$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: 2w1auOW+zfELCNgAHeXuOnsY6c4lzRkGZRSE9nX2cMU= Subject key identifier: 86:00:EF:F6:B6:1E:98:44:64:B9:0E:60:08:BC:EC:11:04:90:52:83 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: DF Signing time: Sat 27 Apr 2024 05:54:08 +0000 Manifest this update: Sat 27 Apr 2024 05:54:07 +0000 Manifest next update: Sat 04 May 2024 05:54:07 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: a1WzIgbUgQo6TPc9uitrxAhSPOVK2coguQnI6YAxbQE=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: ng/eOnYi4Xdy1o4WQsnieJhysvyMRUBiYik4ZaLFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: Apr 27 05:54:07 2024 GMT Not After : May 4 05:54:07 2024 GMT Subject: CN=662c9300-4d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:98:08:0b:05:a2:1a:ee:70:24:8e:36:7a: d7:05:fb:90:ec:76:c7:06:85:b7:84:62:fd:92:08: 8e:e5:19:22:65:08:86:41:b6:4f:d9:89:7f:76:8e: 39:21:7a:eb:2c:89:38:1d:9c:72:2d:f3:75:7d:73: 71:97:65:e8:5b:72:4f:3c:13:77:ab:ac:da:25:a2: dc:96:3d:ce:d5:16:a7:d7:85:ee:d9:4c:1a:9e:e5: e0:9b:7a:f8:9d:72:42:98:8c:63:35:3e:c8:21:f0: e3:e1:18:b0:ba:51:73:34:14:e8:4f:b4:7c:3c:ba: 2f:ea:ec:92:e6:41:88:e1:48:f4:02:7c:17:5c:54: d4:42:b3:04:0a:9d:4e:94:ea:7c:5a:21:07:80:38: 2a:a4:33:3e:ca:e7:9e:9b:a9:33:25:b6:34:d3:e2: 28:56:72:ea:9a:9c:91:39:cb:1d:b9:84:e2:93:61: 25:b5:7d:e1:d4:77:9e:3c:ac:00:66:22:30:29:c9: 86:9b:f3:cb:c9:25:dc:a3:0a:c7:3f:ff:b6:a4:59: 87:e8:66:7a:2c:e6:9b:a9:d1:31:89:fa:b7:d8:36: 97:dc:4a:41:8d:da:5c:ff:88:24:cf:1b:60:68:63: 24:94:33:4d:98:35:54:c9:e4:77:c6:0f:76:b0:9b: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:EF:F6:B6:1E:98:44:64:B9:0E:60:08:BC:EC:11:04:90:52:83 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:75:21:fe:ec:58:9c:b1:18:b1:46:b5:4f:60:9a:e2:cc: 02:dc:8c:f8:d9:0a:a5:33:19:8e:69:f4:8f:c1:90:5b:35:73: c6:67:9a:11:69:d8:47:f3:06:76:7d:40:26:81:31:c9:f0:2f: af:ba:f3:9a:7a:86:32:ec:fe:a0:70:80:c8:51:2c:31:a3:03: 81:33:23:85:de:77:47:59:0f:da:71:58:0d:79:9b:de:b5:27: 0f:a1:45:5c:09:df:f2:a2:cb:e0:b2:95:5f:cd:5b:05:96:f8: e9:3f:1c:e9:e0:fb:e5:e0:c9:e3:37:54:b1:bd:1d:47:3d:09: 46:93:25:d2:9a:92:8b:b5:8e:48:ef:cc:80:d6:72:7d:48:b6: 13:3b:45:88:df:9f:24:13:66:65:32:bb:71:95:5e:6c:26:23: de:8c:5e:fc:95:9c:3b:dd:68:10:82:bb:ba:99:5f:5a:be:40: 24:ff:b8:2b:2d:c5:1e:dc:25:3d:25:07:e0:d6:0e:94:95:af: 41:af:02:af:70:06:ab:de:03:1b:80:da:31:1a:7c:d4:4b:7d: 06:20:33:45:13:e2:d7:79:59:2b:40:d3:02:9b:6b:e4:16:da: 80:61:77:d2:7b:58:44:e0:e7:2a:3f:e0:5d:44:b5:16:c4:fd: 4b:df:68:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjQwNDI3MDU1NDA3WhcNMjQwNTA0MDU1NDA3WjAYMRYwFAYD VQQDEw02NjJjOTMwMC00ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmeYCAsFohrucCSONnrXBfuQ7HbHBoW3hGL9kgiO5RkiZQiGQbZP2Yl/do45 IXrrLIk4HZxyLfN1fXNxl2XoW3JPPBN3q6zaJaLclj3O1Ran14Xu2UwanuXgm3r4 nXJCmIxjNT7IIfDj4RiwulFzNBToT7R8PLov6uyS5kGI4Uj0AnwXXFTUQrMECp1O lOp8WiEHgDgqpDM+yueem6kzJbY00+IoVnLqmpyROcsduYTik2EltX3h1HeePKwA ZiIwKcmGm/PLySXcowrHP/+2pFmH6GZ6LOabqdExifq32DaX3EpBjdpc/4gkzxtg aGMklDNNmDVUyeR3xg92sJs3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYA7/a2 HphEZLkOYAi87BEEkFKDMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXk3Uh/uxYnLEYsUa1T2Ca4swC3Iz42QqlMxmOafSPwZBbNXPGZ5oR adhH8wZ2fUAmgTHJ8C+vuvOaeoYy7P6gcIDIUSwxowOBMyOF3ndHWQ/acVgNeZve tScPoUVcCd/yosvgspVfzVsFlvjpPxzp4Pvl4MnjN1SxvR1HPQlGkyXSmpKLtY5I 78yA1nJ9SLYTO0WI358kE2ZlMrtxlV5sJiPejF78lZw73WgQgru6mV9avkAk/7gr LcUe3CU9JQfg1g6Ula9BrwKvcAar3gMbgNoxGnzUS30GIDNFE+LXeVkrQNMCm2vk FtqAYXfSe1hE4OcqP+BdRLUWxP1L32j3 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:01 2024 by rpki-client on console-ams.rpki-client.org