$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: sjKl5kIzPRubFqRIOQ7DbocANx85LrT8MEdHCZD0gjM= Subject key identifier: 32:21:1B:45:13:5E:3C:65:43:F8:A6:B7:FD:2C:EB:1F:C0:58:54:1D Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 9E Signing time: Sun 19 May 2024 06:54:08 +0000 Manifest this update: Sun 19 May 2024 06:54:08 +0000 Manifest next update: Sun 26 May 2024 06:54:08 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: AFT7AKv2S0BuhuxOzeTFVrYSC++I55U/0alRNVhhkns=) 2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: ZfmIY6qBamuTFcWcnnOhUOkgTdUVRtxdIetJEuqWEHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: May 19 06:54:08 2024 GMT Not After : May 26 06:54:08 2024 GMT Subject: CN=6649a210-35f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:c3:61:3f:85:99:f2:8d:96:c5:13:ab:a5: 6d:2c:71:2a:d7:56:19:78:c7:d2:d2:d2:13:56:99: 91:9a:f5:7a:1b:c6:f6:7a:cc:59:3b:0f:ae:01:30: 73:4a:6f:68:69:75:56:9e:44:5a:2f:34:9e:ae:27: b0:4a:3a:51:d9:89:46:a8:17:18:71:f9:1a:5c:24: 1d:56:43:65:49:01:59:4c:55:36:5e:56:7f:17:5e: 27:33:64:a9:4c:0c:98:db:f6:7d:2d:ca:4a:59:b6: 28:6c:4a:48:9e:e7:74:f8:9f:4a:d9:68:40:dd:b3: 92:94:0b:5a:33:9e:57:fa:2f:6b:c4:09:f6:d1:81: fa:e8:fa:25:00:b1:37:a9:a3:a0:1f:62:c6:4d:05: 1c:09:f2:79:f6:52:cf:06:2b:47:86:c6:14:a4:83: 48:95:ae:93:af:9c:00:c3:16:7f:bc:d6:3c:f0:07: 5e:fe:9d:d2:7e:86:f1:b4:03:88:16:9f:20:92:f3: b0:43:45:83:25:be:7f:33:61:08:96:54:38:90:a5: f8:30:22:8d:f4:27:1a:5b:9c:23:92:04:f5:93:c4: d4:6d:bc:e6:9d:d5:47:06:b7:a0:45:11:68:47:c7: 62:dd:da:3b:1a:cc:ca:fd:d6:0e:1d:6c:07:92:dd: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:1B:45:13:5E:3C:65:43:F8:A6:B7:FD:2C:EB:1F:C0:58:54:1D X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:e3:9f:a7:2f:74:60:c9:c4:f0:bb:e9:dd:68:0e:fb:ba: fd:86:74:ab:c6:ff:ad:54:8d:1e:85:77:fe:bb:fc:e1:19:b1: 91:03:41:91:36:87:ab:7c:fc:fb:f7:6a:da:84:c1:18:40:05: e4:3d:e7:60:95:d5:15:1c:4c:1c:2a:eb:87:17:87:30:52:f6: 83:5d:f8:4e:69:fc:14:ef:59:3a:f2:c8:80:25:30:f0:bf:de: e2:71:b4:ba:d5:0b:a8:25:3b:8e:9f:67:5f:4c:4e:ed:fe:07: 9d:bb:29:9f:63:0e:8d:bf:fb:14:40:23:35:c6:b9:37:eb:a8: c7:fa:55:0c:b7:ff:4e:f2:e3:0a:60:38:f5:1e:36:51:d0:e3: c4:e1:8d:50:36:99:4f:66:05:a8:1b:6d:f2:37:c8:9c:e7:6a: 73:e9:81:53:40:ea:04:6f:85:5e:21:d9:36:a3:b0:ef:9c:c9: ec:72:9e:37:15:79:52:f2:00:97:2b:b5:d0:d4:96:58:f4:78: 3e:43:2e:ca:37:15:5e:e2:ca:db:88:e2:c6:98:b0:a8:e3:ec: 8d:73:39:96:1c:43:35:7e:a7:80:f9:a9:1f:03:2b:c3:8b:38: 83:9d:77:35:6e:08:dc:29:c1:d6:75:0c:e6:e3:68:d0:93:db: 88:70:4b:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjQwNTE5MDY1NDA4WhcNMjQwNTI2MDY1NDA4WjAYMRYwFAYD VQQDEw02NjQ5YTIxMC0zNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllHDYT+FmfKNlsUTq6VtLHEq11YZeMfS0tITVpmRmvV6G8b2esxZOw+uATBz Sm9oaXVWnkRaLzSeriewSjpR2YlGqBcYcfkaXCQdVkNlSQFZTFU2XlZ/F14nM2Sp TAyY2/Z9LcpKWbYobEpInud0+J9K2WhA3bOSlAtaM55X+i9rxAn20YH66PolALE3 qaOgH2LGTQUcCfJ59lLPBitHhsYUpINIla6Tr5wAwxZ/vNY88Ade/p3SfobxtAOI Fp8gkvOwQ0WDJb5/M2EIllQ4kKX4MCKN9CcaW5wjkgT1k8TUbbzmndVHBregRRFo R8di3do7GszK/dYOHWwHkt22qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIhG0UT XjxlQ/imt/0s6x/AWFQdMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChuOOfpy90YMnE8Lvp3WgO+7r9hnSrxv+tVI0ehXf+u/zhGbGRA0GR NoerfPz792rahMEYQAXkPedgldUVHEwcKuuHF4cwUvaDXfhOafwU71k68siAJTDw v97icbS61QuoJTuOn2dfTE7t/geduymfYw6Nv/sUQCM1xrk366jH+lUMt/9O8uMK YDj1HjZR0OPE4Y1QNplPZgWoG23yN8ic52pz6YFTQOoEb4VeIdk2o7DvnMnscp43 FXlS8gCXK7XQ1JZY9Hg+Qy7KNxVe4srbiOLGmLCo4+yNczmWHEM1fqeA+akfAyvD iziDnXc1bgjcKcHWdQzm42jQk9uIcEuf -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org