:78:b0:6a:36:cb:fa:0e: fd:b1:28:55:e3:ca:ee:9e:dc:3d:3a:9d:29:f6:da:d1:5b:47: 3d:fb:0b:88:e2:9e:c4:ec:18:bd:04:41:e8:eb:25:eb:69:e3: 1f:fe:10:d6:3a:fe:96:e4:09:8b:1b:a2:54:da:e7:c6:81:ba: 9f:c3:06:9c:75:bb:6c:4b:21:76:41:0a:27:a6:bb:f8:55:b2: e4:7a:79:a2:9c:b9:90:a8:f3:98:10:09:b3:5a:c7:90:78:aa: 39:b5:5f:86:12:ca:7f:38:d1:ab:3e:1a:c3:3a:b6:dd:28:fd: 42:fc:df:c3:13:b4:a7:d4:80:78:84:2b:b6:6c:93:32:e1:5a: c7:52:5f:ab:60:47:61:ee:f5:66:32:d8:05:f2:c5:aa:6c:2c: 0b:82:32:d9:06:d5:9c:57:54:d5:f5:c0:95:5a:4c:7e:5a:ac: f6:9f:68:cd:b1:6e:24:e9:3e:a2:ba:60:4e:2e:c0:a9:65:70: ce:9e:da:83:1d:2f:f7:6d:32:ca:11:07:04:46:7a:35:c7:54: a5:4a:b4:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjQwNTA2MTgzMDA4WhcNMjQwNTEzMTgzMDA4WjAYMRYwFAYD VQQDEw02NjM5MjFiMS03MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT3BewaXMXnUAbAaFeRgxYJgavKkSzbzt5oecuvehyvMnGcPOw9m4+zdlP6e RknP5SxSiCurl+qSD9WGx3QKTz4CsXxnjbAEDBBjzlrfRYnL8mGaGUDt4wL01UeP rqLi87V50OS/7a9fxBvmVEk+tHJIxCvw4svkJRemtFvjqzokGdP3aeWPP08QQHtP hudfOHaAif2qk8MpsAMEKNflsZy4ZyTszb54TRQPF9ZvqYoUi+tmJl0uQYHXXUep ZkoRgmFxc4s0X7p+TctDA88KuIghSxGqpQxnyWbcqFRDYsO2VJFqO+h/W3I+CLlR DE48RgBzM46wXoy6GGm0mCWQzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8J67nf KOFJ0ptafgjsmGla/1ciMB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLieib/U/EMZzqPKPAuOLQPwIqxV5caHymH92uAt4efGcufjZdN+H/ B7jf2ra1AniwajbL+g79sShV48runtw9Op0p9trRW0c9+wuI4p7E7Bi9BEHo6yXr aeMf/hDWOv6W5AmLG6JU2ufGgbqfwwacdbtsSyF2QQonprv4VbLkenminLmQqPOY EAmzWseQeKo5tV+GEsp/ONGrPhrDOrbdKP1C/N/DE7Sn1IB4hCu2bJMy4VrHUl+r YEdh7vVmMtgF8sWqbCwLgjLZBtWcV1TV9cCVWkx+Wqz2n2jNsW4k6T6iumBOLsCp ZXDOntqDHS/3bTLKEQcERno1x1SlSrQ2 -----END CERTIFICATE-----Generated at Mon May 6 20:19:28 2024 by rpki-client on console-ams.rpki-client.org