$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: Wl1pn7YhirwzcmrLAmMl+jpMMLO2VqA+rL56RH0VvaY= Subject key identifier: 38:12:BD:E7:4A:B6:52:80:05:C6:AA:5A:E1:ED:5D:42:56:E5:77:13 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 9B Signing time: Wed 15 May 2024 06:56:42 +0000 Manifest this update: Wed 15 May 2024 06:56:41 +0000 Manifest next update: Wed 22 May 2024 06:56:41 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: WCJaTeJVZD74ldds+XPsvtQPjP/krSb8rv+CS9n/Fp4=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: 81gMp9DGHYjkYLUL7/F49o0KJ2c+VbzZxj1jqOt4vVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: May 15 06:56:41 2024 GMT Not After : May 22 06:56:41 2024 GMT Subject: CN=66445ca9-782c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:ca:96:88:ac:e2:3d:7d:6d:1d:36:6b:f9: c7:20:4e:e0:8b:29:ca:71:66:2b:71:52:2e:a7:b8: c2:16:ff:73:6d:7e:59:d1:18:b7:39:18:da:47:ef: 35:cc:1b:9a:6b:f4:1c:7d:d1:20:10:29:1b:51:41: bc:db:c5:8e:d0:69:ff:40:f0:7c:70:c0:fc:40:4b: 10:dc:7d:99:ed:66:e5:97:bc:b4:d7:fa:6d:39:82: b6:fc:73:63:27:6a:37:97:0f:93:36:12:ce:70:29: fc:cb:51:de:4c:76:4c:a9:5f:71:bd:c0:c0:cd:80: 19:d8:ca:0d:3a:1e:f2:1e:47:ee:16:61:88:9d:8c: aa:01:34:7b:fc:87:2c:98:35:ee:1c:1b:4a:8d:2a: be:4a:25:95:8c:49:5e:16:d1:c5:85:6b:7a:00:23: 09:1c:04:71:d7:30:5a:45:d9:a4:54:66:49:b5:e5: 44:a2:a4:83:23:1d:cd:58:b8:d1:fe:31:47:31:47: ea:b8:51:98:9e:c4:cb:04:5c:3b:f4:92:9b:47:ef: 56:c5:8d:2f:5c:27:42:fd:a8:1a:72:e8:ec:22:b0: 59:3f:ae:0d:0d:a4:21:5a:8e:7b:cd:a3:88:25:9f: ee:f4:af:52:59:cb:85:df:6d:bb:4f:6d:cd:09:e5: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:BD:E7:4A:B6:52:80:05:C6:AA:5A:E1:ED:5D:42:56:E5:77:13 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d3:5e:48:99:e0:db:6e:f2:fc:5c:be:b3:e5:ca:c5:30:34: db:d5:53:13:9b:9b:63:79:74:7f:16:95:04:fe:67:3f:17:7e: a4:1d:71:56:fc:02:bf:0a:39:b2:c0:5f:93:19:72:ee:51:3d: ec:5d:b7:1a:6f:56:b0:1a:0b:77:d5:c1:89:d7:59:80:02:2d: 59:a9:86:19:fb:d5:e4:6c:fd:ea:11:d9:3b:f2:8c:17:f2:2e: a2:ac:8c:e6:86:a4:04:ba:fb:da:6d:0a:4f:d6:92:c7:a3:a7: 4e:ea:d5:95:a7:95:0d:72:3e:f0:2b:8b:4d:40:3a:bc:60:55: 4c:d2:f7:a6:a1:41:d0:69:63:46:ba:4f:1c:ea:8a:01:00:e0: d4:80:2b:3b:ef:01:85:cf:07:ac:d0:79:14:4d:8f:72:c9:22: a3:06:1b:03:70:9f:cd:d2:a1:a0:26:41:23:f3:2f:6b:63:b8: 66:36:43:e3:ad:29:57:d2:e1:df:36:49:a2:3f:da:c3:93:02: 14:06:2c:52:27:a3:e3:ef:a6:3b:b3:2f:ac:f7:3d:0a:4d:05: c1:b4:c0:aa:eb:6a:7d:17:9d:62:72:62:25:89:5c:81:d9:ab: 90:1f:ed:dd:3d:4a:99:15:61:55:41:d5:3e:6a:06:53:af:c0: 69:7a:25:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjQwNTE1MDY1NjQxWhcNMjQwNTIyMDY1NjQxWjAYMRYwFAYD VQQDEw02NjQ0NWNhOS03ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA697Klois4j19bR02a/nHIE7giynKcWYrcVIup7jCFv9zbX5Z0Ri3ORjaR+81 zBuaa/QcfdEgECkbUUG828WO0Gn/QPB8cMD8QEsQ3H2Z7Wbll7y01/ptOYK2/HNj J2o3lw+TNhLOcCn8y1HeTHZMqV9xvcDAzYAZ2MoNOh7yHkfuFmGInYyqATR7/Ics mDXuHBtKjSq+SiWVjEleFtHFhWt6ACMJHARx1zBaRdmkVGZJteVEoqSDIx3NWLjR /jFHMUfquFGYnsTLBFw79JKbR+9WxY0vXCdC/agacujsIrBZP64NDaQhWo57zaOI JZ/u9K9SWcuF3227T23NCeUULwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgSvedK tlKABcaqWuHtXUJW5XcTMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG015ImeDbbvL8XL6z5crFMDTb1VMTm5tjeXR/FpUE/mc/F36kHXFW /AK/CjmywF+TGXLuUT3sXbcab1awGgt31cGJ11mAAi1ZqYYZ+9XkbP3qEdk78owX 8i6irIzmhqQEuvvabQpP1pLHo6dO6tWVp5UNcj7wK4tNQDq8YFVM0vemoUHQaWNG uk8c6ooBAODUgCs77wGFzwes0HkUTY9yySKjBhsDcJ/N0qGgJkEj8y9rY7hmNkPj rSlX0uHfNkmiP9rDkwIUBixSJ6Pj76Y7sy+s9z0KTQXBtMCq62p9F51icmIliVyB 2auQH+3dPUqZFWFVQdU+agZTr8BpeiWl -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org