$ rpki-client -vvf rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft File: i99RGJodvfloQ0tec2qpq_1FVhw.mft (raw, json) Hash identifier: zdWAPV76GIHWoGq9zuxX5gs/cw1mXWSIEABs6bwDftk= Subject key identifier: 8B:C2:4E:09:FB:4C:5B:6F:F8:71:B6:F8:31:5E:C0:F8:39:F7:99:D9 Authority key identifier: 8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C Certificate issuer: /CN=A9119510/serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C Certificate serial: 1840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft Manifest number: 1839 Signing time: Mon 06 May 2024 17:01:03 +0000 Manifest this update: Mon 06 May 2024 17:01:02 +0000 Manifest next update: Mon 13 May 2024 17:01:02 +0000 Files and hashes: 1: i99RGJodvfloQ0tec2qpq_1FVhw.crl (hash: +vuYAUYfHWHBaBfBHOwwJ8dHUMwl/JxmFmMSpsdZ34U=) 2: F13A6FB883D011E7948A8052C4F9AE02.roa (hash: DeYR5wShVTYBW5DReQ2E13/QDJNNqsDxKSv/3It5cDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6208 (0x1840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119510/serialNumber=8BDF51189A1DBDF968434B5E736AA9ABFD45561C Validity Not Before: May 6 17:01:02 2024 GMT Not After : May 13 17:01:02 2024 GMT Subject: CN=66390ccf-93c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:52:8e:e0:ab:99:4b:8a:06:ba:72:f2:d9: 15:c6:1f:1e:61:6f:0a:2d:72:f7:ae:99:97:ad:aa: 1d:4a:9a:0e:3e:4a:f9:f4:10:0e:32:28:73:09:87: c5:9e:64:35:04:e5:66:53:b9:c8:b7:29:a4:1b:45: e0:95:61:ef:f6:c4:55:9e:52:65:70:d4:20:f2:0c: 4f:55:6b:98:cf:6a:fd:89:e7:a9:a4:5a:0b:a7:63: df:f6:a3:c5:04:37:60:61:0f:57:48:69:1d:54:02: f4:68:fe:44:8c:b4:2e:8b:5d:df:4b:df:bd:e2:e9: 0f:cf:3b:f2:02:d1:d7:57:96:d8:58:9b:7c:17:bb: 1f:bd:63:93:12:9c:f3:98:44:80:bc:83:07:43:8f: 5e:ce:0d:c7:8d:ea:d7:54:e2:43:28:72:27:06:19: 09:3f:49:01:f3:5c:9d:aa:79:41:48:4c:c0:4c:7e: 9e:57:6d:8a:fc:ac:94:09:20:c5:06:b5:61:3e:8c: 57:03:5a:8b:4f:6d:58:69:a9:d1:11:c3:2e:a8:34: c3:fb:66:93:c2:24:b1:eb:97:9f:d4:5d:07:7e:39: f9:f9:41:ae:b5:0d:b8:e3:b4:56:6d:96:76:ad:45: d2:84:d5:17:83:5e:d8:e4:6a:52:10:1c:f0:5a:26: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:4E:09:FB:4C:5B:6F:F8:71:B6:F8:31:5E:C0:F8:39:F7:99:D9 X509v3 Authority Key Identifier: keyid:8B:DF:51:18:9A:1D:BD:F9:68:43:4B:5E:73:6A:A9:AB:FD:45:56:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i99RGJodvfloQ0tec2qpq_1FVhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119510/0DDF5B0883CF11E7838EA84EC4F9AE02/i99RGJodvfloQ0tec2qpq_1FVhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:12:71:a5:aa:ef:7f:64:a6:a4:56:4b:e8:ea:2c:28:ec:67: f2:2f:1c:cc:6e:26:c9:68:ad:9d:9c:4f:80:bf:e8:60:ce:76: 6c:9f:3f:ab:96:3c:97:61:c8:ea:34:94:7d:a0:35:64:b3:68: da:94:e4:8f:df:e8:2e:23:31:34:d0:a6:e0:88:54:7e:0c:9d: 73:93:96:d9:ff:7a:e3:06:44:91:9f:27:82:3a:16:ee:2d:55: c9:65:c0:89:3e:d0:c4:ba:73:dd:3c:b4:fb:5c:e3:66:89:e8: c5:64:54:38:fe:a1:66:d8:b7:08:c7:29:b1:c8:44:6f:49:ec: 49:46:a7:35:d6:71:8a:69:ad:51:70:01:58:21:d5:83:8b:b2: dd:d6:f5:49:f9:b3:40:79:44:4c:9c:11:42:dc:8c:79:56:31: ae:60:82:d7:5f:c7:f4:67:e7:9b:bc:ad:16:0c:65:5c:91:a1: 22:e9:91:c2:74:79:c3:8a:9b:0f:34:96:41:51:a1:16:82:d2: db:d4:99:92:21:2c:99:7c:bf:21:f6:7f:80:ff:42:37:64:9e: fe:cd:4d:32:af:be:af:11:a8:e0:ec:ae:c4:ac:88:6d:91:5b: f2:dc:0d:af:2c:3d:4d:56:43:ab:5f:e7:77:04:ee:90:45:80: 34:27:1c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MTAxMTAvBgNVBAUTKDhCREY1MTE4OUExREJERjk2ODQzNEI1RTczNkFBOUFC RkQ0NTU2MUMwHhcNMjQwNTA2MTcwMTAyWhcNMjQwNTEzMTcwMTAyWjAYMRYwFAYD VQQDEw02NjM5MGNjZi05M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7alSjuCrmUuKBrpy8tkVxh8eYW8KLXL3rpmXraodSpoOPkr59BAOMihzCYfF nmQ1BOVmU7nItymkG0XglWHv9sRVnlJlcNQg8gxPVWuYz2r9ieeppFoLp2Pf9qPF BDdgYQ9XSGkdVAL0aP5EjLQui13fS9+94ukPzzvyAtHXV5bYWJt8F7sfvWOTEpzz mESAvIMHQ49ezg3HjerXVOJDKHInBhkJP0kB81ydqnlBSEzATH6eV22K/KyUCSDF BrVhPoxXA1qLT21YaanREcMuqDTD+2aTwiSx65ef1F0Hfjn5+UGutQ2447RWbZZ2 rUXShNUXg17Y5GpSEBzwWibNqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvCTgn7 TFtv+HG2+DFewPg595nZMB8GA1UdIwQYMBaAFIvfURiaHb35aENLXnNqqav9RVYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUxMC8wRERGNUIwODgz Q0YxMUU3ODM4RUE4NEVDNEY5QUUwMi9pOTlSR0pvZHZmbG9RMHRlYzJxcHFfMUZW aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5OVJHSm9kdmZsb1EwdGVjMnFwcV8xRlZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUxMC8wRERGNUIwODgzQ0YxMUU3ODM4RUE4NEVDNEY5QUUwMi9pOTlSR0pvZHZm bG9RMHRlYzJxcHFfMUZWaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEEnGlqu9/ZKakVkvo6iwo7GfyLxzMbibJaK2dnE+Av+hgznZsnz+r ljyXYcjqNJR9oDVks2jalOSP3+guIzE00KbgiFR+DJ1zk5bZ/3rjBkSRnyeCOhbu LVXJZcCJPtDEunPdPLT7XONmiejFZFQ4/qFm2LcIxymxyERvSexJRqc11nGKaa1R cAFYIdWDi7Ld1vVJ+bNAeURMnBFC3Ix5VjGuYILXX8f0Z+ebvK0WDGVckaEi6ZHC dHnDipsPNJZBUaEWgtLb1JmSISyZfL8h9n+A/0I3ZJ7+zU0yr76vEajg7K7ErIht kVvy3A2vLD1NVkOrX+d3BO6QRYA0JxzX -----END CERTIFICATE-----Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org