$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: ulz9esiz6yh3c6xYwwaklPd0E28BOhawEjhdm5rF8yw= Subject key identifier: AC:61:18:F1:83:2D:9A:B3:5F:68:12:94:CA:2E:FB:DA:0A:5C:BC:DE Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 2F Signing time: Wed 15 May 2024 08:32:31 +0000 Manifest this update: Wed 15 May 2024 08:32:30 +0000 Manifest next update: Wed 22 May 2024 08:32:30 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: xsKoViWyj6dnE1eTbO0SMi8lrOeOHiNMQ4xpJJcd8+U=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: UFiTb7vhui76peaVMGbguSnGf17GrZx8kd1IOsd8hbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: May 15 08:32:30 2024 GMT Not After : May 22 08:32:30 2024 GMT Subject: CN=6644731e-eeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:2d:50:ce:0d:89:8c:0b:fa:24:28:57:0e: 80:00:87:b8:5d:0c:cd:0e:2c:ff:dd:c0:4a:57:78: 29:bb:94:ab:d1:28:94:00:1d:9e:d7:7a:a6:b5:2f: d7:29:2e:a2:f7:1c:0e:a8:69:af:62:a0:ab:d3:99: 4d:32:28:6f:3d:14:9c:b5:9c:a9:fe:2d:97:f2:78: 6c:e2:46:de:21:e7:e7:e7:86:31:67:93:a9:38:6a: af:ad:68:e4:97:e3:7c:2c:5e:ba:36:43:1d:c1:a2: bd:23:25:ff:7c:8b:30:87:59:5c:76:26:aa:6b:e2: e1:2e:f5:b0:dc:2d:58:fc:48:75:4c:85:81:f9:f1: a9:a0:62:09:77:bf:96:7f:c7:64:5e:d5:c1:32:65: e2:4e:2b:9f:6b:59:a9:eb:1d:e0:c4:de:88:15:67: 06:80:d4:61:14:d6:7e:a6:d2:e2:fd:9a:e2:af:af: 86:f4:c6:cb:2c:3e:15:40:0f:84:f2:7f:7d:55:8b: 7e:ca:d0:8b:1b:40:27:8f:d8:c0:68:fe:0f:5e:32: 56:8c:89:fb:9e:b0:9b:63:4a:d9:b3:bd:29:90:17: 1b:89:69:96:3c:0c:e7:ac:15:f0:8f:f7:0b:c0:77: 9f:55:68:4b:68:d8:5b:fd:28:a6:e4:c6:61:5f:ef: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:18:F1:83:2D:9A:B3:5F:68:12:94:CA:2E:FB:DA:0A:5C:BC:DE X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:21:02:1e:e6:b7:5c:4f:69:97:db:fc:a1:ca:34:6f:dd:43: d0:02:70:83:2b:f0:bf:c0:e7:29:6a:40:31:23:39:a9:10:af: 26:17:7c:9b:27:aa:ca:e1:1c:f5:ff:0e:d6:7c:3e:18:e0:9f: 24:2a:4b:5c:0c:d5:25:fa:f6:51:1b:cb:bf:7d:25:09:48:39: 82:21:5d:cc:af:df:f1:c1:0f:95:7f:76:f5:a4:e5:fc:a7:ed: 11:73:62:e3:dd:ff:6e:70:39:74:9e:33:7c:0b:5b:46:0c:2a: 5a:f6:b5:05:75:c7:e2:ab:0f:32:46:6d:6b:02:c2:6f:7a:d6: 84:7f:cb:99:c8:4d:24:a9:c1:50:fe:06:ca:85:63:d8:ea:31: 01:4f:d4:63:ae:7d:ce:77:e5:56:b0:46:02:a5:13:4e:59:ce: 29:18:8d:d5:fa:75:10:e2:55:7e:7a:df:17:e3:26:97:77:8b: d3:66:c9:c8:b0:42:e9:d1:a5:6b:7f:d7:af:00:94:64:85:6f: 43:97:ed:e3:5c:57:59:97:50:8a:7a:22:3f:d6:28:33:7a:d5: 51:f4:41:52:02:9e:44:f7:79:06:b6:9f:dc:a9:8b:f4:55:c4: 7e:eb:03:01:82:a8:5c:b4:d1:9e:3a:a3:5d:da:32:d8:22:c4: 1c:13:d6:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTg4NTExMC8GA1UEBRMoQUU1OEUzRjMyNEQ5NDZDNjgzRjRBMzhGOEQ0RTFDRDcy NTc0ODMwQTAeFw0yNDA1MTUwODMyMzBaFw0yNDA1MjIwODMyMzBaMBgxFjAUBgNV BAMTDTY2NDQ3MzFlLWVlZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDycS1Qzg2JjAv6JChXDoAAh7hdDM0OLP/dwEpXeCm7lKvRKJQAHZ7Xeqa1L9cp LqL3HA6oaa9ioKvTmU0yKG89FJy1nKn+LZfyeGziRt4h5+fnhjFnk6k4aq+taOSX 43wsXro2Qx3Bor0jJf98izCHWVx2Jqpr4uEu9bDcLVj8SHVMhYH58amgYgl3v5Z/ x2Re1cEyZeJOK59rWanrHeDE3ogVZwaA1GEU1n6m0uL9muKvr4b0xsssPhVAD4Ty f31Vi37K0IsbQCeP2MBo/g9eMlaMifuesJtjStmzvSmQFxuJaZY8DOesFfCP9wvA d59VaEto2Fv9KKbkxmFf771rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrGEY8YMt mrNfaBKUyi772gpcvN4wHwYDVR0jBBgwFoAUrljj8yTZRsaD9KOPjU4c1yV0gwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxODg1L0RGQTA0MDc4QzlG RDExRUVBNjc3NzkzQkM0RjlBRTAyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmxqajh5VFpSc2FEOUtPUGpVNGMxeVYwZ3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx ODg1L0RGQTA0MDc4QzlGRDExRUVBNjc3NzkzQkM0RjlBRTAyL3Jsamo4eVRaUnNh RDlLT1BqVTRjMXlWMGd3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYhAh7mt1xPaZfb/KHKNG/dQ9ACcIMr8L/A5ylqQDEjOakQryYXfJsn qsrhHPX/DtZ8PhjgnyQqS1wM1SX69lEby799JQlIOYIhXcyv3/HBD5V/dvWk5fyn 7RFzYuPd/25wOXSeM3wLW0YMKlr2tQV1x+KrDzJGbWsCwm961oR/y5nITSSpwVD+ BsqFY9jqMQFP1GOufc535VawRgKlE05ZzikYjdX6dRDiVX563xfjJpd3i9Nmyciw QunRpWt/168AlGSFb0OX7eNcV1mXUIp6Ij/WKDN61VH0QVICnkT3eQa2n9ypi/RV xH7rAwGCqFy00Z46o13aMtgixBwT1jo= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org