$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json) Hash identifier: x40AnveKtPBdaUns8cd+/ae44vt6CFdtSCly+Z9Eh/Y= Subject key identifier: 4A:10:0C:F7:89:B2:7D:D6:77:C2:B3:42:DF:3E:D0:93:2A:BF:9B:DF Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft Manifest number: 44 Signing time: Sun 19 May 2024 08:04:31 +0000 Manifest this update: Sun 19 May 2024 08:04:31 +0000 Manifest next update: Sun 26 May 2024 08:04:31 +0000 Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: TlSZ/Tib+cWPo7waqkmVtTXfP4pcZ37DdddFO6eYxLw=) 2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: F0iC7HUqGoY8bci7TVNs+NOvDQFoBzl00vYngD/mKDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Validity Not Before: May 19 08:04:31 2024 GMT Not After : May 26 08:04:31 2024 GMT Subject: CN=6649b28f-3ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:f0:06:9c:23:57:e6:3d:4c:8b:19:af:64: 98:2b:ac:71:c6:ab:af:6f:91:9d:09:17:f2:15:50: a6:da:aa:04:84:e4:82:be:11:de:be:e3:67:70:fa: 49:99:36:ea:cf:c3:ac:38:9e:5e:e2:2a:eb:71:7a: ef:87:22:9d:68:0e:f2:a1:ad:dc:06:f5:41:96:80: af:b8:ae:e4:ae:ab:22:9b:51:dc:6c:ce:79:83:b0: 51:b1:0f:40:3d:2b:44:91:a3:9e:9b:1b:a1:1c:79: 33:53:1b:9f:59:9c:a4:6c:5f:b2:6d:4c:13:42:64: f6:a2:e8:5c:ef:4a:f3:f1:93:b7:77:6c:a3:f5:99: 86:d1:76:20:ff:16:a8:e4:ff:cb:ec:eb:af:b5:05: c1:10:28:21:1d:7f:b4:58:3e:34:1f:d0:66:ab:e6: 28:6b:b5:51:99:ee:5d:f5:5e:d2:59:43:e1:e2:66: d0:67:7a:49:31:a3:79:82:c5:06:5a:43:1a:1a:75: ac:36:d2:4a:59:7b:6e:96:dd:59:71:e1:24:24:6d: 34:24:01:0c:e2:92:8f:a4:5a:61:06:d9:3a:81:62: 54:16:e2:ed:0c:33:51:22:d0:cf:d4:a3:61:e1:99: d2:45:bf:7b:35:45:f0:2d:c4:79:c7:5a:93:ff:9e: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:10:0C:F7:89:B2:7D:D6:77:C2:B3:42:DF:3E:D0:93:2A:BF:9B:DF X509v3 Authority Key Identifier: keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:dd:98:c4:87:a2:c9:2a:ca:64:cd:62:b6:57:e1:04:d5:a0: bd:84:cf:01:e0:b2:b0:14:3a:65:80:93:5c:25:5d:b7:66:03: ca:c8:fd:ed:c2:9b:bb:e7:16:55:8d:b9:5e:bc:81:a0:0c:ac: fa:cb:1a:21:90:0d:d3:24:d9:41:a4:28:71:1c:7e:ad:61:17: 12:58:88:1e:92:a3:76:7e:b0:47:83:c8:50:2d:6c:d2:c1:ae: a7:e3:c7:71:ac:a8:40:df:08:f4:68:44:d8:35:06:88:14:72: 91:10:f1:0f:15:40:02:82:d5:11:f3:f4:b1:b8:43:7f:a7:31: 31:f1:65:79:b3:30:47:46:f8:e3:a3:99:a4:60:df:94:af:ac: 55:a2:18:45:a3:d6:d0:8e:7f:e8:38:94:e9:75:7e:50:22:e2: be:8c:09:7b:7b:07:eb:ad:59:37:ba:7a:ca:2a:c7:4b:51:50: b9:72:f8:8c:cc:c0:61:e0:16:91:fd:44:2b:d0:3e:8b:d8:ff: 63:aa:49:7c:0d:6a:d6:13:90:2f:23:b1:e9:e9:ff:14:cf:ab: a2:a2:3b:5d:e3:f0:ee:09:49:3c:f2:71:b6:08:8d:2f:d2:07: fc:72:59:cf:5f:d6:0b:b9:22:35:9d:f8:c5:ca:b5:59:f7:4e: b2:84:d5:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI5NjExMC8GA1UEBRMoNUZEQkQ1REY1MzJEMkM1NjIwNkY3QjExMkU3QkJCMzA1 N0EzOTk5MDAeFw0yNDA1MTkwODA0MzFaFw0yNDA1MjYwODA0MzFaMBgxFjAUBgNV BAMTDTY2NDliMjhmLTNkZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBd/AGnCNX5j1MixmvZJgrrHHGq69vkZ0JF/IVUKbaqgSE5IK+Ed6+42dw+kmZ NurPw6w4nl7iKutxeu+HIp1oDvKhrdwG9UGWgK+4ruSuqyKbUdxsznmDsFGxD0A9 K0SRo56bG6EceTNTG59ZnKRsX7JtTBNCZPai6FzvSvPxk7d3bKP1mYbRdiD/Fqjk /8vs66+1BcEQKCEdf7RYPjQf0Gar5ihrtVGZ7l31XtJZQ+HiZtBnekkxo3mCxQZa Qxoadaw20kpZe26W3Vlx4SQkbTQkAQziko+kWmEG2TqBYlQW4u0MM1Ei0M/Uo2Hh mdJFv3s1RfAtxHnHWpP/ntxbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUShAM94my fdZ3wrNC3z7Qkyq/m98wHwYDVR0jBBgwFoAUX9vV31MtLFYgb3sRLnu7MFejmZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjk2LzQyQTBCNzFBQUY1 QjExRUVCNjBEMDUyN0M0RjlBRTAyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1a QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDl2VjMxTXRMRllnYjNzUkxudTdNRmVqbVpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjk2LzQyQTBCNzFBQUY1QjExRUVCNjBEMDUyN0M0RjlBRTAyL1g5dlYzMU10TEZZ Z2Izc1JMbnU3TUZlam1aQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAErdmMSHoskqymTNYrZX4QTVoL2EzwHgsrAUOmWAk1wlXbdmA8rI/e3C m7vnFlWNuV68gaAMrPrLGiGQDdMk2UGkKHEcfq1hFxJYiB6So3Z+sEeDyFAtbNLB rqfjx3GsqEDfCPRoRNg1BogUcpEQ8Q8VQAKC1RHz9LG4Q3+nMTHxZXmzMEdG+OOj maRg35SvrFWiGEWj1tCOf+g4lOl1flAi4r6MCXt7B+utWTe6esoqx0tRULly+IzM wGHgFpH9RCvQPovY/2OqSXwNatYTkC8jsenp/xTPq6KiO13j8O4JSTzycbYIjS/S B/xyWc9f1gu5IjWd+MXKtVn3TrKE1bQ= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org