$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: 4tp2HxJMwpLfzU0i4lKiZ6D6AQhw6exC/h6kJURR8u0= Subject key identifier: 26:86:5F:3D:9F:1B:77:D0:30:96:EA:8D:26:27:88:F4:6F:DE:42:08 Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 06C9 Signing time: Thu 02 May 2024 23:07:18 +0000 Manifest this update: Thu 02 May 2024 23:07:18 +0000 Manifest next update: Thu 09 May 2024 23:07:18 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: R/9Vy7nKTWq8QfI0NI63F0BIufBM1Bn05MP6cM6eMMw=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: 28zzKXSsP9euZLQheJMd1ApjifbGW5va3zP1N3tNY78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: May 2 23:07:18 2024 GMT Not After : May 9 23:07:18 2024 GMT Subject: CN=66341ca6-c3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:fb:ed:89:ca:8f:54:ba:24:c9:f5:85:32:bb: de:9a:85:5d:c1:27:cf:39:2f:8a:eb:cb:6d:ca:1d: 85:42:52:5e:2a:8c:8e:f8:ec:2d:15:0a:92:85:d7: 34:ac:f0:0a:dd:b6:1c:b5:25:11:71:6d:2b:be:75: e2:41:17:8d:f7:25:69:8a:b2:11:15:7f:1f:08:68: 54:62:1f:ff:16:ad:e7:3c:bc:37:91:25:4c:de:14: 3b:69:26:02:0d:b6:db:c2:c8:b6:d3:38:42:df:68: 23:b1:47:b7:57:bf:d1:d4:44:01:96:49:6b:8e:54: ed:4f:f8:87:21:38:17:09:39:9b:e8:e6:6a:0e:93: 74:d8:ae:a7:9c:89:d1:33:e2:79:30:7b:d4:8d:c8: 87:aa:8a:9c:80:8e:bf:90:15:e2:ee:60:51:ac:d2: 5b:ec:af:b2:fe:25:71:a6:4f:7a:f2:4c:6a:00:df: 9c:74:2e:5e:74:61:ab:65:59:a3:a9:6e:d1:ff:41: 2e:83:2a:ca:5e:8a:de:d1:3f:fd:6e:af:5e:99:fa: 3b:c5:17:19:a3:02:73:5a:33:3c:99:d9:d7:9b:a2: 62:be:83:7a:57:05:f2:08:b5:a3:df:a7:2f:2f:ed: 74:94:0d:f4:5d:73:5a:72:0f:97:84:a0:4a:d0:e0: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:5F:3D:9F:1B:77:D0:30:96:EA:8D:26:27:88:F4:6F:DE:42:08 X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:58:f2:fe:70:03:ef:d3:16:c0:08:42:63:18:d4:19:c8: 76:9e:fe:b1:e5:19:76:75:81:6c:f8:7a:39:9f:ad:5e:fc:41: be:79:44:37:ed:bb:cd:aa:74:44:5b:52:d8:13:22:35:87:8f: 37:36:d2:a5:26:e7:f8:5a:ad:2b:ab:94:1b:a8:3e:c5:eb:b3: 99:f6:fb:34:aa:6e:20:98:4b:7b:e2:98:b7:58:a1:59:5c:84: bc:90:f0:12:46:ab:8b:9f:39:48:a7:89:73:85:94:41:be:b4: 8c:78:43:88:b1:8c:48:ad:11:fc:ae:24:fa:b7:3d:26:67:6f: a4:da:8b:97:cc:23:65:95:f3:4e:a5:53:52:8a:8d:db:c5:e0: 84:c5:89:57:cc:9a:9a:06:b7:b8:27:c5:1b:c0:6c:33:9e:37: 8e:da:3c:eb:72:a2:b8:1a:aa:58:9a:79:1d:cd:39:4c:1b:a4: 65:69:13:8d:82:a3:e2:f0:2d:1e:c4:5c:75:0a:28:4b:aa:42: 69:11:bd:74:58:e3:fe:c2:72:a0:1e:f1:4e:bd:a7:6c:63:3e: 0e:2f:b6:df:19:e3:a5:ad:92:17:be:79:3c:e3:68:9e:42:d2: 34:e3:f7:27:8b:9b:32:2c:b5:4d:fa:f7:9c:50:48:69:8f:73: d7:8f:75:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjQwNTAyMjMwNzE4WhcNMjQwNTA5MjMwNzE4WjAYMRYwFAYD VQQDEw02NjM0MWNhNi1jM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9/vticqPVLokyfWFMrvemoVdwSfPOS+K68ttyh2FQlJeKoyO+OwtFQqShdc0 rPAK3bYctSURcW0rvnXiQReN9yVpirIRFX8fCGhUYh//Fq3nPLw3kSVM3hQ7aSYC Dbbbwsi20zhC32gjsUe3V7/R1EQBlklrjlTtT/iHITgXCTmb6OZqDpN02K6nnInR M+J5MHvUjciHqoqcgI6/kBXi7mBRrNJb7K+y/iVxpk968kxqAN+cdC5edGGrZVmj qW7R/0EugyrKXore0T/9bq9emfo7xRcZowJzWjM8mdnXm6JivoN6VwXyCLWj36cv L+10lA30XXNacg+XhKBK0OBvjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaGXz2f G3fQMJbqjSYniPRv3kIIMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoKljy/nAD79MWwAhCYxjUGch2nv6x5Rl2dYFs+Ho5n61e/EG+eUQ3 7bvNqnREW1LYEyI1h483NtKlJuf4Wq0rq5QbqD7F67OZ9vs0qm4gmEt74pi3WKFZ XIS8kPASRquLnzlIp4lzhZRBvrSMeEOIsYxIrRH8riT6tz0mZ2+k2ouXzCNllfNO pVNSio3bxeCExYlXzJqaBre4J8UbwGwznjeO2jzrcqK4GqpYmnkdzTlMG6RlaRON gqPi8C0exFx1CihLqkJpEb10WOP+wnKgHvFOvadsYz4OL7bfGeOlrZIXvnk842ie QtI04/cni5syLLVN+vecUEhpj3PXj3Xr -----END CERTIFICATE-----Generated at Thu May 2 23:48:41 2024 by rpki-client on console-fra.rpki-client.org