$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: /ZLe4wTIbBvUnAd995o/FzNHEzvZdbwUqbwg1tdWR2c= Subject key identifier: 6E:ED:BE:39:B4:5F:CB:F4:19:B0:A7:74:F5:33:D1:28:9C:01:42:F2 Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 0793 Signing time: Sat 18 May 2024 22:10:07 +0000 Manifest this update: Sat 18 May 2024 22:10:07 +0000 Manifest next update: Sat 25 May 2024 22:10:07 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: +4372w3N+JjlG7idyreJSWo97TqjOtjGRk3JY0P7DXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: May 18 22:10:07 2024 GMT Not After : May 25 22:10:07 2024 GMT Subject: CN=6649273f-4398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:6a:da:27:02:67:e9:97:86:a1:16:f2:ad: 97:1d:77:4f:dc:ee:5e:d8:17:ff:4d:fc:0d:d2:78: 50:7d:6b:5a:89:15:48:51:11:80:c9:f1:05:f1:5c: f6:11:8a:13:7e:de:1d:ef:6d:df:65:bc:aa:88:83: 9b:6f:8f:f4:3c:7b:57:a7:52:9d:a1:b7:a6:e7:e7: 46:7f:0d:b2:18:c2:3c:34:b3:b7:9e:d3:98:b7:d2: b9:ca:d9:52:7b:67:a6:46:2c:3c:eb:56:b7:38:6f: e6:81:94:28:d6:ce:9f:85:73:40:f8:f7:bf:16:e0: ed:04:08:a0:77:6c:58:a5:3f:4a:44:6e:de:4d:8f: 8b:60:63:b9:e5:d4:58:3c:bf:9c:fd:b5:9e:45:ba: 3a:27:2e:c1:3b:52:0c:63:80:80:31:eb:a8:f6:f3: 9c:73:a7:ce:0a:5b:db:79:d5:a6:1c:9e:33:e1:76: 80:2f:14:e2:9b:e2:94:ce:b4:f7:bc:69:f8:14:5f: 4d:ec:c3:b1:4e:91:ac:cd:b1:ba:8f:a9:0b:cf:34: b0:60:d3:b9:4f:ef:be:20:73:b4:3b:85:e0:8b:1b: 21:d6:66:03:b7:a4:a6:ef:27:3e:59:e0:ba:ed:df: d4:f6:17:1c:c7:cd:c1:f5:8d:fd:8f:da:b9:8d:67: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:ED:BE:39:B4:5F:CB:F4:19:B0:A7:74:F5:33:D1:28:9C:01:42:F2 X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f3:53:60:c5:86:18:a9:4f:e2:16:93:03:2f:d4:33:1b:b4: 18:78:42:c3:bc:6b:a9:28:ae:bc:92:00:d2:ce:1b:75:8f:09: f2:c2:c1:39:74:3b:d4:4f:6f:6c:60:85:36:c1:35:b8:64:9d: 6d:49:ab:64:a0:a4:f7:7e:20:2c:b2:e8:6d:a0:71:cd:06:e2: 3a:9d:cf:46:f8:d2:f8:eb:64:36:ba:08:6a:f1:85:c6:82:9f: 75:ff:d3:ad:ca:ca:83:cd:00:7b:6d:00:c6:57:1e:65:4c:67: d2:f7:4b:12:65:db:14:d2:93:fe:a3:b1:d9:08:0b:60:c3:97: 5d:ad:09:84:45:70:d8:1a:61:e8:d6:a1:a8:61:e7:63:70:76: ed:e7:72:2b:c2:5f:61:a8:bf:74:2a:b1:a6:60:b1:8b:a2:6b: 66:05:e5:8f:66:79:f1:49:eb:de:37:75:3c:46:a8:bc:09:9f: 04:0b:3d:aa:f5:2c:9e:b8:bc:14:58:4c:7a:17:f0:15:29:f8: 3d:12:a1:38:87:96:9e:68:55:02:ae:a6:ec:2f:a9:d7:ed:36: a9:57:57:57:1a:06:49:b4:98:2e:54:93:d1:4d:7d:e5:8f:8a: d4:10:5c:42:e7:bc:95:ab:6c:e9:e6:a5:56:d1:3a:7d:da:25: c9:eb:88:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjQwNTE4MjIxMDA3WhcNMjQwNTI1MjIxMDA3WjAYMRYwFAYD VQQDEw02NjQ5MjczZi00Mzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymVq2icCZ+mXhqEW8q2XHXdP3O5e2Bf/TfwN0nhQfWtaiRVIURGAyfEF8Vz2 EYoTft4d723fZbyqiIObb4/0PHtXp1Kdobem5+dGfw2yGMI8NLO3ntOYt9K5ytlS e2emRiw861a3OG/mgZQo1s6fhXNA+Pe/FuDtBAigd2xYpT9KRG7eTY+LYGO55dRY PL+c/bWeRbo6Jy7BO1IMY4CAMeuo9vOcc6fOClvbedWmHJ4z4XaALxTim+KUzrT3 vGn4FF9N7MOxTpGszbG6j6kLzzSwYNO5T+++IHO0O4Xgixsh1mYDt6Sm7yc+WeC6 7d/U9hccx83B9Y39j9q5jWf2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7tvjm0 X8v0GbCndPUz0SicAULyMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF81NgxYYYqU/iFpMDL9QzG7QYeELDvGupKK68kgDSzht1jwnywsE5 dDvUT29sYIU2wTW4ZJ1tSatkoKT3fiAssuhtoHHNBuI6nc9G+NL462Q2ughq8YXG gp91/9OtysqDzQB7bQDGVx5lTGfS90sSZdsU0pP+o7HZCAtgw5ddrQmERXDYGmHo 1qGoYedjcHbt53Irwl9hqL90KrGmYLGLomtmBeWPZnnxSeveN3U8Rqi8CZ8ECz2q 9SyeuLwUWEx6F/AVKfg9EqE4h5aeaFUCrqbsL6nX7TapV1dXGgZJtJguVJPRTX3l j4rUEFxC57yVq2zp5qVW0Tp92iXJ64jR -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org