$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: ZnG6M+O7BsDjYXDZ7LMdkGLA0V/YTJW0HqJlnlYs6ac= Subject key identifier: D0:12:ED:B4:49:D4:0F:BA:1D:9E:ED:6F:C5:D6:07:34:8D:7B:08:29 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: B9 Signing time: Sun 05 May 2024 06:30:24 +0000 Manifest this update: Sun 05 May 2024 06:30:24 +0000 Manifest next update: Sun 12 May 2024 06:30:24 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: tBOPC9Ko5kXNlyB2aGp8+9sDDab3ZvVO+86n6O93HZU=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: mr9bH4na8Ni92Bl0tYhwxMl9YdPdkp1y6gqdJLkZgso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: May 5 06:30:24 2024 GMT Not After : May 12 06:30:24 2024 GMT Subject: CN=66372780-79af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:59:3d:ca:90:3d:02:98:cf:46:d1:41:7d: e9:53:8d:fe:4a:86:b6:dc:f9:67:0c:60:54:50:77: 05:15:ef:ca:cc:40:76:f6:3f:77:0d:6c:31:d4:54: d7:e0:39:2b:6d:e4:4d:e8:d6:b9:99:6e:73:ef:14: e8:e1:3b:f9:d3:91:b5:c5:b5:82:10:49:a0:a9:19: 22:9c:9f:b1:89:50:92:16:a7:20:e2:cc:0d:26:42: b3:58:52:29:a8:f7:2e:26:3b:d4:09:67:86:03:8f: a1:3f:00:40:a6:d3:d4:a5:6d:31:2d:c4:9b:25:dc: 79:87:1c:a9:8d:3f:9b:dc:9a:c8:34:9f:9f:69:70: a1:61:5a:4b:51:fd:7e:0c:35:fc:c7:d8:4a:dc:7a: 79:53:89:bd:33:bb:26:fa:e7:1a:9d:20:37:3c:3d: 16:b6:83:75:c6:50:76:42:02:1c:4a:ed:c6:fd:ab: 25:53:f8:12:93:5e:80:87:92:2c:d2:56:a6:79:12: c1:5b:7c:06:27:e9:cc:ce:fd:09:ed:52:ed:a6:f1: e6:2a:01:4b:09:b3:f1:1e:f7:54:f0:95:6f:17:dd: f3:fc:58:98:d0:89:6b:ff:59:70:58:11:73:58:cf: 7b:80:20:4b:76:26:a0:6f:ad:36:54:65:1d:ff:d6: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:ED:B4:49:D4:0F:BA:1D:9E:ED:6F:C5:D6:07:34:8D:7B:08:29 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:89:48:66:45:07:02:4b:45:9b:ea:d5:a8:a3:5c:8d:b4:cb: 84:53:da:af:a6:96:46:2d:5b:ef:e0:6c:44:c3:a5:17:f8:31: ad:5d:8b:6c:69:d4:db:b8:3a:6e:70:69:97:89:94:aa:70:5a: 80:13:78:05:91:3e:ad:c5:16:93:34:63:e1:a1:77:73:4b:f2: 9e:34:eb:8c:ca:5d:85:46:73:0b:05:d1:99:6b:86:1c:74:ad: b3:bd:92:0a:06:1a:ca:4d:38:38:58:c2:a4:cb:f6:8c:e7:d4: db:2f:59:d5:2a:bd:ec:81:d8:c4:b6:8a:dc:51:3f:9c:92:1b: 8c:8e:64:a9:1d:e1:41:21:9c:10:3e:c0:34:db:02:cf:85:ef: 1a:90:cb:b9:d4:3e:a4:15:21:da:69:8a:4a:fd:e0:8e:e4:24: 9d:5a:9d:7a:f0:37:8e:c3:87:1a:60:b2:7b:e5:ed:32:9b:1d: 30:6c:85:6e:4d:cd:11:76:f7:79:df:73:99:2c:ea:ee:08:63: 60:8f:35:ce:e5:47:91:f5:df:df:77:57:a3:bb:ff:e3:aa:8a: 4f:2a:12:6e:5d:5b:fe:f7:f5:ae:dc:17:63:fd:ae:a0:5e:a9: 0f:82:7c:94:af:44:bd:9c:ef:b3:1b:7d:18:a5:90:67:fc:c6: e3:38:0c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjQwNTA1MDYzMDI0WhcNMjQwNTEyMDYzMDI0WjAYMRYwFAYD VQQDEw02NjM3Mjc4MC03OWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRVZPcqQPQKYz0bRQX3pU43+Soa23PlnDGBUUHcFFe/KzEB29j93DWwx1FTX 4DkrbeRN6Na5mW5z7xTo4Tv505G1xbWCEEmgqRkinJ+xiVCSFqcg4swNJkKzWFIp qPcuJjvUCWeGA4+hPwBAptPUpW0xLcSbJdx5hxypjT+b3JrINJ+faXChYVpLUf1+ DDX8x9hK3Hp5U4m9M7sm+ucanSA3PD0WtoN1xlB2QgIcSu3G/aslU/gSk16Ah5Is 0lameRLBW3wGJ+nMzv0J7VLtpvHmKgFLCbPxHvdU8JVvF93z/FiY0Ilr/1lwWBFz WM97gCBLdiagb602VGUd/9aGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAS7bRJ 1A+6HZ7tb8XWBzSNewgpMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAiUhmRQcCS0Wb6tWoo1yNtMuEU9qvppZGLVvv4GxEw6UX+DGtXYts adTbuDpucGmXiZSqcFqAE3gFkT6txRaTNGPhoXdzS/KeNOuMyl2FRnMLBdGZa4Yc dK2zvZIKBhrKTTg4WMKky/aM59TbL1nVKr3sgdjEtorcUT+ckhuMjmSpHeFBIZwQ PsA02wLPhe8akMu51D6kFSHaaYpK/eCO5CSdWp168DeOw4caYLJ75e0ymx0wbIVu Tc0Rdvd533OZLOruCGNgjzXO5UeR9d/fd1eju//jqopPKhJuXVv+9/Wu3Bdj/a6g XqkPgnyUr0S9nO+zG30YpZBn/MbjOAyI -----END CERTIFICATE-----Generated at Sun May 5 08:21:10 2024 by rpki-client on console-ams.rpki-client.org