$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: +6eC6bh2DXNs2Qn99IVYaFcG4AC30WS7BaIetUe9+8Y= Subject key identifier: 8B:C8:F9:19:72:C6:26:D5:71:11:70:86:54:82:E2:2A:D8:80:89:A2 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 78 Signing time: Wed 15 May 2024 07:25:21 +0000 Manifest this update: Wed 15 May 2024 07:25:20 +0000 Manifest next update: Wed 22 May 2024 07:25:20 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: Ch44p4x4fJSkiZFryKTsxh2wCZmDQezGoZUM7WqPVag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: May 15 07:25:20 2024 GMT Not After : May 22 07:25:20 2024 GMT Subject: CN=66446360-4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:07:7b:e0:31:7c:30:0d:78:19:2a:03:ac: 18:df:9a:8a:21:36:5d:04:fa:48:64:99:df:11:8f: 77:9c:46:41:a7:2e:8f:96:a5:73:80:dd:b8:69:38: b8:2a:ee:cd:9e:5a:dc:39:33:53:46:5d:20:6f:6f: c6:4d:a4:43:b5:50:82:cd:50:9a:cb:0a:d5:a9:1a: 46:f8:9e:0a:b4:34:d4:92:7e:47:5d:3d:d3:20:cf: 59:6a:7c:ac:af:d8:9c:55:1a:91:a3:16:ca:33:38: cf:de:5c:bc:61:31:81:9b:6b:cd:40:ef:97:cf:23: 5b:06:6c:c0:c1:82:16:79:01:e7:c9:cd:6e:e5:e5: 6c:4b:21:51:98:27:68:bd:a0:e6:ef:f9:95:8a:d5: 48:ad:1f:eb:fb:ee:bf:f9:78:3c:eb:78:3a:fd:04: 7d:b5:d9:3e:45:af:60:26:20:b7:fa:77:4f:83:75: ac:fb:e8:e2:97:2b:c7:a2:6a:11:d6:b4:d7:b5:38: d0:dd:9a:e1:fa:be:56:2c:b9:46:7d:d4:38:5e:96: 0a:76:e4:ca:d1:76:35:d8:b4:3d:7e:12:05:3e:4e: f1:34:1f:0e:30:b8:8e:f7:48:2d:22:40:3e:bd:95: 63:22:e3:61:62:9d:1e:f7:c9:27:3d:88:91:0a:46: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:F9:19:72:C6:26:D5:71:11:70:86:54:82:E2:2A:D8:80:89:A2 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1c:4d:91:85:bf:4b:bb:6c:5f:b8:81:da:c5:a1:bf:78:fa: 07:65:41:12:2a:4b:f9:4f:6a:e2:de:05:ba:6c:65:f0:09:f9: 62:a6:8a:fb:c5:6d:ba:7c:66:6c:62:ac:59:23:33:8d:da:22: 75:6f:dd:7a:2e:c6:d9:ee:9b:6e:66:45:1f:0d:f3:aa:e5:bd: 62:97:f2:32:e0:c0:dd:60:a8:9f:ff:ee:a3:2b:25:3b:b0:7f: bd:a0:27:94:ab:c7:da:6d:c5:13:72:21:29:f6:c3:a9:81:3f: 22:6d:c4:54:a2:8e:6e:2b:88:58:5b:2b:b5:2c:bf:0e:e8:ea: 48:9c:36:d8:4b:3b:5e:e8:05:1f:ef:89:76:75:70:3f:dd:6b: 10:56:54:9f:39:68:70:e8:f3:75:06:f5:e9:fb:e5:df:8e:93: 91:13:6b:e5:bf:67:1c:97:ce:f2:0b:9a:b6:4b:c3:4c:2d:0d: e2:a2:ff:05:c0:fe:f7:b6:d7:5a:1c:fd:dc:90:2a:00:64:bc: e4:09:12:d6:e2:e5:f9:12:6c:1e:e9:3b:2f:ca:15:ed:5d:97: bb:be:9d:d7:2c:81:21:d4:79:bc:94:30:45:ad:21:3d:28:ee: ac:25:ad:8a:fd:e7:39:13:50:7d:33:9e:7c:49:e6:23:88:3a: 22:00:94:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Njg4MzExMC8GA1UEBRMoMEZENzBFNzhBMTBFMDkxOEVGMUM5REQ4MkFFMkU5RkRD MzVBQTQ5RjAeFw0yNDA1MTUwNzI1MjBaFw0yNDA1MjIwNzI1MjBaMBgxFjAUBgNV BAMTDTY2NDQ2MzYwLTQ3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe3Ad74DF8MA14GSoDrBjfmoohNl0E+khkmd8Rj3ecRkGnLo+WpXOA3bhpOLgq 7s2eWtw5M1NGXSBvb8ZNpEO1UILNUJrLCtWpGkb4ngq0NNSSfkddPdMgz1lqfKyv 2JxVGpGjFsozOM/eXLxhMYGba81A75fPI1sGbMDBghZ5AefJzW7l5WxLIVGYJ2i9 oObv+ZWK1UitH+v77r/5eDzreDr9BH212T5Fr2AmILf6d0+Ddaz76OKXK8eiahHW tNe1ONDdmuH6vlYsuUZ91Dhelgp25MrRdjXYtD1+EgU+TvE0Hw4wuI73SC0iQD69 lWMi42FinR73ySc9iJEKRjR9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi8j5GXLG JtVxEXCGVILiKtiAiaIwHwYDVR0jBBgwFoAUD9cOeKEOCRjvHJ3YKuLp/cNapJ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2ODgzL0IxMjIyODQ2NUM1 MzExRUU5NTFFOUQ1OEM0RjlBRTAyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBK OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDljT2VLRU9DUmp2SEozWUt1THBfY05hcEo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 ODgzL0IxMjIyODQ2NUM1MzExRUU5NTFFOUQ1OEM0RjlBRTAyL0Q5Y09lS0VPQ1Jq dkhKM1lLdUxwX2NOYXBKOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4cTZGFv0u7bF+4gdrFob94+gdlQRIqS/lPauLeBbpsZfAJ+WKmivvF bbp8ZmxirFkjM43aInVv3Xouxtnum25mRR8N86rlvWKX8jLgwN1gqJ//7qMrJTuw f72gJ5Srx9ptxRNyISn2w6mBPyJtxFSijm4riFhbK7Usvw7o6kicNthLO17oBR/v iXZ1cD/daxBWVJ85aHDo83UG9en75d+Ok5ETa+W/ZxyXzvILmrZLw0wtDeKi/wXA /ve211oc/dyQKgBkvOQJEtbi5fkSbB7pOy/KFe1dl7u+ndcsgSHUebyUMEWtIT0o 7qwlrYr95zkTUH0znnxJ5iOIOiIAlLI= -----END CERTIFICATE-----Generated at Wed May 15 09:04:14 2024 by rpki-client on console-ams.rpki-client.org