$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: eOmGYN2jbEvmWFI75tyECK45wbpHh60jeoh8Qbutyfo= Subject key identifier: 92:6F:A8:56:BF:04:0F:68:B9:79:C3:9C:E3:45:77:69:89:46:D3:D0 Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 79 Signing time: Sun 19 May 2024 07:18:29 +0000 Manifest this update: Sun 19 May 2024 07:18:28 +0000 Manifest next update: Sun 26 May 2024 07:18:28 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: +wICLhNzykcqts6vpkSwVP0Qd72y78icj8ylet+qh54=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: o55KXlNWDYgYilXArl5bImR1LdWp/l3E7h7ZfHpF6KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: May 19 07:18:28 2024 GMT Not After : May 26 07:18:28 2024 GMT Subject: CN=6649a7c4-92a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:04:d7:6c:40:b8:1f:0f:67:7a:5e:7a:c6:b4: 4e:a3:3b:45:cf:84:59:28:fb:29:96:1c:06:c9:a1: 02:ec:cd:da:b5:66:cc:d5:c1:96:ac:bd:c0:4c:de: d6:77:fe:21:3b:c5:b5:62:6b:15:d5:b0:a5:c2:95: 59:b9:ce:cc:45:2b:cc:9e:1e:a6:5c:f5:5f:9d:aa: d8:ac:1f:69:49:4c:b2:93:dc:da:5a:29:ff:ac:4c: 7b:1e:9a:5a:d0:af:57:93:73:78:2b:ab:fe:c5:d3: ef:77:2b:35:43:39:6c:88:9f:05:0c:9e:d2:d1:6b: c1:55:bf:29:5b:f1:a9:a2:c1:d1:2e:2f:5e:c7:ea: 37:b0:ba:88:b6:c5:c0:54:96:b3:13:02:55:c0:27: bb:db:a1:92:ca:8f:77:99:ee:76:fb:b2:58:17:23: 07:71:4e:c9:ec:13:02:b7:76:d7:8f:fa:42:f7:0e: 15:b9:07:94:0e:32:23:04:2f:c9:fe:7a:92:bf:77: 37:6b:fb:58:47:7d:3b:8a:4f:26:1e:dd:c9:bc:a2: 1b:2e:0d:c7:be:ac:00:eb:43:b6:d9:59:c2:38:56: cc:d7:c4:cc:e3:7e:21:78:94:2d:27:be:e0:55:68: 33:b4:95:dc:9c:ef:14:41:74:f4:df:24:19:94:87: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:A8:56:BF:04:0F:68:B9:79:C3:9C:E3:45:77:69:89:46:D3:D0 X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c9:8f:67:0b:b4:22:10:51:fe:15:00:d1:5d:3d:72:bb:59: 3a:1f:fa:22:4a:ee:2a:d2:79:16:2a:f4:71:e4:ff:16:a3:b3: 99:97:c3:4d:dc:86:75:cb:70:07:45:3c:73:64:42:5b:59:aa: 68:c5:84:07:b2:3a:71:75:b0:d7:fa:51:1d:5f:10:bb:95:dd: 1a:04:d2:92:ca:f1:8d:0c:03:92:5b:4f:00:9d:d8:20:88:a9: 82:e9:6e:2d:ca:cb:9f:73:c6:85:4a:e1:6d:b7:a9:00:23:32: 29:85:da:d9:33:d4:3a:4e:6f:95:7c:f8:b9:0d:7b:32:2a:e5: 17:32:a4:4e:e2:29:77:eb:8e:ec:94:cf:2e:e4:fd:e2:ce:e2: 99:ef:00:9c:af:2a:75:d5:ab:f2:83:75:8a:71:40:d7:20:64: 55:5b:e2:31:78:e8:7f:5b:2b:b3:89:98:17:f4:ad:56:5d:ec: b9:c8:f2:6f:a2:aa:9d:f8:49:68:df:b6:c1:51:73:6b:74:e5: cc:f1:14:cb:66:9f:4e:e1:4a:66:1c:f1:85:8a:0a:c6:6e:50: 5b:23:4f:f4:91:bc:65:d3:9c:3e:06:c6:8e:8f:09:49:3f:d2: 55:fa:18:3d:6d:01:91:5b:89:7b:7e:ff:2d:74:cf:87:ad:71: ff:48:c7:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEFBQTExMC8GA1UEBRMoNkI1NzA5MzI5MEQxMUY2NUNGQjkxRjEyMTJDMjhDRjcz M0Y5QzJCNTAeFw0yNDA1MTkwNzE4MjhaFw0yNDA1MjYwNzE4MjhaMBgxFjAUBgNV BAMTDTY2NDlhN2M0LTkyYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7BNdsQLgfD2d6XnrGtE6jO0XPhFko+ymWHAbJoQLszdq1ZszVwZasvcBM3tZ3 /iE7xbViaxXVsKXClVm5zsxFK8yeHqZc9V+dqtisH2lJTLKT3NpaKf+sTHsemlrQ r1eTc3grq/7F0+93KzVDOWyInwUMntLRa8FVvylb8amiwdEuL17H6jewuoi2xcBU lrMTAlXAJ7vboZLKj3eZ7nb7slgXIwdxTsnsEwK3dteP+kL3DhW5B5QOMiMEL8n+ epK/dzdr+1hHfTuKTyYe3cm8ohsuDce+rADrQ7bZWcI4VszXxMzjfiF4lC0nvuBV aDO0ldyc7xRBdPTfJBmUh675AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkm+oVr8E D2i5ecOc40V3aYlG09AwHwYDVR0jBBgwFoAUa1cJMpDRH2XPuR8SEsKM9zP5wrUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQUFBLzBDQTc3QzgyNUM0 NzExRUVBQTlGRTk2NkM0RjlBRTAyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFjSk1wRFJIMlhQdVI4U0VzS005elA1d3JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw QUFBLzBDQTc3QzgyNUM0NzExRUVBQTlGRTk2NkM0RjlBRTAyL2ExY0pNcERSSDJY UHVSOFNFc0tNOXpQNXdyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD3Jj2cLtCIQUf4VANFdPXK7WTof+iJK7irSeRYq9HHk/xajs5mXw03c hnXLcAdFPHNkQltZqmjFhAeyOnF1sNf6UR1fELuV3RoE0pLK8Y0MA5JbTwCd2CCI qYLpbi3Ky59zxoVK4W23qQAjMimF2tkz1DpOb5V8+LkNezIq5RcypE7iKXfrjuyU zy7k/eLO4pnvAJyvKnXVq/KDdYpxQNcgZFVb4jF46H9bK7OJmBf0rVZd7LnI8m+i qp34SWjftsFRc2t05czxFMtmn07hSmYc8YWKCsZuUFsjT/SRvGXTnD4Gxo6PCUk/ 0lX6GD1tAZFbiXt+/y10z4etcf9Ix+w= -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org