$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: kLP2b2byQ/9FoQ+hzjf1Tnz7FnT6NfG0R5iHBAFH8IY= Subject key identifier: D9:AA:D7:97:7C:07:7C:B2:80:50:CA:A7:CA:F3:BB:91:5D:67:F8:38 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: C9 Signing time: Sun 05 May 2024 06:20:06 +0000 Manifest this update: Sun 05 May 2024 06:20:06 +0000 Manifest next update: Sun 12 May 2024 06:20:06 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: 9uYLpZvROv/kGvN0jWbQFaJB873vm6SpUoWio6TIgOs=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: vZKHycAcW2nLtUOaWvEw8PnU1TIAzuT6PSJsqO4DJ8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: May 5 06:20:06 2024 GMT Not After : May 12 06:20:06 2024 GMT Subject: CN=66372516-f418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:6d:20:18:dd:25:05:9e:11:a0:f9:aa:36: 77:64:fb:02:a1:ae:25:01:bd:7f:e3:cd:f6:f7:6f: 48:56:6e:a5:13:b8:8a:d0:2f:77:c4:04:65:31:fc: 0a:f9:a4:00:f0:58:71:5c:09:3d:f8:40:eb:52:86: 5d:ad:d3:f9:50:25:8a:5d:f5:4b:65:f0:17:a7:a4: 10:b8:c9:3f:21:7a:df:6f:bd:e6:d6:5c:c6:12:05: 90:34:22:e6:5e:ba:4e:3c:8c:83:d8:b3:90:8d:40: ef:49:9c:66:c2:12:90:aa:68:c5:d0:26:b0:b7:6f: 94:8f:65:2d:21:eb:08:07:61:4c:86:b4:7e:87:b3: bf:b0:07:d6:9f:a1:bc:32:4e:ec:b2:9b:8d:cc:9c: 0a:28:73:9b:47:8b:42:2f:6c:c8:0e:a7:70:7c:0f: 08:45:4b:28:89:59:c0:39:50:aa:f2:1f:e4:e9:ef: 39:be:86:2f:da:71:fb:d2:4d:3a:52:4f:8d:87:db: 15:c5:90:aa:60:3f:c9:2e:c5:0b:a7:40:38:3f:dd: 09:0c:54:18:42:fd:2d:32:61:a9:00:89:5b:43:e7: c3:49:5c:88:66:5d:c7:9a:ad:83:36:bb:6b:c1:f6: 2b:af:01:4c:b4:e3:bb:be:7f:e2:7b:b9:8f:13:37: 3c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AA:D7:97:7C:07:7C:B2:80:50:CA:A7:CA:F3:BB:91:5D:67:F8:38 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:15:6b:1c:d9:66:47:4a:c7:44:bd:a1:5b:9e:4a:89:c0:bd: 57:4b:87:69:7d:a6:bc:78:6a:a0:12:7f:ca:23:5d:17:55:18: 65:60:f9:46:c9:4c:6a:14:29:8b:37:5c:fb:7e:08:f9:f6:c4: 47:3e:e0:69:d3:7b:b6:93:dc:b0:be:b1:5c:89:14:e6:99:01: 4e:93:89:d0:ae:67:02:e6:68:6d:18:6d:0e:fc:c5:d1:39:59: 9d:44:40:f9:1d:7d:b3:61:e0:d0:f3:00:ce:70:d2:a9:0f:03: 6b:01:5c:aa:ee:57:b6:a4:9a:2e:b7:b0:cb:01:8e:20:7d:01: a2:4f:b1:f7:78:f3:0d:a7:51:b0:d1:d3:a9:16:5f:3a:20:62: b3:88:c3:4a:6e:07:fa:1e:9a:17:c8:86:89:65:e0:37:9b:07: 1e:0c:53:30:76:c3:da:31:ab:cb:2c:f3:cf:bb:d7:98:6b:09: 9f:72:53:8b:79:b0:f3:41:05:6f:1b:96:96:4b:30:56:59:7f: 24:a8:31:9f:92:86:48:39:1c:6d:42:03:fa:49:d6:88:99:4d: 05:70:50:81:ea:71:eb:b9:43:f3:3a:d0:14:97:87:b0:10:18: 94:31:15:90:d9:2b:ec:51:c5:74:36:2a:16:c2:e4:be:dd:12: 5b:d1:cd:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjQwNTA1MDYyMDA2WhcNMjQwNTEyMDYyMDA2WjAYMRYwFAYD VQQDEw02NjM3MjUxNi1mNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr9tIBjdJQWeEaD5qjZ3ZPsCoa4lAb1/4832929IVm6lE7iK0C93xARlMfwK +aQA8FhxXAk9+EDrUoZdrdP5UCWKXfVLZfAXp6QQuMk/IXrfb73m1lzGEgWQNCLm XrpOPIyD2LOQjUDvSZxmwhKQqmjF0Cawt2+Uj2UtIesIB2FMhrR+h7O/sAfWn6G8 Mk7sspuNzJwKKHObR4tCL2zIDqdwfA8IRUsoiVnAOVCq8h/k6e85voYv2nH70k06 Uk+Nh9sVxZCqYD/JLsULp0A4P90JDFQYQv0tMmGpAIlbQ+fDSVyIZl3Hmq2DNrtr wfYrrwFMtOO7vn/ie7mPEzc8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmq15d8 B3yygFDKp8rzu5FdZ/g4MB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWFWsc2WZHSsdEvaFbnkqJwL1XS4dpfaa8eGqgEn/KI10XVRhlYPlG yUxqFCmLN1z7fgj59sRHPuBp03u2k9ywvrFciRTmmQFOk4nQrmcC5mhtGG0O/MXR OVmdRED5HX2zYeDQ8wDOcNKpDwNrAVyq7le2pJout7DLAY4gfQGiT7H3ePMNp1Gw 0dOpFl86IGKziMNKbgf6HpoXyIaJZeA3mwceDFMwdsPaMavLLPPPu9eYawmfclOL ebDzQQVvG5aWSzBWWX8kqDGfkoZIORxtQgP6SdaImU0FcFCB6nHruUPzOtAUl4ew EBiUMRWQ2SvsUcV0NioWwuS+3RJb0c33 -----END CERTIFICATE-----Generated at Sun May 5 08:39:05 2024 by rpki-client on console-fra.rpki-client.org