$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json) Hash identifier: Q/cDIU2NDOOKSG+cNscIJ/xtFXsQCgSo1agdG+/LliQ= Subject key identifier: 6A:0D:CB:24:C6:FD:DB:87:38:9D:64:EE:EB:67:9F:16:16:45:90:1A Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft Manifest number: 08AC Signing time: Thu 02 May 2024 21:38:36 +0000 Manifest this update: Thu 02 May 2024 21:38:36 +0000 Manifest next update: Thu 09 May 2024 21:38:36 +0000 Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: XxNwYxDXy0l1wGIjflct8TY+9cvVCF44ru2Quj//PkQ=) 2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: mW/BM1PNVX/5ID+FRZ36Z6Pg2PrZrk5BhqM2+oOu1s8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D Validity Not Before: May 2 21:38:36 2024 GMT Not After : May 9 21:38:36 2024 GMT Subject: CN=663407dc-5beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:cd:21:41:4c:cd:fd:aa:23:3a:df:0c:cc: ef:69:4a:4b:9f:46:85:df:10:ff:7a:ca:87:e0:c4: db:f8:7c:8b:ca:42:1e:5b:f7:ca:d2:29:94:ff:9f: 12:2e:7d:6e:02:9a:61:44:0c:ff:35:00:38:57:4d: fc:be:6f:22:01:83:2a:34:a2:3f:e2:9f:d4:f4:cc: 5b:32:7c:4b:03:4a:d1:a4:1a:c3:fa:05:98:5d:ad: ea:09:dd:a2:15:21:aa:32:9d:3c:2b:b5:43:d4:2c: 3f:9e:a7:56:27:df:0f:0a:3d:f8:2d:6e:5e:c1:29: b9:72:64:67:8f:7c:4a:e3:ab:b8:3d:81:f3:2d:f3: 48:cb:0d:83:d8:c9:75:c1:7c:bb:a7:41:6e:d8:9a: 78:20:4d:fa:02:8c:78:ef:47:57:59:07:95:9e:4c: d0:b8:16:20:c7:25:15:7f:17:fe:6a:9e:96:34:1f: 51:03:76:54:85:d9:ea:a8:b4:2c:16:a2:86:0f:7a: 84:3e:7a:69:8f:f6:cc:b1:9a:d5:7f:26:43:13:8e: 84:ac:31:4d:b4:b9:1a:b4:99:31:dd:53:e1:6c:4f: 18:67:ef:50:f0:98:7a:d4:10:be:02:b8:ce:55:84: cd:69:a7:91:4b:fe:6b:9c:02:4d:61:25:95:43:86: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0D:CB:24:C6:FD:DB:87:38:9D:64:EE:EB:67:9F:16:16:45:90:1A X509v3 Authority Key Identifier: keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:8b:1d:e9:1c:2e:75:e3:bf:1a:24:c8:05:44:84:c0:0f: 4c:4f:50:d2:bc:10:2b:81:de:4e:70:72:6a:44:c2:41:27:d9: 46:97:7c:1d:86:f2:3a:16:cd:01:61:a1:40:8d:ab:47:cd:b4: 08:37:36:8b:d1:94:bd:e9:4e:b4:74:6b:ed:b1:a3:be:0e:66: c7:cc:78:95:28:5d:45:72:f9:3a:26:00:a4:1a:10:72:81:dc: d1:9c:16:a4:9e:db:cc:0b:ab:31:6c:e4:7b:7d:91:f2:fc:b6: 6e:cf:60:31:27:b9:86:8e:2c:ee:73:16:09:4c:53:c2:b2:fd: 2f:1f:83:64:23:05:e1:17:f0:26:9e:9f:ba:1b:7f:8e:55:79: 60:d3:c5:b2:c1:11:5f:2b:0a:1a:8a:ae:e9:b2:39:13:07:ee: 45:c0:6c:52:21:d8:48:6d:85:8c:7a:6c:c3:3a:8f:81:73:a6: de:73:85:de:f5:8d:c6:fd:af:e8:19:5f:c5:00:70:f0:ce:f2: cf:c0:f8:80:b9:d0:92:3f:47:ec:96:eb:25:f4:bb:f9:34:be: b0:5c:a5:d8:67:cb:c5:58:44:4a:20:14:b9:67:d8:05:9e:7f: a5:93:33:b8:34:38:50:b4:7d:d4:51:9f:90:d9:5e:14:10:6c: bb:8f:65:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3 NjJBRkYwNUQwHhcNMjQwNTAyMjEzODM2WhcNMjQwNTA5MjEzODM2WjAYMRYwFAYD VQQDEw02NjM0MDdkYy01YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AzNIUFMzf2qIzrfDMzvaUpLn0aF3xD/esqH4MTb+HyLykIeW/fK0imU/58S Ln1uApphRAz/NQA4V038vm8iAYMqNKI/4p/U9MxbMnxLA0rRpBrD+gWYXa3qCd2i FSGqMp08K7VD1Cw/nqdWJ98PCj34LW5ewSm5cmRnj3xK46u4PYHzLfNIyw2D2Ml1 wXy7p0Fu2Jp4IE36Aox470dXWQeVnkzQuBYgxyUVfxf+ap6WNB9RA3ZUhdnqqLQs FqKGD3qEPnppj/bMsZrVfyZDE46ErDFNtLkatJkx3VPhbE8YZ+9Q8Jh61BC+ArjO VYTNaaeRS/5rnAJNYSWVQ4ZCNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoNyyTG /duHOJ1k7utnnxYWRZAaMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4 RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2 Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZvYsd6RwudeO/GiTIBUSEwA9MT1DSvBArgd5OcHJqRMJBJ9lGl3wd hvI6Fs0BYaFAjatHzbQINzaL0ZS96U60dGvtsaO+DmbHzHiVKF1Fcvk6JgCkGhBy gdzRnBakntvMC6sxbOR7fZHy/LZuz2AxJ7mGjizucxYJTFPCsv0vH4NkIwXhF/Am np+6G3+OVXlg08WywRFfKwoaiq7psjkTB+5FwGxSIdhIbYWMemzDOo+Bc6bec4Xe 9Y3G/a/oGV/FAHDwzvLPwPiAudCSP0fslusl9Lv5NL6wXKXYZ8vFWERKIBS5Z9gF nn+lkzO4NDhQtH3UUZ+Q2V4UEGy7j2V6 -----END CERTIFICATE-----Generated at Thu May 2 22:13:16 2024 by rpki-client on console-fra.rpki-client.org