$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft File: MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json) Hash identifier: bgo6QJQSCQd+WIJVTmE/EO2Bc0BAtrAiEHPgLmlQqOE= Subject key identifier: E6:36:1D:B9:9A:79:40:CD:5F:56:7B:9B:F8:85:AC:8D:D9:C6:37:2D Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 Certificate issuer: /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Certificate serial: 1411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft Manifest number: 1407 Signing time: Wed 08 May 2024 17:31:22 +0000 Manifest this update: Wed 08 May 2024 17:31:21 +0000 Manifest next update: Wed 15 May 2024 17:31:21 +0000 Files and hashes: 1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: YKu9eACjK5y7/lrOFTW1B9AFyJdqpKDzrq/I7CuFBks=) 2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: s6vtNQQIQsupRxsuHL5whiOvZL5AmFIPdveK43lCi0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5137 (0x1411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7 Validity Not Before: May 8 17:31:21 2024 GMT Not After : May 15 17:31:21 2024 GMT Subject: CN=663bb6ea-689d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:bb:ef:46:a0:b7:89:ed:cf:84:b4:4a:4c: ce:94:40:3b:f4:df:94:73:77:e4:df:e4:f6:8a:b6: d0:f5:58:a8:31:06:d6:4a:ba:43:69:94:f3:ff:ae: 97:8e:87:5f:ce:0f:ca:2a:a8:85:8c:8b:f9:e4:d6: 27:8d:05:74:29:a6:00:7a:1e:8d:a9:af:ea:da:2c: 79:f3:fb:30:be:a9:01:4f:57:a9:f4:09:9e:0f:1b: a5:0b:2c:6a:b7:b0:df:cc:2f:15:3e:84:bb:5c:94: 2d:a0:2c:ac:41:a7:2f:c5:26:1f:fb:16:33:23:b4: 8d:0c:2f:5b:a3:cd:8f:c6:4d:ea:7b:19:e4:4c:10: c8:be:53:69:6c:35:c1:1f:98:51:cf:99:76:b7:b8: 02:f8:eb:5c:e5:c1:b4:66:58:d3:ca:5e:1a:de:62: 54:86:88:ff:e7:86:c1:2e:15:a2:0d:9b:c6:e9:1e: 7f:2b:d3:1c:7c:10:19:55:8d:f9:14:41:a9:5c:91: 22:3a:cf:6c:2e:a8:0f:fb:a2:85:54:a1:69:eb:b0: ae:d4:89:bf:c8:fd:90:fc:e7:ab:51:ae:b3:1b:1b: 07:36:03:80:8a:8c:44:60:fa:64:a6:d3:f9:72:88: 7e:c0:0a:45:00:73:02:36:85:95:6f:1e:95:24:64: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:36:1D:B9:9A:79:40:CD:5F:56:7B:9B:F8:85:AC:8D:D9:C6:37:2D X509v3 Authority Key Identifier: keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5a:ca:69:3d:cf:a4:f2:29:6b:ab:d4:97:a8:d8:7b:69:62: 6f:eb:e5:63:f6:1f:18:e5:9e:78:0e:02:54:8f:ef:40:e2:10: 30:99:bb:f5:28:4e:cb:5a:d7:80:5a:dd:48:f9:4a:b2:fd:50: 01:92:d5:24:e4:b5:ec:ca:64:ba:20:0f:c7:a8:08:92:a9:61: 91:30:c2:b4:77:cf:b3:b8:7f:95:bb:e1:c6:85:df:6c:aa:0d: 9f:2c:92:07:6e:7e:fa:2b:cb:5a:48:84:bf:e4:23:87:64:c8: 48:1b:7e:46:a6:0d:40:e4:dd:f4:df:b1:56:85:2c:ad:7c:25: de:b6:a1:cc:73:88:1d:1f:8c:75:0b:44:91:e4:13:7e:27:0b: 70:e4:53:c6:a8:12:c6:e0:13:06:e5:e8:f7:cd:5b:b1:97:15: 5e:f5:14:a8:7e:c0:ac:61:1e:db:68:2f:75:08:a9:11:ea:f4: 30:49:78:b3:d8:ab:b1:07:d7:2b:c1:5f:6b:d8:f1:e4:c8:59: c2:60:8f:98:a5:cb:ae:f9:1b:9f:a3:5b:d9:82:9b:e9:d1:a6: 21:84:a8:cf:77:a1:5e:6f:78:76:e8:3e:05:22:0d:f6:22:91: bb:80:5a:3f:b0:b3:80:5c:7d:c9:8b:c0:6b:18:66:8d:c3:a2: 18:6f:ef:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy NUEyQjE3RjcwHhcNMjQwNTA4MTczMTIxWhcNMjQwNTE1MTczMTIxWjAYMRYwFAYD VQQDEw02NjNiYjZlYS02ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3q770agt4ntz4S0SkzOlEA79N+Uc3fk3+T2irbQ9VioMQbWSrpDaZTz/66X jodfzg/KKqiFjIv55NYnjQV0KaYAeh6Nqa/q2ix58/swvqkBT1ep9AmeDxulCyxq t7DfzC8VPoS7XJQtoCysQacvxSYf+xYzI7SNDC9bo82Pxk3qexnkTBDIvlNpbDXB H5hRz5l2t7gC+Otc5cG0ZljTyl4a3mJUhoj/54bBLhWiDZvG6R5/K9McfBAZVY35 FEGpXJEiOs9sLqgP+6KFVKFp67Cu1Im/yP2Q/OerUa6zGxsHNgOAioxEYPpkptP5 coh+wApFAHMCNoWVbx6VJGQh/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY2Hbma eUDNX1Z7m/iFrI3ZxjctMB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4 Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWsppPc+k8ilrq9SXqNh7aWJv6+Vj9h8Y5Z54DgJUj+9A4hAwmbv1 KE7LWteAWt1I+Uqy/VABktUk5LXsymS6IA/HqAiSqWGRMMK0d8+zuH+Vu+HGhd9s qg2fLJIHbn76K8taSIS/5COHZMhIG35Gpg1A5N3037FWhSytfCXetqHMc4gdH4x1 C0SR5BN+Jwtw5FPGqBLG4BMG5ej3zVuxlxVe9RSofsCsYR7baC91CKkR6vQwSXiz 2KuxB9crwV9r2PHkyFnCYI+Ypcuu+Rufo1vZgpvp0aYhhKjPd6Feb3h26D4FIg32 IpG7gFo/sLOAXH3Ji8BrGGaNw6IYb++A -----END CERTIFICATE-----Generated at Wed May 8 18:13:53 2024 by rpki-client on console-fra.rpki-client.org