$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: eiiJxeCqGXljIwBBkS1olkXVQXru/Kwd/q7uI5WXnQQ= Subject key identifier: 10:37:E8:27:8C:3B:12:05:33:C2:F2:D2:65:A8:B2:DE:08:41:53:20 Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 0698 Signing time: Mon 06 May 2024 23:19:07 +0000 Manifest this update: Mon 06 May 2024 23:19:07 +0000 Manifest next update: Mon 13 May 2024 23:19:06 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: 6d3nu122CokHGdURv2rii6ksQ19gBMGObY1GdD3v+WM=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: vJ4N0RUwnrF8kK3ogO94lxwKBhFEzNLvy4nGAVz8u6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Validity Not Before: May 6 23:19:07 2024 GMT Not After : May 13 23:19:06 2024 GMT Subject: CN=6639656b-591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e1:2a:8f:6a:ae:99:46:2c:ee:1d:d3:16:c3: ae:26:0b:fe:68:a4:49:23:b3:94:e7:9b:d9:9f:c4: af:57:a1:f4:d3:ce:18:3a:cd:39:2c:1e:d3:e8:76: 75:14:e4:5b:b0:8f:04:d1:1e:42:59:b0:0e:59:64: d1:9c:ec:e1:40:53:1b:8a:00:2f:a1:10:66:1a:b8: cc:b9:89:47:31:0b:7a:9f:f0:4b:e8:16:dd:1f:e8: 1a:d7:21:b4:f6:a0:f8:36:85:76:75:b0:1a:32:9e: 71:9d:76:0e:f6:d3:31:3d:c3:d5:6e:f8:95:60:4c: 32:4a:f3:89:3e:bf:cb:43:7e:2a:f2:72:7f:4d:06: 81:13:02:91:d6:bd:c9:ef:1e:23:ac:96:92:2d:1f: 2f:a4:2a:0c:e8:b7:7c:dc:ba:44:71:e9:53:2e:40: 28:ed:f8:1e:f2:55:77:2f:d7:1a:51:e7:a9:d7:3e: 11:95:f9:4c:ca:6f:30:d0:a1:26:4b:74:43:91:a0: 11:1e:9a:3d:8b:6a:e8:a9:22:9c:f3:62:44:e0:16: eb:cd:97:56:1a:7b:dd:d3:29:0a:8f:16:a3:39:54: de:f2:dd:5f:8a:c1:e8:91:e4:66:83:69:55:d2:c1: 09:e8:34:d6:65:c2:6a:d8:eb:3e:df:01:cc:bf:dc: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:37:E8:27:8C:3B:12:05:33:C2:F2:D2:65:A8:B2:DE:08:41:53:20 X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:36:19:b3:e1:d9:be:e2:d9:65:23:12:ef:44:99:61:94:0f: e6:f3:a7:1a:24:85:17:10:1d:03:ec:fa:17:e3:c4:8b:dd:5a: f7:2f:0b:b4:1f:54:0c:f6:79:da:12:de:7a:5e:cd:02:43:e6: f5:5b:87:4c:41:cc:06:6e:7c:81:07:e5:1b:29:c1:81:20:87: 80:ee:55:f2:ec:d9:b9:37:ee:cc:e8:b6:9a:be:cd:e2:4c:09: 94:2f:81:0e:25:9e:52:0d:fd:9b:53:02:47:ca:19:4c:19:ea: 6e:da:aa:ac:06:d1:ee:29:b2:1f:99:37:03:48:e4:98:a3:7a: 1f:1b:c2:3a:a1:15:9a:74:b7:ec:e1:f9:df:d9:1a:29:29:bd: 3d:e9:1e:69:44:b1:9c:48:17:6f:00:d2:ca:5e:f7:cd:3a:66: f5:0e:e6:ce:78:9b:0e:3f:99:26:29:0c:ef:95:6d:80:74:fd: 8e:67:b1:ec:53:55:17:6c:86:bb:3b:18:fc:24:52:a5:59:b8: 85:c3:8e:c6:bd:7e:fd:fd:18:e9:0a:33:b7:cd:db:ac:29:71: d9:92:7f:f7:31:49:7e:07:d5:01:0d:ee:3b:c6:20:54:a5:38: f1:87:88:cb:59:d7:92:42:75:79:9c:1f:e8:d5:3b:06:a9:0f: 50:4c:f0:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjQwNTA2MjMxOTA3WhcNMjQwNTEzMjMxOTA2WjAYMRYwFAYD VQQDEw02NjM5NjU2Yi01OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9OEqj2qumUYs7h3TFsOuJgv+aKRJI7OU55vZn8SvV6H0084YOs05LB7T6HZ1 FORbsI8E0R5CWbAOWWTRnOzhQFMbigAvoRBmGrjMuYlHMQt6n/BL6BbdH+ga1yG0 9qD4NoV2dbAaMp5xnXYO9tMxPcPVbviVYEwySvOJPr/LQ34q8nJ/TQaBEwKR1r3J 7x4jrJaSLR8vpCoM6Ld83LpEcelTLkAo7fge8lV3L9caUeep1z4RlflMym8w0KEm S3RDkaARHpo9i2roqSKc82JE4BbrzZdWGnvd0ykKjxajOVTe8t1fisHokeRmg2lV 0sEJ6DTWZcJq2Os+3wHMv9zzrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA36CeM OxIFM8Ly0mWost4IQVMgMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAANhmz4dm+4tllIxLvRJlhlA/m86caJIUXEB0D7PoX48SL3Vr3Lwu0 H1QM9nnaEt56Xs0CQ+b1W4dMQcwGbnyBB+UbKcGBIIeA7lXy7Nm5N+7M6Laavs3i TAmUL4EOJZ5SDf2bUwJHyhlMGepu2qqsBtHuKbIfmTcDSOSYo3ofG8I6oRWadLfs 4fnf2RopKb096R5pRLGcSBdvANLKXvfNOmb1DubOeJsOP5kmKQzvlW2AdP2OZ7Hs U1UXbIa7Oxj8JFKlWbiFw47GvX79/RjpCjO3zdusKXHZkn/3MUl+B9UBDe47xiBU pTjxh4jLWdeSQnV5nB/o1TsGqQ9QTPBi -----END CERTIFICATE-----Generated at Tue May 7 00:53:20 2024 by rpki-client on console-ams.rpki-client.org