$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: 44UPKlOfUfiq5qoSdEzkH2vTBYkg6oECrtF8oyWCBF4= Subject key identifier: D4:B2:88:12:3B:29:27:CA:B1:AF:D5:D0:E4:AB:8C:DC:EE:7A:96:DC Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 1874 Signing time: Thu 02 May 2024 17:55:22 +0000 Manifest this update: Thu 02 May 2024 17:55:21 +0000 Manifest next update: Thu 09 May 2024 17:55:21 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: ha03/V/OgqfNpg9Yj+ENLL5n/2b00JhIv824bqAOr3Y=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: 7HWChdbqFDlK6JpN1nMGu+HTwLQ/1PBTD2NalgxrXl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: May 2 17:55:21 2024 GMT Not After : May 9 17:55:21 2024 GMT Subject: CN=6633d389-7894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:8d:ca:62:1e:f2:a9:cf:66:67:49:57:2e: cb:74:36:f4:9b:6e:ee:8d:91:8c:bf:b6:d4:1c:8e: 54:e3:d7:d2:4d:b3:98:e0:5d:b9:ae:1d:af:c6:cc: 6a:bb:39:54:9f:40:e0:e5:94:3f:90:6e:ee:14:21: e6:3d:7d:84:21:7a:de:10:a5:43:75:f9:3c:55:cc: 22:08:64:ba:10:57:a5:61:9c:d5:31:4a:c5:3c:88: bc:0e:45:4b:6f:3a:1d:14:c5:3d:e7:c4:03:e2:17: 6c:9c:5d:da:02:04:0f:de:7b:62:21:ec:2d:e6:f7: 8e:24:ef:13:10:77:30:3a:27:49:2f:83:ef:38:47: 9a:78:e5:19:d2:0c:df:28:b1:4b:68:4a:94:0d:48: 5d:ee:d3:0b:66:6a:e2:ae:ac:98:c8:d9:5c:62:38: bc:b0:9a:ff:3c:5e:6b:c1:4e:c4:8c:51:e7:bf:99: 0e:e2:b3:bf:09:55:95:63:f9:35:f6:ff:12:ad:8f: 72:f7:98:28:71:d1:05:aa:55:38:27:52:ca:a2:e7: 9a:b8:13:75:4f:f4:74:e5:c8:f2:e6:c9:d5:b8:4b: e4:6a:9f:85:52:c5:da:bb:82:02:15:df:86:49:ec: 9a:46:bd:47:5a:34:fa:88:2d:71:62:46:49:40:6a: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:88:12:3B:29:27:CA:B1:AF:D5:D0:E4:AB:8C:DC:EE:7A:96:DC X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:57:2d:07:37:7c:bc:16:a0:95:68:91:a3:55:b6:8a:df:18: 3d:cf:0f:c1:80:ae:f6:42:1f:46:bb:d3:e7:e1:41:fb:94:47: df:86:6e:09:54:0a:1a:8b:b8:df:c2:64:fb:e1:7f:76:3d:dd: 46:97:e6:be:00:3a:be:6d:6d:ab:d3:58:f9:0a:00:00:5d:df: bf:fc:13:14:49:fa:79:af:e0:09:58:e0:77:cf:d4:1c:fc:f7: c8:41:10:53:dd:f0:ca:8e:49:29:e3:80:b1:ed:04:9d:d7:20: 32:6f:0a:23:5d:79:7e:0e:9b:08:a5:7d:8d:1a:da:2d:26:1b: f6:ce:03:7d:43:1e:07:7b:ec:92:8a:4d:b7:93:65:d7:29:5e: 04:0a:b8:f8:7e:a9:7b:6f:7d:ed:5d:d8:0e:9e:de:c4:4d:03: db:ab:5e:56:87:4d:f8:47:a4:60:95:58:04:55:40:23:3e:4a: 9d:14:4a:51:4b:bd:da:49:f3:72:ee:97:28:13:73:14:cf:89: 06:d0:f3:f9:c1:40:f1:54:80:2a:8b:f0:e5:42:0c:00:fa:89: ca:48:97:69:85:59:a9:cd:20:b5:f7:51:84:fc:fb:50:19:71: 80:b0:de:ea:88:8c:03:70:a6:b8:24:d8:34:9b:b2:ef:eb:33: e9:9f:0b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjQwNTAyMTc1NTIxWhcNMjQwNTA5MTc1NTIxWjAYMRYwFAYD VQQDEw02NjMzZDM4OS03ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBGNymIe8qnPZmdJVy7LdDb0m27ujZGMv7bUHI5U49fSTbOY4F25rh2vxsxq uzlUn0Dg5ZQ/kG7uFCHmPX2EIXreEKVDdfk8VcwiCGS6EFelYZzVMUrFPIi8DkVL bzodFMU958QD4hdsnF3aAgQP3ntiIewt5veOJO8TEHcwOidJL4PvOEeaeOUZ0gzf KLFLaEqUDUhd7tMLZmrirqyYyNlcYji8sJr/PF5rwU7EjFHnv5kO4rO/CVWVY/k1 9v8SrY9y95gocdEFqlU4J1LKoueauBN1T/R05cjy5snVuEvkap+FUsXau4ICFd+G SeyaRr1HWjT6iC1xYkZJQGo2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSyiBI7 KSfKsa/V0OSrjNzuepbcMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVVy0HN3y8FqCVaJGjVbaK3xg9zw/BgK72Qh9Gu9Pn4UH7lEffhm4J VAoai7jfwmT74X92Pd1Gl+a+ADq+bW2r01j5CgAAXd+//BMUSfp5r+AJWOB3z9Qc /PfIQRBT3fDKjkkp44Cx7QSd1yAybwojXXl+DpsIpX2NGtotJhv2zgN9Qx4He+yS ik23k2XXKV4ECrj4fql7b33tXdgOnt7ETQPbq15Wh034R6RglVgEVUAjPkqdFEpR S73aSfNy7pcoE3MUz4kG0PP5wUDxVIAqi/DlQgwA+onKSJdphVmpzSC191GE/PtQ GXGAsN7qiIwDcKa4JNg0m7Lv6zPpnwuU -----END CERTIFICATE-----Generated at Thu May 2 20:05:01 2024 by rpki-client on console-ams.rpki-client.org