$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: GgWkjnnI/rV6C10XQyPFhzu3VeyJhGr/Efr17kkMe/s= Subject key identifier: FF:DE:4B:90:B1:95:6F:1B:EE:A5:7A:71:E6:15:31:00:19:E5:62:F3 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 12 Signing time: Mon 27 May 2024 09:08:59 +0000 Manifest this update: Mon 27 May 2024 09:08:58 +0000 Manifest next update: Mon 03 Jun 2024 09:08:58 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: eKUXSbbLuRKm5hcVVNoib6VWWFMWQ88vNzPOBKg6lUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: May 27 09:08:58 2024 GMT Not After : Jun 3 09:08:58 2024 GMT Subject: CN=66544dab-fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:8d:01:5b:83:a9:cc:d2:9a:34:6c:b4:e3: e5:b5:3a:4f:f6:5b:d2:5a:4f:db:0c:d5:f9:64:4d: 54:b1:c0:bf:c3:a4:f3:24:6d:6c:c8:31:7c:f3:bc: 30:51:94:12:06:d5:c2:6a:b3:2c:11:fc:6b:65:63: 94:cf:fd:d8:c6:0b:ed:b8:41:a4:e2:05:9a:07:0b: a3:96:24:a5:24:08:bf:fc:83:f7:16:ee:69:12:b2: f8:fe:ec:1b:bd:d1:db:bb:a2:de:7f:2a:62:d5:e4: 9a:2d:36:91:f1:b0:5f:0a:05:33:db:e1:e2:3c:ab: a2:e8:70:bb:06:05:a9:b1:72:8b:9d:6f:ca:1c:b7: 3f:7c:8b:55:5c:1c:60:4a:42:ea:3e:a1:a1:89:5d: ff:b8:32:fb:1c:76:a7:34:6c:5a:1b:09:58:24:aa: 6b:52:ee:ec:da:99:af:ed:dc:76:0f:22:47:bc:39: 0b:3c:be:0f:fa:93:b7:19:07:c1:5d:a2:90:11:17: b7:bb:fb:64:b7:b0:ce:0e:45:07:f7:ec:90:05:1b: f0:ad:4c:08:ee:0c:58:fb:6d:fd:63:99:c7:e0:bc: 9a:7c:d3:ac:70:8e:b8:6e:59:09:38:f1:f0:ae:69: e3:03:6c:17:f9:38:87:07:89:16:3a:fe:b1:c8:9c: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:4B:90:B1:95:6F:1B:EE:A5:7A:71:E6:15:31:00:19:E5:62:F3 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1f:d2:b5:f6:a1:d4:b8:ee:98:40:eb:ab:72:a9:1f:ee:23: c6:3d:b5:45:74:d7:14:9d:59:0e:9d:18:d2:64:9b:e8:f6:38: e0:e9:ad:06:b1:9a:80:12:a1:dd:c4:50:67:d9:b1:b9:3d:94: 39:e9:21:53:57:1d:d5:62:f4:9d:9a:cf:1f:d3:93:bf:fd:2c: df:b3:79:e0:a0:83:ff:ec:8a:04:89:da:9b:00:23:da:a5:1a: 8b:5b:57:26:05:27:69:7e:f7:89:7d:d6:39:11:7f:3a:32:7d: 6e:de:5f:be:9a:2b:4d:bf:c7:10:9a:20:76:04:41:9d:84:48: fe:95:ef:42:74:36:f8:fd:3b:91:f9:7d:ba:33:72:c7:3c:49: 6e:42:cf:c8:ed:fb:62:ca:cb:24:90:17:33:fc:23:da:27:3c: a5:17:f9:b4:f0:b3:69:c6:5f:00:dd:d5:6d:8e:4c:50:4a:3d: f6:8d:bb:3f:03:fd:fd:be:9f:f2:b5:5c:62:c1:10:45:f5:ab: 27:43:12:38:9e:72:07:2a:dc:17:2e:64:c5:eb:f3:4d:04:2e: 23:53:bf:de:9e:0e:90:4b:12:bc:90:c2:9c:2a:30:0d:c4:ec: d2:35:c6:c5:12:90:95:ef:39:02:9b:b3:f5:1b:5e:56:c3:ed: 6d:31:fc:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDQTExMC8GA1UEBRMoQjNENzVBRTFFQ0VFRjZGOTJCRDE3RDBDNEIzNjUxOEQ1 QkU3NzZGMTAeFw0yNDA1MjcwOTA4NThaFw0yNDA2MDMwOTA4NThaMBgxFjAUBgNV BAMTDTY2NTQ0ZGFiLWZhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxG40BW4OpzNKaNGy04+W1Ok/2W9JaT9sM1flkTVSxwL/DpPMkbWzIMXzzvDBR lBIG1cJqsywR/GtlY5TP/djGC+24QaTiBZoHC6OWJKUkCL/8g/cW7mkSsvj+7Bu9 0du7ot5/KmLV5JotNpHxsF8KBTPb4eI8q6LocLsGBamxcoudb8octz98i1VcHGBK Quo+oaGJXf+4Mvscdqc0bFobCVgkqmtS7uzama/t3HYPIke8OQs8vg/6k7cZB8Fd opARF7e7+2S3sM4ORQf37JAFG/CtTAjuDFj7bf1jmcfgvJp806xwjrhuWQk48fCu aeMDbBf5OIcHiRY6/rHInGXlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/95LkLGV bxvupXpx5hUxABnlYvMwHwYDVR0jBBgwFoAUs9da4ezu9vkr0X0MSzZRjVvndvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUNBLzlFN0MyQ0VFMDI0 RjExRUZBQzY1RjU3N0M0RjlBRTAyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvczlkYTRlenU5dmtyMFgwTVN6WlJqVnZuZHZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NUNBLzlFN0MyQ0VFMDI0RjExRUZBQzY1RjU3N0M0RjlBRTAyL3M5ZGE0ZXp1OXZr cjBYME1TelpSalZ2bmR2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYf0rX2odS47phA66tyqR/uI8Y9tUV01xSdWQ6dGNJkm+j2OODprQax moASod3EUGfZsbk9lDnpIVNXHdVi9J2azx/Tk7/9LN+zeeCgg//sigSJ2psAI9ql GotbVyYFJ2l+94l91jkRfzoyfW7eX76aK02/xxCaIHYEQZ2ESP6V70J0Nvj9O5H5 fbozcsc8SW5Cz8jt+2LKyySQFzP8I9onPKUX+bTws2nGXwDd1W2OTFBKPfaNuz8D /f2+n/K1XGLBEEX1qydDEjiecgcq3BcuZMXr800ELiNTv96eDpBLEryQwpwqMA3E 7NI1xsUSkJXvOQKbs/UbXlbD7W0x/GU= -----END CERTIFICATE-----Generated at Mon May 27 10:24:58 2024 by rpki-client on console-fra.rpki-client.org