$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: c0o/sKCBPyPLURGDsEr9BvuLz23ArHCBj8q55jx3HIc= Subject key identifier: D5:8E:05:E8:8E:05:84:82:AB:47:D9:6E:55:09:A4:29:DD:E8:58:DF Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 025D Signing time: Sun 05 May 2024 03:58:41 +0000 Manifest this update: Sun 05 May 2024 03:58:40 +0000 Manifest next update: Sun 12 May 2024 03:58:40 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: UvPeNKMemW6zc4/yYDOKBHBy63ANz2O0YV0FG/bJOJQ=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: CvNhNif2kexa5t8nfd9T8e8mIo+X5t5p7RUz7Ta3UhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: May 5 03:58:40 2024 GMT Not After : May 12 03:58:40 2024 GMT Subject: CN=663703f0-c340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:e8:d5:83:42:ee:e4:61:aa:f9:99:4e:a2: 30:42:8e:8b:b0:bc:69:a0:0c:7e:0d:6a:10:a5:14: 6c:17:01:73:91:4a:7a:8b:44:ab:44:03:ca:26:fb: 72:90:0b:d4:ea:20:59:bc:2f:77:01:e7:bc:c6:40: 99:27:37:fd:71:0e:59:e2:d4:83:9e:28:cf:ae:bb: 05:1e:88:b2:e4:b4:2b:ed:36:07:02:04:99:4e:62: 41:37:89:15:92:7f:5d:be:ad:68:cc:a2:cf:8e:97: 6b:2e:c4:66:d0:15:fe:3d:ee:39:13:c0:66:67:94: 01:74:84:21:50:7e:58:01:5b:de:5c:72:a5:b3:b2: ea:9a:4a:dd:24:35:a6:cd:99:3d:1e:1c:4d:25:15: 53:a3:5b:9c:80:c5:34:c7:82:2d:09:ac:de:ba:95: 36:84:ef:da:0b:27:54:31:27:7d:f0:eb:e5:c8:7e: f0:df:34:eb:e7:6b:c3:96:c6:f0:69:65:31:f4:d2: e5:d7:53:23:a5:84:61:25:31:f8:66:ad:2f:91:cd: 92:12:26:b2:e5:e6:9c:e1:e3:e6:b6:a2:ed:17:ff: 71:6a:af:41:6f:f4:01:2b:da:e3:df:71:55:4e:ab: f6:c0:54:0e:3c:8b:70:14:3d:8a:4c:d0:63:fc:71: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8E:05:E8:8E:05:84:82:AB:47:D9:6E:55:09:A4:29:DD:E8:58:DF X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:a6:d5:a4:ae:72:f4:92:bc:2b:c3:24:20:bc:86:55:04: af:5f:b1:b3:e2:2f:16:ee:d7:e8:06:55:9d:d0:42:e4:61:9f: e5:3e:41:2c:d9:d7:4c:bd:be:e6:c9:36:82:a3:84:5f:7b:1f: 35:e7:14:df:f0:ea:f4:74:aa:b4:f3:92:fe:99:88:20:2d:88: d2:fd:97:1d:5b:da:5b:89:23:4a:6d:4e:9f:44:01:dc:ae:b8: 00:8f:1f:8a:1c:fb:ca:eb:5d:f1:50:f8:74:4b:6a:de:21:f3: 62:ff:b4:0c:69:cc:e8:8d:69:44:bd:23:36:74:c5:c2:fa:91: 3f:32:6a:85:81:93:38:1e:2a:78:af:61:ef:da:ae:3d:3b:0e: 29:42:6a:f8:66:0f:02:1c:16:29:c9:3d:ef:f9:8c:49:3c:91: f7:21:51:e6:32:11:47:56:04:9a:8b:05:54:24:f5:83:a8:62: 23:c8:a0:13:d6:58:37:60:b1:d1:de:83:06:e2:d0:d9:20:05: 65:93:1f:e6:f9:25:34:7c:52:4f:5e:8d:cd:de:cd:be:05:bb: 46:b0:95:a3:aa:b1:74:64:4a:1f:92:f6:70:58:f8:07:b5:c2: 72:04:9c:34:fd:19:73:64:a8:c1:53:4d:1c:01:af:5f:a8:5d: 75:99:1a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjQwNTA1MDM1ODQwWhcNMjQwNTEyMDM1ODQwWjAYMRYwFAYD VQQDEw02NjM3MDNmMC1jMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyTo1YNC7uRhqvmZTqIwQo6LsLxpoAx+DWoQpRRsFwFzkUp6i0SrRAPKJvty kAvU6iBZvC93Aee8xkCZJzf9cQ5Z4tSDnijPrrsFHoiy5LQr7TYHAgSZTmJBN4kV kn9dvq1ozKLPjpdrLsRm0BX+Pe45E8BmZ5QBdIQhUH5YAVveXHKls7LqmkrdJDWm zZk9HhxNJRVTo1ucgMU0x4ItCazeupU2hO/aCydUMSd98OvlyH7w3zTr52vDlsbw aWUx9NLl11MjpYRhJTH4Zq0vkc2SEiay5eac4ePmtqLtF/9xaq9Bb/QBK9rj33FV Tqv2wFQOPItwFD2KTNBj/HGx7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWOBeiO BYSCq0fZblUJpCnd6FjfMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq/6bVpK5y9JK8K8MkILyGVQSvX7Gz4i8W7tfoBlWd0ELkYZ/lPkEs 2ddMvb7myTaCo4Rfex815xTf8Or0dKq085L+mYggLYjS/ZcdW9pbiSNKbU6fRAHc rrgAjx+KHPvK613xUPh0S2reIfNi/7QMaczojWlEvSM2dMXC+pE/MmqFgZM4Hip4 r2Hv2q49Ow4pQmr4Zg8CHBYpyT3v+YxJPJH3IVHmMhFHVgSaiwVUJPWDqGIjyKAT 1lg3YLHR3oMG4tDZIAVlkx/m+SU0fFJPXo3N3s2+BbtGsJWjqrF0ZEofkvZwWPgH tcJyBJw0/RlzZKjBU00cAa9fqF11mRpq -----END CERTIFICATE-----Generated at Sun May 5 04:40:01 2024 by rpki-client on console-ams.rpki-client.org