$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: FOV9563bHiXFYnxY/3964/s87TdvKzmKF2pRnr5Y9TI= Subject key identifier: 90:C8:A4:61:A5:E8:EA:EB:99:FF:08:9B:F9:F1:D3:C9:65:AA:7A:83 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 096A Signing time: Sat 18 May 2024 21:00:40 +0000 Manifest this update: Sat 18 May 2024 21:00:39 +0000 Manifest next update: Sat 25 May 2024 21:00:39 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: hTl0YfW0glLh3yz7SDyNvu/ZL+4+xK4NXVQj2qXLCos=) 2: 282AC9BC96F711ECB8115179C4F9AE02.roa (hash: E5Rx004ms1bqBKbcUgInAOggNjENzC0+rrQED6tf7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: May 18 21:00:39 2024 GMT Not After : May 25 21:00:39 2024 GMT Subject: CN=664916f7-1e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:df:d9:a5:ee:e1:91:bd:84:5a:bd:fa:89: 0a:ef:17:72:e4:a8:8a:ff:e3:4f:47:58:23:e8:6d: 9c:24:53:07:7e:4e:dc:c6:31:ff:be:d5:62:fa:b0: 15:f1:b8:e9:85:07:c7:e5:1f:92:fc:95:34:62:83: 84:f9:2d:f2:a7:8d:c6:d2:cc:73:89:d9:8a:f9:0c: c6:d4:d1:e9:84:d7:fc:f3:01:26:68:79:7d:27:65: ef:a4:61:94:83:44:76:04:6b:5d:75:7f:d8:64:2c: ca:12:71:14:38:c3:12:6a:5e:c8:39:d6:e0:6a:b8: 60:2a:9a:69:41:dd:0d:84:c5:a7:90:df:3e:8d:f0: 85:6d:e3:da:c9:f5:1a:68:fe:9e:0a:28:0e:ba:3a: f9:68:5e:8d:fa:59:01:dd:9a:cf:69:bc:b4:93:78: 06:6d:49:18:1e:9d:7b:8a:2a:e0:2d:95:13:07:11: fe:90:a3:26:32:6b:8c:0e:f4:f9:d7:1b:fe:ea:7a: 0b:a7:7e:b3:c2:9b:32:eb:54:19:44:61:95:99:33: 93:b6:0b:ae:fb:5c:c2:16:fe:e1:b3:a0:df:19:8c: 9e:2e:f3:57:df:73:be:41:22:07:0d:5d:c0:ca:2b: 23:4b:e6:e8:4a:04:47:8e:69:5f:83:d5:b3:c9:ce: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C8:A4:61:A5:E8:EA:EB:99:FF:08:9B:F9:F1:D3:C9:65:AA:7A:83 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:41:20:57:e6:8d:46:31:75:9e:76:94:de:5c:a6:c3:30: ba:4d:86:78:68:e2:aa:20:d0:b4:22:af:eb:66:f3:4a:21:05: 4a:e2:82:d6:f9:d4:69:92:93:a6:8b:66:6f:4d:03:86:54:5b: da:01:55:12:d8:ef:37:52:dc:f5:40:9a:57:e5:46:f4:f0:21: 50:90:99:c9:bc:9c:9e:55:d6:d5:fa:16:2e:ba:5d:15:36:0c: 79:ba:e3:1c:14:ac:b6:cd:8d:01:ee:4e:a7:17:81:ec:66:f9: cd:ef:99:f8:c3:f0:94:e6:94:38:23:e5:c0:c2:54:69:c8:0f: 8c:bb:c0:aa:d6:68:9d:d9:cc:e3:dd:db:d3:d4:e3:d1:33:bf: be:0e:ff:b2:7e:76:a1:17:d4:8b:a1:53:01:a0:f4:ef:31:9a: 5f:7b:ae:4e:51:94:e9:4d:bd:69:05:eb:39:ed:cb:30:e0:f2: c7:e5:df:0c:3c:83:cd:64:d6:89:3b:15:58:fe:f3:b4:9f:db: 88:06:c0:b9:4d:bb:82:c3:69:f0:c4:5d:ca:48:3c:14:8d:54: 83:54:79:3b:da:82:92:65:46:e8:5a:4b:88:01:e2:7a:57:5f: 4b:6e:e3:ad:a6:b7:ae:6f:b9:2c:35:a5:c3:b3:7b:88:93:4e: bb:55:d2:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjQwNTE4MjEwMDM5WhcNMjQwNTI1MjEwMDM5WjAYMRYwFAYD VQQDEw02NjQ5MTZmNy0xZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Tvf2aXu4ZG9hFq9+okK7xdy5KiK/+NPR1gj6G2cJFMHfk7cxjH/vtVi+rAV 8bjphQfH5R+S/JU0YoOE+S3yp43G0sxzidmK+QzG1NHphNf88wEmaHl9J2XvpGGU g0R2BGtddX/YZCzKEnEUOMMSal7IOdbgarhgKpppQd0NhMWnkN8+jfCFbePayfUa aP6eCigOujr5aF6N+lkB3ZrPaby0k3gGbUkYHp17iirgLZUTBxH+kKMmMmuMDvT5 1xv+6noLp36zwpsy61QZRGGVmTOTtguu+1zCFv7hs6DfGYyeLvNX33O+QSIHDV3A yisjS+boSgRHjmlfg9Wzyc7/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDIpGGl 6Orrmf8Im/nx08llqnqDMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOEEgV+aNRjF1nnaU3lymwzC6TYZ4aOKqINC0Iq/rZvNKIQVK4oLW +dRpkpOmi2ZvTQOGVFvaAVUS2O83Utz1QJpX5Ub08CFQkJnJvJyeVdbV+hYuul0V Ngx5uuMcFKy2zY0B7k6nF4HsZvnN75n4w/CU5pQ4I+XAwlRpyA+Mu8Cq1mid2czj 3dvT1OPRM7++Dv+yfnahF9SLoVMBoPTvMZpfe65OUZTpTb1pBes57csw4PLH5d8M PIPNZNaJOxVY/vO0n9uIBsC5TbuCw2nwxF3KSDwUjVSDVHk72oKSZUboWkuIAeJ6 V19LbuOtpreub7ksNaXDs3uIk067VdKA -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org