$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: 252YicG5+UMQr7YxJXeWFL781OPGxHc5PJMlIT86UNk= Subject key identifier: 47:F4:25:DC:82:09:96:10:95:86:76:F1:65:F4:D0:39:30:DE:14:B2 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 9F Signing time: Fri 17 May 2024 06:59:02 +0000 Manifest this update: Fri 17 May 2024 06:59:01 +0000 Manifest next update: Fri 24 May 2024 06:59:01 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: rc0nChPWSnt4hj3RQnX+Kt+BIePj6EbadrYvBxjk3bc=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: R1kQbh2a02DCc6ZiMFJ5Emwv2/r/UKVxCovXQQdwxnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: May 17 06:59:01 2024 GMT Not After : May 24 06:59:01 2024 GMT Subject: CN=66470035-8518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:59:6b:11:b5:d6:53:15:e2:2d:7c:37:b0: 0e:cc:4a:32:98:61:e5:b0:14:e0:23:06:b1:a2:90: 64:46:1c:34:ac:a3:1e:74:ea:36:5b:25:66:1d:25: eb:24:db:7b:1f:a6:1a:fe:3c:e6:6a:8e:73:9c:51: f4:5d:44:91:db:11:90:83:7a:21:da:98:4d:ea:32: b1:ab:b4:05:8a:db:61:4e:fd:fb:e0:84:11:91:c1: c3:cf:97:29:4b:68:5c:9f:20:a0:d4:3d:2b:55:22: 66:7e:71:e3:93:2b:f0:9e:30:0e:a7:1b:ad:9b:06: d7:79:0a:71:81:41:9f:ba:56:4e:20:88:37:a9:d3: 86:3d:6c:da:e7:4e:7b:06:b5:58:ab:e5:a4:6e:18: 62:a9:ce:c0:a8:00:1a:00:7a:33:91:46:e6:76:21: 49:08:c7:91:52:45:37:69:b2:15:e3:94:43:fa:62: 13:40:f0:97:1b:53:4e:5c:8e:3d:71:d8:2d:bb:63: e9:f3:a2:72:86:70:bc:9b:fc:f5:2e:24:40:49:a1: da:04:d1:3d:dc:ab:93:00:dc:cc:2c:b6:f5:18:cc: e1:bb:eb:38:2d:98:a7:7e:ce:25:0e:02:22:82:5a: 4b:55:c7:e9:36:28:4d:b4:a1:a7:a1:b8:41:22:bc: a5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F4:25:DC:82:09:96:10:95:86:76:F1:65:F4:D0:39:30:DE:14:B2 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:c0:d0:d1:5b:3f:07:a0:5c:29:2b:83:1f:49:49:14:37: 1a:35:68:ac:b4:58:a4:96:b4:f3:ce:ae:52:6c:27:af:09:40: 6b:08:66:98:57:31:4e:c9:2f:dd:73:94:9b:8b:51:aa:8c:9b: 6d:cb:2a:c6:18:3f:b4:73:22:35:5f:62:6c:a3:f4:05:d2:e7: 9a:24:b7:da:78:3b:8d:d8:91:f3:28:d1:0f:8e:6f:63:fa:77: 8d:b4:ea:d5:fe:1d:d5:14:0c:48:bb:76:fc:2c:6f:86:bc:0a: 4e:bd:bf:7c:e9:14:9f:34:66:b0:7b:a5:45:f6:7e:ac:41:85: fa:b0:5d:4f:c7:6c:d0:b9:40:ad:dc:63:7e:49:21:05:d5:aa: 90:8e:38:c2:25:fd:6c:dc:85:57:5e:53:f7:76:83:69:bc:e2: e9:99:17:3d:ca:3a:b6:22:20:6b:cd:4b:a6:ce:00:7c:89:30: 2e:0f:44:b0:bd:72:eb:ed:22:ac:b5:fc:96:d7:cd:19:38:71: 36:e7:aa:15:cb:6c:df:a8:ee:2b:57:ea:70:67:6e:38:01:31: cb:4a:f9:3c:ac:97:4d:dc:13:a0:35:f2:d0:0b:60:6d:25:85: 3a:59:6d:e9:be:c6:57:91:77:38:f6:98:ef:23:26:e7:f8:09: 5a:36:0b:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjQwNTE3MDY1OTAxWhcNMjQwNTI0MDY1OTAxWjAYMRYwFAYD VQQDEw02NjQ3MDAzNS04NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwlZaxG11lMV4i18N7AOzEoymGHlsBTgIwaxopBkRhw0rKMedOo2WyVmHSXr JNt7H6Ya/jzmao5znFH0XUSR2xGQg3oh2phN6jKxq7QFitthTv374IQRkcHDz5cp S2hcnyCg1D0rVSJmfnHjkyvwnjAOpxutmwbXeQpxgUGfulZOIIg3qdOGPWza5057 BrVYq+Wkbhhiqc7AqAAaAHozkUbmdiFJCMeRUkU3abIV45RD+mITQPCXG1NOXI49 cdgtu2Pp86JyhnC8m/z1LiRASaHaBNE93KuTANzMLLb1GMzhu+s4LZinfs4lDgIi glpLVcfpNihNtKGnobhBIrylowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf0JdyC CZYQlYZ28WX00Dkw3hSyMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBMDQ0Vs/B6BcKSuDH0lJFDcaNWistFiklrTzzq5SbCevCUBrCGaY VzFOyS/dc5Sbi1GqjJttyyrGGD+0cyI1X2Jso/QF0ueaJLfaeDuN2JHzKNEPjm9j +neNtOrV/h3VFAxIu3b8LG+GvApOvb986RSfNGawe6VF9n6sQYX6sF1Px2zQuUCt 3GN+SSEF1aqQjjjCJf1s3IVXXlP3doNpvOLpmRc9yjq2IiBrzUumzgB8iTAuD0Sw vXLr7SKstfyW180ZOHE256oVy2zfqO4rV+pwZ244ATHLSvk8rJdN3BOgNfLQC2Bt JYU6WW3pvsZXkXc49pjvIybn+AlaNgu5 -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org