$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: 0QQtkFtCWWGqerlaIIPB2wO1alv87+od1qoYlyCErJY= Subject key identifier: 80:14:8E:21:C6:56:2F:B1:47:B1:9F:A1:0F:F6:7F:5B:62:C9:22:A1 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 27A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2708 Signing time: Thu 02 May 2024 16:00:27 +0000 Manifest this update: Thu 02 May 2024 16:00:26 +0000 Manifest next update: Thu 09 May 2024 16:00:26 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: 1o8K1pXOncPvFCdLlBRyeK/YQDFbHEVbXZIIRtgho0E=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: iIqlzPytsa3BVmq/9xlrojgwODLXaEHM0o+8HYAnpj4=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: /HPe3GlQUWgCQecdxS2NpsaJsB9lrRhWuuGPyDpAHGM=) 4: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 714gnISUJPNuT8BIFwn3VAf89NH89gKo0Zr/vaMgfes=) 5: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: ja/92MLjUY3y8CpWwSha3kXLkGhtXf1LBnto/uEumSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10146 (0x27a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: May 2 16:00:26 2024 GMT Not After : May 9 16:00:26 2024 GMT Subject: CN=6633b89a-e40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:f4:43:66:3b:e1:1d:dc:1e:12:ee:4a:10: 0a:52:78:d3:b0:21:1f:24:09:38:dc:4f:ec:a6:16: 0d:3b:e5:a0:d4:33:3d:15:db:2a:21:cd:43:44:3c: 9a:86:51:fe:ff:3a:30:1f:48:e9:38:7d:6f:be:71: e2:5b:84:a8:f6:7d:55:66:36:39:e7:72:09:1b:d5: 45:aa:64:91:a2:9a:48:1b:9f:63:0f:a0:c6:4f:2d: 98:f8:a9:04:e9:87:0d:11:2b:c4:19:77:64:15:20: 3d:2d:3b:e2:dc:f1:56:ff:b0:7d:05:72:9e:3e:b8: 41:db:f6:5a:3f:24:9f:4d:d2:23:5e:c8:f7:cf:a8: d8:d7:3b:8d:b9:62:fc:e2:54:d8:4c:83:ba:46:1d: 10:96:53:20:23:b4:b2:96:a9:4a:4a:14:40:6e:69: a7:df:30:e7:bd:14:1d:69:ac:85:6e:0b:82:78:cd: da:64:49:c7:fe:6e:70:26:14:1b:30:c1:24:f4:6f: 64:dc:d3:e7:75:51:5b:a9:74:c3:d5:cc:46:dc:69: 36:5f:b6:67:63:c5:be:55:e7:a4:c7:54:6c:56:47: 03:83:06:f5:f3:9d:1c:d8:65:07:14:e4:52:5c:d2: 28:1a:e5:ee:ae:86:11:04:31:73:55:de:5a:6d:fb: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:8E:21:C6:56:2F:B1:47:B1:9F:A1:0F:F6:7F:5B:62:C9:22:A1 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d8:92:28:e7:f7:06:80:00:b2:f1:f1:1c:9b:bf:d5:e4:da: 7d:ab:89:ae:aa:a4:d8:43:1e:75:d7:08:a9:20:c6:5b:b3:9e: 10:f6:c5:6d:65:12:5b:9d:ac:d4:b5:35:86:cd:b7:32:be:b8: 5b:58:62:9a:2e:72:fa:91:d7:fc:cb:0e:f0:c9:3d:42:c7:2d: db:ee:ab:6c:4c:75:f6:9f:8b:4c:6a:87:08:89:aa:13:be:0f: 51:14:ed:54:f1:fc:30:76:35:c9:a3:c7:32:a2:13:ab:b8:fb: 62:31:bc:a9:63:ef:2b:83:78:62:39:78:73:54:63:31:66:cb: 0a:58:be:53:e4:13:24:27:47:3d:12:39:02:be:5a:53:27:3e: 9f:ee:34:ad:e1:ab:c8:ea:20:7c:25:10:25:a9:3f:92:e4:29: fa:34:dd:9c:28:09:ee:3e:85:24:b3:72:68:1a:d0:62:c7:f1: 93:f8:07:9b:ae:69:33:74:bb:bf:38:75:f8:21:e4:7b:88:7e: 86:1b:29:20:bd:43:8b:f0:cf:31:b6:48:c2:38:a7:f0:79:36: 32:9c:8e:57:f8:a3:f8:2c:cf:92:cb:fa:2d:ce:09:4b:9e:d8: be:f8:32:c7:37:9e:c7:39:13:18:77:cb:5e:04:53:29:12:5e: b3:81:56:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjQwNTAyMTYwMDI2WhcNMjQwNTA5MTYwMDI2WjAYMRYwFAYD VQQDEw02NjMzYjg5YS1lNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkb0Q2Y74R3cHhLuShAKUnjTsCEfJAk43E/sphYNO+Wg1DM9FdsqIc1DRDya hlH+/zowH0jpOH1vvnHiW4So9n1VZjY553IJG9VFqmSRoppIG59jD6DGTy2Y+KkE 6YcNESvEGXdkFSA9LTvi3PFW/7B9BXKePrhB2/ZaPySfTdIjXsj3z6jY1zuNuWL8 4lTYTIO6Rh0QllMgI7SylqlKShRAbmmn3zDnvRQdaayFbguCeM3aZEnH/m5wJhQb MMEk9G9k3NPndVFbqXTD1cxG3Gk2X7ZnY8W+Veekx1RsVkcDgwb1850c2GUHFORS XNIoGuXuroYRBDFzVd5abfsE1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAUjiHG Vi+xR7GfoQ/2f1tiySKhMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA62JIo5/cGgACy8fEcm7/V5Np9q4muqqTYQx511wipIMZbs54Q9sVt ZRJbnazUtTWGzbcyvrhbWGKaLnL6kdf8yw7wyT1Cxy3b7qtsTHX2n4tMaocIiaoT vg9RFO1U8fwwdjXJo8cyohOruPtiMbypY+8rg3hiOXhzVGMxZssKWL5T5BMkJ0c9 EjkCvlpTJz6f7jSt4avI6iB8JRAlqT+S5Cn6NN2cKAnuPoUks3JoGtBix/GT+Aeb rmkzdLu/OHX4IeR7iH6GGykgvUOL8M8xtkjCOKfweTYynI5X+KP4LM+Sy/otzglL nti++DLHN57HORMYd8teBFMpEl6zgVac -----END CERTIFICATE-----Generated at Thu May 2 17:18:28 2024 by rpki-client on console-ams.rpki-client.org