$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: uFtaWQJjpn8FeQxHMWb6ujOXUtRJmn/MJ0EZqrJi+qM= Subject key identifier: AA:61:0B:3F:12:F8:69:3F:26:E4:A1:7E:02:38:4C:1B:8D:6A:F4:4A Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0113 Signing time: Fri 03 May 2024 05:22:07 +0000 Manifest this update: Fri 03 May 2024 05:22:06 +0000 Manifest next update: Fri 10 May 2024 05:22:06 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: jIBzqCpq2TbK43ePZH2TuAWniw/9CuYGiJQMMjwYmp8=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: urouy+RiwS2Xf45qwWA5ZIFVDg0FCwrX+mTrPTQEMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: May 3 05:22:06 2024 GMT Not After : May 10 05:22:06 2024 GMT Subject: CN=6634747e-c526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:6f:2d:28:53:3d:f9:1d:c0:a8:c2:51:80: f5:30:5e:74:4f:c8:9e:88:ec:85:e6:40:eb:18:d2: 99:62:f9:77:5b:59:11:07:e1:9e:78:e2:a9:46:61: ec:3d:1a:cc:75:2e:c6:e6:fb:68:b9:eb:39:6f:a4: 91:c5:50:dc:50:8e:51:3c:ca:ab:3e:4e:2b:a9:e3: 27:b0:9d:a3:9b:09:ed:2b:70:18:35:da:74:c5:ed: ee:4b:34:10:0e:21:e9:8f:10:00:61:93:53:05:e2: 07:3f:bb:7b:e7:93:85:81:9d:42:86:28:39:9f:36: d6:2c:8a:7c:56:7b:3a:2c:9b:3d:08:5a:23:e4:16: f3:07:66:0b:23:96:ed:ea:c5:f0:ca:f9:b2:f7:15: 00:8b:f3:97:d9:3f:64:18:a1:83:04:f1:1a:e4:11: 5d:ba:61:8c:ce:2c:32:b9:93:39:c6:e1:c8:c4:86: bc:05:61:c6:dc:75:c2:26:13:a5:39:36:a1:60:c5: 99:91:c6:31:27:a1:ea:4c:6a:b6:d1:1e:32:83:0e: 1c:bd:6b:14:ca:b1:f0:c2:df:20:db:71:65:0d:7e: 30:61:26:97:fc:d7:fb:1f:3f:ac:60:f5:ca:cd:74: 5c:6f:02:43:2f:b5:1a:d1:dc:39:36:28:86:98:cd: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:0B:3F:12:F8:69:3F:26:E4:A1:7E:02:38:4C:1B:8D:6A:F4:4A X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:99:94:77:61:4d:ec:1d:0f:ce:9c:2b:10:3d:69:48:8b:41: cf:a6:5c:00:ae:2a:77:f9:58:86:b0:7f:e1:a6:e8:1f:35:ec: 7e:56:f9:b7:9c:64:d5:80:21:8e:f8:eb:40:4c:09:9e:ac:c9: 02:2b:6a:0b:a5:3f:53:2e:7b:10:f5:8a:60:af:cc:97:f4:cd: da:c7:7e:8a:3f:ef:5d:6c:f2:c8:7b:b4:b7:a7:20:76:bb:30: f6:5f:55:62:db:ef:de:5d:30:e1:1e:9d:61:24:c3:c8:65:20: fa:9a:a8:bc:62:fc:d8:b9:c6:8f:4d:d2:8b:bf:19:3d:ea:cf: a4:83:c4:d7:d9:43:b5:67:4f:e6:cb:82:40:29:74:be:0d:bd: 1b:e8:cd:a1:d1:0c:14:d6:aa:a3:db:f6:14:1d:1d:eb:36:ce: 87:d6:b3:3d:79:31:d7:98:59:b0:fd:68:ed:4c:8b:b5:bc:70: cf:7b:1d:5e:82:07:eb:66:4b:aa:87:b1:ca:7a:1b:d5:95:b7: 8e:58:f1:6b:ac:21:1d:8a:8e:cb:04:29:fd:8b:2d:db:bf:ab: 20:23:1b:0e:0f:0f:78:22:6e:cc:12:1b:99:e9:5f:a7:7c:c6: ab:c2:53:29:79:4d:37:16:05:5f:cf:6c:0f:50:d0:a7:7b:f1: 84:26:e9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjQwNTAzMDUyMjA2WhcNMjQwNTEwMDUyMjA2WjAYMRYwFAYD VQQDEw02NjM0NzQ3ZS1jNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOpvLShTPfkdwKjCUYD1MF50T8ieiOyF5kDrGNKZYvl3W1kRB+GeeOKpRmHs PRrMdS7G5vtoues5b6SRxVDcUI5RPMqrPk4rqeMnsJ2jmwntK3AYNdp0xe3uSzQQ DiHpjxAAYZNTBeIHP7t755OFgZ1Chig5nzbWLIp8Vns6LJs9CFoj5BbzB2YLI5bt 6sXwyvmy9xUAi/OX2T9kGKGDBPEa5BFdumGMziwyuZM5xuHIxIa8BWHG3HXCJhOl OTahYMWZkcYxJ6HqTGq20R4ygw4cvWsUyrHwwt8g23FlDX4wYSaX/Nf7Hz+sYPXK zXRcbwJDL7Ua0dw5NiiGmM1ppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKphCz8S +Gk/JuShfgI4TBuNavRKMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqmZR3YU3sHQ/OnCsQPWlIi0HPplwArip3+ViGsH/hpugfNex+Vvm3 nGTVgCGO+OtATAmerMkCK2oLpT9TLnsQ9Ypgr8yX9M3ax36KP+9dbPLIe7S3pyB2 uzD2X1Vi2+/eXTDhHp1hJMPIZSD6mqi8YvzYucaPTdKLvxk96s+kg8TX2UO1Z0/m y4JAKXS+Db0b6M2h0QwU1qqj2/YUHR3rNs6H1rM9eTHXmFmw/WjtTIu1vHDPex1e ggfrZkuqh7HKehvVlbeOWPFrrCEdio7LBCn9iy3bv6sgIxsODw94Im7MEhuZ6V+n fMarwlMpeU03FgVfz2wPUNCne/GEJukM -----END CERTIFICATE-----Generated at Fri May 3 06:18:54 2024 by rpki-client on console-ams.rpki-client.org