$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: zzUy0IzsBHQEkFoPk0z9fvzxBQ76Rbqe82lRcOvHMT8= Subject key identifier: 9A:C0:59:07:A5:BA:60:31:88:62:BC:3D:BA:6D:ED:CB:65:6B:77:B1 Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: B7 Signing time: Tue 07 May 2024 06:26:45 +0000 Manifest this update: Tue 07 May 2024 06:26:45 +0000 Manifest next update: Tue 14 May 2024 06:26:45 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: qLf29Oe+rWS5vqNUNssPgd4ecBRr4LVSD4Gew4/IHMU=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: 1/99aAvu3jh/Qi79wJIYoHLs2ybcs8p45fZpq6rEUXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: May 7 06:26:45 2024 GMT Not After : May 14 06:26:45 2024 GMT Subject: CN=6639c9a5-83ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:ca:b3:fc:97:f3:01:d1:e4:ae:e2:95:d8: 9d:53:25:b4:2b:6e:f4:89:10:c4:39:a0:ac:30:93: fc:37:ab:24:fe:17:d4:82:23:be:13:c1:d5:30:ed: 1e:46:16:52:97:a7:ee:94:d0:f1:d5:02:87:e5:4d: f4:99:45:c2:7b:d5:ee:3a:7f:38:f6:17:01:00:43: b6:61:ac:ff:c3:e2:29:00:01:08:24:80:4a:ec:e7: 19:a0:d0:9e:df:08:89:21:f8:49:16:1c:8d:4e:23: 3c:7a:3b:67:05:ae:86:b0:8c:1d:14:d7:18:9b:77: 8d:c6:7e:54:8b:03:d4:f3:f5:2b:8e:a3:4f:20:a9: 4a:81:3f:8e:00:a0:a7:9a:32:e9:15:09:fc:7d:b5: a5:ca:03:1b:6a:6c:16:e6:1e:14:d7:87:bc:d1:ba: 2d:d4:ee:20:49:62:e2:8d:54:af:db:bd:7f:43:be: 17:30:be:5e:78:fc:4d:ad:f8:91:7d:ee:5e:15:52: 78:0a:fb:f7:15:b6:4e:40:d5:fa:3e:18:60:a2:84: fe:ea:84:7f:66:0e:cb:04:ba:3a:b8:76:db:3d:af: e3:db:a5:b9:2e:ed:5c:d3:39:1f:11:45:20:4b:03: 28:22:f0:05:ef:e6:16:83:b8:24:15:29:04:9e:55: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:59:07:A5:BA:60:31:88:62:BC:3D:BA:6D:ED:CB:65:6B:77:B1 X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:41:62:71:b5:97:ab:6c:fb:96:1f:6f:04:1d:42:cf:bf:41: cf:55:d9:4b:64:65:30:55:03:d2:00:45:96:60:56:d6:d2:ff: e0:9d:49:2f:11:95:66:5b:f3:78:90:18:42:02:47:62:ef:e8: 1e:cf:89:79:c8:3a:a9:53:96:09:eb:2f:0f:cd:77:00:da:8e: 8a:73:45:6d:49:be:91:52:0e:56:0c:f7:29:cf:f8:0f:71:ab: 67:c8:f2:30:bd:72:68:f9:ff:c0:6f:27:3a:98:9c:aa:dc:c0: f8:0e:16:33:82:63:1a:d4:35:61:0a:bc:7f:c2:73:52:7d:11: 24:47:49:4f:d5:2e:4e:be:85:96:f5:0f:9b:56:32:fa:8c:98: 7f:b9:83:a3:90:e1:36:d4:43:b3:0f:6f:75:dd:36:fd:a8:ca: bd:e9:ba:de:e5:e7:15:e8:c2:41:ea:77:9e:16:cb:4c:62:a1: 9a:62:a5:83:c1:d4:3a:3b:03:3a:f9:78:a6:d6:4a:20:47:11: bc:0a:a2:c7:a8:38:66:1e:72:9f:af:65:8a:b4:8e:e9:3a:95: b7:b3:af:b1:96:29:9b:6f:e0:de:c2:46:32:1b:1b:38:70:02: 35:56:d5:9e:f1:5e:13:b3:d9:85:e2:86:0c:32:ab:8b:5d:74: 8c:67:9e:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjQwNTA3MDYyNjQ1WhcNMjQwNTE0MDYyNjQ1WjAYMRYwFAYD VQQDEw02NjM5YzlhNS04M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY3Ks/yX8wHR5K7ildidUyW0K270iRDEOaCsMJP8N6sk/hfUgiO+E8HVMO0e RhZSl6fulNDx1QKH5U30mUXCe9XuOn849hcBAEO2Yaz/w+IpAAEIJIBK7OcZoNCe 3wiJIfhJFhyNTiM8ejtnBa6GsIwdFNcYm3eNxn5UiwPU8/UrjqNPIKlKgT+OAKCn mjLpFQn8fbWlygMbamwW5h4U14e80bot1O4gSWLijVSv271/Q74XML5eePxNrfiR fe5eFVJ4Cvv3FbZOQNX6PhhgooT+6oR/Zg7LBLo6uHbbPa/j26W5Lu1c0zkfEUUg SwMoIvAF7+YWg7gkFSkEnlWYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrAWQel umAxiGK8Pbpt7ctla3exMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbQWJxtZerbPuWH28EHULPv0HPVdlLZGUwVQPSAEWWYFbW0v/gnUkv EZVmW/N4kBhCAkdi7+gez4l5yDqpU5YJ6y8PzXcA2o6Kc0VtSb6RUg5WDPcpz/gP catnyPIwvXJo+f/Abyc6mJyq3MD4DhYzgmMa1DVhCrx/wnNSfREkR0lP1S5OvoWW 9Q+bVjL6jJh/uYOjkOE21EOzD2913Tb9qMq96bre5ecV6MJB6neeFstMYqGaYqWD wdQ6OwM6+Xim1kogRxG8CqLHqDhmHnKfr2WKtI7pOpW3s6+xlimbb+DewkYyGxs4 cAI1VtWe8V4Ts9mF4oYMMquLXXSMZ570 -----END CERTIFICATE-----Generated at Tue May 7 07:13:01 2024 by rpki-client on console-ams.rpki-client.org