$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: 3waJQL9YQWDfw3pYx9AmBW8ult2zehCqoQnd9Ezje7k= Subject key identifier: 44:3B:C5:C4:97:29:90:EE:F3:B1:26:54:79:90:B4:B6:A6:17:44:CB Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0B3E Signing time: Sat 04 May 2024 19:57:38 +0000 Manifest this update: Sat 04 May 2024 19:57:37 +0000 Manifest next update: Sat 11 May 2024 19:57:37 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: 6VVoih5/U2NMJXevTusASuNtd38yhAsQcblLKmc36ag=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: CYn9yZRC/eiWS/0OtOyNd4FzP4x9/q+UdjG5Zh+1Wp4=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: YiysjwUg7jPSlIr+ErqlpzeKvI+pQ4GXns/g0LTcu3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: May 4 19:57:37 2024 GMT Not After : May 11 19:57:37 2024 GMT Subject: CN=66369331-3def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3b:28:50:4d:e9:43:0f:4a:de:8d:91:03:27: 87:fd:9a:1b:46:45:fb:1e:96:57:74:a5:77:f7:47: 60:4a:f3:35:f0:3e:be:fa:08:0e:f8:4b:20:42:1e: 2a:bc:15:e9:72:de:72:a1:a0:7f:9b:47:8a:7e:1e: af:8f:51:f0:4c:61:c7:6e:f9:70:75:97:6b:08:16: ce:a4:d0:2d:22:84:50:47:24:8b:19:62:04:79:df: 1a:0d:3f:a1:ee:5f:6e:52:66:c2:ef:55:f8:bf:90: 4c:a9:ea:3d:11:b9:4f:3b:77:d8:58:ad:95:d2:d5: 50:8c:c4:5d:7a:f2:c1:23:10:f0:fe:f0:76:8d:21: bb:ab:e5:d6:2f:6a:ff:42:cd:56:96:6e:05:c1:b3: 69:fe:9c:80:66:2f:3e:d1:4a:9e:3e:c0:ac:95:4a: d3:f6:eb:68:38:2d:f5:45:e7:52:6c:6d:bb:09:d5: db:6d:3e:65:df:15:bf:1c:6f:3f:85:0c:25:32:42: 37:b3:c5:d1:55:69:31:a0:f4:05:16:3f:05:73:3c: 71:79:bc:87:71:6a:0c:15:b8:0c:50:73:e3:18:da: bf:89:4b:d8:37:0a:6d:e1:35:d5:86:8e:3d:23:4f: 43:35:c5:4b:81:83:82:f9:31:e1:88:11:cc:fb:1b: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:C5:C4:97:29:90:EE:F3:B1:26:54:79:90:B4:B6:A6:17:44:CB X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:85:53:6a:9a:fc:5a:86:58:42:5c:29:32:35:35:5c:b4: cf:ee:45:3f:66:96:e1:d5:78:3d:f5:76:81:aa:fb:c7:f4:68: f2:e2:cb:1e:99:64:30:b8:84:6a:79:45:05:08:21:41:2d:6f: 44:b3:ac:59:2c:ea:6b:a4:15:6f:c1:0b:93:42:de:10:61:f8: 6c:b8:48:06:2b:f5:4b:20:56:a5:2f:d6:f2:2c:b6:d3:a8:a6: 54:91:16:84:b1:f7:0b:27:09:17:c5:01:56:dd:e6:6e:9d:20: 6f:82:3d:ab:2f:1a:0b:2f:32:d4:b2:1d:e4:9f:83:81:3e:10: 6d:3a:82:77:ff:65:f9:5f:56:b4:6a:d6:12:65:1d:0e:ef:cb: 63:ea:53:d9:77:4c:b6:ea:db:ef:2f:fa:32:51:2d:ed:a2:e0: 35:47:48:f0:e9:1d:39:c7:56:41:40:8c:09:1f:8e:3c:50:ee: 34:c3:57:4e:8b:7c:8b:2c:9d:4a:92:d9:37:0d:81:85:12:b7: 14:9f:1e:95:d1:97:40:28:1b:96:a7:e2:38:90:53:2a:ba:df: 41:0f:4c:54:a7:39:3a:39:e0:d6:02:a3:9b:fd:87:53:1d:ac: 98:65:71:5b:04:53:b6:eb:39:8b:79:6e:a0:af:25:7c:82:07: 9e:80:8b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjQwNTA0MTk1NzM3WhcNMjQwNTExMTk1NzM3WjAYMRYwFAYD VQQDEw02NjM2OTMzMS0zZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zsoUE3pQw9K3o2RAyeH/ZobRkX7HpZXdKV390dgSvM18D6++ggO+EsgQh4q vBXpct5yoaB/m0eKfh6vj1HwTGHHbvlwdZdrCBbOpNAtIoRQRySLGWIEed8aDT+h 7l9uUmbC71X4v5BMqeo9EblPO3fYWK2V0tVQjMRdevLBIxDw/vB2jSG7q+XWL2r/ Qs1Wlm4FwbNp/pyAZi8+0UqePsCslUrT9utoOC31RedSbG27CdXbbT5l3xW/HG8/ hQwlMkI3s8XRVWkxoPQFFj8FczxxebyHcWoMFbgMUHPjGNq/iUvYNwpt4TXVho49 I09DNcVLgYOC+THhiBHM+xv2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ7xcSX KZDu87EmVHmQtLamF0TLMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv9YVTapr8WoZYQlwpMjU1XLTP7kU/Zpbh1Xg99XaBqvvH9Gjy4sse mWQwuIRqeUUFCCFBLW9Es6xZLOprpBVvwQuTQt4QYfhsuEgGK/VLIFalL9byLLbT qKZUkRaEsfcLJwkXxQFW3eZunSBvgj2rLxoLLzLUsh3kn4OBPhBtOoJ3/2X5X1a0 atYSZR0O78tj6lPZd0y26tvvL/oyUS3touA1R0jw6R05x1ZBQIwJH448UO40w1dO i3yLLJ1Kktk3DYGFErcUnx6V0ZdAKBuWp+I4kFMqut9BD0xUpzk6OeDWAqOb/YdT HayYZXFbBFO26zmLeW6gryV8ggeegIvQ -----END CERTIFICATE-----Generated at Sat May 4 20:37:10 2024 by rpki-client on console-fra.rpki-client.org