$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: POt9CmFB78kYGv19645LBky+2XkXqGCcyAludjauSWQ= Subject key identifier: A5:6C:70:50:03:B4:1D:72:90:41:1F:4A:10:F3:BC:FC:63:54:17:01 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0B88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0B81 Signing time: Sat 18 May 2024 19:24:56 +0000 Manifest this update: Sat 18 May 2024 19:24:56 +0000 Manifest next update: Sat 25 May 2024 19:24:56 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: TUneC7PpPn8tWzwFWcwrb4NIj2/quYhmZVMPo2d00GM=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: 8ePOlBYKqgy0MK4nBzW4xCCIxX7mzxm4E8sEUtNm6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: May 18 19:24:56 2024 GMT Not After : May 25 19:24:56 2024 GMT Subject: CN=66490088-080f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:bc:fb:bb:4a:b4:c8:e6:43:d5:cc:55:ae: 2c:d8:69:ac:e0:01:4e:e7:6f:7a:5e:e1:af:ca:50: ec:3f:b9:27:5d:74:fe:c9:f0:b2:7d:a4:5c:2b:fe: 4d:17:e7:fb:59:18:a6:25:50:2b:77:06:48:76:7d: 8a:db:53:b7:5a:51:7b:9d:b2:9d:f7:26:39:77:18: a1:a9:e0:65:69:fb:76:e6:ad:48:49:22:cc:c7:a8: b8:e6:31:fa:34:28:59:ed:74:af:38:e5:38:1f:de: 37:db:26:78:f8:fd:37:19:59:fb:9a:28:a5:64:51: c0:8b:4c:1f:e4:5c:9b:52:d8:a9:36:4a:c9:61:0a: 4a:87:4e:7b:2a:b4:d4:68:8e:13:da:b3:62:c4:50: b9:0d:22:17:c9:ec:b1:cd:21:8a:b5:31:ff:5c:40: 72:f7:09:44:64:6c:cc:e5:c0:11:b9:f6:39:5b:fd: 04:3c:fd:89:75:0b:8f:eb:27:6a:4f:82:65:58:55: 34:a5:d5:d5:e4:7e:01:36:3a:51:b8:4c:6a:18:c1: a1:e3:ac:51:22:bd:d0:4d:aa:d2:d2:e2:dc:78:c1: d7:67:f9:7f:6e:50:5e:74:7a:d9:a1:44:bc:9f:5d: b8:08:91:30:b6:18:5d:22:f2:92:5b:c6:c5:54:78: ef:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6C:70:50:03:B4:1D:72:90:41:1F:4A:10:F3:BC:FC:63:54:17:01 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f2:c9:37:c0:62:74:1c:d9:48:48:7b:dd:98:e4:fd:ef:3b: 4e:dc:a1:c1:9a:f8:66:e5:3e:5f:0f:83:af:3a:16:56:2e:52: 75:68:9c:1e:57:cd:0d:30:17:dd:1c:44:9f:68:6c:2b:72:29: 0e:e5:08:33:19:e1:62:c1:6c:76:d1:df:84:b7:3d:02:b6:0a: 10:af:47:d0:5a:1c:82:af:30:da:2a:51:4b:20:18:87:7e:3e: e0:fd:41:94:45:a3:b0:48:65:e0:88:53:03:04:7b:77:57:34: 1b:04:90:10:c5:3a:6a:8b:18:79:15:ab:00:af:ee:5f:1f:72: 37:05:3d:f8:82:7b:a9:20:16:09:35:a3:ae:f1:48:dd:dd:5d: fd:ee:36:49:3d:86:52:bc:53:7f:d8:69:74:05:57:9c:d6:54: 90:0b:0a:b3:d8:2f:6b:73:9f:09:16:0c:64:ee:b4:23:b1:c4: 72:10:03:3a:c8:ce:12:3f:b1:4a:d6:10:c7:19:db:0c:78:33: 32:c2:1c:63:34:b5:d8:14:2a:d5:34:ca:22:fd:3b:1a:06:fc: c5:96:ea:a6:07:3b:de:80:15:e2:99:e9:d0:42:0a:43:95:d4: 21:c1:ab:49:bd:1f:16:f1:fd:bb:10:3e:7c:0c:7d:2b:67:d3: 3d:d3:88:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjQwNTE4MTkyNDU2WhcNMjQwNTI1MTkyNDU2WjAYMRYwFAYD VQQDEw02NjQ5MDA4OC0wODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEO8+7tKtMjmQ9XMVa4s2Gms4AFO5296XuGvylDsP7knXXT+yfCyfaRcK/5N F+f7WRimJVArdwZIdn2K21O3WlF7nbKd9yY5dxihqeBlaft25q1ISSLMx6i45jH6 NChZ7XSvOOU4H9432yZ4+P03GVn7miilZFHAi0wf5FybUtipNkrJYQpKh057KrTU aI4T2rNixFC5DSIXyeyxzSGKtTH/XEBy9wlEZGzM5cARufY5W/0EPP2JdQuP6ydq T4JlWFU0pdXV5H4BNjpRuExqGMGh46xRIr3QTarS0uLceMHXZ/l/blBedHrZoUS8 n124CJEwthhdIvKSW8bFVHjvRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVscFAD tB1ykEEfShDzvPxjVBcBMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo8sk3wGJ0HNlISHvdmOT97ztO3KHBmvhm5T5fD4OvOhZWLlJ1aJwe V80NMBfdHESfaGwrcikO5QgzGeFiwWx20d+Etz0CtgoQr0fQWhyCrzDaKlFLIBiH fj7g/UGURaOwSGXgiFMDBHt3VzQbBJAQxTpqixh5FasAr+5fH3I3BT34gnupIBYJ NaOu8Ujd3V397jZJPYZSvFN/2Gl0BVec1lSQCwqz2C9rc58JFgxk7rQjscRyEAM6 yM4SP7FK1hDHGdsMeDMywhxjNLXYFCrVNMoi/TsaBvzFluqmBzvegBXimenQQgpD ldQhwatJvR8W8f27ED58DH0rZ9M904hk -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org