$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json) Hash identifier: svM496PjkO792dQQ2qu1c+5hkjvmCHLxEGSaDDxbiu0= Subject key identifier: BA:87:8C:BC:5F:C5:DF:99:26:AC:BD:62:96:7C:E9:22:8F:5C:13:A2 Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft Manifest number: 16 Signing time: Fri 17 May 2024 08:52:13 +0000 Manifest this update: Fri 17 May 2024 08:52:12 +0000 Manifest next update: Fri 24 May 2024 08:52:12 +0000 Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: 7lQdPnoWy47XnpDs73kTtMSe39X8ZHApHPFSXHSN8XY=) 2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: OsYm03YOb1sFS9q082zuXs6miPfh1tqBo5SwMn83UWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: May 17 08:52:12 2024 GMT Not After : May 24 08:52:12 2024 GMT Subject: CN=66471abd-db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:ea:d0:4a:43:4a:ce:cb:55:e6:3d:f3:7c: de:7d:ce:dd:35:64:5b:a8:dd:ec:bc:1f:a4:46:9d: 1b:22:4e:24:3f:b9:ad:0c:f4:37:51:b4:c0:6c:93: a2:ed:c8:cf:f0:69:46:3a:42:92:ec:79:5b:ee:ac: da:bb:d0:22:6c:5f:a5:e1:d8:ee:ff:92:8a:ec:76: fb:50:88:75:b8:9e:eb:3c:54:ef:07:1b:90:e2:81: f5:ea:0e:56:ab:d3:33:28:84:89:ba:02:e7:db:1b: 6b:0a:bc:c7:e7:8d:5d:36:6e:a8:10:42:63:53:0e: bd:20:9b:7d:6a:33:48:51:b1:41:ff:dd:b6:fe:d4: 74:15:47:02:95:3d:09:ce:c6:c4:2f:5a:9f:c0:16: 9b:02:17:76:a6:75:40:c4:e0:c2:85:b4:59:57:98: 4b:81:49:00:e6:c9:59:50:00:28:cd:27:be:85:80: 77:b8:36:9b:d6:c9:e7:91:60:cd:67:bf:9c:d2:2d: 1b:4d:dc:0c:e7:a0:83:57:de:7c:92:01:91:5b:37: 9f:54:bd:7a:48:e6:97:8e:2b:6f:88:4c:16:ae:5a: 64:7a:f9:55:68:71:d7:56:1f:2a:b0:c4:e7:63:81: bc:fd:f5:09:dc:6e:63:8b:81:72:6a:13:73:4f:a0: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:87:8C:BC:5F:C5:DF:99:26:AC:BD:62:96:7C:E9:22:8F:5C:13:A2 X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:71:0a:9e:3a:2a:ff:6a:46:6f:db:09:21:ea:54:e0:d6: 34:05:47:ae:b7:4a:07:bc:cb:a7:c6:74:b3:43:2e:d2:8a:93: 20:34:cb:99:b9:95:54:af:bb:26:b8:50:9a:73:b4:52:b6:ba: c7:8c:27:ce:86:f9:b0:ec:d3:62:9d:7e:47:dc:7c:f8:1c:8d: 56:6c:24:b3:0b:df:11:49:48:ad:8b:5d:f7:97:e6:1c:fe:d9: 1d:63:bf:50:b2:ec:7e:20:00:ef:ba:ab:1c:c7:e7:29:02:0b: 59:79:11:9a:58:35:6b:2e:c2:d7:5f:49:e1:a0:bd:5b:2e:25: 08:c2:ee:c4:5b:bb:1c:b0:84:3b:13:64:1a:c9:11:ef:d4:ac: 8f:bf:ef:01:0f:e0:0e:9f:d1:4c:db:1d:99:d6:4c:6b:e2:e7: 71:a4:61:2a:9e:cf:68:6d:9c:11:a0:8f:a8:ef:ae:b7:6a:36: 6c:59:e3:1f:f8:2f:b1:ec:f2:2c:77:56:05:90:54:05:9b:a6: 98:cd:17:1f:a3:5c:59:c3:d2:8b:3e:4b:1b:b3:5a:07:fc:32: 86:f6:74:0c:69:d4:c5:3e:d8:fb:24:3f:e3:b7:46:1a:be:61: 66:7d:5b:db:a3:3c:2c:6f:fc:9e:c8:8d:9e:21:29:ad:03:b0: af:e9:54:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjRCNTExMC8GA1UEBRMoRjVGMUUyREVCMzI1NTYyQjIyODVGRjhCNURFMjVERjJD QURGNzcwNzAeFw0yNDA1MTcwODUyMTJaFw0yNDA1MjQwODUyMTJaMBgxFjAUBgNV BAMTDTY2NDcxYWJkLWRiMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJourQSkNKzstV5j3zfN59zt01ZFuo3ey8H6RGnRsiTiQ/ua0M9DdRtMBsk6Lt yM/waUY6QpLseVvurNq70CJsX6Xh2O7/korsdvtQiHW4nus8VO8HG5DigfXqDlar 0zMohIm6AufbG2sKvMfnjV02bqgQQmNTDr0gm31qM0hRsUH/3bb+1HQVRwKVPQnO xsQvWp/AFpsCF3amdUDE4MKFtFlXmEuBSQDmyVlQACjNJ76FgHe4NpvWyeeRYM1n v5zSLRtN3AznoINX3nySAZFbN59UvXpI5peOK2+ITBauWmR6+VVocddWHyqwxOdj gbz99QncbmOLgXJqE3NPoBAJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuoeMvF/F 35kmrL1ilnzpIo9cE6IwHwYDVR0jBBgwFoAU9fHi3rMlVisihf+LXeJd8srfdwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNEI1LzQwQ0U5RjJBRjEz NjExRUU5MDhCRjAzMkM0RjlBRTAyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZIaTNyTWxWaXNpaGYtTFhlSmQ4c3JmZHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NEI1LzQwQ0U5RjJBRjEzNjExRUU5MDhCRjAzMkM0RjlBRTAyLzlmSGkzck1sVmlz aWhmLUxYZUpkOHNyZmR3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABywcQqeOir/akZv2wkh6lTg1jQFR663Sge8y6fGdLNDLtKKkyA0y5m5 lVSvuya4UJpztFK2useMJ86G+bDs02KdfkfcfPgcjVZsJLML3xFJSK2LXfeX5hz+ 2R1jv1Cy7H4gAO+6qxzH5ykCC1l5EZpYNWsuwtdfSeGgvVsuJQjC7sRbuxywhDsT ZBrJEe/UrI+/7wEP4A6f0UzbHZnWTGvi53GkYSqez2htnBGgj6jvrrdqNmxZ4x/4 L7Hs8ix3VgWQVAWbppjNFx+jXFnD0os+SxuzWgf8Mob2dAxp1MU+2PskP+O3Rhq+ YWZ9W9ujPCxv/J7IjZ4hKa0DsK/pVAw= -----END CERTIFICATE-----Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org