$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: N9Jh3I2MTI+qHVxDeN1RBxAxYZ48D4LRy/D6zfQTM/c= Subject key identifier: C0:9E:BA:C0:5E:93:7A:1D:2C:3C:3A:65:05:06:E8:26:58:D8:8D:CF Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 70 Signing time: Wed 15 May 2024 07:33:23 +0000 Manifest this update: Wed 15 May 2024 07:33:22 +0000 Manifest next update: Wed 22 May 2024 07:33:22 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: tIq2qI7P8GKlyBRhvnhUHZF6l4NDPQrosl8nOPJwxqE=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: AR6u/ohVSn73H2fRQIAGwsVaPNLueg4+674HdPS2tGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: May 15 07:33:22 2024 GMT Not After : May 22 07:33:22 2024 GMT Subject: CN=66446543-6bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:bf:2f:bc:e2:af:b4:29:7e:49:5d:13:83: ee:e5:0f:34:75:84:06:71:18:d0:81:c6:cc:bf:e7: d9:d3:95:f4:ba:33:e4:cd:bc:6e:c0:82:70:b6:b3: 18:9a:4f:41:54:97:81:ed:29:3d:58:63:a9:ef:96: 00:4e:9f:47:54:d3:12:b7:b6:83:95:b2:b8:01:ce: 51:ce:d7:68:74:38:28:8c:8f:3c:0b:c2:88:3c:a3: 06:bb:0f:80:ca:00:2d:1f:07:6f:fd:08:8f:67:53: 19:63:a9:ee:b2:5d:18:8c:87:34:2c:64:43:d7:f4: 38:e5:30:e0:be:00:a1:0f:a3:b4:ba:b6:5f:98:86: 89:ef:2b:a2:a3:5f:f4:61:2c:aa:ae:72:80:3f:35: e7:20:57:dc:8c:7b:4c:ea:22:28:d3:0c:2c:44:24: 44:bd:91:2b:9d:0e:0a:59:7f:be:0b:26:7f:98:f7: 99:a8:3f:96:24:97:86:de:3b:10:3a:ff:75:67:a2: fc:eb:20:31:58:33:69:fb:70:b7:1c:aa:15:38:ed: 34:55:df:66:79:a2:06:c8:18:e8:3b:9d:6d:80:7c: e6:15:f5:d5:71:27:8b:75:e6:fc:56:4b:10:fc:76: b1:32:0d:15:34:82:f8:1d:1f:ff:13:8a:6b:0f:17: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:BA:C0:5E:93:7A:1D:2C:3C:3A:65:05:06:E8:26:58:D8:8D:CF X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:9a:86:d5:7f:20:72:70:6b:d1:b6:97:80:c2:fe:bb:18: ce:4c:15:cc:be:f1:5b:eb:72:1b:58:14:bf:f6:b5:ec:a2:90: 2e:9d:bd:0e:d3:3a:37:96:a0:6b:4d:76:5a:19:2b:7f:54:bd: a8:09:b5:c4:6b:d7:47:4a:fc:7d:1f:fe:58:d0:df:b4:57:6d: 00:0d:7f:36:3d:98:6e:90:1a:d9:c5:2a:ce:3c:43:c3:1e:e1: 99:1a:17:a8:61:78:b3:8f:3d:b5:bf:54:af:de:47:79:79:8c: 2b:3f:71:df:7f:2c:cf:df:bd:e3:39:ae:43:5c:19:02:41:23: 5f:60:7c:12:63:2e:82:2b:52:6c:02:2d:ec:05:b1:72:3a:e5: 94:bd:d9:ea:4f:18:86:4a:31:43:ff:48:5b:b0:c2:06:d9:67: 40:e4:96:20:1b:bb:d4:f9:48:fe:af:0e:82:3f:0f:34:e5:0a: 44:53:da:45:fb:7b:2d:02:17:dc:ed:db:45:d7:c2:5f:5b:92: 65:45:2c:9d:98:46:1c:13:8d:5c:31:73:7b:09:21:ff:8b:48: 94:71:de:7c:f3:e5:0c:ee:cd:2e:5b:e8:88:dd:9f:97:13:21: ca:93:6a:10:12:54:0d:37:7b:4b:bd:3e:37:48:29:69:cd:23: cf:fa:15:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTEwODExMC8GA1UEBRMoNkE4RDNENkJGNkRCMEY1REUzMjRFNDIwQzU3M0IwQTkx ODQzQzc5NDAeFw0yNDA1MTUwNzMzMjJaFw0yNDA1MjIwNzMzMjJaMBgxFjAUBgNV BAMTDTY2NDQ2NTQzLTZiZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxTr8vvOKvtCl+SV0Tg+7lDzR1hAZxGNCBxsy/59nTlfS6M+TNvG7AgnC2sxia T0FUl4HtKT1YY6nvlgBOn0dU0xK3toOVsrgBzlHO12h0OCiMjzwLwog8owa7D4DK AC0fB2/9CI9nUxljqe6yXRiMhzQsZEPX9DjlMOC+AKEPo7S6tl+YhonvK6KjX/Rh LKqucoA/NecgV9yMe0zqIijTDCxEJES9kSudDgpZf74LJn+Y95moP5Ykl4beOxA6 /3VnovzrIDFYM2n7cLccqhU47TRV32Z5ogbIGOg7nW2AfOYV9dVxJ4t15vxWSxD8 drEyDRU0gvgdH/8TimsPFwsZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwJ66wF6T eh0sPDplBQboJljYjc8wHwYDVR0jBBgwFoAUao09a/bbD13jJOQgxXOwqRhDx5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMTA4L0Y5NThGQzRBNkMw MDExRUVCOThCNDMwRUM0RjlBRTAyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYW8wOWFfYmJEMTNqSk9RZ3hYT3dxUmhEeDVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MTA4L0Y5NThGQzRBNkMwMDExRUVCOThCNDMwRUM0RjlBRTAyL2FvMDlhX2JiRDEz akpPUWd4WE93cVJoRHg1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbnmobVfyBycGvRtpeAwv67GM5MFcy+8VvrchtYFL/2teyikC6dvQ7T OjeWoGtNdloZK39UvagJtcRr10dK/H0f/ljQ37RXbQANfzY9mG6QGtnFKs48Q8Me 4ZkaF6hheLOPPbW/VK/eR3l5jCs/cd9/LM/fveM5rkNcGQJBI19gfBJjLoIrUmwC LewFsXI65ZS92epPGIZKMUP/SFuwwgbZZ0DkliAbu9T5SP6vDoI/DzTlCkRT2kX7 ey0CF9zt20XXwl9bkmVFLJ2YRhwTjVwxc3sJIf+LSJRx3nzz5QzuzS5b6Ijdn5cT IcqTahASVA03e0u9PjdIKWnNI8/6FWE= -----END CERTIFICATE-----Generated at Wed May 15 09:27:27 2024 by rpki-client on console-fra.rpki-client.org