$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: oyLm4NcQM7bUt2FqtOMM/I1qCuuxfpTow54ep5tXKvc= Subject key identifier: 61:88:3E:B8:4A:22:63:80:AC:35:08:DA:CD:D1:9D:7F:8F:93:85:E9 Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 3454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 3411 Signing time: Mon 06 May 2024 14:47:53 +0000 Manifest this update: Mon 06 May 2024 14:47:52 +0000 Manifest next update: Mon 13 May 2024 14:47:52 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: fmfgAtMsqv8jI5sfKodJECaonZFKOWKgp2ahjS47Ig0=) 2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: Nz1OHf+DZoyuSpWSpaUQ+rmJDma6hdQSmRhKOeMQaZE=) 3: 0537EDD4E37C11EA8C217816C4F9AE02.roa (hash: R+pacwfcTdHklwFfetq2LYa4OpDYKVQ0ZEJVkosxwgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13396 (0x3454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: May 6 14:47:52 2024 GMT Not After : May 13 14:47:52 2024 GMT Subject: CN=6638ed99-a675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:f4:65:77:9c:c7:66:f2:15:a8:0e:db:0d: 27:15:a2:c5:26:2c:9b:d1:64:6a:56:36:0a:5e:51: 17:26:2b:71:8e:69:ba:77:01:00:05:e6:56:b9:37: 28:ab:df:b7:34:d2:28:0f:41:59:7f:62:f6:3b:ce: a6:da:8d:bb:e8:4e:aa:17:72:c0:ab:d6:d4:a4:47: a5:d7:e8:81:a0:50:5d:68:68:31:0d:0b:ca:cb:94: 88:ba:55:d0:1c:90:4f:ca:40:71:2b:4a:71:22:26: 61:11:0a:2a:6d:91:82:2a:ee:44:5a:f7:a8:1a:f7: a3:fd:ea:d2:90:27:6c:a4:40:7b:9e:66:b3:ae:7c: 9c:d2:d1:c0:1d:33:52:cb:48:f7:af:bd:9f:25:81: b6:f8:1c:ba:b3:54:81:55:d0:6f:40:1d:8d:e8:05: 8f:ee:58:ba:4f:8f:45:07:f8:e6:99:74:60:33:c6: d7:cf:e3:23:ad:ba:fb:c1:3f:70:00:66:62:32:3c: 0b:ae:ac:15:7d:25:56:4b:e5:88:44:d0:27:21:f8: 8a:24:02:2a:04:b0:f5:41:03:c5:45:fb:3d:3f:e6: 2e:ed:2a:f7:7d:04:e6:cb:70:40:a2:0c:f7:fa:6c: 7c:5b:60:a3:29:40:a6:0f:ba:43:76:dd:94:3a:29: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:88:3E:B8:4A:22:63:80:AC:35:08:DA:CD:D1:9D:7F:8F:93:85:E9 X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:92:9c:91:1b:1f:04:03:bd:28:1e:65:1a:fa:a7:b6:97:ab: b6:dc:14:e9:11:3c:79:98:b7:71:16:6d:76:d6:70:e9:39:c2: 7c:8b:01:1b:04:b4:73:ba:75:85:2e:3c:99:0c:27:32:e1:3f: 42:01:5d:ac:a8:0d:60:d6:46:dd:01:93:06:e7:79:83:0f:7e: 7b:de:a0:45:9f:01:13:74:e3:8d:94:f5:05:fa:4b:bf:6c:b8: ff:ec:09:3a:a8:f5:92:d0:08:b5:92:be:21:1d:7e:e7:a7:ae: 36:ef:57:1a:f2:8a:4e:b0:90:e4:f6:a1:3f:1b:82:4f:d1:c2: 62:b2:bd:9d:30:ca:8c:f6:db:f5:34:8f:7f:d1:4f:b2:50:88: 2f:ab:50:57:78:f3:62:94:a5:ff:47:e0:65:85:98:d6:f6:e2: b5:8f:c3:f7:dd:07:8e:91:97:a7:dd:40:f5:ba:5b:cd:32:c4: 5f:09:6d:54:15:86:13:5d:b6:99:40:57:49:b1:19:98:06:51: 21:85:a4:0b:3d:5b:04:5b:8d:0f:95:e6:5c:6f:65:ab:61:6a: a3:18:4b:28:1d:91:6a:c5:51:14:ea:bb:a2:39:1e:0e:cd:28: 5d:7d:07:b3:14:98:54:ce:51:9e:9e:6c:bd:5a:a2:e6:9b:5b: e5:68:de:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjQwNTA2MTQ0NzUyWhcNMjQwNTEzMTQ0NzUyWjAYMRYwFAYD VQQDEw02NjM4ZWQ5OS1hNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpH0ZXecx2byFagO2w0nFaLFJiyb0WRqVjYKXlEXJitxjmm6dwEABeZWuTco q9+3NNIoD0FZf2L2O86m2o276E6qF3LAq9bUpEel1+iBoFBdaGgxDQvKy5SIulXQ HJBPykBxK0pxIiZhEQoqbZGCKu5EWveoGvej/erSkCdspEB7nmazrnyc0tHAHTNS y0j3r72fJYG2+By6s1SBVdBvQB2N6AWP7li6T49FB/jmmXRgM8bXz+Mjrbr7wT9w AGZiMjwLrqwVfSVWS+WIRNAnIfiKJAIqBLD1QQPFRfs9P+Yu7Sr3fQTmy3BAogz3 +mx8W2CjKUCmD7pDdt2UOinSfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGIPrhK ImOArDUI2s3RnX+Pk4XpMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARkpyRGx8EA70oHmUa+qe2l6u23BTpETx5mLdxFm121nDpOcJ8iwEb BLRzunWFLjyZDCcy4T9CAV2sqA1g1kbdAZMG53mDD3573qBFnwETdOONlPUF+ku/ bLj/7Ak6qPWS0Ai1kr4hHX7np64271ca8opOsJDk9qE/G4JP0cJisr2dMMqM9tv1 NI9/0U+yUIgvq1BXePNilKX/R+BlhZjW9uK1j8P33QeOkZen3UD1ulvNMsRfCW1U FYYTXbaZQFdJsRmYBlEhhaQLPVsEW40PleZcb2WrYWqjGEsoHZFqxVEU6ruiOR4O zShdfQezFJhUzlGenmy9WqLmm1vlaN7g -----END CERTIFICATE-----Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org