$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft File: B9hag3mLsXa8AxU9UQprljJs9WQ.mft (raw, json) Hash identifier: usx00QK3JLmPNBbPwRjEt0N3diLHAen5JQOLWUzXoWw= Subject key identifier: A9:E7:C4:53:39:5B:B2:45:66:C3:5E:5B:FB:DA:8F:3E:54:E6:4F:08 Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 Certificate issuer: /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft Manifest number: 9D Signing time: Sun 19 May 2024 06:49:46 +0000 Manifest this update: Sun 19 May 2024 06:49:45 +0000 Manifest next update: Sun 26 May 2024 06:49:45 +0000 Files and hashes: 1: B9hag3mLsXa8AxU9UQprljJs9WQ.crl (hash: NHIySXX1qhk7H0wgkoYMnMPaJ47T7kR0UnlU7L/q9Dc=) 2: 51BD88882B6011EEB0127E84C4F9AE02.roa (hash: 81gMp9DGHYjkYLUL7/F49o0KJ2c+VbzZxj1jqOt4vVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564 Validity Not Before: May 19 06:49:45 2024 GMT Not After : May 26 06:49:45 2024 GMT Subject: CN=6649a109-8547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:db:a4:ca:0b:a2:93:f4:66:14:a5:94:06: c6:4b:78:34:a9:8c:84:3c:15:84:c2:ed:7f:bc:cf: a8:be:60:d1:9a:ac:6b:3b:dc:35:2e:b3:a4:76:5b: df:a1:8d:d9:4f:61:85:d1:73:43:5f:23:f3:49:5f: 30:07:e3:29:43:28:e8:ff:42:1d:19:ae:d8:67:74: e3:c9:8c:8f:7d:63:d9:6d:2d:7b:3d:d0:47:b6:df: 73:44:80:a3:73:6c:4f:56:fa:dc:2d:5c:02:2c:b1: 0f:85:d9:68:65:3a:12:f7:0c:07:df:09:ae:47:8e: 80:77:2a:bf:8b:ea:6e:de:ef:72:35:e2:81:c4:1f: 5f:33:60:62:b2:51:f4:11:98:c1:2d:9e:94:6b:53: f9:0f:7b:14:de:f8:19:33:ad:d7:e2:03:bc:51:8a: 21:6f:58:23:9e:e2:07:83:ce:e3:5e:fc:4e:26:2d: fe:b2:9a:80:33:e6:4e:cf:a2:dd:19:43:47:df:42: ce:df:7e:d8:80:77:e5:93:fa:4c:33:7f:98:ef:a6: 38:46:5a:42:e5:b1:e8:66:7d:c7:9a:15:3f:92:d4: 13:84:cc:46:ac:03:ae:14:da:f3:d6:1a:60:6e:42: 05:72:81:a1:e5:17:ae:0b:23:2b:e5:16:ca:07:84: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E7:C4:53:39:5B:B2:45:66:C3:5E:5B:FB:DA:8F:3E:54:E6:4F:08 X509v3 Authority Key Identifier: keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8f:35:4b:8d:e9:a3:bb:a6:73:f7:92:67:45:e8:96:31:04: 75:9e:49:64:c1:15:66:3c:2f:2f:19:38:19:4a:38:65:6f:c5: ae:82:a2:0e:3e:2a:89:d8:76:2c:54:c6:62:18:b7:88:55:f3: 86:00:c3:ae:3a:78:2c:fe:0b:7c:0c:4d:28:51:94:6e:5b:5a: e9:d6:90:45:cb:d6:e8:37:bf:01:0b:93:6b:2e:31:15:5c:eb: fc:96:bd:14:13:6d:be:ef:a6:02:79:38:98:56:60:e7:9a:5d: 50:32:bf:b5:4e:4b:25:61:97:18:af:20:42:77:a4:d6:95:c3: c0:06:f9:00:5c:8f:c0:27:ba:0d:a8:11:97:23:d9:c2:77:a5: 5d:b2:2d:3d:19:51:e9:b1:be:ed:af:9f:da:c0:e0:ed:c4:c0: 91:d3:0a:f3:84:35:12:01:7f:b6:3c:6d:0c:1e:c8:b5:6b:49: a2:ee:9a:d2:7a:c4:33:57:63:3f:b1:6e:95:2d:a7:b8:d3:7f: 3f:e0:57:a8:d3:c1:2a:2a:46:23:18:e0:ab:33:17:52:93:12: b7:f1:7c:bb:16:f5:cc:58:5e:81:3e:82:a0:7d:bb:27:89:62: 20:26:61:59:dc:15:d8:7c:a7:28:c1:d8:ac:38:ec:7c:18:a7: da:cf:84:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM2MDAxMTAvBgNVBAUTKDA3RDg1QTgzNzk4QkIxNzZCQzAzMTUzRDUxMEE2Qjk2 MzI2Q0Y1NjQwHhcNMjQwNTE5MDY0OTQ1WhcNMjQwNTI2MDY0OTQ1WjAYMRYwFAYD VQQDEw02NjQ5YTEwOS04NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KTbpMoLopP0ZhSllAbGS3g0qYyEPBWEwu1/vM+ovmDRmqxrO9w1LrOkdlvf oY3ZT2GF0XNDXyPzSV8wB+MpQyjo/0IdGa7YZ3TjyYyPfWPZbS17PdBHtt9zRICj c2xPVvrcLVwCLLEPhdloZToS9wwH3wmuR46Adyq/i+pu3u9yNeKBxB9fM2BislH0 EZjBLZ6Ua1P5D3sU3vgZM63X4gO8UYohb1gjnuIHg87jXvxOJi3+spqAM+ZOz6Ld GUNH30LO337YgHflk/pMM3+Y76Y4RlpC5bHoZn3HmhU/ktQThMxGrAOuFNrz1hpg bkIFcoGh5ReuCyMr5RbKB4SodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnnxFM5 W7JFZsNeW/vajz5U5k8IMB8GA1UdIwQYMBaAFAfYWoN5i7F2vAMVPVEKa5YybPVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzYwMC9BQzk2NEY1ODJC MkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNYYThBeFU5VVFwcmxqSnM5 V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I5aGFnM21Mc1hhOEF4VTlVUXBybGpKczlXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzYwMC9BQzk2NEY1ODJCMkMxMUVFOEE1M0QzMTRDNEY5QUUwMi9COWhhZzNtTHNY YThBeFU5VVFwcmxqSnM5V1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCejzVLjemju6Zz95JnReiWMQR1nklkwRVmPC8vGTgZSjhlb8WugqIO PiqJ2HYsVMZiGLeIVfOGAMOuOngs/gt8DE0oUZRuW1rp1pBFy9boN78BC5NrLjEV XOv8lr0UE22+76YCeTiYVmDnml1QMr+1TkslYZcYryBCd6TWlcPABvkAXI/AJ7oN qBGXI9nCd6Vdsi09GVHpsb7tr5/awODtxMCR0wrzhDUSAX+2PG0MHsi1a0mi7prS esQzV2M/sW6VLae4038/4Feo08EqKkYjGOCrMxdSkxK38Xy7FvXMWF6BPoKgfbsn iWIgJmFZ3BXYfKcowdisOOx8GKfaz4Qj -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org