$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: BbNZqjD/Vhg2yBS4/p+GvWtT+25+OMIZFe8dKRxZONE= Subject key identifier: 0A:25:84:82:FA:51:88:BE:D0:A1:30:6B:43:01:A1:CB:92:F5:46:8C Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 027C Signing time: Sun 19 May 2024 03:43:24 +0000 Manifest this update: Sun 19 May 2024 03:43:24 +0000 Manifest next update: Sun 26 May 2024 03:43:24 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: tiJ8hm6BaBNbktJvUr4TjHZHlzjBTtWtmsDaaz6evV0=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: 3J77t/X4d8FbFqMziCtfhDxfCbOMGAItxZzB2H4f4P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: May 19 03:43:24 2024 GMT Not After : May 26 03:43:24 2024 GMT Subject: CN=6649755c-53c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:9e:63:b7:de:28:3c:67:34:89:9a:f1:40: 3f:22:23:1f:65:62:f5:85:30:54:6c:7d:e4:c1:aa: eb:05:4a:f8:dc:bf:dd:01:22:a3:d0:22:b8:6c:b1: d1:a0:8c:6c:7a:0a:32:a5:7a:96:bc:2a:95:98:c8: 6f:7b:83:d4:89:2a:49:14:0a:a2:72:0b:e7:f1:35: 54:bf:72:03:92:fa:86:99:90:8c:6c:94:04:b8:c4: bd:f8:75:b3:f2:52:c2:0c:ad:0f:11:89:bd:18:16: 8c:e3:ce:2e:de:2c:48:9b:a7:1b:02:92:aa:5f:f0: da:4b:c8:e8:67:71:72:ac:14:5c:05:83:30:be:29: 55:10:34:d3:69:62:d7:83:2c:fc:3f:74:bd:e8:e3: 53:a9:a8:87:8a:bc:fb:b6:c4:a0:fb:71:9f:4b:76: b8:b8:b4:fc:3c:7f:9a:0a:92:11:25:f0:51:b5:17: 02:e5:4d:e3:38:af:cc:79:c5:1c:26:f0:92:f6:82: 3e:2a:30:be:48:2d:44:56:8b:91:a1:6a:52:b7:41: 5b:2d:46:b5:b3:1e:db:29:3d:f3:37:71:61:7f:78: b1:fa:c5:6b:90:1e:a3:59:3f:6a:1a:36:11:9e:1b: 57:19:fc:19:01:43:e7:c8:8c:35:2a:47:f6:ba:13: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:84:82:FA:51:88:BE:D0:A1:30:6B:43:01:A1:CB:92:F5:46:8C X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:1d:8f:4d:9d:ba:4a:45:66:f1:0c:7c:99:88:55:00:df:08: bf:37:92:c4:73:85:6d:98:a1:9d:a4:fe:c5:b5:6f:90:e5:10: a7:99:b9:9f:96:7b:eb:21:ba:66:d2:af:e3:25:eb:6f:04:59: 8c:18:66:39:a2:a7:3e:e0:37:09:f3:09:70:a3:c7:8a:29:74: 14:6d:ed:96:c0:5a:02:4f:6c:4c:25:27:8d:e4:6c:60:02:de: 81:80:50:e6:ad:ee:ee:19:e3:ba:22:63:36:b6:c8:70:e2:eb: 49:90:ed:b0:07:07:8c:32:bc:76:ea:ac:46:23:2b:b0:4c:fc: 57:6e:44:23:50:5c:79:ca:ba:ae:2f:9f:6a:a6:dc:c7:ca:22: 18:ad:a8:04:c7:cb:31:c9:89:76:70:44:b8:de:9d:04:ad:58: e5:b2:a3:1b:2b:e5:9e:ff:74:fb:f2:81:08:85:52:67:8c:3d: a0:17:4f:6f:a5:8a:61:d4:26:c0:72:0b:ae:4f:b9:db:8b:ff: bc:ff:dd:3d:c3:4f:41:9d:9f:2a:3c:2b:9e:73:48:3f:a1:13: 30:a3:aa:d1:68:45:77:db:e8:b0:4a:36:88:12:78:04:e9:0c: 6f:15:90:4a:4c:fb:a8:92:4f:49:82:be:d7:8d:65:88:b5:9c: 7d:62:81:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjQwNTE5MDM0MzI0WhcNMjQwNTI2MDM0MzI0WjAYMRYwFAYD VQQDEw02NjQ5NzU1Yy01M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iyeY7feKDxnNIma8UA/IiMfZWL1hTBUbH3kwarrBUr43L/dASKj0CK4bLHR oIxsegoypXqWvCqVmMhve4PUiSpJFAqicgvn8TVUv3IDkvqGmZCMbJQEuMS9+HWz 8lLCDK0PEYm9GBaM484u3ixIm6cbApKqX/DaS8joZ3FyrBRcBYMwvilVEDTTaWLX gyz8P3S96ONTqaiHirz7tsSg+3GfS3a4uLT8PH+aCpIRJfBRtRcC5U3jOK/MecUc JvCS9oI+KjC+SC1EVouRoWpSt0FbLUa1sx7bKT3zN3Fhf3ix+sVrkB6jWT9qGjYR nhtXGfwZAUPnyIw1Kkf2uhO98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAolhIL6 UYi+0KEwa0MBocuS9UaMMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZHY9NnbpKRWbxDHyZiFUA3wi/N5LEc4VtmKGdpP7FtW+Q5RCnmbmf lnvrIbpm0q/jJetvBFmMGGY5oqc+4DcJ8wlwo8eKKXQUbe2WwFoCT2xMJSeN5Gxg At6BgFDmre7uGeO6ImM2tshw4utJkO2wBweMMrx26qxGIyuwTPxXbkQjUFx5yrqu L59qptzHyiIYragEx8sxyYl2cES43p0ErVjlsqMbK+We/3T78oEIhVJnjD2gF09v pYph1CbAcguuT7nbi/+8/909w09BnZ8qPCuec0g/oRMwo6rRaEV32+iwSjaIEngE 6QxvFZBKTPuokk9Jgr7XjWWItZx9YoFi -----END CERTIFICATE-----Generated at Sun May 19 04:20:43 2024 by rpki-client on console-ams.rpki-client.org