$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft File: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json) Hash identifier: lxlPJNP00M5tthJX0SoW56uiQYlHGORN9QMNJSyuSew= Subject key identifier: E1:90:37:78:FA:ED:04:97:7F:7F:70:EF:29:A0:22:80:AB:81:2F:6A Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 Certificate issuer: /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft Manifest number: D9 Signing time: Tue 07 May 2024 06:05:53 +0000 Manifest this update: Tue 07 May 2024 06:05:53 +0000 Manifest next update: Tue 14 May 2024 06:05:53 +0000 Files and hashes: 1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: BsNfCUBRPZilPNidYIKEk5632585EYArPzv604G8yP0=) 2: D0A3F15AC94A11ED9CF16D3EC4F9AE02.roa (hash: dc3uURCjyEcmEboVawffPWnwRR2HGChuRcFTHtO45R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Validity Not Before: May 7 06:05:53 2024 GMT Not After : May 14 06:05:53 2024 GMT Subject: CN=6639c4c1-0111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:7c:b5:e6:39:98:3e:9c:a8:6d:59:81:51: 2c:49:92:eb:49:9d:07:c6:7a:bb:a9:b7:9a:e5:39: c2:f4:a3:ac:83:be:79:4f:b7:c1:39:de:de:01:7c: db:08:46:56:51:2c:7b:f0:f1:44:e1:0f:56:4a:67: a6:ea:8d:c5:59:80:6d:a6:43:5a:48:67:9d:39:4b: 69:1a:4a:a8:db:46:22:42:cb:08:36:b0:ba:a7:86: 48:65:e2:56:11:94:f8:12:97:d0:d6:4a:4b:18:77: 4d:b5:12:9e:7b:55:c5:58:6b:f3:7e:f7:64:3b:c3: 17:c1:5e:af:af:64:cd:de:6c:35:b8:a3:5b:b0:01: ed:13:b3:85:24:cf:b7:b8:d9:4f:da:71:03:e4:18: f3:35:3a:3b:9e:c1:01:cb:6f:5f:16:e9:61:fd:0c: 0e:3d:66:7e:ff:98:d4:89:c6:3c:ff:97:d6:fd:c7: c3:62:1b:b6:4c:5a:68:04:a0:d0:ff:15:60:78:b3: 93:d2:9e:eb:42:80:66:d5:58:36:e7:19:bf:4f:b3: 31:7e:a7:fa:d2:b8:34:be:40:d9:c2:e3:25:c4:0e: 1b:b7:bd:29:18:53:8b:75:90:5e:2d:0f:cf:22:b9: ac:47:12:b2:f5:af:78:b7:b5:d1:88:a3:33:c4:9e: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:90:37:78:FA:ED:04:97:7F:7F:70:EF:29:A0:22:80:AB:81:2F:6A X509v3 Authority Key Identifier: keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:44:d0:77:07:be:31:90:45:b6:59:b1:1a:a6:40:2b:3a:39: 58:96:bf:ba:33:6b:df:85:7d:f8:f0:08:5b:aa:94:3f:6e:96: 5a:77:5b:4d:f8:83:b1:5e:8b:ed:5d:f2:91:f6:d2:a7:88:31: b5:36:fa:d4:d4:83:90:a3:8e:13:7d:b8:1d:5c:61:d1:92:e5: d8:55:06:f5:a7:26:8b:2c:b2:e4:e8:3e:e7:d2:3d:a4:50:69: 1d:ce:4b:09:5c:20:9d:02:30:fe:9c:13:2f:b4:02:0d:00:0f: b0:77:dd:50:03:b2:31:a4:9b:10:a8:d7:7b:85:a6:e8:66:d2: c5:a3:90:36:72:69:77:45:74:e3:cf:07:59:f2:42:6c:70:41: 24:bd:90:f2:32:e3:fb:c3:1c:ef:87:ac:ca:36:1a:08:c5:dc: d4:68:47:db:a4:0d:9b:60:01:e1:48:85:0e:4b:47:f3:43:55: f5:b5:4a:16:ed:78:54:08:34:15:c6:34:4d:93:14:15:2d:a1: d7:29:ce:df:0e:df:a9:60:03:88:03:df:40:7a:9c:2c:94:f2: c5:b9:01:86:75:bf:eb:92:85:6f:43:de:f0:2c:cf:ea:1c:4b: ad:66:34:1d:08:99:e4:4a:aa:fb:de:0a:54:a7:5a:d2:19:0b: eb:82:ac:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3OTYxMTAvBgNVBAUTKEU3OUNEMjA4RTk0REU5NTBCRTNFQTlGQUE2RUY4MDdC NEU5MDU5NzMwHhcNMjQwNTA3MDYwNTUzWhcNMjQwNTE0MDYwNTUzWjAYMRYwFAYD VQQDEw02NjM5YzRjMS0wMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNd8teY5mD6cqG1ZgVEsSZLrSZ0Hxnq7qbea5TnC9KOsg755T7fBOd7eAXzb CEZWUSx78PFE4Q9WSmem6o3FWYBtpkNaSGedOUtpGkqo20YiQssINrC6p4ZIZeJW EZT4EpfQ1kpLGHdNtRKee1XFWGvzfvdkO8MXwV6vr2TN3mw1uKNbsAHtE7OFJM+3 uNlP2nED5BjzNTo7nsEBy29fFulh/QwOPWZ+/5jUicY8/5fW/cfDYhu2TFpoBKDQ /xVgeLOT0p7rQoBm1Vg25xm/T7Mxfqf60rg0vkDZwuMlxA4bt70pGFOLdZBeLQ/P IrmsRxKy9a94t7XRiKMzxJ7IXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGQN3j6 7QSXf39w7ymgIoCrgS9qMB8GA1UdIwQYMBaAFOec0gjpTelQvj6p+qbvgHtOkFlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTc5Ni9FNzQzNTIzQ0M5 NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZWQy1QcW42cHUtQWUwNlFX WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU1elNDT2xONlZDLVBxbjZwdS1BZTA2UVdYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTc5Ni9FNzQzNTIzQ0M5NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZW Qy1QcW42cHUtQWUwNlFXWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIRNB3B74xkEW2WbEapkArOjlYlr+6M2vfhX348AhbqpQ/bpZad1tN +IOxXovtXfKR9tKniDG1NvrU1IOQo44TfbgdXGHRkuXYVQb1pyaLLLLk6D7n0j2k UGkdzksJXCCdAjD+nBMvtAINAA+wd91QA7IxpJsQqNd7haboZtLFo5A2cml3RXTj zwdZ8kJscEEkvZDyMuP7wxzvh6zKNhoIxdzUaEfbpA2bYAHhSIUOS0fzQ1X1tUoW 7XhUCDQVxjRNkxQVLaHXKc7fDt+pYAOIA99AepwslPLFuQGGdb/rkoVvQ97wLM/q HEutZjQdCJnkSqr73gpUp1rSGQvrgqyQ -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org