$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: Hlnszf1rTMR7NbwFWBC5TGRIVvSWlEfGWMOAg4KOiig= Subject key identifier: 96:D0:4B:5B:37:F3:68:50:7B:E0:B2:FD:01:C2:ED:37:0B:03:E0:BE Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: 5A Signing time: Wed 15 May 2024 07:50:45 +0000 Manifest this update: Wed 15 May 2024 07:50:44 +0000 Manifest next update: Wed 22 May 2024 07:50:44 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: JlSvxyhvZavMyLEunUeoojC8jALivuN2urPmD6tTk9w=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: 9IhbGTVrlJWu8ZWGMHw07h1CZzzc/p6Dd6OeOEiFO/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: May 15 07:50:44 2024 GMT Not After : May 22 07:50:44 2024 GMT Subject: CN=66446955-d3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:5d:fd:ee:7e:76:33:17:39:7f:af:b9:53: d9:41:b4:33:13:1c:76:6f:be:66:20:f8:f5:7b:91: 8f:41:3e:7e:98:0a:24:a7:9c:11:7f:c4:16:0c:9d: 12:ab:a4:e0:e7:28:27:4a:1e:59:2a:3f:92:43:5a: 41:fa:49:1c:d4:75:ef:59:ec:a5:48:e0:cb:4d:ae: 2f:ae:8b:2c:11:97:41:ab:22:13:0d:5b:f8:70:93: 44:82:74:f2:07:f5:fa:8c:db:23:50:e9:82:d2:eb: 03:57:ba:50:1c:85:76:0e:88:7c:53:98:74:ad:d0: ca:07:2c:2a:9a:23:c2:44:45:73:1d:97:25:11:b2: 2d:26:9d:23:eb:af:41:67:39:63:c2:7d:43:de:f3: 0d:ff:83:a5:3f:41:93:58:ea:97:3b:d2:5d:22:43: 37:11:94:ed:9b:bb:f3:17:56:64:df:7e:40:e9:c3: 95:c6:75:ce:ca:69:4e:73:a9:0a:c7:ce:49:e9:57: e8:18:2a:3c:fc:f6:b4:4c:a6:ff:08:b7:51:1b:79: 7a:86:8f:d3:ea:63:ee:ee:37:10:ab:52:ce:a1:a0: 6c:5c:20:1d:a7:32:0b:82:14:42:58:a7:73:97:01: 5a:50:b1:9f:8a:30:88:55:cd:b4:0d:b3:5a:a5:fe: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:4B:5B:37:F3:68:50:7B:E0:B2:FD:01:C2:ED:37:0B:03:E0:BE X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:87:ca:e4:1e:83:ab:39:ef:a3:31:71:9b:77:27:ed:03:9f: 37:99:58:b6:7a:a8:3d:ae:a4:20:2f:3c:dd:12:88:99:c0:5b: 9a:b1:71:55:d1:bd:c8:b0:21:95:ee:a8:f5:2a:ae:9f:d5:a9: c1:70:08:6f:4d:9a:66:b5:77:94:be:ca:42:a2:56:02:58:13: 67:4d:33:5d:72:e3:a7:aa:df:78:f9:0e:20:ff:48:fd:86:ac: 94:94:1e:35:63:3a:10:bb:1e:97:61:38:7b:04:61:c5:f1:4f: 0e:9a:f0:9b:b8:1c:08:24:c4:fa:cd:29:2a:88:49:d0:fc:bc: ce:ea:db:01:37:e5:fd:21:4f:39:39:75:8d:eb:a8:82:1f:b1: a8:57:c8:8f:ff:73:30:46:4c:cd:40:43:bf:49:d3:78:8d:09: 0b:ad:8e:68:b2:04:ee:07:24:d3:7d:53:81:42:7e:07:81:7f: f0:b5:ff:f8:ef:3b:cf:1a:2c:01:46:14:e7:9f:8e:3d:56:b2: b9:0e:bf:fd:eb:81:a6:1f:a0:54:69:5b:cf:0e:5c:8b:46:c1: 2e:c6:b4:b0:77:45:e3:6e:b5:1d:db:ed:98:39:7a:4d:47:8e: da:6f:5b:b0:73:2f:c3:e4:0c:57:0a:27:99:61:9e:3b:0a:16: 20:b6:a6:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OTU5MTExMC8GA1UEBRMoOUFEMzQ5RjQ1NDg1M0JCMTg5MkFGRUY2MDQ4QzE4NzI1 ODA1Nzc2MTAeFw0yNDA1MTUwNzUwNDRaFw0yNDA1MjIwNzUwNDRaMBgxFjAUBgNV BAMTDTY2NDQ2OTU1LWQzZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmUF397n52Mxc5f6+5U9lBtDMTHHZvvmYg+PV7kY9BPn6YCiSnnBF/xBYMnRKr pODnKCdKHlkqP5JDWkH6SRzUde9Z7KVI4MtNri+uiywRl0GrIhMNW/hwk0SCdPIH 9fqM2yNQ6YLS6wNXulAchXYOiHxTmHSt0MoHLCqaI8JERXMdlyURsi0mnSPrr0Fn OWPCfUPe8w3/g6U/QZNY6pc70l0iQzcRlO2bu/MXVmTffkDpw5XGdc7KaU5zqQrH zknpV+gYKjz89rRMpv8It1EbeXqGj9PqY+7uNxCrUs6hoGxcIB2nMguCFEJYp3OX AVpQsZ+KMIhVzbQNs1ql/p2xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUltBLWzfz aFB74LL9AcLtNwsD4L4wHwYDVR0jBBgwFoAUmtNJ9FSFO7GJKv72BIwYclgFd2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NTkxL0RFRDgzNTY4ODky QzExRUU5NDc3ODE2REM0RjlBRTAyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXROSjlGU0ZPN0dKS3Y3MkJJd1ljbGdGZDJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 NTkxL0RFRDgzNTY4ODkyQzExRUU5NDc3ODE2REM0RjlBRTAyL210Tko5RlNGTzdH Skt2NzJCSXdZY2xnRmQyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOHyuQeg6s576MxcZt3J+0DnzeZWLZ6qD2upCAvPN0SiJnAW5qxcVXR vciwIZXuqPUqrp/VqcFwCG9Nmma1d5S+ykKiVgJYE2dNM11y46eq33j5DiD/SP2G rJSUHjVjOhC7HpdhOHsEYcXxTw6a8Ju4HAgkxPrNKSqISdD8vM7q2wE35f0hTzk5 dY3rqIIfsahXyI//czBGTM1AQ79J03iNCQutjmiyBO4HJNN9U4FCfgeBf/C1//jv O88aLAFGFOefjj1WsrkOv/3rgaYfoFRpW88OXItGwS7GtLB3ReNutR3b7Zg5ek1H jtpvW7BzL8PkDFcKJ5lhnjsKFiC2pgM= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org