$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: 1U+SH5osIqOS3fBpsK+p666AmujLNLEw0FryARV3pF4= Subject key identifier: 9C:4D:BC:B6:6C:0C:58:B5:F4:54:03:EF:90:D9:1F:80:18:35:6A:4F Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: A9 Signing time: Wed 15 May 2024 06:44:06 +0000 Manifest this update: Wed 15 May 2024 06:44:06 +0000 Manifest next update: Wed 22 May 2024 06:44:06 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: QVijt0rmsMatfEdT9W9urw9eUMdKehu609q8BIkdJfk=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: Dc15FontYVB/1W30cGbTo8Ew6J9U3RNpX+ozWlmaRl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: May 15 06:44:06 2024 GMT Not After : May 22 06:44:06 2024 GMT Subject: CN=664459b6-60a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:ca:7b:6d:bc:32:ed:bc:4f:fd:64:c9:b3: 0c:b4:b7:62:89:a8:bc:a0:46:0d:57:a0:e2:93:9b: af:9b:d5:e0:42:02:52:f5:ba:3e:7e:99:9e:01:43: e5:21:58:21:54:7c:69:e7:22:c9:9f:2b:d8:ce:cb: 02:1e:94:9a:1d:47:9c:99:cf:9b:95:57:0a:85:25: 26:63:16:ec:e5:d0:47:64:5c:73:eb:67:6b:3d:b1: 40:98:19:40:1c:52:0a:fc:ef:54:a5:a9:8e:67:ee: 6f:bf:06:3d:a6:12:ec:7a:27:a4:e7:c0:a2:f0:bd: 76:01:c6:a8:3e:0b:e6:a6:2c:bc:4d:39:c2:a1:d6: 12:e5:a4:3e:c2:b0:23:6f:2a:8c:cd:ec:a1:ea:f2: 36:36:55:a9:13:f5:d2:56:5f:9f:64:49:c4:89:83: 39:99:ac:f9:d4:f2:56:8e:fa:c4:4f:8d:39:97:59: 97:72:b4:51:3d:99:92:d8:04:99:3d:ec:e3:2c:ad: 69:f3:42:98:b9:04:fa:35:ad:d6:d2:79:c5:bf:78: 34:8e:ea:f1:17:84:1c:91:f8:45:f0:3a:46:67:b4: 97:d9:ab:df:29:78:49:a5:cb:7d:77:f5:32:e2:b3: f1:7e:a7:80:2e:10:47:93:d0:03:77:27:37:59:61: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4D:BC:B6:6C:0C:58:B5:F4:54:03:EF:90:D9:1F:80:18:35:6A:4F X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e1:cc:12:4b:19:6c:01:a2:b3:a6:63:96:21:af:dd:73:b6: 9f:a7:f1:e9:12:02:6d:99:2f:6b:23:77:32:1e:f1:ad:4b:69: 5c:65:9d:f4:0c:79:74:34:20:23:ef:a3:85:9d:f2:43:ac:90: 52:bd:ed:fd:8f:71:b3:d9:5d:4b:26:63:01:29:95:d3:59:03: 61:1b:0b:eb:9c:6e:9e:cc:17:41:cc:cc:dc:d8:95:36:64:80: 90:a7:34:ed:58:cc:5b:5d:b6:d1:b8:48:5c:84:fd:7e:74:a6: 35:d6:04:37:7f:32:53:38:4d:0b:2a:d4:5a:29:b6:f7:71:48: c3:d7:1c:a1:f8:56:6d:c9:2e:13:da:0f:ea:78:ca:cd:7f:7f: a1:df:c2:64:b5:2b:09:ed:bc:d7:22:1c:4d:cc:20:76:a9:de: 1c:8d:63:5f:76:fa:bd:f2:43:3c:78:9b:59:2a:87:d3:92:70: a7:89:f9:05:da:2d:c4:72:79:6b:39:1e:12:db:75:16:30:98: 2f:85:19:e8:e4:aa:ea:dd:37:79:d7:bf:7f:98:af:3a:6b:f2: 61:a6:ce:83:38:c3:eb:3a:ec:1d:53:6f:d7:5d:61:76:09:70: 5e:08:e3:d0:4f:cb:64:0d:f0:b5:3f:68:b0:08:12:2b:b4:1b: 60:07:0d:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjQwNTE1MDY0NDA2WhcNMjQwNTIyMDY0NDA2WjAYMRYwFAYD VQQDEw02NjQ0NTliNi02MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgXKe228Mu28T/1kybMMtLdiiai8oEYNV6Dik5uvm9XgQgJS9bo+fpmeAUPl IVghVHxp5yLJnyvYzssCHpSaHUecmc+blVcKhSUmYxbs5dBHZFxz62drPbFAmBlA HFIK/O9UpamOZ+5vvwY9phLseiek58Ci8L12AcaoPgvmpiy8TTnCodYS5aQ+wrAj byqMzeyh6vI2NlWpE/XSVl+fZEnEiYM5maz51PJWjvrET405l1mXcrRRPZmS2ASZ PezjLK1p80KYuQT6Na3W0nnFv3g0jurxF4QckfhF8DpGZ7SX2avfKXhJpct9d/Uy 4rPxfqeALhBHk9ADdyc3WWEiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxNvLZs DFi19FQD75DZH4AYNWpPMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4cwSSxlsAaKzpmOWIa/dc7afp/HpEgJtmS9rI3cyHvGtS2lcZZ30 DHl0NCAj76OFnfJDrJBSve39j3Gz2V1LJmMBKZXTWQNhGwvrnG6ezBdBzMzc2JU2 ZICQpzTtWMxbXbbRuEhchP1+dKY11gQ3fzJTOE0LKtRaKbb3cUjD1xyh+FZtyS4T 2g/qeMrNf3+h38JktSsJ7bzXIhxNzCB2qd4cjWNfdvq98kM8eJtZKofTknCnifkF 2i3EcnlrOR4S23UWMJgvhRno5Krq3Td5179/mK86a/Jhps6DOMPrOuwdU2/XXWF2 CXBeCOPQT8tkDfC1P2iwCBIrtBtgBw2a -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org