$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: jmAQBXU99/jbwIAD1uQwJeOdh0eNMRGIYq32qSzpHuM= Subject key identifier: 66:08:06:20:2F:57:64:D3:77:9F:AC:D0:7F:53:DE:CB:80:3F:CE:3D Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0902 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 08FD Signing time: Mon 06 May 2024 21:21:54 +0000 Manifest this update: Mon 06 May 2024 21:21:54 +0000 Manifest next update: Mon 13 May 2024 21:21:54 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: 1g4ZUTv0SUhF8HVoIBU+Sp/UPhizYMjhYd+g6YIpnd8=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: wD9pnjf/HuWd5KNHwqeLPmfmdJatBwE5mxFSZ4a1GKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: May 6 21:21:54 2024 GMT Not After : May 13 21:21:54 2024 GMT Subject: CN=663949f2-0b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:ba:ed:54:93:ce:e7:d5:c6:6f:18:9a:63: 4e:6d:84:5c:2e:48:33:22:53:e2:82:07:2d:cf:45: 9d:10:81:b9:50:29:9a:19:8c:ae:0e:79:bd:bb:03: 3a:b6:7e:39:d8:eb:c3:7b:90:ef:dd:9f:91:24:81: 0b:ff:04:9a:87:89:f8:b4:7b:b4:c5:5f:a9:65:75: de:30:06:b7:59:28:b1:e2:08:0c:bc:09:97:4e:2a: c6:5b:ce:bb:9e:02:61:ba:26:1d:17:e8:73:7c:74: bf:db:ca:db:d2:ff:9c:b3:e5:48:28:de:dd:a0:d4: 5f:6d:fb:9a:96:9d:4f:1d:23:6c:9d:0d:56:7c:5e: 4b:6d:49:34:1a:7b:e1:70:0c:c6:dc:c4:04:09:2f: f0:40:43:7d:3f:05:cb:00:d3:e9:40:5a:ad:19:c9: ec:7c:01:f9:b6:8d:50:2a:34:37:e1:d9:63:98:94: fd:cc:51:5e:30:69:32:f9:88:55:37:dd:ad:e4:b5: 90:f5:ba:99:31:4e:4e:a9:02:c8:c0:30:be:c3:fa: 5e:d7:72:25:44:a8:0f:1f:2b:74:03:bf:d3:26:ad: cd:84:8e:34:5f:22:d1:ab:d3:96:a3:bb:c4:02:95: 75:14:ec:44:16:2b:4c:be:83:d2:f0:4d:83:26:a9: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:06:20:2F:57:64:D3:77:9F:AC:D0:7F:53:DE:CB:80:3F:CE:3D X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:1e:5c:cb:6b:b1:cb:61:44:bb:2b:e0:4a:54:8c:8b:64: 8d:e7:1f:68:b6:a2:b3:5f:ff:e6:d0:23:ea:6d:5f:cb:3c:69: c3:84:f7:ab:1a:6d:49:82:94:bb:8c:d8:f8:19:e3:16:b4:c4: 08:4a:58:d3:f5:c8:65:74:a3:45:24:75:e8:53:47:ba:d3:76: 2e:38:a2:c3:da:be:0a:02:ee:00:5f:f4:1d:a2:71:63:78:6b: 9b:12:d1:aa:8b:33:0e:8d:d6:3c:67:14:da:5a:51:68:38:83: a2:0d:c2:b1:a5:6d:1f:3f:7e:3f:71:ee:b9:7a:ed:99:9d:fd: 03:d5:78:d9:6c:45:2c:73:96:bd:87:5d:a1:1e:52:ab:04:57: b6:2b:f3:f3:e5:14:da:a0:9c:3a:80:72:54:83:67:49:bf:a3: 5e:4d:81:0c:e2:ee:d7:95:c0:ea:1a:65:5c:83:25:79:ac:94: e2:c2:7a:65:cf:cf:fd:aa:8d:0a:55:91:5f:ff:6a:3d:64:7d: ff:d1:e5:18:09:79:8f:5b:5c:0f:a8:30:88:f3:a4:72:41:3c: 90:00:4d:06:2d:e5:2e:e9:e0:62:29:87:3b:02:a2:62:b8:c6: f6:6f:6e:22:c2:61:c2:7c:b5:44:4d:af:0a:59:3c:72:0f:b5: 5f:3c:ea:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjQwNTA2MjEyMTU0WhcNMjQwNTEzMjEyMTU0WjAYMRYwFAYD VQQDEw02NjM5NDlmMi0wYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5y67VSTzufVxm8YmmNObYRcLkgzIlPiggctz0WdEIG5UCmaGYyuDnm9uwM6 tn452OvDe5Dv3Z+RJIEL/wSah4n4tHu0xV+pZXXeMAa3WSix4ggMvAmXTirGW867 ngJhuiYdF+hzfHS/28rb0v+cs+VIKN7doNRfbfualp1PHSNsnQ1WfF5LbUk0Gnvh cAzG3MQECS/wQEN9PwXLANPpQFqtGcnsfAH5to1QKjQ34dljmJT9zFFeMGky+YhV N92t5LWQ9bqZMU5OqQLIwDC+w/pe13IlRKgPHyt0A7/TJq3NhI40XyLRq9OWo7vE ApV1FOxEFitMvoPS8E2DJqlOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYIBiAv V2TTd5+s0H9T3suAP849MB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJdB5cy2uxy2FEuyvgSlSMi2SN5x9otqKzX//m0CPqbV/LPGnDhPer Gm1JgpS7jNj4GeMWtMQISljT9chldKNFJHXoU0e603YuOKLD2r4KAu4AX/QdonFj eGubEtGqizMOjdY8ZxTaWlFoOIOiDcKxpW0fP34/ce65eu2Znf0D1XjZbEUsc5a9 h12hHlKrBFe2K/Pz5RTaoJw6gHJUg2dJv6NeTYEM4u7XlcDqGmVcgyV5rJTiwnpl z8/9qo0KVZFf/2o9ZH3/0eUYCXmPW1wPqDCI86RyQTyQAE0GLeUu6eBiKYc7AqJi uMb2b24iwmHCfLVETa8KWTxyD7VfPOqe -----END CERTIFICATE-----Generated at Mon May 6 22:40:54 2024 by rpki-client on console-ams.rpki-client.org