$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: jjxsyGCnGUa3ahZ4gOsSxLV7w5Jq+CyRQbWUe68NMYo= Subject key identifier: 7E:E2:31:77:50:BD:57:E7:C1:A0:48:79:12:10:C4:6D:41:C8:2D:06 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 23 Signing time: Wed 15 May 2024 08:41:39 +0000 Manifest this update: Wed 15 May 2024 08:41:38 +0000 Manifest next update: Wed 22 May 2024 08:41:38 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: Hr+CeL7AONjmOyNJK0+ej6P/tDZIzvnpE/iA4bl2oAc=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: May 15 08:41:38 2024 GMT Not After : May 22 08:41:38 2024 GMT Subject: CN=66447542-47d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:3e:46:64:d1:e7:7f:09:ea:94:17:ed:8c: b0:97:e7:b0:8e:6a:aa:e0:a9:f6:76:6d:9d:b5:86: 3d:db:a1:e4:32:96:72:18:ce:75:0c:d3:8c:ff:c8: a3:81:04:fc:c7:f6:78:e0:77:8f:4c:4c:af:ef:d6: 20:78:f1:c4:ac:05:70:0e:f6:de:e0:8e:98:00:32: 1e:f8:bc:e3:10:b2:8b:9d:b5:78:8e:bc:7d:76:80: ab:30:45:99:ee:2f:f0:f5:48:77:54:cc:3d:4f:75: 07:65:86:ad:df:7c:3e:90:5d:cf:67:9e:4c:a8:09: cd:5f:0b:d8:54:ef:e1:38:d1:0d:b0:dc:ff:96:ec: fb:1d:eb:0b:d7:cf:c6:51:e5:63:8f:17:93:12:c4: b2:c2:34:76:d1:37:d4:d0:4b:47:d5:6b:d9:2b:d1: b8:07:9e:7a:ee:05:39:b7:1d:e6:4f:98:7f:80:a9: 23:df:a7:8b:ad:b7:a7:ed:b3:a3:fe:b9:8c:79:65: 6a:4e:63:62:45:95:de:a8:af:dd:46:5b:6d:d4:bb: 99:29:9a:c6:f6:c1:a8:08:67:08:13:00:d5:4d:5a: e8:6e:bf:2c:6b:80:bc:06:76:c2:88:0d:0f:03:a2: b7:ce:91:17:0f:c5:d6:76:b0:76:40:4b:fa:11:ac: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E2:31:77:50:BD:57:E7:C1:A0:48:79:12:10:C4:6D:41:C8:2D:06 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:51:6b:10:df:d9:06:bd:49:f3:06:2c:a1:17:bf:21:e7: 44:a4:d8:6c:c8:f1:ef:be:92:f3:eb:87:79:85:03:43:9a:83: 56:9f:3a:75:57:7d:67:c8:e2:5c:de:de:21:1b:0a:e0:72:95: 7d:1d:a4:a7:93:7b:54:bf:84:3e:d7:27:aa:a5:84:3d:27:98: 97:f9:51:92:a5:33:6c:d0:49:62:4b:52:9b:d9:c6:9c:c6:c2: b1:a9:a0:d7:07:0e:2a:67:fd:b6:d5:6b:f9:20:7a:0c:d9:be: 8f:41:d5:1f:bf:30:89:b7:ca:ac:4a:e7:03:8c:6c:0e:ea:54: 95:5a:32:b6:30:a9:f4:3f:02:21:4c:30:7e:99:4b:f5:fe:43: 73:d3:a5:f8:45:2b:5a:5d:1d:90:c6:a4:a6:c2:52:99:c0:4a: 4b:30:ae:91:61:d7:3a:44:86:8b:1b:d4:57:30:00:14:0a:2b: ae:9f:72:f2:48:44:e9:ed:ee:31:02:c4:e2:43:41:37:43:14: 8c:54:3c:b5:30:f4:37:ef:ee:82:cf:a1:a1:87:67:45:08:38: 56:b6:37:e3:03:da:be:7d:3a:a4:14:66:d3:52:1c:ad:70:6b: 02:39:b6:68:5d:98:6d:e1:8f:00:14:2a:2a:90:4f:3e:3b:5c: 67:5d:e8:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjA0MTExMC8GA1UEBRMoN0QyN0ZEQzcwRkNEMThCNkRENUIwNDI2OTVBRkREOEMx NzM1QzEzMDAeFw0yNDA1MTUwODQxMzhaFw0yNDA1MjIwODQxMzhaMBgxFjAUBgNV BAMTDTY2NDQ3NTQyLTQ3ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4jT5GZNHnfwnqlBftjLCX57COaqrgqfZ2bZ21hj3boeQylnIYznUM04z/yKOB BPzH9njgd49MTK/v1iB48cSsBXAO9t7gjpgAMh74vOMQsoudtXiOvH12gKswRZnu L/D1SHdUzD1PdQdlhq3ffD6QXc9nnkyoCc1fC9hU7+E40Q2w3P+W7Psd6wvXz8ZR 5WOPF5MSxLLCNHbRN9TQS0fVa9kr0bgHnnruBTm3HeZPmH+AqSPfp4utt6fts6P+ uYx5ZWpOY2JFld6or91GW23Uu5kpmsb2wagIZwgTANVNWuhuvyxrgLwGdsKIDQ8D orfOkRcPxdZ2sHZAS/oRrPFnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfuIxd1C9 V+fBoEh5EhDEbUHILQYwHwYDVR0jBBgwFoAUfSf9xw/NGLbdWwQmla/djBc1wTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyMDQxLzJFNzJFMEFFREMz NTExRUU4RkYxQTQzM0M0RjlBRTAyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZlNmOXh3X05HTGJkV3dRbWxhX2RqQmMxd1RBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy MDQxLzJFNzJFMEFFREMzNTExRUU4RkYxQTQzM0M0RjlBRTAyL2ZTZjl4d19OR0xi ZFd3UW1sYV9kakJjMXdUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiTUWsQ39kGvUnzBiyhF78h50Sk2GzI8e++kvPrh3mFA0Oag1afOnVX fWfI4lze3iEbCuBylX0dpKeTe1S/hD7XJ6qlhD0nmJf5UZKlM2zQSWJLUpvZxpzG wrGpoNcHDipn/bbVa/kgegzZvo9B1R+/MIm3yqxK5wOMbA7qVJVaMrYwqfQ/AiFM MH6ZS/X+Q3PTpfhFK1pdHZDGpKbCUpnASkswrpFh1zpEhosb1FcwABQKK66fcvJI ROnt7jECxOJDQTdDFIxUPLUw9Dfv7oLPoaGHZ0UIOFa2N+MD2r59OqQUZtNSHK1w awI5tmhdmG3hjwAUKiqQTz47XGdd6Kw= -----END CERTIFICATE-----Generated at Wed May 15 11:17:40 2024 by rpki-client on console-ams.rpki-client.org