$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: WjNfsazB2R3HL66yXiIlAkrFK94ovTJZ1wqJfnmnhx0= Subject key identifier: EE:D3:AA:06:1E:DE:A4:DC:3B:E5:8F:59:5E:B2:B9:22:28:C6:01:5D Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 94 Signing time: Wed 15 May 2024 07:07:50 +0000 Manifest this update: Wed 15 May 2024 07:07:49 +0000 Manifest next update: Wed 22 May 2024 07:07:49 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: 3lNiue0p8bDmfosbplhSIk26qYtWyhbF1CxxgjMhdsk=) 2: 22F2C0647DCB11EEB9150234C4F9AE02.roa (hash: 0KwtvVvJORSXDZJXoDg8yH9MqNo0pSSAze/dXIycs7s=) 3: E10D7D267F5811EEBC62AB76C4F9AE02.roa (hash: drY6kiiYoCje6DGog8gQjYKlelhVvkYt3X5Ifw7Tcek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: May 15 07:07:49 2024 GMT Not After : May 22 07:07:49 2024 GMT Subject: CN=66445f45-8e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:71:86:15:2e:7f:ad:9f:3e:fa:d6:5c:9b:78: 37:2e:c9:1d:de:67:b9:89:55:6c:c1:a9:a9:5e:75: 0f:28:e6:95:ea:bf:8a:86:5d:ca:9f:eb:a7:aa:3d: 60:11:d9:e1:48:94:9c:c8:95:c9:67:53:c1:13:5f: 60:a5:24:66:8d:61:c8:eb:f1:29:b1:09:4f:3d:22: 84:87:15:18:11:c2:55:07:3a:96:5e:37:ff:58:73: 9e:8b:9d:f2:e5:95:f4:fb:3d:bb:db:dd:ae:96:38: b5:19:bf:91:a8:4e:cd:8e:98:ca:23:e2:b6:f2:9d: fe:37:c0:7e:79:d0:f2:b6:22:88:54:ac:54:ab:66: be:1e:5d:73:eb:f8:2a:6a:7a:cd:8e:2d:95:f8:da: 75:1d:d3:75:c9:94:bb:25:3d:14:fb:c6:23:22:2e: 6f:b9:76:9e:0d:8c:8f:fa:f6:3c:60:cc:38:76:62: 7c:06:cf:ba:59:b9:af:96:c4:21:7f:59:63:88:85: 38:d8:73:98:b0:10:9b:25:5b:ce:23:3c:13:13:1f: 99:67:b7:20:35:58:00:9b:a5:b3:dc:c2:38:83:2c: 42:da:2c:cb:68:44:9c:39:81:8a:49:6f:25:4f:63: 32:99:28:e6:d3:47:fc:a6:e7:c0:65:38:dc:35:8b: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:AA:06:1E:DE:A4:DC:3B:E5:8F:59:5E:B2:B9:22:28:C6:01:5D X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:81:3e:77:08:aa:59:77:f2:f6:ae:96:a1:2c:ff:3d:87:00: 51:c1:3d:57:d7:ee:57:b9:60:99:2b:e5:c4:04:6b:83:04:3c: 66:44:4a:06:5d:0a:68:47:8c:7a:cb:4b:d2:16:00:22:6c:03: c8:61:f7:1d:2c:7f:c4:9f:90:8c:e3:a4:92:cc:4d:43:fd:65: 06:9f:07:a8:c4:f9:83:ea:58:8c:bd:0f:b7:f8:fa:5b:4d:88: 68:b9:55:30:71:66:02:ae:99:9d:10:54:5f:b9:df:3f:e8:cd: 29:7a:4a:fa:98:1a:19:73:d4:4e:11:eb:e1:e3:5a:55:26:1d: 0b:55:95:e3:71:02:f5:f6:88:91:5d:f0:2a:99:e9:58:50:a3: a6:f9:55:31:89:e8:47:c7:a6:d8:12:27:5b:7e:22:9f:71:52: 78:3b:3c:90:6b:aa:35:72:c5:ca:c6:6d:50:67:61:ea:bd:b7: 0d:65:64:70:5d:b7:2c:7b:c2:6c:35:b7:1e:59:99:f2:32:a0: 62:d3:3c:05:17:ce:0c:a4:c6:bc:07:83:59:a2:9f:44:16:a4: 78:f2:d6:02:20:72:0e:0a:2e:ad:9a:22:fc:21:69:a8:b5:59: f0:ca:77:a2:34:14:2a:78:21:77:f6:8b:11:8d:b2:f6:d6:34: dd:1e:74:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjQwNTE1MDcwNzQ5WhcNMjQwNTIyMDcwNzQ5WjAYMRYwFAYD VQQDEw02NjQ0NWY0NS04ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XGGFS5/rZ8++tZcm3g3Lskd3me5iVVswampXnUPKOaV6r+Khl3Kn+unqj1g EdnhSJScyJXJZ1PBE19gpSRmjWHI6/EpsQlPPSKEhxUYEcJVBzqWXjf/WHOei53y 5ZX0+z27292ulji1Gb+RqE7NjpjKI+K28p3+N8B+edDytiKIVKxUq2a+Hl1z6/gq anrNji2V+Np1HdN1yZS7JT0U+8YjIi5vuXaeDYyP+vY8YMw4dmJ8Bs+6WbmvlsQh f1ljiIU42HOYsBCbJVvOIzwTEx+ZZ7cgNVgAm6Wz3MI4gyxC2izLaEScOYGKSW8l T2MymSjm00f8pufAZTjcNYu12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7TqgYe 3qTcO+WPWV6yuSIoxgFdMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCagT53CKpZd/L2rpahLP89hwBRwT1X1+5XuWCZK+XEBGuDBDxmREoG XQpoR4x6y0vSFgAibAPIYfcdLH/En5CM46SSzE1D/WUGnweoxPmD6liMvQ+3+Ppb TYhouVUwcWYCrpmdEFRfud8/6M0pekr6mBoZc9ROEevh41pVJh0LVZXjcQL19oiR XfAqmelYUKOm+VUxiehHx6bYEidbfiKfcVJ4OzyQa6o1csXKxm1QZ2HqvbcNZWRw Xbcse8JsNbceWZnyMqBi0zwFF84MpMa8B4NZop9EFqR48tYCIHIOCi6tmiL8IWmo tVnwyneiNBQqeCF39osRjbL21jTdHnS9 -----END CERTIFICATE-----Generated at Wed May 15 09:27:33 2024 by rpki-client on console-fra.rpki-client.org