$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft File: 9z8-EYZs_PNnOPhCnkwIA7flvYA.mft (raw, json) Hash identifier: 2wizs+SxIVuvHdPTay9J0SZZrNhcaIsYsI4BxPr31Hc= Subject key identifier: 47:07:A9:A5:3C:3B:32:1A:6F:FA:7F:98:81:C2:65:B2:B7:BA:22:86 Authority key identifier: F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80 Certificate issuer: /CN=A91D7F76/serialNumber=F73F3E11866CFCF36738F8429E4C0803B7E5BD80 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft Manifest number: 0707 Signing time: Mon 06 May 2024 22:44:41 +0000 Manifest this update: Mon 06 May 2024 22:44:40 +0000 Manifest next update: Mon 13 May 2024 22:44:40 +0000 Files and hashes: 1: 9z8-EYZs_PNnOPhCnkwIA7flvYA.crl (hash: ETm+TR2Luc2ad1D+oGLWLHEMNUQ8aK11cP9HmT0kfVo=) 2: 1215F814F8B411EAA6C4ED51C4F9AE02.roa (hash: EE8PcUk4eMMiefCKie//b0DfNzrIcPkOJWhUG9EKyxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.crl rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7F76/serialNumber=F73F3E11866CFCF36738F8429E4C0803B7E5BD80 Validity Not Before: May 6 22:44:40 2024 GMT Not After : May 13 22:44:40 2024 GMT Subject: CN=66395d59-de6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:f0:95:a5:d6:04:c9:6e:c3:31:79:5d:fd: ef:d2:4f:b9:8c:4b:f3:a3:0e:88:19:88:99:bf:1d: 74:dc:ec:f6:f3:d0:b2:a2:19:d8:4a:87:2d:34:f0: 48:b3:86:9a:88:32:d8:24:06:1c:8b:6f:ad:4c:ae: 1f:11:f3:61:d7:70:6b:1f:f1:9d:b6:bb:4f:d1:c8: 8e:ce:02:05:f0:4d:20:80:99:31:66:d7:e2:35:9b: 0e:26:32:de:05:c3:1a:b6:25:eb:9c:fc:3c:93:74: 1d:fb:e4:97:25:24:e9:42:35:a5:24:d7:11:93:de: 7f:28:3a:55:82:09:7d:b9:a0:de:07:53:47:50:5e: 3f:82:39:2c:9d:c4:ad:bc:b0:f4:fa:61:49:72:ec: 8c:d7:45:00:94:62:c9:4a:fe:f7:e5:5c:21:9a:ba: b8:1e:cd:40:03:0f:c6:ea:2b:9d:ee:a1:6b:df:9d: a0:69:38:85:2d:98:e5:4e:68:0b:2b:b8:d7:0d:87: e3:db:92:b0:ce:f4:53:c7:53:37:51:ce:eb:86:73: 27:39:ed:75:34:a9:f6:c0:fc:bc:00:fd:8e:41:f1: ab:3e:04:22:f3:c5:bb:a8:73:71:bd:f7:6c:e1:c1: cd:99:64:cf:67:45:10:d8:83:09:af:53:7e:a7:93: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:A9:A5:3C:3B:32:1A:6F:FA:7F:98:81:C2:65:B2:B7:BA:22:86 X509v3 Authority Key Identifier: keyid:F7:3F:3E:11:86:6C:FC:F3:67:38:F8:42:9E:4C:08:03:B7:E5:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9z8-EYZs_PNnOPhCnkwIA7flvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7F76/DB008624F63211EA9CF70561C4F9AE02/9z8-EYZs_PNnOPhCnkwIA7flvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1d:8d:6c:08:51:f9:8d:33:aa:7c:55:85:fa:30:5e:d3:a7: e9:7e:49:72:b0:80:a7:ad:6e:10:c6:ea:8b:65:c7:c4:c6:43: a9:6e:75:7f:9b:cc:66:27:8a:f9:8e:c8:46:d6:a8:1c:48:01: 18:23:c9:20:6b:38:ac:3d:df:6e:44:15:84:dc:2a:79:96:ea: 46:76:97:a8:28:ec:63:97:61:2d:ac:ed:5f:36:1b:ba:fa:e6: 33:cc:31:b2:47:58:a1:5f:af:e1:a5:0a:6b:e6:3a:b8:ec:00: 02:59:b4:ac:0e:af:97:8a:5f:b6:21:b7:26:7e:c8:a6:da:a5: 63:91:a9:c2:d7:dd:ce:92:a1:1f:4c:16:51:17:74:1d:19:c5: 8f:04:16:d3:3a:95:eb:13:f0:fd:62:9a:10:87:67:db:ed:9e: 8e:01:8a:6b:3e:f0:b8:26:4b:1f:2a:fb:e1:24:a5:6b:d2:03: 65:9e:fe:7d:e5:1f:e3:b8:61:3f:c2:98:ca:37:74:ab:89:f8: b5:d0:58:cd:a1:be:f6:65:46:61:05:66:1a:0a:f5:ef:2a:24: 19:17:9c:41:6f:c1:61:4d:ab:f6:2a:ed:1b:83:61:25:c8:15: 25:14:c8:21:f5:f2:77:10:52:42:f2:fb:b7:2e:7d:5b:f6:60: 2b:44:8c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdGNzYxMTAvBgNVBAUTKEY3M0YzRTExODY2Q0ZDRjM2NzM4Rjg0MjlFNEMwODAz QjdFNUJEODAwHhcNMjQwNTA2MjI0NDQwWhcNMjQwNTEzMjI0NDQwWjAYMRYwFAYD VQQDEw02NjM5NWQ1OS1kZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GrwlaXWBMluwzF5Xf3v0k+5jEvzow6IGYiZvx103Oz289CyohnYSoctNPBI s4aaiDLYJAYci2+tTK4fEfNh13BrH/GdtrtP0ciOzgIF8E0ggJkxZtfiNZsOJjLe BcMatiXrnPw8k3Qd++SXJSTpQjWlJNcRk95/KDpVggl9uaDeB1NHUF4/gjksncSt vLD0+mFJcuyM10UAlGLJSv735Vwhmrq4Hs1AAw/G6iud7qFr352gaTiFLZjlTmgL K7jXDYfj25KwzvRTx1M3Uc7rhnMnOe11NKn2wPy8AP2OQfGrPgQi88W7qHNxvfds 4cHNmWTPZ0UQ2IMJr1N+p5OyGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcHqaU8 OzIab/p/mIHCZbK3uiKGMB8GA1UdIwQYMBaAFPc/PhGGbPzzZzj4Qp5MCAO35b2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Y3Ni9EQjAwODYyNEY2 MzIxMUVBOUNGNzA1NjFDNEY5QUUwMi85ejgtRVlac19QTm5PUGhDbmt3SUE3Zmx2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6OC1FWVpzX1BObk9QaENua3dJQTdmbHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Y3Ni9EQjAwODYyNEY2MzIxMUVBOUNGNzA1NjFDNEY5QUUwMi85ejgtRVlac19Q Tm5PUGhDbmt3SUE3Zmx2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwHY1sCFH5jTOqfFWF+jBe06fpfklysICnrW4QxuqLZcfExkOpbnV/ m8xmJ4r5jshG1qgcSAEYI8kgazisPd9uRBWE3Cp5lupGdpeoKOxjl2EtrO1fNhu6 +uYzzDGyR1ihX6/hpQpr5jq47AACWbSsDq+Xil+2Ibcmfsim2qVjkanC193OkqEf TBZRF3QdGcWPBBbTOpXrE/D9YpoQh2fb7Z6OAYprPvC4JksfKvvhJKVr0gNlnv59 5R/juGE/wpjKN3Srifi10FjNob72ZUZhBWYaCvXvKiQZF5xBb8FhTav2Ku0bg2El yBUlFMgh9fJ3EFJC8vu3Ln1b9mArRIwh -----END CERTIFICATE-----Generated at Tue May 7 00:53:25 2024 by rpki-client on console-ams.rpki-client.org