$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: pO2LdZWwh3UPpMRXOSWjRelaU6WbXzOZlkuI/zOZSNw= Subject key identifier: B9:41:D3:D2:D1:CE:06:18:25:68:40:69:43:0F:39:9A:08:0D:E6:90 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0964 Signing time: Sat 04 May 2024 21:12:10 +0000 Manifest this update: Sat 04 May 2024 21:12:10 +0000 Manifest next update: Sat 11 May 2024 21:12:10 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: Ht9LPNrrfsUt1sLCotpweh20VCLpFGt6Nx5zfl/Z7v8=) 2: 282AC9BC96F711ECB8115179C4F9AE02.roa (hash: E5Rx004ms1bqBKbcUgInAOggNjENzC0+rrQED6tf7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: May 4 21:12:10 2024 GMT Not After : May 11 21:12:10 2024 GMT Subject: CN=6636a4aa-467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:0f:48:cd:f9:e1:3b:23:e9:3a:b7:71:bd: cb:97:fc:92:2e:c0:0c:ee:f3:eb:56:e0:40:ec:93: c0:c7:68:0d:46:89:9e:b9:78:06:e6:41:dd:78:73: e9:30:a4:fb:4a:ca:27:86:d9:6f:28:11:24:62:9c: 3d:0f:a1:ae:21:42:38:83:b5:c9:f4:82:41:08:93: c1:d6:a2:8d:87:45:a4:11:75:16:87:cd:60:db:ae: 7d:42:fd:a7:75:8c:b4:8b:34:af:26:98:22:86:87: 91:e6:e7:ff:13:ff:76:6b:13:85:e0:58:8e:62:fc: 43:0b:22:c0:8d:2a:b9:24:6b:b3:51:27:2f:a0:67: 77:8a:83:43:b6:29:99:62:0f:87:9b:91:9c:c5:ed: 1c:cc:8f:1a:3a:4a:de:01:ee:ed:a7:9a:74:18:b8: 3f:d8:4e:a9:2b:8a:94:0a:fc:7d:1a:50:9f:61:7d: ca:e7:97:cf:00:7d:97:90:7b:e3:f7:50:93:4d:b9: a1:89:88:35:d1:7f:db:2c:2a:e5:85:9d:0f:3c:2f: 05:a3:98:47:0e:58:7b:06:84:fa:e0:75:3d:77:6c: c1:20:17:5d:de:0d:d6:f5:ed:80:79:c3:bd:6a:08: 71:dd:2b:94:1c:1a:eb:45:af:33:5f:77:a7:ad:f7: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:D3:D2:D1:CE:06:18:25:68:40:69:43:0F:39:9A:08:0D:E6:90 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:44:68:c5:a2:9a:d4:08:26:b0:86:f6:35:4a:1f:64:0b:e4: 75:c8:00:10:5f:6e:b5:80:f1:9a:95:53:49:12:e4:44:2e:7c: 93:0c:7b:91:8f:1c:68:0e:af:d7:4f:4f:6c:ad:61:be:aa:79: 89:40:9d:06:1a:a3:46:ad:d8:d2:a6:51:1d:b3:90:f2:24:cf: 13:2d:2c:2a:3f:25:8b:5a:f4:04:ff:22:8c:2e:20:2a:6d:ec: 38:1b:c9:f7:69:62:5f:4e:3f:e0:0d:24:2b:3b:98:42:fc:10: 6c:33:e7:21:63:64:b1:26:e8:c5:07:2c:99:da:55:63:2c:3b: 94:c8:63:4c:2b:17:ae:23:96:1e:bd:2b:d7:1e:99:f5:dc:5a: d6:ae:ad:3c:d8:fc:a2:d3:e9:14:b7:29:53:8d:f8:41:ba:d7: b7:65:48:21:bd:55:17:f8:d6:ad:49:97:fe:e3:5a:c2:f6:a3: ef:c9:28:56:4c:4c:98:07:93:26:c3:e9:05:bd:8a:a2:a8:11: de:bf:75:e1:c7:b0:6d:a1:30:f5:49:a0:b2:d0:f5:df:83:32: d3:e3:16:a9:6b:34:ce:25:90:08:60:50:93:c8:98:f2:40:b6: a0:34:94:a6:69:40:6d:15:a0:47:13:d3:d3:d9:5b:42:77:1f: e4:7a:3f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjQwNTA0MjExMjEwWhcNMjQwNTExMjExMjEwWjAYMRYwFAYD VQQDEw02NjM2YTRhYS00NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NEPSM354Tsj6Tq3cb3Ll/ySLsAM7vPrVuBA7JPAx2gNRomeuXgG5kHdeHPp MKT7SsonhtlvKBEkYpw9D6GuIUI4g7XJ9IJBCJPB1qKNh0WkEXUWh81g2659Qv2n dYy0izSvJpgihoeR5uf/E/92axOF4FiOYvxDCyLAjSq5JGuzUScvoGd3ioNDtimZ Yg+Hm5Gcxe0czI8aOkreAe7tp5p0GLg/2E6pK4qUCvx9GlCfYX3K55fPAH2XkHvj 91CTTbmhiYg10X/bLCrlhZ0PPC8Fo5hHDlh7BoT64HU9d2zBIBdd3g3W9e2AecO9 aghx3SuUHBrrRa8zX3enrfdybwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlB09LR zgYYJWhAaUMPOZoIDeaQMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnRGjFoprUCCawhvY1Sh9kC+R1yAAQX261gPGalVNJEuRELnyTDHuR jxxoDq/XT09srWG+qnmJQJ0GGqNGrdjSplEds5DyJM8TLSwqPyWLWvQE/yKMLiAq bew4G8n3aWJfTj/gDSQrO5hC/BBsM+chY2SxJujFByyZ2lVjLDuUyGNMKxeuI5Ye vSvXHpn13FrWrq082Pyi0+kUtylTjfhBute3ZUghvVUX+NatSZf+41rC9qPvyShW TEyYB5Mmw+kFvYqiqBHev3Xhx7BtoTD1SaCy0PXfgzLT4xapazTOJZAIYFCTyJjy QLagNJSmaUBtFaBHE9PT2VtCdx/kej9p -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org