$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: eeq/Sz9FMdwreeof/V1ifGH7zDPa+2ShtDLU/3MGKMk= Subject key identifier: AE:FC:65:F4:43:8B:61:0E:D0:F2:F8:33:43:CA:86:DF:5A:C2:81:07 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0F31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0F1B Signing time: Fri 31 May 2024 18:40:46 +0000 Manifest this update: Fri 31 May 2024 18:40:45 +0000 Manifest next update: Fri 07 Jun 2024 18:40:45 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: Q71eHNX8/4xgHeYpGzeXZvXpSBAWXLxXefRMbWy93Ow=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: t5d/tqSi5Ak9PYp92aRcAW1miOjLpd8PCdqy2sv9Qk4=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: May 31 18:40:45 2024 GMT Not After : Jun 7 18:40:45 2024 GMT Subject: CN=665a19ae-3b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:dd:a8:af:0b:d3:b4:ee:12:f0:f7:6e:a4: 34:4b:d2:2f:f6:5c:b0:f4:c8:6f:42:26:cf:78:c3: 7c:34:60:6c:58:38:e3:39:bd:b4:ef:f1:5f:25:f6: 9f:e3:a2:c6:cc:ac:41:1c:d5:15:c2:4b:49:47:d7: df:5e:90:44:a0:50:f6:2a:60:87:1f:c7:73:f2:47: b8:c9:09:bf:7c:c5:4a:ff:98:58:d5:0d:3c:58:00: 91:8e:3c:ab:f7:f7:05:b1:3a:02:5e:76:05:e4:36: e2:df:09:e0:7d:cc:31:ec:58:91:28:a4:ab:1f:01: 60:5c:cb:51:44:08:2d:c2:c3:5a:fe:62:d0:b2:31: 1e:f2:13:ac:86:12:a5:30:02:1f:19:8c:81:ad:89: 83:7b:22:ba:ff:13:54:2e:5a:d4:56:57:40:95:e6: 1d:36:c0:04:af:fd:48:64:b8:6a:ad:91:26:27:bd: 81:b4:d8:72:8f:ea:f0:bc:85:78:31:0e:96:8f:91: 25:3b:cc:d6:79:25:80:a5:9f:b4:1a:e0:2f:cc:eb: f4:78:59:d8:78:06:a5:94:6e:f5:78:f5:cd:c1:ea: 3d:cd:0a:bd:fe:0f:46:5e:c3:8a:6a:02:fd:c3:78: 91:67:9d:92:79:b7:f0:2f:76:19:65:d3:3d:7f:cb: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:65:F4:43:8B:61:0E:D0:F2:F8:33:43:CA:86:DF:5A:C2:81:07 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:e1:0f:44:9e:a7:fb:1c:a1:15:3f:f8:71:be:82:38:b4: 87:b5:59:28:ab:2f:8b:1a:a3:70:f0:3e:72:ab:42:be:fb:27: 5a:ba:7a:85:d0:7f:bc:a1:9f:64:4f:e7:16:86:65:78:89:c6: c9:2e:b5:d8:89:2c:55:7e:fc:b9:52:18:ff:ad:92:83:c8:55: c8:30:9a:27:85:4a:8f:2c:0a:37:5c:82:07:28:e2:de:53:c3: f9:c0:52:44:c3:ac:81:b4:01:e3:f4:50:46:84:f3:41:2f:fc: e5:e6:27:f0:35:8f:33:1a:b9:95:b2:30:c6:c4:58:17:4f:62: 17:54:66:62:53:7a:b8:01:ce:f8:42:b4:08:73:f8:2c:f3:7d: af:05:2e:d4:b7:7a:8b:d8:12:41:e2:49:1b:84:37:16:d9:a4: e9:5a:7d:a1:66:a4:60:e7:f3:7e:e8:9d:05:0a:da:e2:e6:4f: 16:7b:2c:76:fe:59:46:7c:11:7a:74:51:24:fa:98:e2:38:3f: b1:a7:c5:11:30:ee:e1:7d:5c:60:80:3d:ea:b3:9b:5b:d1:e2: ca:62:2b:62:3e:aa:4f:d1:67:d7:7b:79:bd:e3:c5:b7:94:b0: 65:15:cf:c6:bc:a1:42:28:cc:21:86:30:8d:bf:7c:7b:a1:97: f9:a3:43:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjQwNTMxMTg0MDQ1WhcNMjQwNjA3MTg0MDQ1WjAYMRYwFAYD VQQDEw02NjVhMTlhZS0zYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWfdqK8L07TuEvD3bqQ0S9Iv9lyw9MhvQibPeMN8NGBsWDjjOb207/FfJfaf 46LGzKxBHNUVwktJR9ffXpBEoFD2KmCHH8dz8ke4yQm/fMVK/5hY1Q08WACRjjyr 9/cFsToCXnYF5Dbi3wngfcwx7FiRKKSrHwFgXMtRRAgtwsNa/mLQsjEe8hOshhKl MAIfGYyBrYmDeyK6/xNULlrUVldAleYdNsAEr/1IZLhqrZEmJ72BtNhyj+rwvIV4 MQ6Wj5ElO8zWeSWApZ+0GuAvzOv0eFnYeAallG71ePXNweo9zQq9/g9GXsOKagL9 w3iRZ52SebfwL3YZZdM9f8t9EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK78ZfRD i2EO0PL4M0PKht9awoEHMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZuEPRJ6n+xyhFT/4cb6COLSHtVkoqy+LGqNw8D5yq0K++ydaunqF 0H+8oZ9kT+cWhmV4icbJLrXYiSxVfvy5Uhj/rZKDyFXIMJonhUqPLAo3XIIHKOLe U8P5wFJEw6yBtAHj9FBGhPNBL/zl5ifwNY8zGrmVsjDGxFgXT2IXVGZiU3q4Ac74 QrQIc/gs832vBS7Ut3qL2BJB4kkbhDcW2aTpWn2hZqRg5/N+6J0FCtri5k8Weyx2 /llGfBF6dFEk+pjiOD+xp8URMO7hfVxggD3qs5tb0eLKYitiPqpP0WfXe3m948W3 lLBlFc/GvKFCKMwhhjCNv3x7oZf5o0Pb -----END CERTIFICATE-----Generated at Fri May 31 20:34:01 2024 by rpki-client on console-ams.rpki-client.org