$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: r901EGtICw8dlZQV2ThCfBuF6LgZrOtEv7Gl6oXwg40= Subject key identifier: 18:EE:0B:B6:A6:71:DA:B9:4A:B5:2E:6E:8E:21:37:8C:38:C6:D6:2F Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 078C Signing time: Sat 04 May 2024 22:20:58 +0000 Manifest this update: Sat 04 May 2024 22:20:57 +0000 Manifest next update: Sat 11 May 2024 22:20:57 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: Kqs+L1m8IO/mdYesJibgadQ1g/GXD05zp1B3mjGV+Kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: May 4 22:20:57 2024 GMT Not After : May 11 22:20:57 2024 GMT Subject: CN=6636b4c9-9914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:19:25:0c:4f:44:a2:1f:31:90:da:64:01: 30:1d:1a:b5:c4:95:21:e9:d8:56:72:a4:2e:37:cc: 27:ee:73:c9:b6:c4:76:69:b2:c9:ef:bb:29:72:91: fc:cd:a0:8c:a2:12:d1:50:7b:04:bd:f0:2a:d7:1e: 49:89:46:6e:bf:6a:b4:f0:6f:f7:f0:6c:af:e9:fb: a0:f1:e3:7a:98:b5:6c:50:87:af:bf:e1:ec:1e:9a: 29:04:c2:be:23:10:7e:62:f6:e1:04:fe:d1:b3:06: 86:cf:6d:b1:e2:ea:b5:89:f2:81:22:9a:c0:46:92: 37:44:83:24:48:de:f2:83:da:4f:37:31:c5:08:21: b9:25:02:ce:ea:64:b3:ad:20:ba:2a:4b:17:38:b8: 4e:bf:41:ad:b4:21:99:be:08:26:15:2a:d8:83:78: 5e:03:60:1e:72:99:39:5f:30:bc:b2:0f:f5:4b:02: 66:67:d7:d8:d4:e7:e5:72:36:41:3e:cd:53:6d:7f: 09:e6:b4:30:9c:d0:43:2a:47:d7:2a:ec:d3:65:6c: 8e:14:b8:81:61:c3:6c:dc:f2:3a:74:83:5a:81:30: 4d:d5:fc:7f:e8:00:99:a9:5a:6e:d7:b1:94:6a:37: 52:0f:5a:f7:b1:26:fa:93:a2:29:0f:73:81:03:69: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:0B:B6:A6:71:DA:B9:4A:B5:2E:6E:8E:21:37:8C:38:C6:D6:2F X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e9:e9:8b:f8:ba:99:bf:40:0e:24:47:cb:30:de:85:37:65: ad:eb:e1:fb:b5:58:1b:3e:d8:95:f6:2e:ad:e0:6b:af:3a:b0: ba:ee:30:81:3a:ab:0c:96:ef:35:ae:9f:36:cf:88:bb:d6:41: 73:70:6f:ca:82:39:50:18:a5:70:e7:83:b4:8f:49:18:1c:5a: 25:45:6b:3b:ef:6c:c9:f0:e9:a2:b6:90:7c:46:33:7b:9e:df: 00:10:d3:2a:3c:51:12:b1:53:84:ed:a6:ef:e9:25:da:73:aa: 6c:d7:76:6e:7f:35:e8:58:1a:8c:ee:7d:10:e2:0e:92:f1:bb: 8a:d3:b9:84:a5:cd:0f:0d:7e:55:7b:ac:a8:30:d2:78:bc:25: c4:5d:f3:aa:24:b3:61:af:3a:a4:75:ef:32:eb:20:a0:bf:2e: 13:40:9e:59:04:09:87:41:6c:16:0e:66:f3:0c:76:72:e8:27: ff:84:3a:75:1b:a3:7c:92:90:8c:a7:48:1c:df:11:ad:87:fc: f8:f6:db:bf:f7:a5:13:42:51:02:0b:97:02:e3:11:82:d5:93: a4:02:a4:7b:5c:58:e8:ef:d4:da:76:a4:7a:a0:89:8e:74:07: 50:47:cb:ac:f9:b2:72:24:68:f2:bb:18:b2:31:70:df:b8:71: fd:8c:ee:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjQwNTA0MjIyMDU3WhcNMjQwNTExMjIyMDU3WjAYMRYwFAYD VQQDEw02NjM2YjRjOS05OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHQZJQxPRKIfMZDaZAEwHRq1xJUh6dhWcqQuN8wn7nPJtsR2abLJ77spcpH8 zaCMohLRUHsEvfAq1x5JiUZuv2q08G/38Gyv6fug8eN6mLVsUIevv+HsHpopBMK+ IxB+YvbhBP7RswaGz22x4uq1ifKBIprARpI3RIMkSN7yg9pPNzHFCCG5JQLO6mSz rSC6KksXOLhOv0GttCGZvggmFSrYg3heA2Aecpk5XzC8sg/1SwJmZ9fY1OflcjZB Ps1TbX8J5rQwnNBDKkfXKuzTZWyOFLiBYcNs3PI6dINagTBN1fx/6ACZqVpu17GU ajdSD1r3sSb6k6IpD3OBA2m2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjuC7am cdq5SrUubo4hN4w4xtYvMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/6emL+LqZv0AOJEfLMN6FN2Wt6+H7tVgbPtiV9i6t4GuvOrC67jCB OqsMlu81rp82z4i71kFzcG/KgjlQGKVw54O0j0kYHFolRWs772zJ8OmitpB8RjN7 nt8AENMqPFESsVOE7abv6SXac6ps13ZufzXoWBqM7n0Q4g6S8buK07mEpc0PDX5V e6yoMNJ4vCXEXfOqJLNhrzqkde8y6yCgvy4TQJ5ZBAmHQWwWDmbzDHZy6Cf/hDp1 G6N8kpCMp0gc3xGth/z49tu/96UTQlECC5cC4xGC1ZOkAqR7XFjo79TadqR6oImO dAdQR8us+bJyJGjyuxiyMXDfuHH9jO4F -----END CERTIFICATE-----Generated at Sun May 5 00:12:26 2024 by rpki-client on console-fra.rpki-client.org