$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: xhd7CHZ2CKxbNrmfkJ0XD0Ul8af2Lb31sataSFdzvyw= Subject key identifier: 9C:0A:DF:86:8D:0A:6D:EA:87:09:FC:0D:66:C4:77:83:4F:1F:03:5F Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 33CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 33C7 Signing time: Mon 06 May 2024 14:56:35 +0000 Manifest this update: Mon 06 May 2024 14:56:35 +0000 Manifest next update: Mon 13 May 2024 14:56:35 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: jpBUiC4P6YDuk14OTc8wAHBXf0ShFY6ACukGuKG+xGQ=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: iAaMJdDCQeuzFuYKnuVasAJoPnDm/i8DMFyMfoTrrkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13262 (0x33ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: May 6 14:56:35 2024 GMT Not After : May 13 14:56:35 2024 GMT Subject: CN=6638efa3-059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d8:a8:2e:64:46:5f:bb:f2:f4:32:ed:18:f4: cd:a7:31:d0:b2:e5:7e:0d:eb:7f:da:61:11:26:cf: db:ad:4f:33:c3:31:79:3d:d6:32:bb:f3:68:ca:4f: 5d:4b:f9:79:1b:bd:28:e1:c4:3c:e5:41:bf:e9:82: 27:f7:fc:de:cf:6d:22:cc:3f:fd:c4:57:12:04:11: 43:a5:39:45:8c:1f:92:5d:3d:36:83:58:dd:8f:41: 92:33:96:8f:f1:22:c1:f6:13:49:7f:f5:60:6e:dc: c3:8f:e7:b6:e0:5e:93:c6:f2:dd:fb:6c:43:d2:56: 00:44:48:a3:c7:a9:00:b1:11:63:cd:99:ca:40:81: 54:58:0d:c5:87:4d:1e:5b:2f:c2:63:26:ba:b2:00: 7e:e1:db:21:b2:5a:40:11:72:ae:b2:86:2c:b0:76: c4:be:b8:f7:1a:45:58:5d:36:b8:0a:8c:8a:42:ba: c3:93:f3:74:26:dd:e4:f9:dc:a9:1f:7d:8e:26:14: 32:ae:85:c3:90:fd:88:c2:96:30:04:4f:a0:33:0d: 0f:16:4f:11:65:1c:f7:04:c7:b2:eb:08:89:d0:32: 50:02:2c:22:4f:7b:a7:c8:aa:db:b2:99:26:3f:10: c0:00:63:de:95:2d:35:38:8c:e6:a4:35:f3:c3:50: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0A:DF:86:8D:0A:6D:EA:87:09:FC:0D:66:C4:77:83:4F:1F:03:5F X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cc:41:8b:cd:cb:2e:8d:fc:da:b0:24:66:3e:df:53:45:32: 7a:b7:b3:f6:1b:fd:d3:e7:2b:9e:17:a1:02:fb:f9:89:e7:18: 7a:e3:2b:0f:c9:93:16:2d:1e:58:d7:bb:e1:49:9d:75:fb:a5: 91:de:d4:63:5a:5b:3a:df:a6:2c:74:07:84:71:e1:1f:df:4b: 20:bb:9b:36:1b:10:fb:92:a6:f9:5b:fd:56:9d:a6:97:7e:e1: fc:01:23:77:ac:2d:fd:93:9b:d2:fc:b4:58:64:38:56:b4:ad: 45:49:78:6a:18:3a:bd:d2:90:ae:c9:b9:f4:ac:11:62:74:05: 3a:e8:33:f3:d0:bc:16:c2:21:d9:0e:83:09:e1:ea:bd:20:37: 87:c4:d5:3a:f4:0a:c5:cd:b7:cd:c9:33:38:fc:04:3a:b6:a3: 08:38:a4:43:14:af:28:94:f2:08:26:e7:11:db:e2:ad:ea:96: 09:fd:68:d6:d5:f7:11:bd:4a:b4:ad:99:dc:d7:84:2c:d9:d1: e2:48:8d:f3:0f:70:53:38:4a:39:29:35:2a:81:94:09:26:78: ec:02:df:ab:31:a2:0a:dd:3b:dc:8a:b7:59:50:47:bf:b0:bc: 09:3c:04:c8:19:36:76:3f:bf:e7:0a:26:93:27:53:70:11:50: a0:e2:92:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjQwNTA2MTQ1NjM1WhcNMjQwNTEzMTQ1NjM1WjAYMRYwFAYD VQQDEw02NjM4ZWZhMy0wNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tioLmRGX7vy9DLtGPTNpzHQsuV+Det/2mERJs/brU8zwzF5PdYyu/Noyk9d S/l5G70o4cQ85UG/6YIn9/zez20izD/9xFcSBBFDpTlFjB+SXT02g1jdj0GSM5aP 8SLB9hNJf/VgbtzDj+e24F6TxvLd+2xD0lYAREijx6kAsRFjzZnKQIFUWA3Fh00e Wy/CYya6sgB+4dshslpAEXKusoYssHbEvrj3GkVYXTa4CoyKQrrDk/N0Jt3k+dyp H32OJhQyroXDkP2IwpYwBE+gMw0PFk8RZRz3BMey6wiJ0DJQAiwiT3unyKrbspkm PxDAAGPelS01OIzmpDXzw1B1hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwK34aN Cm3qhwn8DWbEd4NPHwNfMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYzEGLzcsujfzasCRmPt9TRTJ6t7P2G/3T5yueF6EC+/mJ5xh64ysP yZMWLR5Y17vhSZ11+6WR3tRjWls636YsdAeEceEf30sgu5s2GxD7kqb5W/1WnaaX fuH8ASN3rC39k5vS/LRYZDhWtK1FSXhqGDq90pCuybn0rBFidAU66DPz0LwWwiHZ DoMJ4eq9IDeHxNU69ArFzbfNyTM4/AQ6tqMIOKRDFK8olPIIJucR2+Kt6pYJ/WjW 1fcRvUq0rZnc14Qs2dHiSI3zD3BTOEo5KTUqgZQJJnjsAt+rMaIK3TvcirdZUEe/ sLwJPATIGTZ2P7/nCiaTJ1NwEVCg4pK1 -----END CERTIFICATE-----Generated at Mon May 6 17:43:27 2024 by rpki-client on console-ams.rpki-client.org