$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft File: m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json) Hash identifier: 2qHmat8avQC8KHN2tsxzwEcUBQyI6m4jAGGzNg3KSLU= Subject key identifier: FB:75:D4:09:B8:1F:21:F9:C9:EC:E2:B4:46:F7:68:7C:58:16:50:DB Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft Manifest number: 9B Signing time: Sun 19 May 2024 06:49:09 +0000 Manifest this update: Sun 19 May 2024 06:49:08 +0000 Manifest next update: Sun 26 May 2024 06:49:08 +0000 Files and hashes: 1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: GZSWSKoKLMGW5gqrrdZj4eyiCNwI8aXnpCIeV7v2rpI=) 2: 6AA1772E2A9D11EEA9539254C4F9AE02.roa (hash: tKCmRZYtL0BV34USb1C7Reme5eZarfRor10ZiTaG6E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25 Validity Not Before: May 19 06:49:08 2024 GMT Not After : May 26 06:49:08 2024 GMT Subject: CN=6649a0e5-83d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e4:f0:dd:c9:a6:cb:bc:fa:90:2f:e0:9a:b4: 41:65:58:69:19:2b:26:12:b5:52:09:2e:1e:2d:12: 16:25:7c:4a:9f:99:fe:fe:31:f4:b8:5b:21:08:a0: f3:2b:70:f6:8b:34:94:f0:2a:a2:04:23:93:a8:94: f9:51:1f:16:29:98:2a:66:c8:ca:d3:4c:1c:56:6f: 58:2f:0b:08:f9:fc:9c:02:4c:34:6d:72:80:58:03: 44:a9:68:fb:99:ac:7f:1d:7b:58:1b:43:3a:e4:47: 97:81:ca:33:39:67:c0:0d:bb:0d:b7:9b:23:cb:5d: e7:26:e3:45:10:ce:bb:7f:64:bf:ca:db:3d:f6:65: 3e:2e:95:0a:f8:df:2e:4b:59:67:ef:27:c3:0d:84: ce:f2:b8:b1:fa:c2:a7:3e:49:1c:f7:2b:7f:31:bb: 50:71:1a:65:d7:de:0c:73:1b:4e:bd:10:b0:ac:88: f7:ed:e8:68:62:04:ab:8a:75:cc:a8:e0:c7:ea:94: dc:77:4a:11:78:63:43:96:c0:e8:f3:09:0c:38:15: 69:d3:e3:c4:96:b6:bd:e8:87:68:93:06:6b:44:d2: 0c:cb:ca:1c:86:84:2a:9b:58:24:23:d2:da:26:7b: f9:a6:f7:37:33:88:33:76:e1:e1:30:97:f6:97:c0: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:75:D4:09:B8:1F:21:F9:C9:EC:E2:B4:46:F7:68:7C:58:16:50:DB X509v3 Authority Key Identifier: keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:56:fc:27:75:4c:46:19:64:6a:0e:76:cb:f8:e8:fc:f2:66: 4f:b8:aa:fa:13:74:98:51:53:f8:44:63:9d:c5:fb:ad:a1:84: fe:2c:2f:1c:cb:a4:00:d8:f3:11:d5:52:44:04:1a:9f:a5:15: af:8c:28:e8:77:ae:58:d5:ac:28:ff:6f:85:fd:8b:b3:d5:e4: 5a:c3:67:f4:16:bb:b6:e4:48:49:24:1d:0a:ab:fd:0b:08:df: 39:27:0f:56:8e:9c:01:a7:25:66:d8:fa:d9:c6:0d:5f:55:a8: 20:24:8c:17:2d:fb:57:38:ce:37:16:63:ea:97:72:47:21:e4: 19:cd:61:93:fe:77:3e:fe:e5:a3:a8:15:80:0c:f6:ec:59:ab: db:dd:35:57:61:7e:b8:8e:3e:73:52:cf:2f:b5:3b:4c:a4:39: 5c:5a:ea:50:af:81:75:a3:f3:2d:08:c9:f5:93:e0:c8:17:53: b8:d2:04:1e:5e:51:0c:3b:a8:a8:3c:17:2f:e7:00:48:14:d6: 64:6c:44:82:c3:bb:00:59:d5:7e:f1:8e:b5:f0:bd:a5:24:b7: f8:1a:ae:4f:a1:3d:1b:dc:3d:c7:55:04:c9:67:d0:0f:f6:ff: 1a:a2:23:fa:7b:cf:e0:b9:f3:b2:7f:14:48:44:91:56:43:89: 1c:57:4d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc2QzkxMTAvBgNVBAUTKDlCOTRDRTZFMzU1NTBBNzQyNUJCNDQxNjJERjM3Q0JG QkUwNTNDMjUwHhcNMjQwNTE5MDY0OTA4WhcNMjQwNTI2MDY0OTA4WjAYMRYwFAYD VQQDEw02NjQ5YTBlNS04M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9OTw3cmmy7z6kC/gmrRBZVhpGSsmErVSCS4eLRIWJXxKn5n+/jH0uFshCKDz K3D2izSU8CqiBCOTqJT5UR8WKZgqZsjK00wcVm9YLwsI+fycAkw0bXKAWANEqWj7 max/HXtYG0M65EeXgcozOWfADbsNt5sjy13nJuNFEM67f2S/yts99mU+LpUK+N8u S1ln7yfDDYTO8rix+sKnPkkc9yt/MbtQcRpl194McxtOvRCwrIj37ehoYgSrinXM qODH6pTcd0oReGNDlsDo8wkMOBVp0+PElra96IdokwZrRNIMy8ochoQqm1gkI9La Jnv5pvc3M4gzduHhMJf2l8A1cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt11Am4 HyH5yezitEb3aHxYFlDbMB8GA1UdIwQYMBaAFJuUzm41VQp0JbtEFi3zfL++BTwl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZDOS8xOEMzQzc2ODJB OUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNuUWx1MFFXTGZOOHY3NEZQ Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201VE9ialZWQ25RbHUwUVdMZk44djc0RlBDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzZDOS8xOEMzQzc2ODJBOUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNu UWx1MFFXTGZOOHY3NEZQQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGVvwndUxGGWRqDnbL+Oj88mZPuKr6E3SYUVP4RGOdxfutoYT+LC8c y6QA2PMR1VJEBBqfpRWvjCjod65Y1awo/2+F/Yuz1eRaw2f0Fru25EhJJB0Kq/0L CN85Jw9WjpwBpyVm2PrZxg1fVaggJIwXLftXOM43FmPql3JHIeQZzWGT/nc+/uWj qBWADPbsWavb3TVXYX64jj5zUs8vtTtMpDlcWupQr4F1o/MtCMn1k+DIF1O40gQe XlEMO6ioPBcv5wBIFNZkbESCw7sAWdV+8Y618L2lJLf4Gq5PoT0b3D3HVQTJZ9AP 9v8aoiP6e8/gufOyfxRIRJFWQ4kcV00k -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org