$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: oUiSyOuy3Q3TJYnnYjaVaTRUVqF9C0BJr4FjNrGLYqs= Subject key identifier: 8E:B1:F4:10:72:A0:1C:B5:5D:19:A0:39:F8:03:1E:83:B8:6C:B7:CF Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 3439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 33EE Signing time: Fri 26 Apr 2024 14:36:05 +0000 Manifest this update: Fri 26 Apr 2024 14:36:05 +0000 Manifest next update: Fri 03 May 2024 14:36:05 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: IQFxMYILcyjkmwA42B/53P3JpDrYEVA4hx0pSprnH28=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: lt2z/i16iGevd+NyEOesnGgIVVz5szDiZpCP8s2poXc=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: Oshcmtad/KvmUpSI93xZ/kh7sRubX6+t4AuZaFJtzXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13369 (0x3439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Apr 26 14:36:05 2024 GMT Not After : May 3 14:36:05 2024 GMT Subject: CN=662bbbd5-cd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:43:07:91:59:10:d5:a0:f7:a9:2c:af:d6: da:59:45:68:d3:dc:d8:93:4b:c0:ea:1f:cf:51:61: e1:53:b1:3f:58:31:c4:37:d2:0c:76:c3:90:c1:f0: 57:4c:f4:7d:d1:9d:30:32:92:8b:c4:15:57:e0:c6: ca:a4:0c:24:d2:39:40:ec:1d:a5:2d:c1:4d:9f:4e: 1c:44:55:bf:16:7d:f1:a8:29:51:11:85:9a:3e:81: 00:ae:de:81:f9:1e:a1:b4:47:6d:fd:17:dd:8a:a7: 98:ec:48:dd:fc:e9:24:56:c6:d8:61:f5:08:e0:f9: 61:2f:5a:1f:34:b5:53:7c:3e:79:cd:3d:51:a5:6e: 0a:2d:a3:a5:db:7c:da:a3:04:3c:5c:ac:7c:e1:d8: e7:37:65:9c:9e:36:52:b9:4a:aa:f8:e6:c4:02:ed: 3a:ca:e2:70:88:c7:dd:f9:17:a0:ea:46:7c:c7:6a: 59:3c:e3:f7:2a:16:79:fb:1c:33:5e:2c:d0:56:b8: 2f:a2:15:2e:0b:47:86:d9:3a:c4:13:9f:17:d2:ea: 43:53:a1:52:0a:a2:6f:5c:69:3c:db:78:54:9c:c7: de:19:49:1a:df:f4:72:92:97:a6:20:ff:b8:6a:ac: f3:58:e1:9e:33:12:b6:36:54:9d:80:6b:f2:b1:6a: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:F4:10:72:A0:1C:B5:5D:19:A0:39:F8:03:1E:83:B8:6C:B7:CF X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:6f:17:03:f3:35:e8:59:9c:38:e0:99:e9:2b:e7:09:56:3c: f7:a9:ba:17:b1:84:3c:90:7a:bb:29:3b:11:d5:27:67:c0:22: 79:35:d7:5c:e7:8c:8b:32:c9:04:0e:53:7c:93:bb:e9:ae:9e: f1:09:15:c9:3c:da:a7:56:f7:24:72:66:31:14:fe:b3:dc:f7: 9e:78:4f:2e:ca:92:1a:43:64:67:fd:a9:7c:40:3d:c2:f9:3a: 20:d2:eb:23:6b:27:3b:4e:a2:c8:c2:93:8e:63:c0:22:47:06: 5a:b4:16:1e:81:af:e4:6b:e8:0c:d5:2d:c2:35:80:1c:18:1d: 2f:ba:57:5b:47:38:d7:63:bd:d3:e5:b1:0d:61:10:e6:76:0e: 58:c9:9a:06:87:59:b3:61:5e:55:a1:f3:44:32:b6:f2:fe:01: c3:e0:2a:1e:25:9d:e3:42:96:fd:08:79:47:f0:fe:fe:79:82: d2:d1:4e:30:24:72:5c:8b:1d:8c:90:0f:2c:b8:44:13:1e:0e: 12:5d:d9:67:ca:a1:c5:18:e3:df:0c:3f:b0:17:7d:bc:4d:ac: fd:fb:f5:87:a7:e1:48:e1:2e:da:7c:b2:c6:90:df:46:06:2d: 40:e0:5d:94:0f:8c:33:b7:68:1f:62:96:89:77:3c:00:0e:60: 85:75:25:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjQwNDI2MTQzNjA1WhcNMjQwNTAzMTQzNjA1WjAYMRYwFAYD VQQDEw02NjJiYmJkNS1jZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt9DB5FZENWg96ksr9baWUVo09zYk0vA6h/PUWHhU7E/WDHEN9IMdsOQwfBX TPR90Z0wMpKLxBVX4MbKpAwk0jlA7B2lLcFNn04cRFW/Fn3xqClREYWaPoEArt6B +R6htEdt/RfdiqeY7Ejd/OkkVsbYYfUI4PlhL1ofNLVTfD55zT1RpW4KLaOl23za owQ8XKx84djnN2WcnjZSuUqq+ObEAu06yuJwiMfd+Reg6kZ8x2pZPOP3KhZ5+xwz XizQVrgvohUuC0eG2TrEE58X0upDU6FSCqJvXGk823hUnMfeGUka3/RykpemIP+4 aqzzWOGeMxK2NlSdgGvysWosZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6x9BBy oBy1XRmgOfgDHoO4bLfPMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTbxcD8zXoWZw44JnpK+cJVjz3qboXsYQ8kHq7KTsR1SdnwCJ5Nddc 54yLMskEDlN8k7vprp7xCRXJPNqnVvckcmYxFP6z3PeeeE8uypIaQ2Rn/al8QD3C +Tog0usjayc7TqLIwpOOY8AiRwZatBYega/ka+gM1S3CNYAcGB0vuldbRzjXY73T 5bENYRDmdg5YyZoGh1mzYV5VofNEMrby/gHD4CoeJZ3jQpb9CHlH8P7+eYLS0U4w JHJcix2MkA8suEQTHg4SXdlnyqHFGOPfDD+wF328Taz9+/WHp+FI4S7afLLGkN9G Bi1A4F2UD4wzt2gfYpaJdzwADmCFdSVu -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:10 2024 by rpki-client on console-ams.rpki-client.org