$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: 2aOy4Kb4zg/CJvcHckCWMGjyfmw0Bv4IzkL42SwstBY= Subject key identifier: FB:3F:49:4F:8C:4D:22:D3:D3:6D:89:4F:D8:10:8E:33:D7:B8:C2:30 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 08B5 Signing time: Fri 26 Apr 2024 21:37:52 +0000 Manifest this update: Fri 26 Apr 2024 21:37:51 +0000 Manifest next update: Fri 03 May 2024 21:37:51 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: 5NhMWrOnOerh1zKgTw6PT+2CRx8C6Xb2yH/dIEV+vak=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: njiA97BWiRk9sCmTbQIlp3Ri+tWF0C8maPKeLAkzd1A=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: rr65iu6MYNNXkhjzO3hqMXE1BOxqX/2ZffD6fmtUudc=) 4: 9124C186299911EDA389EC34C4F9AE02.roa (hash: CJoFRz5qEhswODESXpom/PXsSAh0I2xSflrL7+AUNtw=) 5: 5970F06CA08311EA984D590DC4F9AE02.roa (hash: EwEE9/5gmNZTCy1amscaIzjvtu3HA+jIbh55U8rBRUQ=) 6: B6E538AED32011EB841D3A29C4F9AE02.roa (hash: O7vdAFT+talgOjCDVKxxO/R7800s84ZqUbBTcQKbF3E=) 7: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: JKGwZrx9wrsIXPGCYWa5pAiczTrp7fQvRORuHLwpOAA=) 8: 6D7D902C7A8511ED97714485C4F9AE02.roa (hash: KvCrmvF5+PMpTBorxwKFuKrDDb/EZFQvX0TZJBEkOPI=) 9: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: fbwzA56Hd0lU5VpI0ywqmhInHds+7Q5Ab35sCgUacus=) 10: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: 24YebT/eCpzy2OYMv6Aeg+ODlII/BFqv/zb/WSfHSZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 26 21:37:51 2024 GMT Not After : May 3 21:37:51 2024 GMT Subject: CN=662c1eb0-8139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:c5:96:d3:0b:87:cb:4e:ae:d6:1d:c7:32: f7:8c:48:8f:98:c4:c7:ac:7b:6c:23:ab:ef:71:36: 07:9d:ae:32:95:17:23:be:30:9a:6f:a7:9b:c5:af: 80:d9:42:14:f5:92:da:2f:8e:93:ca:7f:a8:67:3d: 86:67:0e:1a:45:99:7a:0f:06:b6:7e:cb:19:4a:91: fb:29:3e:61:59:dd:af:6f:08:9d:5f:cd:63:70:a2: cc:df:9a:c1:39:ee:6d:18:a8:dc:d0:16:b3:74:f1: e2:8c:99:21:08:c9:8b:5b:e1:bd:0a:be:c1:5e:1f: 8d:28:e2:21:f0:d8:a8:64:c0:75:55:88:74:5f:c6: f6:57:f7:eb:8d:29:4f:8f:a3:4c:95:85:46:99:bf: 38:35:70:23:28:27:be:f6:c9:31:8d:f0:c6:5a:bb: d9:0d:9f:d0:00:d8:1a:a7:f9:1f:a8:88:ef:a3:fe: a2:34:b3:d0:f0:1b:c3:f1:8a:27:46:2b:33:2b:c1: e9:17:df:1f:5f:e1:57:ec:ea:ca:24:6b:d9:9d:ea: f7:e2:f9:f3:8c:cd:71:da:60:7e:0f:1e:67:b2:58: ca:c1:7f:72:d3:45:1a:75:6a:9e:f3:05:b8:77:af: 36:43:ab:f4:af:ba:94:6d:56:ae:6b:5b:1a:fb:b7: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:49:4F:8C:4D:22:D3:D3:6D:89:4F:D8:10:8E:33:D7:B8:C2:30 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ab:8b:75:2e:12:0c:9c:46:ab:34:b3:ec:42:14:a1:5a:83: bf:40:81:54:18:af:2c:43:bc:ab:f6:c6:63:0b:d5:59:76:18: 30:24:eb:e7:76:a7:1b:01:d1:74:08:aa:3d:da:f7:cd:5a:2d: 9b:1c:12:f3:34:e3:56:8f:af:5c:2a:ae:b5:23:03:6e:12:f2: 71:31:ae:15:b8:92:e3:1d:54:7f:df:50:9c:ed:00:89:af:50: 6b:76:27:86:d0:eb:cc:ab:96:26:91:d9:44:b4:d3:26:86:2f: dd:25:df:75:3e:51:94:09:18:3f:59:8d:12:c4:f0:a6:a8:18: cc:a1:85:4b:8e:8a:b5:af:86:7c:30:fb:6a:0c:38:5c:06:31: 26:20:94:25:c5:d4:01:2b:51:1b:55:33:c8:6b:fa:64:2b:ef: 61:77:59:f9:08:92:c7:c1:2d:df:12:fc:01:a5:2a:a0:43:d8: d9:5c:23:5b:d2:b8:df:c7:16:c6:73:bf:e3:aa:06:68:c3:1d: 13:ac:b6:c6:a0:81:c4:e5:79:bd:f5:cd:8f:73:8f:74:0f:6e: 93:83:de:ac:cf:9c:e5:2e:de:b9:9b:ea:94:56:49:a5:f6:87: 0b:fe:10:7d:52:10:ca:84:94:ad:f9:03:d1:ed:b7:cb:79:b3: c9:42:a0:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjQwNDI2MjEzNzUxWhcNMjQwNTAzMjEzNzUxWjAYMRYwFAYD VQQDEw02NjJjMWViMC04MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTvFltMLh8tOrtYdxzL3jEiPmMTHrHtsI6vvcTYHna4ylRcjvjCab6ebxa+A 2UIU9ZLaL46Tyn+oZz2GZw4aRZl6Dwa2fssZSpH7KT5hWd2vbwidX81jcKLM35rB Oe5tGKjc0BazdPHijJkhCMmLW+G9Cr7BXh+NKOIh8NioZMB1VYh0X8b2V/frjSlP j6NMlYVGmb84NXAjKCe+9skxjfDGWrvZDZ/QANgap/kfqIjvo/6iNLPQ8BvD8Yon RiszK8HpF98fX+FX7OrKJGvZner34vnzjM1x2mB+Dx5nsljKwX9y00UadWqe8wW4 d682Q6v0r7qUbVaua1sa+7fe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs/SU+M TSLT022JT9gQjjPXuMIwMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBq4t1LhIMnEarNLPsQhShWoO/QIFUGK8sQ7yr9sZjC9VZdhgwJOvn dqcbAdF0CKo92vfNWi2bHBLzNONWj69cKq61IwNuEvJxMa4VuJLjHVR/31Cc7QCJ r1BrdieG0OvMq5YmkdlEtNMmhi/dJd91PlGUCRg/WY0SxPCmqBjMoYVLjoq1r4Z8 MPtqDDhcBjEmIJQlxdQBK1EbVTPIa/pkK+9hd1n5CJLHwS3fEvwBpSqgQ9jZXCNb 0rjfxxbGc7/jqgZowx0TrLbGoIHE5Xm99c2Pc490D26Tg96sz5zlLt65m+qUVkml 9ocL/hB9UhDKhJSt+QPR7bfLebPJQqCU -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:39 2024 by rpki-client on console-ams.rpki-client.org