$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: vgow4CFXdrKoPipgc8x1MdqLw9qzIf4pA7WoGIFyXRo= Subject key identifier: 50:35:D5:DD:90:5E:CD:C9:C1:3D:23:DF:9E:E4:80:26:C5:7C:1B:3B Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 029F Signing time: Sun 19 May 2024 03:35:54 +0000 Manifest this update: Sun 19 May 2024 03:35:53 +0000 Manifest next update: Sun 26 May 2024 03:35:53 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: KKMKxZGfVOnTk0ThSuwOhh+8/qFh1ZzroJUIC8UtxqM=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: 9VdVacRJQLtq5j1DkxLPoc6FzbuyBAK4nXY3LxZMU2A=) 3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: 8jqMqpbkGL/NhnTHLijkEMxx4SoTbudObYd/SEM5Ayc=) 4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: NYQSAw6FU2UxYfYq9E27ychTGzMgUJSSUtVT9lrI804=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: May 19 03:35:53 2024 GMT Not After : May 26 03:35:53 2024 GMT Subject: CN=6649739a-80bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:a5:a8:dc:6e:6c:db:89:e4:56:d1:a0:52: 0f:6e:6e:3b:50:b9:45:22:b1:4b:df:15:d1:ea:1a: e2:96:83:68:69:f4:61:c8:f4:7f:ac:eb:42:19:5b: d1:19:cf:12:b8:35:72:65:05:ce:1e:6f:3f:a7:34: de:f6:62:6a:53:5b:c1:a7:ff:07:1e:71:e7:d2:33: 65:2d:38:b2:55:74:d8:81:ef:39:07:dd:a6:e0:a5: 81:ff:59:3e:58:3b:44:cd:13:97:05:04:4c:0c:b1: 1d:65:31:b4:cd:26:be:df:41:2d:3a:22:cb:86:75: 4c:68:fd:a6:93:8f:ac:df:40:72:98:9e:e9:f5:ce: 1e:3c:45:f1:87:d2:fa:ae:ff:e2:aa:f3:9e:32:7a: c9:63:9d:73:0f:33:48:48:a5:9f:c0:9d:b1:7c:6e: 85:12:1b:09:fd:82:d6:be:fc:7d:98:45:2f:f8:3f: 7f:b7:be:d3:46:02:44:4b:56:13:37:24:04:b4:d0: 7d:1b:f9:7f:61:fc:c7:48:ea:3d:43:a4:d2:d0:57: 01:f2:66:2a:b0:1b:36:07:d6:9e:13:02:3f:9d:61: 01:75:ef:1b:58:f7:47:71:8b:98:33:91:f6:9c:e7: 11:8d:68:53:60:df:25:24:dd:97:81:e4:08:3f:ea: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:D5:DD:90:5E:CD:C9:C1:3D:23:DF:9E:E4:80:26:C5:7C:1B:3B X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:aa:6f:ab:ce:fd:ea:3c:07:81:39:36:e5:3a:f0:5d:2d:64: f2:49:9c:13:88:d2:f2:2f:0c:bc:a0:90:2d:2b:ac:eb:5a:39: 35:53:17:f3:7c:e0:d3:69:4a:42:d5:7b:45:7d:04:dd:7e:90: 59:0b:75:6b:5d:65:8a:20:60:f4:7d:1a:64:78:99:28:ef:fb: 1d:d2:68:ce:ed:2c:dc:23:63:1d:9f:65:72:30:90:a9:4a:a4: ed:ab:42:8d:a2:c4:83:24:84:24:25:c9:8e:10:19:a9:13:73: 3b:5d:06:67:ac:1a:af:e3:3e:03:a6:8f:20:1d:7f:3c:ff:fa: 78:07:d7:58:16:f7:87:14:04:71:7f:7d:15:39:5d:e0:40:3f: bf:86:8c:e2:f8:2e:99:2a:99:98:2c:81:17:5a:e3:1e:d4:8e: c5:6e:7b:82:04:3d:c0:83:4f:74:ec:90:6e:9f:b1:f2:7c:4e: 37:1c:be:6a:45:f0:ed:bf:52:79:14:04:d8:c9:da:55:31:41: f8:92:17:bc:3d:50:6d:c9:31:ab:39:e7:f9:9a:40:dc:bd:dd: 4a:c7:cc:4f:0a:03:2a:80:0e:56:52:6f:32:f5:73:85:c2:ae: 58:b8:1c:73:0b:00:34:37:7a:61:3d:3e:1c:1e:42:eb:fb:0a: 5b:09:9a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjQwNTE5MDMzNTUzWhcNMjQwNTI2MDMzNTUzWjAYMRYwFAYD VQQDEw02NjQ5NzM5YS04MGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JSlqNxubNuJ5FbRoFIPbm47ULlFIrFL3xXR6hriloNoafRhyPR/rOtCGVvR Gc8SuDVyZQXOHm8/pzTe9mJqU1vBp/8HHnHn0jNlLTiyVXTYge85B92m4KWB/1k+ WDtEzROXBQRMDLEdZTG0zSa+30EtOiLLhnVMaP2mk4+s30BymJ7p9c4ePEXxh9L6 rv/iqvOeMnrJY51zDzNISKWfwJ2xfG6FEhsJ/YLWvvx9mEUv+D9/t77TRgJES1YT NyQEtNB9G/l/YfzHSOo9Q6TS0FcB8mYqsBs2B9aeEwI/nWEBde8bWPdHcYuYM5H2 nOcRjWhTYN8lJN2XgeQIP+rlTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA11d2Q Xs3JwT0j357kgCbFfBs7MB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASqm+rzv3qPAeBOTblOvBdLWTySZwTiNLyLwy8oJAtK6zrWjk1Uxfz fODTaUpC1XtFfQTdfpBZC3VrXWWKIGD0fRpkeJko7/sd0mjO7SzcI2Mdn2VyMJCp SqTtq0KNosSDJIQkJcmOEBmpE3M7XQZnrBqv4z4Dpo8gHX88//p4B9dYFveHFARx f30VOV3gQD+/hozi+C6ZKpmYLIEXWuMe1I7FbnuCBD3Ag0907JBun7HyfE43HL5q RfDtv1J5FATYydpVMUH4khe8PVBtyTGrOef5mkDcvd1Kx8xPCgMqgA5WUm8y9XOF wq5YuBxzCwA0N3phPT4cHkLr+wpbCZqQ -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org