$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: txzJVUBmXTnwVoUCwTMIZvzWpRX0EGKsI6Dsv5kZBJo= Subject key identifier: 79:1C:48:60:7B:DA:8E:DE:A6:9A:6C:E7:23:D8:70:31:EE:48:6C:A3 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 069F Signing time: Thu 02 May 2024 23:23:47 +0000 Manifest this update: Thu 02 May 2024 23:23:47 +0000 Manifest next update: Thu 09 May 2024 23:23:47 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: pX6nsjf8ExU1vZjpSP4405X4tvcqfXYV9E+wafWQ0vU=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: WLw2gLQVSrqgLkHXytyNlHZE1+cACJ0aT8RfJDpK7zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: May 2 23:23:47 2024 GMT Not After : May 9 23:23:47 2024 GMT Subject: CN=66342083-ac04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c6:8e:1c:cd:47:25:72:c6:25:09:00:f9:10: 35:02:9f:90:26:6d:32:48:30:8d:89:c0:35:4e:8a: 27:a7:19:96:43:57:a8:4e:9c:8f:9f:da:71:ca:da: df:ef:4c:a2:68:57:a1:a5:04:ce:13:ca:df:f2:bb: 20:ff:fd:8c:44:f5:d6:12:97:ab:c0:9a:ae:6c:63: 49:04:d9:7b:35:20:51:e8:f1:5d:1d:7b:87:ab:ad: 91:f8:53:2a:f5:1f:c0:5e:6d:49:14:20:5d:34:a3: 29:fa:e3:1a:97:63:7b:ec:59:f4:5e:74:72:0a:2c: 28:bf:82:a0:4a:f3:7f:db:f1:d5:b0:45:8d:01:dd: e7:9b:b0:b3:78:73:e8:2a:6a:51:fc:01:15:17:0b: 8a:0c:3c:a0:75:12:bc:da:d0:f4:d4:d4:43:b6:9d: 02:25:4d:5c:9e:1e:54:17:19:26:4f:5c:48:42:18: ef:04:ab:b2:e5:14:35:a9:28:24:ef:5a:fa:c6:42: 8e:48:4f:22:5d:57:46:93:e5:b8:d0:68:44:f0:68: 2b:67:21:70:52:61:74:58:80:b4:1d:fd:1f:db:d5: e2:84:42:91:40:c7:14:cd:9c:d4:06:06:6f:75:e1: d7:49:a1:71:29:13:db:9c:af:3d:aa:99:30:81:33: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:48:60:7B:DA:8E:DE:A6:9A:6C:E7:23:D8:70:31:EE:48:6C:A3 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:76:a5:61:d1:97:a3:7c:e5:fc:9b:df:36:fa:51:9a:dc: b2:8a:66:78:5c:cd:36:75:39:79:99:91:6b:b8:95:f5:29:eb: bc:76:8f:6a:5c:dd:be:ad:a7:6a:39:28:3d:b8:c1:1f:87:05: 6a:19:3e:76:41:f5:e5:fc:6d:b7:16:17:42:f7:30:fb:bd:6b: 3a:15:2a:81:80:fb:6c:46:d9:25:f5:22:1b:5a:9a:11:eb:56: 60:5a:ec:03:e5:73:ff:17:16:dc:c0:b4:e3:48:22:51:a3:f7: 2b:f0:f4:56:84:46:e3:96:cc:23:26:57:a8:b2:11:b8:04:cf: 0b:08:e2:7c:43:dc:15:71:f1:19:18:02:a2:61:56:91:fa:7c: 68:71:65:55:0b:87:9e:1d:57:c8:af:2c:42:8a:cf:ac:20:ee: f7:40:99:cb:84:86:e9:d4:c9:90:df:f5:85:02:b2:4e:c5:af: b0:77:84:d7:26:4d:52:29:6e:df:43:f7:27:7e:53:a3:53:2c: d2:4b:02:7b:74:a9:22:44:69:8c:46:ed:4b:db:b2:32:75:bb: b5:ae:6a:be:6f:4f:65:33:1c:e8:81:65:85:21:29:a1:10:e6: 95:d3:97:fd:cb:e2:bb:a1:b5:b7:3c:19:c6:50:05:e1:e1:68: 33:95:52:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjQwNTAyMjMyMzQ3WhcNMjQwNTA5MjMyMzQ3WjAYMRYwFAYD VQQDEw02NjM0MjA4My1hYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8saOHM1HJXLGJQkA+RA1Ap+QJm0ySDCNicA1ToonpxmWQ1eoTpyPn9pxytrf 70yiaFehpQTOE8rf8rsg//2MRPXWEperwJqubGNJBNl7NSBR6PFdHXuHq62R+FMq 9R/AXm1JFCBdNKMp+uMal2N77Fn0XnRyCiwov4KgSvN/2/HVsEWNAd3nm7CzeHPo KmpR/AEVFwuKDDygdRK82tD01NRDtp0CJU1cnh5UFxkmT1xIQhjvBKuy5RQ1qSgk 71r6xkKOSE8iXVdGk+W40GhE8GgrZyFwUmF0WIC0Hf0f29XihEKRQMcUzZzUBgZv deHXSaFxKRPbnK89qpkwgTOjKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkcSGB7 2o7eppps5yPYcDHuSGyjMB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mHalYdGXo3zl/JvfNvpRmtyyimZ4XM02dTl5mZFruJX1Keu8do9q XN2+radqOSg9uMEfhwVqGT52QfXl/G23FhdC9zD7vWs6FSqBgPtsRtkl9SIbWpoR 61ZgWuwD5XP/FxbcwLTjSCJRo/cr8PRWhEbjlswjJleoshG4BM8LCOJ8Q9wVcfEZ GAKiYVaR+nxocWVVC4eeHVfIryxCis+sIO73QJnLhIbp1MmQ3/WFArJOxa+wd4TX Jk1SKW7fQ/cnflOjUyzSSwJ7dKkiRGmMRu1L27Iydbu1rmq+b09lMxzogWWFISmh EOaV05f9y+K7obW3PBnGUAXh4WgzlVIC -----END CERTIFICATE-----Generated at Fri May 3 00:28:39 2024 by rpki-client on console-fra.rpki-client.org