$ rpki-client -vvf rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft File: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft (raw, json) Hash identifier: OT/Fx71Y7mJ/iHpHNE6TSddX9za/Kghlj09Nq9/qME4= Subject key identifier: 42:4F:A4:F5:4F:55:2A:EB:4C:DE:AE:88:14:7C:B2:14:1A:AD:18:71 Authority key identifier: F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 Certificate issuer: /CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft Manifest number: 0D0C Signing time: Sat 18 May 2024 18:44:14 +0000 Manifest this update: Sat 18 May 2024 18:44:13 +0000 Manifest next update: Sat 25 May 2024 18:44:13 +0000 Files and hashes: 1: 9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl (hash: cP9WZDH/nmvi5gLi2IraswN4hMeiU9x/hZcqzRYCdEY=) 2: 37EF9AB2B73E11E9BCAF574AC4F9AE02.roa (hash: LJDJT9b2tqtA8O6hQfQCHkjQVIf/COk/4xlUjuao3vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165226/serialNumber=F536ADD6E17D1CE22CBB893A7FA0CF08BD8E3FC0 Validity Not Before: May 18 18:44:13 2024 GMT Not After : May 25 18:44:13 2024 GMT Subject: CN=6648f6fd-d62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:0b:21:f6:51:ed:74:d3:8e:ec:7e:fb:b3: b5:fd:aa:a0:8c:47:6a:4d:e3:d1:88:2a:23:1c:23: 45:37:ae:69:77:ea:82:a7:cb:d6:68:7b:ea:a0:fa: d9:4a:e1:1d:07:d1:13:9e:41:b7:e8:62:23:a6:d8: fb:ea:60:88:16:ba:53:11:8a:67:a1:34:a1:67:bc: 05:6c:51:4f:7b:19:ed:ff:3c:2b:5a:24:ae:39:29: c4:bf:76:a2:2d:11:4a:3c:62:79:63:2c:03:39:31: 74:49:45:07:f0:10:14:a4:fa:68:f8:a4:08:f1:2d: 49:93:42:cc:c0:fa:5f:4d:89:14:56:06:c4:0c:03: 20:79:b0:9f:d3:0a:d9:de:8e:e3:05:48:7a:20:87: 9e:7d:72:91:d5:da:b2:ee:0a:3a:55:0f:4a:9e:3a: 40:29:ed:d5:db:4a:7c:c1:92:a5:3c:8e:8c:87:7b: bd:4e:9c:f2:a5:63:84:d9:f3:36:e4:70:c6:0e:20: d5:29:04:35:01:cc:c0:92:ce:70:3e:9f:b5:c9:72: 0b:17:99:24:99:95:7b:75:fb:5f:d4:e4:fa:c7:35: bf:8b:65:18:83:26:b1:6a:c3:37:f3:0b:dd:3b:ca: d3:ce:4f:69:e2:3e:4c:60:8c:81:aa:63:f2:d2:53: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:A4:F5:4F:55:2A:EB:4C:DE:AE:88:14:7C:B2:14:1A:AD:18:71 X509v3 Authority Key Identifier: keyid:F5:36:AD:D6:E1:7D:1C:E2:2C:BB:89:3A:7F:A0:CF:08:BD:8E:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Tat1uF9HOIsu4k6f6DPCL2OP8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165226/3C9CF04CB73D11E9A0DEB848C4F9AE02/9Tat1uF9HOIsu4k6f6DPCL2OP8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:98:8d:13:62:37:60:93:07:15:fe:5e:f7:b4:8f:80:f1:9b: 44:9f:1d:19:d0:70:5b:03:07:3b:29:f9:9e:b3:d9:55:34:4a: 1a:f2:a1:37:01:b9:29:81:0a:2e:6c:be:d0:d8:4a:43:12:cb: 34:f9:01:6e:db:86:4d:e3:97:32:2b:f4:1a:0f:d2:05:de:ae: 21:6b:d1:22:fd:df:34:c9:41:e1:6c:de:57:56:fb:93:06:6e: 02:9f:dd:cd:eb:03:b4:f9:07:3e:e5:9e:57:b5:bb:e9:d9:da: 58:1a:6e:1d:d4:bb:69:41:d4:d3:94:b8:4a:81:86:0b:69:32: 15:a7:a6:a2:02:14:77:c8:fa:bd:9e:43:9c:84:6a:fd:e9:aa: 29:e2:7f:40:07:c5:ac:63:17:59:c0:67:e7:41:db:00:f9:51: 59:8a:d7:5d:02:34:c8:e8:26:5e:43:b3:50:e9:3b:6f:10:43: be:24:f7:d7:fb:38:c1:af:b8:07:91:97:92:fe:64:0c:82:4e: 73:7b:7f:0d:40:79:6a:d0:3d:da:a1:2c:c6:95:6f:f1:6e:ea: ff:64:37:be:bd:83:fb:69:6c:e1:b7:4d:48:5e:d4:3c:af:92: ec:08:d1:a6:71:f4:ef:83:95:79:f5:b2:8a:d6:52:2b:a0:61: 63:49:89:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyMjYxMTAvBgNVBAUTKEY1MzZBREQ2RTE3RDFDRTIyQ0JCODkzQTdGQTBDRjA4 QkQ4RTNGQzAwHhcNMjQwNTE4MTg0NDEzWhcNMjQwNTI1MTg0NDEzWjAYMRYwFAYD VQQDEw02NjQ4ZjZmZC1kNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFMLIfZR7XTTjux++7O1/aqgjEdqTePRiCojHCNFN65pd+qCp8vWaHvqoPrZ SuEdB9ETnkG36GIjptj76mCIFrpTEYpnoTShZ7wFbFFPexnt/zwrWiSuOSnEv3ai LRFKPGJ5YywDOTF0SUUH8BAUpPpo+KQI8S1Jk0LMwPpfTYkUVgbEDAMgebCf0wrZ 3o7jBUh6IIeefXKR1dqy7go6VQ9KnjpAKe3V20p8wZKlPI6Mh3u9TpzypWOE2fM2 5HDGDiDVKQQ1AczAks5wPp+1yXILF5kkmZV7dftf1OT6xzW/i2UYgyaxasM38wvd O8rTzk9p4j5MYIyBqmPy0lPXMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJPpPVP VSrrTN6uiBR8shQarRhxMB8GA1UdIwQYMBaAFPU2rdbhfRziLLuJOn+gzwi9jj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIyNi8zQzlDRjA0Q0I3 M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhPSXN1NGs2ZjZEUENMMk9Q OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUYXQxdUY5SE9Jc3U0azZmNkRQQ0wyT1A4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTIyNi8zQzlDRjA0Q0I3M0QxMUU5QTBERUI4NDhDNEY5QUUwMi85VGF0MXVGOUhP SXN1NGs2ZjZEUENMMk9QOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZmI0TYjdgkwcV/l73tI+A8ZtEnx0Z0HBbAwc7Kfmes9lVNEoa8qE3 AbkpgQoubL7Q2EpDEss0+QFu24ZN45cyK/QaD9IF3q4ha9Ei/d80yUHhbN5XVvuT Bm4Cn93N6wO0+Qc+5Z5Xtbvp2dpYGm4d1LtpQdTTlLhKgYYLaTIVp6aiAhR3yPq9 nkOchGr96aop4n9AB8WsYxdZwGfnQdsA+VFZitddAjTI6CZeQ7NQ6TtvEEO+JPfX +zjBr7gHkZeS/mQMgk5ze38NQHlq0D3aoSzGlW/xbur/ZDe+vYP7aWzht01IXtQ8 r5LsCNGmcfTvg5V59bKK1lIroGFjSYlX -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org