$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json) Hash identifier: d6o2oh14jtRDgQSRxAnXvgO3k+Bb1pM8xV1ZYbOrL6M= Subject key identifier: 52:35:19:5B:FA:95:70:F9:18:AD:C0:55:84:A3:BE:66:60:C3:6C:D6 Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft Manifest number: 3D Signing time: Sun 19 May 2024 07:00:54 +0000 Manifest this update: Sun 19 May 2024 07:00:54 +0000 Manifest next update: Sun 26 May 2024 07:00:54 +0000 Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: HxqrWaw/nE8nkc6Jl7Aa5A5LGV0G3ox16W1xfPORw6I=) 2: 79A50468BCA911EE8F42E684C4F9AE02.roa (hash: FavjvF6tuKid4B6pHML6FkWLmSvyWrExN8LgMDlQdXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB Validity Not Before: May 19 07:00:54 2024 GMT Not After : May 26 07:00:54 2024 GMT Subject: CN=6649a3a6-556d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:e3:7b:46:f6:ad:42:1a:8d:23:79:13:e3: 38:9a:e8:98:4c:e7:8d:a7:59:c8:94:6e:f3:8a:c8: af:5b:14:6a:ba:d3:48:bd:d8:ca:82:4b:45:a6:37: 9f:a0:17:97:b1:c2:b0:1d:50:68:08:23:5f:a0:e1: cb:4b:b7:22:fd:06:5b:f7:5e:1f:c6:d8:c4:f3:57: 71:e1:24:27:bc:34:57:c2:27:a2:42:eb:71:61:c9: 9a:38:41:e2:f3:be:df:52:cc:e8:b2:c3:1a:45:16: d6:49:29:88:b3:a6:b7:02:73:c7:a7:57:0a:cd:ee: e4:4d:9d:62:ff:66:59:ee:14:7f:10:9a:14:16:c5: 8b:99:33:18:24:ed:83:8c:fc:38:4c:cb:af:ea:b5: af:3e:a6:42:cd:e8:04:65:fc:4d:de:36:ad:bd:12: 12:a0:bf:78:fb:22:20:9c:0b:d7:2f:8d:9f:f1:9c: 78:e4:bd:22:d8:78:9a:db:65:aa:fa:bd:4a:56:0a: 65:20:c5:e7:32:fa:04:10:8f:3e:11:30:bd:d2:50: c9:7c:3d:4c:0a:62:a4:67:aa:7d:da:47:dc:87:ec: 1c:41:00:a7:dd:8a:e2:2b:a0:49:2a:9b:2b:d6:90: fb:36:57:7c:a8:6a:0e:f7:c7:67:39:22:a8:88:5f: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:35:19:5B:FA:95:70:F9:18:AD:C0:55:84:A3:BE:66:60:C3:6C:D6 X509v3 Authority Key Identifier: keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fd:03:ad:2b:6a:d4:a0:0c:46:a9:7d:d1:64:74:be:6e:9b: 85:e1:e3:b0:a8:6e:34:2a:fd:95:b9:31:a9:05:ef:8e:7d:19: 73:da:bd:22:dc:37:8a:02:cc:fd:49:68:21:12:4e:32:29:81: bb:34:6e:28:43:3c:c1:b6:ae:e7:8f:bb:d6:28:16:69:19:f3: 76:3c:76:6d:27:7f:4d:db:2d:04:56:f5:90:60:ea:87:73:c2: be:23:1d:5f:37:5e:17:cc:fa:b6:1e:1d:6f:f5:d4:cf:d0:4a: b3:e9:2a:28:81:73:22:43:ec:ba:7c:17:39:26:3c:3a:b1:a7: 28:3a:01:b4:d0:8c:3d:f5:8e:72:93:22:52:e4:09:a2:2d:20: 73:65:0e:1a:0b:db:d0:ed:2a:b0:17:66:71:98:0c:25:4e:bb: 64:73:a6:ef:3b:bc:55:f3:d1:b8:1c:10:7e:8e:75:46:75:42: 46:dd:db:21:88:32:e1:a8:3b:9c:79:02:31:2d:9a:d4:a5:c5: 63:75:49:a7:c7:f0:e1:6e:38:be:d9:12:e1:2e:49:3d:52:2f: 53:ff:30:bd:ce:3e:cc:6f:93:91:55:57:b0:68:cd:b9:14:26: 6e:e5:0f:a1:8a:b2:2a:79:75:43:1b:cc:60:ec:44:36:c4:8b: e2:de:3a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUE5QzExMC8GA1UEBRMoRjQ3QTQyQ0E5MjlEODM3RTE3OTMyQkNBMDdENjVGODIy Qzk2NDRDQjAeFw0yNDA1MTkwNzAwNTRaFw0yNDA1MjYwNzAwNTRaMBgxFjAUBgNV BAMTDTY2NDlhM2E2LTU1NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjyuN7RvatQhqNI3kT4zia6JhM542nWciUbvOKyK9bFGq600i92MqCS0WmN5+g F5exwrAdUGgII1+g4ctLtyL9Blv3Xh/G2MTzV3HhJCe8NFfCJ6JC63FhyZo4QeLz vt9SzOiywxpFFtZJKYizprcCc8enVwrN7uRNnWL/ZlnuFH8QmhQWxYuZMxgk7YOM /DhMy6/qta8+pkLN6ARl/E3eNq29EhKgv3j7IiCcC9cvjZ/xnHjkvSLYeJrbZar6 vUpWCmUgxecy+gQQjz4RML3SUMl8PUwKYqRnqn3aR9yH7BxBAKfdiuIroEkqmyvW kPs2V3yoag73x2c5IqiIX78lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUjUZW/qV cPkYrcBVhKO+ZmDDbNYwHwYDVR0jBBgwFoAU9HpCypKdg34XkyvKB9ZfgiyWRMsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QTlDLzcxMTQ4NDNFQkMz ODExRUVBNTE1MzEzQkM0RjlBRTAyLzlIcEN5cEtkZzM0WGt5dktCOVpmZ2l5V1JN cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOUhwQ3lwS2RnMzRYa3l2S0I5WmZnaXlXUk1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QTlDLzcxMTQ4NDNFQkMzODExRUVBNTE1MzEzQkM0RjlBRTAyLzlIcEN5cEtkZzM0 WGt5dktCOVpmZ2l5V1JNcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ/9A60ratSgDEapfdFkdL5um4Xh47CobjQq/ZW5MakF7459GXPavSLc N4oCzP1JaCESTjIpgbs0bihDPMG2ruePu9YoFmkZ83Y8dm0nf03bLQRW9ZBg6odz wr4jHV83XhfM+rYeHW/11M/QSrPpKiiBcyJD7Lp8FzkmPDqxpyg6AbTQjD31jnKT IlLkCaItIHNlDhoL29DtKrAXZnGYDCVOu2Rzpu87vFXz0bgcEH6OdUZ1Qkbd2yGI MuGoO5x5AjEtmtSlxWN1SafH8OFuOL7ZEuEuST1SL1P/ML3OPsxvk5FVV7BozbkU Jm7lD6GKsip5dUMbzGDsRDbEi+LeOhE= -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org