$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json) Hash identifier: lNeGY0PauDE+sw8iuL0hRQEx9laWAMpxBk8Jt8BgGPM= Subject key identifier: 9A:F8:79:94:0E:6C:D5:09:3D:ED:5F:8B:D5:0E:03:98:94:19:BF:A9 Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Certificate serial: 33D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft Manifest number: 33CD Signing time: Sat 18 May 2024 14:55:35 +0000 Manifest this update: Sat 18 May 2024 14:55:35 +0000 Manifest next update: Sat 25 May 2024 14:55:35 +0000 Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: QwEDd9qYvOvcu1kD7kJEbd3f9vO6oG43ypmmjHpTG3I=) 2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: iAaMJdDCQeuzFuYKnuVasAJoPnDm/i8DMFyMfoTrrkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13268 (0x33d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612 Validity Not Before: May 18 14:55:35 2024 GMT Not After : May 25 14:55:35 2024 GMT Subject: CN=6648c167-edf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:6d:30:41:4a:06:fe:20:a9:6e:65:a9:f8: d2:4f:f0:e8:07:63:87:55:9d:8e:a8:11:92:83:dd: b2:af:a0:25:e4:9b:d7:86:2f:a1:a8:1f:bc:62:4c: d3:5d:8e:23:dc:5a:d6:70:29:73:51:bb:74:a4:ac: 27:4e:3b:48:c5:2b:47:8a:d8:05:6a:1e:c7:7a:2c: a6:ef:6f:30:f3:30:18:af:ad:bf:df:b8:57:8e:1c: f6:74:bd:eb:28:bc:52:7f:32:c2:a4:b3:41:53:fa: 27:1e:b2:32:66:57:3f:63:b2:88:09:fa:c3:3d:fc: b5:21:4e:b8:aa:5a:34:a5:58:81:04:4b:6d:25:00: 65:39:6f:b1:d4:06:60:16:c2:93:19:d6:0f:db:06: 0b:07:b1:79:e9:0b:b2:c0:ec:01:3a:f4:e0:8b:92: 25:36:42:04:c8:20:d9:d7:53:dd:90:65:4c:de:52: 0c:e3:d9:61:6c:dd:3d:69:d6:38:64:84:f0:48:55: f4:17:12:be:28:36:4d:3a:b7:e8:aa:31:fe:ec:4e: e3:bf:d3:d6:01:14:3e:f6:52:4f:c3:48:48:93:f3: 28:08:c6:ca:e3:ec:2d:b7:74:ee:52:a1:81:df:46: 7b:37:36:be:0c:cd:ed:05:0f:6c:1c:e5:58:9c:1e: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:79:94:0E:6C:D5:09:3D:ED:5F:8B:D5:0E:03:98:94:19:BF:A9 X509v3 Authority Key Identifier: keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ac:9d:3d:32:b5:b9:ae:97:d5:38:05:b3:52:d5:72:6b:ef: c5:d6:8c:e6:3c:5d:22:8b:ac:1c:9c:9f:9a:ec:1d:fc:6d:72: 62:33:9d:9e:b6:ef:81:1e:47:7b:36:0d:ab:1d:b9:8d:90:98: f3:38:a1:10:1b:d1:95:9f:40:38:78:0f:74:7a:78:a2:47:41: 83:67:4f:75:da:67:5e:89:90:e4:b3:0e:ae:32:45:49:e5:0a: 9d:11:28:60:87:61:20:9b:5b:2f:5e:d9:1c:2d:7d:4d:32:fa: c7:fc:8f:e7:d6:6c:18:6e:3b:ad:f9:30:62:95:55:45:c5:e3: 23:20:60:c7:4b:e9:ff:9f:fe:46:ea:a4:b0:0e:f1:11:e6:30: 76:9b:87:b6:20:22:71:24:0f:20:ed:86:ab:1d:6f:e0:d9:86: 92:09:39:19:5c:2a:eb:8a:4b:83:6c:80:25:46:7d:e6:5e:4e: db:ae:46:e3:1c:51:f3:26:8a:04:23:ee:94:4d:ec:a3:b1:a7: b1:ec:1b:81:56:0e:f7:3e:bd:0f:69:3c:27:23:ec:f1:af:f8: f0:84:e5:fb:5c:05:b8:72:a3:cb:ce:99:c7:4c:8e:91:d9:b2: e3:dc:ff:57:4a:0c:29:45:2d:b4:82:86:88:06:11:35:7b:39: 3c:af:3a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG QUIyQzc2MTIwHhcNMjQwNTE4MTQ1NTM1WhcNMjQwNTI1MTQ1NTM1WjAYMRYwFAYD VQQDEw02NjQ4YzE2Ny1lZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyBtMEFKBv4gqW5lqfjST/DoB2OHVZ2OqBGSg92yr6Al5JvXhi+hqB+8YkzT XY4j3FrWcClzUbt0pKwnTjtIxStHitgFah7Heiym728w8zAYr62/37hXjhz2dL3r KLxSfzLCpLNBU/onHrIyZlc/Y7KICfrDPfy1IU64qlo0pViBBEttJQBlOW+x1AZg FsKTGdYP2wYLB7F56QuywOwBOvTgi5IlNkIEyCDZ11PdkGVM3lIM49lhbN09adY4 ZITwSFX0FxK+KDZNOrfoqjH+7E7jv9PWARQ+9lJPw0hIk/MoCMbK4+wtt3TuUqGB 30Z7Nza+DM3tBQ9sHOVYnB6z1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr4eZQO bNUJPe1fi9UOA5iUGb+pMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN alRfaUFJSnFpa242c3NkaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqrJ09MrW5rpfVOAWzUtVya+/F1ozmPF0ii6wcnJ+a7B38bXJiM52e tu+BHkd7Ng2rHbmNkJjzOKEQG9GVn0A4eA90eniiR0GDZ0912mdeiZDksw6uMkVJ 5QqdEShgh2Egm1svXtkcLX1NMvrH/I/n1mwYbjut+TBilVVFxeMjIGDHS+n/n/5G 6qSwDvER5jB2m4e2ICJxJA8g7YarHW/g2YaSCTkZXCrrikuDbIAlRn3mXk7brkbj HFHzJooEI+6UTeyjsaex7BuBVg73Pr0PaTwnI+zxr/jwhOX7XAW4cqPLzpnHTI6R 2bLj3P9XSgwpRS20goaIBhE1ezk8rzro -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org