$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft File: 909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json) Hash identifier: WqjAU7522njXBpR8rzfy/WK8L3GGTWiNC19hiGPchF8= Subject key identifier: 0D:69:28:BE:F7:13:D9:53:5A:18:36:60:C7:1A:2E:AB:EC:5C:C2:EC Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 Certificate issuer: /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Certificate serial: 11AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft Manifest number: 11AB Signing time: Tue 30 Apr 2024 17:58:45 +0000 Manifest this update: Tue 30 Apr 2024 17:58:44 +0000 Manifest next update: Tue 07 May 2024 17:58:44 +0000 Files and hashes: 1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: cQoeNh/+0aNC5/KknTHPFWkAgOL0fuIQFrZNM3P6tzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4523 (0x11ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97 Validity Not Before: Apr 30 17:58:44 2024 GMT Not After : May 7 17:58:44 2024 GMT Subject: CN=66313154-64eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:ec:00:80:04:58:a2:a9:af:c4:2e:fa:b9: e9:3b:4d:7b:57:22:c1:57:ec:98:5e:29:06:c7:a1: dc:11:ff:f1:bf:44:49:98:f5:60:d5:c6:c1:95:3a: 42:03:c6:6a:e4:38:c4:14:f1:c6:8b:44:b3:9d:c8: 37:2a:8a:70:4d:d8:6e:37:f0:4b:d7:db:fc:e7:bf: 64:8e:2b:6d:46:da:34:f9:90:02:9a:56:4b:e1:fa: ec:51:bd:94:e9:2a:9c:e3:bd:35:8e:e5:55:fd:77: a2:8f:53:54:4a:28:55:53:26:86:8a:2d:a0:d8:48: 46:bb:ef:11:bc:5c:90:b6:bc:3e:6f:42:67:4a:f5: c8:26:14:10:79:61:1e:9d:ed:0d:c9:b0:c5:29:00: 39:b6:ef:fd:70:e6:45:6f:8f:e3:9d:53:59:c6:52: 69:3d:52:a6:62:85:36:19:f6:bf:7f:2c:b8:03:83: 56:be:18:1a:a5:86:d1:37:6f:ff:21:bc:aa:cf:7a: 8d:95:71:05:fa:90:d4:bc:31:b2:db:1f:05:39:ca: d5:1a:36:f1:eb:f8:5c:32:91:47:2f:31:1c:43:ff: c1:71:d3:60:09:0f:51:64:ba:df:47:88:fd:82:31: 4e:15:20:df:f9:e7:93:46:51:6b:51:86:d1:d3:c4: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:69:28:BE:F7:13:D9:53:5A:18:36:60:C7:1A:2E:AB:EC:5C:C2:EC X509v3 Authority Key Identifier: keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:12:60:d5:1d:8d:26:de:3e:08:4d:1d:60:fd:f3:e6:6d: c2:53:e1:59:65:ff:3e:cd:d9:d6:a6:b1:9c:e3:68:c8:7c:fa: 2c:49:29:ad:65:48:5c:b3:95:ec:ed:3e:82:86:33:7e:73:62: 8d:6a:ae:12:3d:c6:d9:5e:66:90:d6:4f:f1:6c:90:c3:df:26: e0:b5:87:2f:61:54:e4:6b:09:75:1c:c0:c1:0e:3e:42:09:c3: 53:b0:e7:5b:5f:ea:88:a1:18:b0:d5:38:9a:3e:28:1c:29:b2: ad:57:53:f1:8e:bd:ae:08:29:1e:2a:4b:ea:c4:27:6a:b4:af: d8:cf:28:ba:ab:86:aa:3b:8d:e1:12:89:e7:d2:c9:d5:f5:a2: 19:1b:da:fc:7c:a9:78:02:18:31:39:1b:3d:2d:99:29:55:ff: 7d:32:0f:a7:7a:02:c7:23:c9:04:00:ca:ff:71:23:9e:69:61: e8:eb:57:f8:51:a0:2a:79:f2:86:a7:a5:b8:f7:35:69:38:4c: 8f:fe:f0:98:63:33:04:eb:7b:49:55:79:c9:38:5c:d4:0b:bc: c3:2b:f4:b1:58:23:bd:68:a8:b5:86:03:b9:e5:c3:f7:a4:72: e2:76:f0:31:f4:68:b1:10:16:64:c5:eb:b7:92:b7:fc:09:33: 40:0e:1c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyM0MxMTAvBgNVBAUTKEY3NEY3MzVGREM1QTVCOTMzNkYzMjRDMzJDQkE1NThF QkJEMjhEOTcwHhcNMjQwNDMwMTc1ODQ0WhcNMjQwNTA3MTc1ODQ0WjAYMRYwFAYD VQQDEw02NjMxMzE1NC02NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kjsAIAEWKKpr8Qu+rnpO017VyLBV+yYXikGx6HcEf/xv0RJmPVg1cbBlTpC A8Zq5DjEFPHGi0Szncg3KopwTdhuN/BL19v8579kjittRto0+ZACmlZL4frsUb2U 6Sqc4701juVV/Xeij1NUSihVUyaGii2g2EhGu+8RvFyQtrw+b0JnSvXIJhQQeWEe ne0NybDFKQA5tu/9cOZFb4/jnVNZxlJpPVKmYoU2Gfa/fyy4A4NWvhgapYbRN2// Ibyqz3qNlXEF+pDUvDGy2x8FOcrVGjbx6/hcMpFHLzEcQ//BcdNgCQ9RZLrfR4j9 gjFOFSDf+eeTRlFrUYbR08RSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1pKL73 E9lTWhg2YMcaLqvsXMLsMB8GA1UdIwQYMBaAFPdPc1/cWluTNvMkwyy6VY670o2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTIzQy82OEY1M0YzMkNC M0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1TTI4eVRETExwVmpydlNq WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwOXpYOXhhVzVNMjh5VERMTHBWanJ2U2paYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTIzQy82OEY1M0YzMkNCM0UxMUU4ODgyQ0RBM0FDNEY5QUUwMi85MDl6WDl4YVc1 TTI4eVRETExwVmpydlNqWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYmhJg1R2NJt4+CE0dYP3z5m3CU+FZZf8+zdnWprGc42jIfPosSSmt ZUhcs5Xs7T6ChjN+c2KNaq4SPcbZXmaQ1k/xbJDD3ybgtYcvYVTkawl1HMDBDj5C CcNTsOdbX+qIoRiw1TiaPigcKbKtV1Pxjr2uCCkeKkvqxCdqtK/Yzyi6q4aqO43h Eonn0snV9aIZG9r8fKl4AhgxORs9LZkpVf99Mg+negLHI8kEAMr/cSOeaWHo61f4 UaAqefKGp6W49zVpOEyP/vCYYzME63tJVXnJOFzUC7zDK/SxWCO9aKi1hgO55cP3 pHLidvAx9GixEBZkxeu3krf8CTNADhwH -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:13 2024 by rpki-client on console-ams.rpki-client.org