$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: ByNbUkPP+RadQ0MUYcKRlp45diINrrma3KJkeNeGR1A= Subject key identifier: AF:1E:DD:22:BB:BD:DC:63:C4:F0:68:4C:6B:98:EF:C6:F1:5E:A3:AC Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: 5C Signing time: Sun 19 May 2024 07:44:26 +0000 Manifest this update: Sun 19 May 2024 07:44:25 +0000 Manifest next update: Sun 26 May 2024 07:44:25 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: XfcKmsoZX6QHovNOvTGNYcKZRE3h4wzbpVq3fstXB4s=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: 9IhbGTVrlJWu8ZWGMHw07h1CZzzc/p6Dd6OeOEiFO/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: May 19 07:44:25 2024 GMT Not After : May 26 07:44:25 2024 GMT Subject: CN=6649add9-8522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:81:94:59:22:3d:35:ce:a8:35:12:ea:c6: 3b:80:5d:a1:29:8a:20:8d:1e:f5:bb:ba:7d:39:25: 8f:2e:c7:68:15:c7:9d:50:38:62:ec:af:a9:48:de: da:8e:da:09:a6:26:d9:19:a6:d4:7d:01:00:56:4d: d8:96:5c:60:7e:96:d3:c2:83:2d:06:c7:1d:64:f8: 78:00:7d:e8:3f:35:65:21:98:57:ec:ec:d3:6f:d7: 93:5a:c1:4a:a4:d5:8d:b9:a1:06:e9:60:97:87:b1: f1:1c:e7:ab:ae:0e:ac:0d:7d:a7:f7:e9:d7:5b:15: 9f:78:a8:6c:36:a2:cc:e7:85:96:8f:02:64:a7:37: 8d:17:db:b3:cb:49:1d:a5:c0:a6:7f:e5:4e:e4:e2: 48:10:7b:1e:a1:05:cb:0c:e8:48:74:aa:10:d1:a4: eb:8c:ee:c3:4d:cd:b3:7f:f9:42:9f:a8:a5:95:4a: b7:e7:9d:8b:c5:0b:a1:7e:da:cd:71:26:a6:c1:7f: db:a6:53:ba:aa:74:46:5c:59:30:4d:d4:b1:7f:b2: 18:06:72:67:ed:dc:c9:02:d7:0b:90:d6:8c:ed:fb: 6b:26:73:6f:0e:b5:52:06:90:20:ab:80:2d:87:d2: a4:37:10:e1:e9:72:db:70:ac:9a:c2:28:ff:5a:e6: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:DD:22:BB:BD:DC:63:C4:F0:68:4C:6B:98:EF:C6:F1:5E:A3:AC X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f2:ef:70:16:4f:4c:9c:b9:33:86:9e:1e:34:23:7f:c2:9a: 97:b9:9a:43:e2:6d:e6:86:b5:48:1c:ef:01:90:23:f9:23:41: d8:65:88:65:69:d5:ca:ce:1f:16:0c:83:40:4e:6e:56:09:cb: a1:0c:5e:40:51:c6:3b:5b:83:46:34:46:69:a6:c3:94:d5:51: cb:c4:fc:11:d0:2d:6c:77:0e:6f:6e:37:ba:87:3a:c0:6e:ad: ff:54:e0:15:3d:b0:99:63:a4:9e:9f:1b:ee:17:ef:51:aa:db: f8:67:c5:4b:68:e8:a4:bc:e6:c8:3d:80:90:e5:23:2d:8e:9e: 34:a2:d6:61:b2:b1:78:38:c8:b7:28:4b:20:d9:04:e9:bd:ec: 0a:02:6d:b7:dd:ed:85:cc:ae:68:30:0f:b1:40:70:5f:bf:6a: 54:63:b4:4a:e0:75:44:39:b4:ff:1a:8c:14:9b:b2:af:e7:d1: 8f:8d:e7:7b:1c:86:19:70:4f:eb:97:d7:4b:52:4a:c0:6e:dd: 88:39:3c:e7:0c:66:a6:b9:d9:20:6f:0d:38:8f:70:21:47:70: 1b:27:5d:44:c6:a3:a6:6a:5e:a5:01:5e:54:e5:af:34:30:29: 10:71:a7:3a:d8:80:71:eb:85:bd:21:a5:91:b8:a3:88:46:84: 09:95:f1:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OTU5MTExMC8GA1UEBRMoOUFEMzQ5RjQ1NDg1M0JCMTg5MkFGRUY2MDQ4QzE4NzI1 ODA1Nzc2MTAeFw0yNDA1MTkwNzQ0MjVaFw0yNDA1MjYwNzQ0MjVaMBgxFjAUBgNV BAMTDTY2NDlhZGQ5LTg1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqCIGUWSI9Nc6oNRLqxjuAXaEpiiCNHvW7un05JY8ux2gVx51QOGLsr6lI3tqO 2gmmJtkZptR9AQBWTdiWXGB+ltPCgy0Gxx1k+HgAfeg/NWUhmFfs7NNv15NawUqk 1Y25oQbpYJeHsfEc56uuDqwNfaf36ddbFZ94qGw2osznhZaPAmSnN40X27PLSR2l wKZ/5U7k4kgQex6hBcsM6Eh0qhDRpOuM7sNNzbN/+UKfqKWVSrfnnYvFC6F+2s1x JqbBf9umU7qqdEZcWTBN1LF/shgGcmft3MkC1wuQ1ozt+2smc28OtVIGkCCrgC2H 0qQ3EOHpcttwrJrCKP9a5gbZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrx7dIru9 3GPE8GhMa5jvxvFeo6wwHwYDVR0jBBgwFoAUmtNJ9FSFO7GJKv72BIwYclgFd2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NTkxL0RFRDgzNTY4ODky QzExRUU5NDc3ODE2REM0RjlBRTAyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXROSjlGU0ZPN0dKS3Y3MkJJd1ljbGdGZDJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 NTkxL0RFRDgzNTY4ODkyQzExRUU5NDc3ODE2REM0RjlBRTAyL210Tko5RlNGTzdH Skt2NzJCSXdZY2xnRmQyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXy73AWT0ycuTOGnh40I3/Cmpe5mkPibeaGtUgc7wGQI/kjQdhliGVp 1crOHxYMg0BOblYJy6EMXkBRxjtbg0Y0Rmmmw5TVUcvE/BHQLWx3Dm9uN7qHOsBu rf9U4BU9sJljpJ6fG+4X71Gq2/hnxUto6KS85sg9gJDlIy2OnjSi1mGysXg4yLco SyDZBOm97AoCbbfd7YXMrmgwD7FAcF+/alRjtErgdUQ5tP8ajBSbsq/n0Y+N53sc hhlwT+uX10tSSsBu3Yg5POcMZqa52SBvDTiPcCFHcBsnXUTGo6ZqXqUBXlTlrzQw KRBxpzrYgHHrhb0hpZG4o4hGhAmV8So= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org