$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: vmBU+6JG9/N3COMqWWXzcLmiHFIVm8K1umPiILlIuzo= Subject key identifier: 5A:E3:5F:09:16:EF:F5:1E:29:84:03:F1:89:43:B5:1D:C6:63:CD:A8 Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 0193 Signing time: Sat 01 Jun 2024 05:55:54 +0000 Manifest this update: Sat 01 Jun 2024 05:55:53 +0000 Manifest next update: Sat 08 Jun 2024 05:55:53 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: Qz5HHeYinDMZcPUPejgwjngif4rGPEnz45gEwBKPxI4=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: cKa9eR42THXESBXh5GR6j0R3nTxgHwhQOzuCbJGCePs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Jun 1 05:55:53 2024 GMT Not After : Jun 8 05:55:53 2024 GMT Subject: CN=665ab7e9-df81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:e3:fb:dc:80:0c:4c:2d:69:1d:b5:a1:99: e3:26:14:a4:58:d0:64:c1:5f:9c:23:bf:76:3f:4c: 20:54:d2:80:48:f7:7d:b6:2a:84:62:a3:47:1f:bc: cb:4f:c1:d9:cb:a8:8d:bb:b4:8a:9d:91:7e:e3:c9: 1a:20:a0:01:89:a4:39:b8:b0:65:70:86:c8:c9:a8: 00:e1:9f:59:12:63:5f:eb:ee:69:00:81:4d:07:f5: 97:bd:d6:f3:e4:ab:36:3e:49:52:1c:41:2f:3d:f0: a2:57:4e:a0:45:fb:59:11:b1:e0:c2:b9:6d:e8:db: c3:46:01:5c:38:3b:e5:82:ed:43:74:59:ff:4c:b5: 5e:79:0a:37:80:f7:bb:87:9f:c7:b3:ad:9a:86:29: bc:5d:2a:8b:4d:ee:db:35:b4:de:98:e4:a1:2d:48: 50:0d:29:2d:e1:83:4b:ad:98:30:6b:22:6f:d4:a3: 50:3a:30:f3:54:58:61:73:b2:2c:a8:10:d5:b5:9d: 55:5e:a8:74:ce:a1:dd:e6:00:10:5a:1e:8f:88:4a: 52:ae:9c:b1:72:fc:5f:22:9d:00:08:42:d0:2a:ea: 7c:1d:1e:57:ee:0a:b8:25:f1:b2:29:3f:84:7f:6a: 7d:af:82:19:f6:d7:da:d4:d9:c2:31:c6:dd:9c:48: 6f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:5F:09:16:EF:F5:1E:29:84:03:F1:89:43:B5:1D:C6:63:CD:A8 X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:95:f3:ba:5a:f7:e1:d2:75:0c:34:7d:50:b6:ba:1e:ce:9d: e0:07:fb:1d:27:72:34:d8:54:5d:1d:3b:49:d1:1e:7f:98:3e: 44:62:1f:67:bc:93:62:04:db:93:87:b5:88:c5:1c:df:91:77: f8:cc:a9:ec:3f:f7:48:de:27:1f:2e:b5:1c:81:b2:ec:42:09: 5e:d5:11:ee:ac:6e:62:2b:60:6e:46:10:3b:13:c4:20:3a:76: 77:3d:c2:98:28:b2:25:4c:81:38:88:ce:dd:63:6b:37:4f:c6: c7:d5:ed:99:3a:88:bf:4a:35:ad:80:9d:ae:c5:79:ca:de:bf: 6d:5f:88:27:cb:ec:9c:9f:77:02:0b:44:91:6f:0b:34:58:25: c8:cb:92:f9:c5:cc:8c:e9:9f:3e:bc:0b:b8:c6:24:23:98:7c: 9d:6f:81:cb:5b:dd:7d:da:04:ab:f3:cb:65:43:97:82:4a:7b: 1e:79:18:e1:22:d0:ee:b1:fe:98:ab:3e:3d:1b:c3:76:de:3a: cf:a6:b5:2e:fd:c6:01:1f:c6:b3:22:f6:74:1b:08:cf:dd:d1: dd:15:a3:a7:50:14:12:3d:2d:ab:8a:f4:ca:af:65:4a:57:68: 51:53:3b:00:e0:0c:76:15:7e:b2:81:7a:88:91:11:a8:82:00: 37:27:51:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjQwNjAxMDU1NTUzWhcNMjQwNjA4MDU1NTUzWjAYMRYwFAYD VQQDEw02NjVhYjdlOS1kZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm27j+9yADEwtaR21oZnjJhSkWNBkwV+cI792P0wgVNKASPd9tiqEYqNHH7zL T8HZy6iNu7SKnZF+48kaIKABiaQ5uLBlcIbIyagA4Z9ZEmNf6+5pAIFNB/WXvdbz 5Ks2PklSHEEvPfCiV06gRftZEbHgwrlt6NvDRgFcODvlgu1DdFn/TLVeeQo3gPe7 h5/Hs62ahim8XSqLTe7bNbTemOShLUhQDSkt4YNLrZgwayJv1KNQOjDzVFhhc7Is qBDVtZ1VXqh0zqHd5gAQWh6PiEpSrpyxcvxfIp0ACELQKup8HR5X7gq4JfGyKT+E f2p9r4IZ9tfa1NnCMcbdnEhvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrjXwkW 7/UeKYQD8YlDtR3GY82oMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzlfO6Wvfh0nUMNH1Qtroezp3gB/sdJ3I02FRdHTtJ0R5/mD5EYh9n vJNiBNuTh7WIxRzfkXf4zKnsP/dI3icfLrUcgbLsQgle1RHurG5iK2BuRhA7E8Qg OnZ3PcKYKLIlTIE4iM7dY2s3T8bH1e2ZOoi/SjWtgJ2uxXnK3r9tX4gny+ycn3cC C0SRbws0WCXIy5L5xcyM6Z8+vAu4xiQjmHydb4HLW9192gSr88tlQ5eCSnseeRjh ItDusf6Yqz49G8N23jrPprUu/cYBH8azIvZ0GwjP3dHdFaOnUBQSPS2rivTKr2VK V2hRUzsA4Ax2FX6ygXqIkRGoggA3J1Gr -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:35 2024 by rpki-client on console-fra.rpki-client.org