$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft File: 9ouGJos33oELlo2481f3c-mDv20.mft (raw, json) Hash identifier: 7+vB1X8wDyjyQtReP5iPXiT0h6hrGUnqGRaNwLehdlI= Subject key identifier: C9:FE:7A:AE:2A:31:BA:55:CE:94:46:D2:3C:3A:CD:67:95:65:2E:C4 Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D Certificate issuer: /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft Manifest number: 09AF Signing time: Mon 06 May 2024 20:57:27 +0000 Manifest this update: Mon 06 May 2024 20:57:27 +0000 Manifest next update: Mon 13 May 2024 20:57:27 +0000 Files and hashes: 1: 9ouGJos33oELlo2481f3c-mDv20.crl (hash: NofTgazUyPl5LQtrHQOpqGTsZpnnuWhM8Oxzj29Yhb4=) 2: B47A0CDA660F11EB8A1DB351C4F9AE02.roa (hash: /vLF5bu+bErPdQsRXhTd1sOmNGoCoopNt5vlE7c1y1E=) 3: B5A31A8E660F11EB8A1DB351C4F9AE02.roa (hash: nS6qqnYpI/sV3YzdKGalcu4VlQR/YPEAbReL/luE99Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D Validity Not Before: May 6 20:57:27 2024 GMT Not After : May 13 20:57:27 2024 GMT Subject: CN=66394437-8d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:6e:1c:7c:1a:cd:8e:78:fe:a8:dc:0b:9f: da:67:2b:3a:79:e6:60:b4:43:94:4d:6e:f3:81:91: a4:77:ed:36:0b:65:04:ab:84:2d:c1:e4:3f:39:ba: a0:49:4d:ff:2e:c2:0a:57:4e:a9:d7:c9:da:da:10: e5:7b:88:4c:a0:a9:1b:07:99:8b:bc:8f:a2:6c:66: 18:00:3d:67:9e:bb:b5:a3:37:d8:c4:48:aa:a7:67: c1:ed:7a:59:94:26:a4:1c:ae:da:fa:a1:a7:77:5d: 35:4f:04:c9:54:2b:14:1b:9e:a7:b4:be:0f:e2:57: 9d:c0:ac:f1:b2:db:de:71:8b:93:1c:c1:cf:09:c2: 9e:7e:93:8f:f7:67:31:12:87:4f:9c:a7:bf:9b:c0: 2e:01:b4:7c:37:4e:e1:0e:ef:a1:9f:d0:f9:58:95: 13:84:0c:7a:c3:ea:9e:df:b6:aa:65:cf:bf:20:05: 59:56:c8:c1:ae:0c:31:41:23:4c:db:22:0b:3d:78: b1:83:75:5c:8b:f6:25:71:5b:f3:d1:c6:d5:54:94: e2:04:1d:68:b5:58:4f:87:8c:a8:e5:b8:76:63:eb: 2e:6d:37:8b:be:a3:b7:e4:17:24:2c:be:c5:a5:21: ca:67:63:c1:2f:72:50:f5:2b:40:b0:b8:32:39:bc: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FE:7A:AE:2A:31:BA:55:CE:94:46:D2:3C:3A:CD:67:95:65:2E:C4 X509v3 Authority Key Identifier: keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e5:e1:2a:2c:f5:22:a2:84:da:ca:26:2f:a0:65:47:2c:82: fd:5b:ee:54:1d:02:29:69:f3:98:1c:c2:a5:20:6f:92:85:31: d6:64:22:23:a7:2f:17:51:df:04:57:00:03:8e:a5:78:14:68: 50:d9:ba:9f:0b:0a:2b:e3:8e:a4:ab:db:63:23:73:64:1e:57: db:b6:c6:96:3a:bf:e9:0b:23:6b:15:48:42:d4:d8:1d:4d:34: 33:88:33:50:65:c3:de:34:f5:12:7c:e6:9b:ee:80:be:53:0d: 1e:4e:58:a7:cf:f8:e5:94:ea:3d:64:ad:92:e0:6b:3e:b7:9e: 06:85:9a:a5:e8:a6:50:ec:7d:d4:05:48:87:85:1e:c7:d8:31: ea:49:8a:ae:77:c1:4c:2e:ad:2f:c6:24:aa:d4:a8:66:d9:f5: b8:62:e0:f2:60:e8:82:6e:98:36:90:9a:61:77:06:9f:3e:06: 03:21:b1:8e:79:62:a5:d0:13:5e:a0:34:19:43:1e:4d:66:34: 9f:86:53:8f:d2:32:b4:19:4c:13:d1:19:b9:71:6c:85:61:2a: d8:b2:b1:85:8f:9e:1c:9d:8b:8d:1b:8f:81:2f:cd:77:78:8c: 35:1a:21:30:2c:93:af:39:cf:da:a0:a6:87:5c:4e:f7:8f:79: 1b:08:0a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RjYxMTAvBgNVBAUTKEY2OEI4NjI2OEIzN0RFODEwQjk2OERCOEYzNTdGNzcz RTk4M0JGNkQwHhcNMjQwNTA2MjA1NzI3WhcNMjQwNTEzMjA1NzI3WjAYMRYwFAYD VQQDEw02NjM5NDQzNy04ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3huHHwazY54/qjcC5/aZys6eeZgtEOUTW7zgZGkd+02C2UEq4QtweQ/Obqg SU3/LsIKV06p18na2hDle4hMoKkbB5mLvI+ibGYYAD1nnru1ozfYxEiqp2fB7XpZ lCakHK7a+qGnd101TwTJVCsUG56ntL4P4ledwKzxstvecYuTHMHPCcKefpOP92cx EodPnKe/m8AuAbR8N07hDu+hn9D5WJUThAx6w+qe37aqZc+/IAVZVsjBrgwxQSNM 2yILPXixg3Vci/YlcVvz0cbVVJTiBB1otVhPh4yo5bh2Y+subTeLvqO35BckLL7F pSHKZ2PBL3JQ9StAsLgyObybfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn+eq4q MbpVzpRG0jw6zWeVZS7EMB8GA1UdIwQYMBaAFPaLhiaLN96BC5aNuPNX93Ppg79t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVGNi9ENjlFQUFCMjVG NjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNvRUxsbzI0ODFmM2MtbUR2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvdUdKb3MzM29FTGxvMjQ4MWYzYy1tRHYyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVGNi9ENjlFQUFCMjVGNjQxMUVBOUNBQTNBNjRDNEY5QUUwMi85b3VHSm9zMzNv RUxsbzI0ODFmM2MtbUR2MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo5eEqLPUiooTayiYvoGVHLIL9W+5UHQIpafOYHMKlIG+ShTHWZCIj py8XUd8EVwADjqV4FGhQ2bqfCwor446kq9tjI3NkHlfbtsaWOr/pCyNrFUhC1Ngd TTQziDNQZcPeNPUSfOab7oC+Uw0eTlinz/jllOo9ZK2S4Gs+t54GhZql6KZQ7H3U BUiHhR7H2DHqSYqud8FMLq0vxiSq1Khm2fW4YuDyYOiCbpg2kJphdwafPgYDIbGO eWKl0BNeoDQZQx5NZjSfhlOP0jK0GUwT0Rm5cWyFYSrYsrGFj54cnYuNG4+BL813 eIw1GiEwLJOvOc/aoKaHXE73j3kbCAoG -----END CERTIFICATE-----Generated at Mon May 6 23:05:42 2024 by rpki-client on console-fra.rpki-client.org