$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: 0cl5ZBfl3+UNuf386DBE5vvafhqX3yy3nHTnr0mvZ4Q= Subject key identifier: 77:B7:3A:17:4A:0D:EC:77:1E:A0:72:8B:6D:64:2D:23:C1:5A:5D:85 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 9A Signing time: Sun 19 May 2024 06:49:55 +0000 Manifest this update: Sun 19 May 2024 06:49:54 +0000 Manifest next update: Sun 26 May 2024 06:49:54 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: aTNVTDvbrJuYiVCyMNGf6fZUfAt2fqUU33ePOr8N/ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: May 19 06:49:54 2024 GMT Not After : May 26 06:49:54 2024 GMT Subject: CN=6649a112-a3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:9a:4b:b9:a1:fd:80:20:c8:67:f4:69:3f: cc:da:73:d6:bb:f2:e7:71:82:bf:01:fd:4a:23:09: 29:5b:26:c6:5c:44:f6:99:14:6b:a2:fa:bf:39:e6: 0e:20:d9:7b:ad:0b:3d:a9:2f:ad:1e:1e:0e:9c:9f: ab:5b:26:f8:55:60:65:08:47:ce:c8:05:65:54:f5: 53:3c:56:9f:99:1a:15:cf:7c:4f:f0:05:9d:ef:2e: b6:b5:65:41:b7:6b:39:97:6e:6f:20:5d:4f:9b:31: a4:b3:86:68:e9:3b:32:5d:54:5e:67:9a:cd:13:08: d2:3a:e9:ba:7a:3c:f6:be:7d:aa:80:fd:97:9b:1d: 0e:21:b7:1b:32:98:42:fb:ea:11:ce:9a:e6:0c:53: c1:2b:8e:99:ea:e1:d0:91:19:c9:f9:47:df:d0:dc: 9a:9f:ad:5d:a9:63:e4:58:d7:4f:ef:93:3a:5c:1c: 97:42:f9:5a:6b:b4:84:cb:bd:30:f9:8a:3c:a3:46: 73:92:14:89:ac:e3:f3:71:40:5d:3b:45:49:e8:3c: 4f:56:9e:eb:1f:b1:0c:ff:89:13:92:53:58:34:44: bd:92:8f:b2:a6:83:82:3f:1b:93:9c:49:9e:16:91: 4e:1b:b9:ed:ff:95:e6:fa:48:82:8a:b1:89:cb:df: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:3A:17:4A:0D:EC:77:1E:A0:72:8B:6D:64:2D:23:C1:5A:5D:85 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:31:12:cc:42:9b:91:9a:16:ed:a1:da:be:da:76:b9:06:a0: c0:49:81:e8:bf:a9:f4:ff:3c:73:43:e7:37:40:fa:55:1c:1b: e5:27:95:74:8e:83:f6:60:78:a9:d0:a0:e3:9f:e6:05:7a:b2: e8:8d:85:92:47:25:69:34:80:3c:49:97:c5:db:32:61:32:db: 53:72:cf:ee:bb:3f:27:41:89:52:36:6e:b0:0c:f0:aa:d6:c0: c5:4a:ae:87:24:63:ba:14:5f:8d:8f:7d:40:be:08:c3:52:7a: 04:c7:5f:26:de:5a:54:11:71:6c:0b:0a:96:db:86:f9:d3:ec: ba:f4:a8:5a:14:db:29:64:33:17:1e:05:e9:04:3e:32:c3:92: 90:bc:fe:e0:0a:dd:f3:f0:ff:19:7f:7c:34:9e:5c:63:1e:92: 4a:ee:74:94:4b:ce:d1:79:71:89:8e:b1:34:87:62:c9:38:25: 20:54:0b:d1:3d:74:8b:73:08:45:00:fd:95:3c:76:7e:23:25: 5f:a6:c1:72:5b:88:51:b1:af:09:3d:52:4c:21:b1:5e:db:9f: 2f:f8:1c:77:62:01:b9:63:d0:a3:92:3d:26:85:67:96:2e:0d: 54:c8:d0:86:9b:85:e9:8a:48:be:6c:9a:43:be:fc:87:5b:28: 7a:7f:04:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjQwNTE5MDY0OTU0WhcNMjQwNTI2MDY0OTU0WjAYMRYwFAYD VQQDEw02NjQ5YTExMi1hM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPKaS7mh/YAgyGf0aT/M2nPWu/LncYK/Af1KIwkpWybGXET2mRRrovq/OeYO INl7rQs9qS+tHh4OnJ+rWyb4VWBlCEfOyAVlVPVTPFafmRoVz3xP8AWd7y62tWVB t2s5l25vIF1PmzGks4Zo6TsyXVReZ5rNEwjSOum6ejz2vn2qgP2Xmx0OIbcbMphC ++oRzprmDFPBK46Z6uHQkRnJ+Uff0Nyan61dqWPkWNdP75M6XByXQvlaa7SEy70w +Yo8o0ZzkhSJrOPzcUBdO0VJ6DxPVp7rH7EM/4kTklNYNES9ko+ypoOCPxuTnEme FpFOG7nt/5Xm+kiCirGJy98k2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe3OhdK Dex3HqByi21kLSPBWl2FMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXMRLMQpuRmhbtodq+2na5BqDASYHov6n0/zxzQ+c3QPpVHBvlJ5V0 joP2YHip0KDjn+YFerLojYWSRyVpNIA8SZfF2zJhMttTcs/uuz8nQYlSNm6wDPCq 1sDFSq6HJGO6FF+Nj31AvgjDUnoEx18m3lpUEXFsCwqW24b50+y69KhaFNspZDMX HgXpBD4yw5KQvP7gCt3z8P8Zf3w0nlxjHpJK7nSUS87ReXGJjrE0h2LJOCUgVAvR PXSLcwhFAP2VPHZ+IyVfpsFyW4hRsa8JPVJMIbFe258v+Bx3YgG5Y9Cjkj0mhWeW Lg1UyNCGm4Xpiki+bJpDvvyHWyh6fwQI -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org