$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: RorMBwgz00Y2umRHVRAkFlM/qXwe1Ab9uSKc2mnb/mg= Subject key identifier: 7E:4A:DC:9D:63:EE:4A:F7:4B:46:3B:F3:78:FB:E8:A8:D9:68:EB:4F Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 011A Signing time: Sun 19 May 2024 05:13:53 +0000 Manifest this update: Sun 19 May 2024 05:13:53 +0000 Manifest next update: Sun 26 May 2024 05:13:53 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: JNInS3WNc7yNdrg3800v4aK1ZElc4gPP1WaFYjru8FM=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: urouy+RiwS2Xf45qwWA5ZIFVDg0FCwrX+mTrPTQEMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: May 19 05:13:53 2024 GMT Not After : May 26 05:13:53 2024 GMT Subject: CN=66498a91-90df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:44:b6:30:12:58:26:f7:c9:43:4e:c0:2a: 9d:d5:62:7f:a4:da:6c:df:a9:fd:0b:29:70:ac:32: 82:58:79:6a:e1:1d:4f:df:54:33:9b:b0:0d:49:7e: 47:41:ce:8d:b7:69:65:13:ac:b2:4a:6a:61:44:85: f7:9a:47:7c:41:81:81:1e:30:68:c0:3d:d3:35:d9: 99:1d:e4:39:69:32:75:60:c9:14:14:7d:07:dd:69: c5:b1:43:d9:54:dd:79:d0:fb:4f:74:61:1c:f4:03: 29:30:89:92:f7:43:e3:75:5a:fe:1e:1c:49:3d:db: a5:54:7d:19:9b:a5:46:19:e9:2e:fc:15:a9:df:40: 0b:1f:e7:c4:75:9b:7e:dc:f5:93:6d:20:3a:97:8e: 2c:fa:48:56:e9:1d:bb:58:26:cb:2b:f7:84:11:f2: 76:e1:b5:a3:f5:0e:0b:91:3f:a7:04:54:4d:05:91: 55:a6:4e:68:a8:a7:5e:bd:f3:1f:e1:ec:62:14:67: c1:a8:37:b4:ce:54:31:c6:6e:e3:5f:85:c3:a8:7c: 70:1e:23:2b:b9:56:80:b3:05:95:b7:b1:5c:81:d0: 19:9f:cf:89:04:73:8d:58:ec:dd:b9:0a:9e:42:be: 28:b4:39:9e:54:c0:d9:45:44:e6:2b:e8:ea:b1:6b: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:DC:9D:63:EE:4A:F7:4B:46:3B:F3:78:FB:E8:A8:D9:68:EB:4F X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:fa:0c:81:da:0d:59:fd:d4:38:87:93:6e:09:9c:8f:45: 1c:e4:79:d4:ec:51:ec:4f:bd:4b:07:34:79:bb:3e:54:79:35: 4e:ab:04:f9:55:fe:a9:2d:cb:e2:bc:c8:c3:08:b4:b0:cb:20: bc:df:f3:11:d9:93:73:46:a9:78:f6:99:fb:a4:4c:52:e6:b1: 0f:36:1c:cd:1c:df:88:c1:b8:b0:c8:58:36:02:12:89:0a:a2: dd:8a:79:e9:a2:e3:c8:19:92:6b:a9:66:f3:42:cc:57:19:82: 5c:03:a0:11:39:30:2e:06:cf:9d:92:1f:34:68:c1:3d:52:96: 8c:0c:c4:ee:38:c8:e5:54:28:21:7a:2a:ae:29:6a:92:6d:0b: c6:f0:b8:84:ab:a7:2d:ef:db:cb:20:80:6e:f4:70:70:fd:91: c5:83:87:8f:b4:06:46:99:db:65:de:60:e5:17:18:7f:12:77: 00:90:5e:f3:78:11:89:52:3d:7a:37:93:8b:4b:66:a7:fa:89: a0:e8:c1:af:c3:ac:c1:05:22:87:c5:07:b7:81:73:58:17:5f: da:f7:55:a4:48:7f:1f:c5:0e:7f:b5:95:8d:a1:82:08:a2:d1: be:63:a7:9e:92:67:b3:c6:eb:c2:b8:7b:1b:18:83:4c:94:3d: 5a:ad:eb:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjQwNTE5MDUxMzUzWhcNMjQwNTI2MDUxMzUzWjAYMRYwFAYD VQQDEw02NjQ5OGE5MS05MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JREtjASWCb3yUNOwCqd1WJ/pNps36n9CylwrDKCWHlq4R1P31Qzm7ANSX5H Qc6Nt2llE6yySmphRIX3mkd8QYGBHjBowD3TNdmZHeQ5aTJ1YMkUFH0H3WnFsUPZ VN150PtPdGEc9AMpMImS90PjdVr+HhxJPdulVH0Zm6VGGeku/BWp30ALH+fEdZt+ 3PWTbSA6l44s+khW6R27WCbLK/eEEfJ24bWj9Q4LkT+nBFRNBZFVpk5oqKdevfMf 4exiFGfBqDe0zlQxxm7jX4XDqHxwHiMruVaAswWVt7FcgdAZn8+JBHONWOzduQqe Qr4otDmeVMDZRUTmK+jqsWsj0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5K3J1j 7kr3S0Y783j76KjZaOtPMB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAemfoMgdoNWf3UOIeTbgmcj0Uc5HnU7FHsT71LBzR5uz5UeTVOqwT5 Vf6pLcvivMjDCLSwyyC83/MR2ZNzRql49pn7pExS5rEPNhzNHN+IwbiwyFg2AhKJ CqLdinnpouPIGZJrqWbzQsxXGYJcA6AROTAuBs+dkh80aME9UpaMDMTuOMjlVCgh eiquKWqSbQvG8LiEq6ct79vLIIBu9HBw/ZHFg4ePtAZGmdtl3mDlFxh/EncAkF7z eBGJUj16N5OLS2an+omg6MGvw6zBBSKHxQe3gXNYF1/a91WkSH8fxQ5/tZWNoYII otG+Y6eekmezxuvCuHsbGINMlD1aresV -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org