$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft File: 9mmSZEF8IotR_hWzsey3hn8qJ0M.mft (raw, json) Hash identifier: Y4g55ezxrljTH8k5+rGTQ2ZoEr7EAs/KF09DKakYHsY= Subject key identifier: 63:F1:5C:09:7A:A0:2A:BF:D7:1C:70:BC:66:D1:5F:CC:D7:7D:8A:C8 Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 Certificate issuer: /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Certificate serial: 1759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft Manifest number: 174C Signing time: Thu 02 May 2024 17:06:22 +0000 Manifest this update: Thu 02 May 2024 17:06:22 +0000 Manifest next update: Thu 09 May 2024 17:06:22 +0000 Files and hashes: 1: 9mmSZEF8IotR_hWzsey3hn8qJ0M.crl (hash: lToyoxVJ60quJ/7rHzSCV+nB30HFih+cudQF8OVSXDI=) 2: C772BB4AF7A111ED874BEC62C4F9AE02.roa (hash: TrFSsPwA7RPnYiidHGIHv6OtRucjU2tMRDQgBehdETM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5977 (0x1759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743 Validity Not Before: May 2 17:06:22 2024 GMT Not After : May 9 17:06:22 2024 GMT Subject: CN=6633c80e-2cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:f6:74:71:5f:9d:81:c0:4a:b0:62:06:39: dd:ed:d9:f1:63:ca:58:83:40:cc:25:41:77:df:10: 41:69:8a:9b:0a:e9:7b:9b:ac:0d:9c:14:40:11:40: e9:2c:bd:73:58:ad:96:ce:fa:e0:02:67:3c:18:34: 72:4c:c1:fa:5f:3c:45:29:46:ce:ed:e5:f4:41:d6: 3c:a8:56:30:2e:ec:38:1c:d1:05:e4:d2:55:f7:2b: c5:d1:e3:cd:06:93:ea:3b:68:be:d3:20:58:9e:05: 4c:93:db:14:d1:cf:43:78:30:79:7e:8b:36:b9:12: 67:1b:a8:18:a9:4f:73:c6:ac:86:ca:c2:88:c5:81: d4:cc:e7:8f:f7:ce:ef:b2:2d:b0:c2:25:f2:82:82: ce:33:17:6d:18:78:59:43:2b:68:4d:6d:35:06:4e: 7e:23:e0:8f:c6:5f:4a:ca:e5:ac:85:17:df:a6:38: ff:7b:08:df:19:b4:7d:fd:3c:8d:7f:5c:5d:9a:bf: 39:e4:52:60:95:04:cd:a1:ea:79:4a:69:ad:c5:c3: 86:83:34:bb:58:20:4d:82:77:92:94:51:2d:71:6c: e1:2b:f5:76:29:69:8d:27:97:97:28:82:62:b6:ef: 0c:24:38:9d:f2:b8:94:93:2c:3d:6e:b7:83:eb:8a: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F1:5C:09:7A:A0:2A:BF:D7:1C:70:BC:66:D1:5F:CC:D7:7D:8A:C8 X509v3 Authority Key Identifier: keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:02:f8:c7:e2:40:d2:04:dc:ad:d2:25:17:f2:f7:9e:50:11: 71:9d:63:d6:2b:b5:e0:41:17:e1:a0:da:b5:bb:32:67:a4:dc: 7d:e6:23:0c:6a:b5:92:f8:4e:52:33:7e:ac:b8:f6:6d:6e:af: c0:be:b6:bc:e7:57:8e:a4:96:b1:5a:d6:e3:d5:5d:e9:72:03: 52:5c:31:84:5b:c2:cc:b2:c0:73:89:f0:3f:54:88:52:bc:8a: 5e:e3:27:f5:af:ca:b6:6b:84:75:7f:fb:1d:56:06:dd:4d:80: ed:c4:cd:3a:62:ff:fe:1a:4c:17:b1:a9:59:0f:9e:44:d7:cf: 5d:6c:24:a9:b9:d3:8c:03:71:ff:f6:1d:71:6c:56:91:b5:66: bf:b0:7a:51:0d:63:f5:c4:d4:18:6c:a1:3a:b6:1f:c7:59:1f: 7e:72:b1:93:0d:12:25:25:56:e6:64:97:60:7f:8d:5b:fc:4b: f1:9f:be:f0:b8:43:c4:d6:1a:7a:72:94:60:f2:ca:0a:54:35: d7:9a:a6:6a:8c:5f:ca:db:7b:ec:bd:f9:80:15:bb:10:8f:31: 52:02:ac:db:71:94:a6:1e:ee:a8:b6:68:5c:e8:e6:b2:9d:1a: 80:f9:06:34:b4:5f:92:36:5d:09:fb:14:0e:74:68:d4:ac:dc: a7:03:55:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwMjAxMTAvBgNVBAUTKEY2Njk5MjY0NDE3QzIyOEI1MUZFMTVCM0IxRUNCNzg2 N0YyQTI3NDMwHhcNMjQwNTAyMTcwNjIyWhcNMjQwNTA5MTcwNjIyWjAYMRYwFAYD VQQDEw02NjMzYzgwZS0yY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnz2dHFfnYHASrBiBjnd7dnxY8pYg0DMJUF33xBBaYqbCul7m6wNnBRAEUDp LL1zWK2WzvrgAmc8GDRyTMH6XzxFKUbO7eX0QdY8qFYwLuw4HNEF5NJV9yvF0ePN BpPqO2i+0yBYngVMk9sU0c9DeDB5fos2uRJnG6gYqU9zxqyGysKIxYHUzOeP987v si2wwiXygoLOMxdtGHhZQytoTW01Bk5+I+CPxl9KyuWshRffpjj/ewjfGbR9/TyN f1xdmr855FJglQTNoep5SmmtxcOGgzS7WCBNgneSlFEtcWzhK/V2KWmNJ5eXKIJi tu8MJDid8riUkyw9breD64oEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPxXAl6 oCq/1xxwvGbRX8zXfYrIMB8GA1UdIwQYMBaAFPZpkmRBfCKLUf4Vs7Hst4Z/KidD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDAyMC9BRDFCOERFNEI0 MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElvdFJfaFd6c2V5M2huOHFK ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbVNaRUY4SW90Ul9oV3pzZXkzaG44cUowTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDAyMC9BRDFCOERFNEI0MDQxMUU3ODlDRkE1NDFDNEY5QUUwMi85bW1TWkVGOElv dFJfaFd6c2V5M2huOHFKME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhAvjH4kDSBNyt0iUX8veeUBFxnWPWK7XgQRfhoNq1uzJnpNx95iMM arWS+E5SM36suPZtbq/Avra851eOpJaxWtbj1V3pcgNSXDGEW8LMssBzifA/VIhS vIpe4yf1r8q2a4R1f/sdVgbdTYDtxM06Yv/+GkwXsalZD55E189dbCSpudOMA3H/ 9h1xbFaRtWa/sHpRDWP1xNQYbKE6th/HWR9+crGTDRIlJVbmZJdgf41b/Evxn77w uEPE1hp6cpRg8soKVDXXmqZqjF/K23vsvfmAFbsQjzFSAqzbcZSmHu6otmhc6Oay nRqA+QY0tF+SNl0J+xQOdGjUrNynA1U7 -----END CERTIFICATE-----Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org