$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: BQsFH1aLubR2Mtt2K2h1+diD6niPC/Au00pofC8vcKs= Subject key identifier: 9A:58:67:AF:40:DE:BF:9C:C3:80:FD:FC:1B:60:50:85:82:C5:AF:99 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 18 Signing time: Wed 15 May 2024 08:52:59 +0000 Manifest this update: Wed 15 May 2024 08:52:59 +0000 Manifest next update: Wed 22 May 2024 08:52:59 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: 8mNuYtprdii8pJw1YsFqREI7Z7hx6vpMZBlNKwrKvlY=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: CY+0lVCE8pyV/yuqoYwTYIt3uyuTBJHx9OgX18w8m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: May 15 08:52:59 2024 GMT Not After : May 22 08:52:59 2024 GMT Subject: CN=664477eb-73b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8b:6f:d1:90:2b:e5:95:d1:74:26:00:b8:98: d4:91:00:4e:4e:3b:95:fb:52:76:63:52:89:ff:55: 34:09:37:4a:47:0b:49:75:0d:0d:70:40:2d:8e:2d: 00:1b:73:c7:ed:1c:6e:e8:9d:56:86:48:c0:95:ba: f7:24:5b:a8:76:0d:cb:49:27:6d:c3:9e:09:ca:ed: 60:3f:69:ae:74:c1:48:92:0e:47:6f:22:bb:b8:37: 2e:18:0d:93:6d:76:59:16:72:67:06:51:ec:92:fc: 3b:83:f2:c6:14:06:85:ba:60:32:2d:43:50:92:c6: 8f:25:ca:35:3a:25:57:4b:81:a5:ee:ec:c4:1c:0d: c0:2f:aa:9d:e6:ef:63:60:ed:18:da:e6:92:dd:27: 66:f9:3f:4d:2e:e0:a5:93:54:2a:a7:ac:a4:10:bf: e4:92:75:78:f4:d2:f6:74:10:21:ac:d8:32:68:b5: 7f:e6:16:11:7e:49:b6:47:67:0b:e8:0c:c2:3b:15: c3:95:6d:3e:83:b8:16:de:41:1c:52:0d:0e:b9:c9: 40:6b:c8:f2:db:c6:fd:74:c2:3e:36:32:a4:39:0a: 6b:dc:91:ba:90:74:65:85:55:cd:dd:f8:5e:f6:50: 7c:93:3d:fa:92:95:e8:56:29:9d:26:ce:1c:cc:a7: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:58:67:AF:40:DE:BF:9C:C3:80:FD:FC:1B:60:50:85:82:C5:AF:99 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e5:70:4c:ee:a4:a3:f4:93:54:db:c6:e5:fd:40:03:7c:3f: fc:c9:80:ab:c3:8f:23:40:4b:71:69:e7:47:a5:16:35:ee:71: db:27:48:fd:be:b1:de:b9:9d:62:54:44:48:23:70:23:08:15: ba:a4:c1:45:0c:c1:df:0e:e5:3b:d2:fb:9b:af:3e:f4:1f:ad: 6f:c2:d8:25:da:c3:6c:a1:73:95:f9:91:a6:1c:19:59:f1:7d: b1:8d:71:34:1d:77:0d:50:ee:cf:93:ea:36:68:a0:17:69:95: 85:c0:cb:93:cd:4c:55:77:ab:57:a1:a2:e8:00:3b:76:eb:cc: cd:62:d5:fa:fe:44:bb:c6:b0:22:c4:21:5b:c9:51:ab:10:67: 84:6d:d7:6d:1a:ce:3d:48:1c:70:69:e8:35:e2:4e:f4:31:bf: ca:fd:9d:1e:7a:7b:2c:99:6c:6a:a4:09:fb:81:5e:12:3c:8a: 04:e1:01:d6:10:f8:54:d5:6b:8a:da:b3:ba:9f:23:86:13:70: 8f:b0:ca:e7:ee:22:e2:82:d9:a7:40:2c:66:af:1d:3b:0a:a8: c8:47:f2:ca:46:db:c2:62:fb:76:68:08:60:e1:46:ce:62:e5: 3a:56:15:5b:d5:59:88:82:e6:ec:5d:84:c0:c0:da:83:cd:f0: a7:d3:ad:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MENDMzExMC8GA1UEBRMoRjQxM0Y1MUQ4N0JCRkY0QjBBNDEwNzIxODc0NzZFQkUw N0QzNjFCRjAeFw0yNDA1MTUwODUyNTlaFw0yNDA1MjIwODUyNTlaMBgxFjAUBgNV BAMTDTY2NDQ3N2ViLTczYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDki2/RkCvlldF0JgC4mNSRAE5OO5X7UnZjUon/VTQJN0pHC0l1DQ1wQC2OLQAb c8ftHG7onVaGSMCVuvckW6h2DctJJ23DngnK7WA/aa50wUiSDkdvIru4Ny4YDZNt dlkWcmcGUeyS/DuD8sYUBoW6YDItQ1CSxo8lyjU6JVdLgaXu7MQcDcAvqp3m72Ng 7Rja5pLdJ2b5P00u4KWTVCqnrKQQv+SSdXj00vZ0ECGs2DJotX/mFhF+SbZHZwvo DMI7FcOVbT6DuBbeQRxSDQ65yUBryPLbxv10wj42MqQ5CmvckbqQdGWFVc3d+F72 UHyTPfqSlehWKZ0mzhzMp551AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmlhnr0De v5zDgP38G2BQhYLFr5kwHwYDVR0jBBgwFoAU9BP1HYe7/0sKQQchh0duvgfTYb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQ0MzLzI0QjhFMjU4RUU3 QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFli OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUJQMUhZZTdfMHNLUVFjaGgwZHV2Z2ZUWWI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw Q0MzLzI0QjhFMjU4RUU3QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBz S1FRY2hoMGR1dmdmVFliOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjlcEzupKP0k1TbxuX9QAN8P/zJgKvDjyNAS3Fp50elFjXucdsnSP2+ sd65nWJUREgjcCMIFbqkwUUMwd8O5TvS+5uvPvQfrW/C2CXaw2yhc5X5kaYcGVnx fbGNcTQddw1Q7s+T6jZooBdplYXAy5PNTFV3q1ehougAO3brzM1i1fr+RLvGsCLE IVvJUasQZ4Rt120azj1IHHBp6DXiTvQxv8r9nR56eyyZbGqkCfuBXhI8igThAdYQ +FTVa4ras7qfI4YTcI+wyufuIuKC2adALGavHTsKqMhH8spG28Ji+3ZoCGDhRs5i 5TpWFVvVWYiC5uxdhMDA2oPN8KfTrZg= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org