$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: /ECsq6d5P46ozIZ9sNM4iMqV1cLNrCJpSqWifZb7ogQ= Subject key identifier: AD:70:E4:21:08:61:8E:AB:E1:A5:E8:58:CE:22:D5:1A:7F:E7:A8:7D Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0B08 Signing time: Tue 30 Apr 2024 20:14:10 +0000 Manifest this update: Tue 30 Apr 2024 20:14:09 +0000 Manifest next update: Tue 07 May 2024 20:14:09 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 4K3XzYrk07g+iSu/lCzuyuo6d/dxbKL+u0TIUFOyy+E=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: 9XDYOx1rdlQJD/+61BsCm1V8YndgoRNu5fEy3zd6fcY=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: Cf3Jo1DUxcDM3Asn8cjsAzzpeKnd+qF2gvMS7lkXcm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Apr 30 20:14:09 2024 GMT Not After : May 7 20:14:09 2024 GMT Subject: CN=66315111-fcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:5b:65:e4:27:0f:c3:ff:9e:df:52:2f:34: 86:d5:d9:09:3a:fd:dd:9e:55:8b:d9:61:34:f1:d6: 87:62:d4:5e:bc:2b:62:b3:d6:e1:9d:d3:ad:ea:a9: 68:1d:43:63:4e:c8:ac:9f:40:93:57:f8:68:53:c2: 23:0b:56:51:07:d9:c6:a3:4e:ef:40:34:d8:64:aa: 8e:3a:15:ce:99:e9:f5:d7:74:53:f3:80:45:f5:1c: ad:92:65:ca:4a:f4:e4:ce:d7:30:7f:9f:4c:76:06: 37:4a:62:bf:3a:a2:c3:07:21:4b:10:de:ba:0f:c2: 9f:ef:b7:b8:89:c1:f8:79:27:df:d7:68:e7:80:3c: 7b:a1:5b:25:69:88:bf:2c:8a:3d:78:03:2a:db:8b: 9d:38:8d:0e:7b:47:5f:95:0b:5e:8f:81:e7:74:44: 6d:00:c9:8f:8e:96:86:48:de:b4:fc:6d:cb:fd:16: 8e:7d:26:9b:51:2a:27:cb:6d:70:5f:9c:6e:10:48: aa:2f:f2:bf:bd:0d:8f:a0:af:3a:67:f4:c5:f6:80: 34:1a:2e:ee:26:f1:88:54:e8:a9:a1:47:0e:a4:53: 90:87:ba:1c:e9:9a:12:83:e5:8b:81:db:76:4d:bd: e8:bb:bb:be:58:c2:4a:86:00:87:f4:0a:2a:e3:2c: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:E4:21:08:61:8E:AB:E1:A5:E8:58:CE:22:D5:1A:7F:E7:A8:7D X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8a:71:a0:42:d4:50:96:3f:d7:2f:a2:ea:5e:b6:98:f7:51: 21:39:96:04:8d:44:c4:e3:a7:2d:cc:39:d6:20:0e:58:a7:6f: 33:64:1a:54:81:78:be:68:27:a2:3a:7a:35:1d:a6:42:6c:c5: c7:a2:34:d9:8d:b9:8f:42:c9:09:40:0d:66:8d:1d:9e:b2:ff: fd:a4:a7:bd:f9:32:96:59:47:e4:1d:e6:f2:2f:4b:da:1e:6b: 0d:0a:76:59:4b:c0:aa:44:34:d8:ae:d1:4c:59:9a:62:37:59: 4f:40:66:d9:cc:67:c0:01:c6:1c:6f:1c:5c:9f:84:f9:77:bc: 21:11:5e:da:10:c1:d6:0d:a2:03:82:a8:26:ef:3f:52:09:41: 90:34:f6:c4:4f:6f:0c:bc:0a:ba:20:81:63:25:ea:3a:29:f0: bd:28:c7:83:2a:4e:cf:40:6f:74:96:20:87:61:68:4e:d6:b7: 1f:69:9a:9b:fb:d0:14:68:ee:73:63:91:1a:92:5a:de:fa:e6: 38:c8:3b:87:39:4d:e0:30:aa:f3:56:28:f9:0b:76:3a:8a:ca: 25:ca:fb:7d:d1:52:55:1c:96:3f:db:2c:1e:d5:de:9f:c5:68: cc:48:68:51:7a:19:69:c7:c5:00:f2:b9:ca:34:c3:88:65:67: c9:ac:f6:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjQwNDMwMjAxNDA5WhcNMjQwNTA3MjAxNDA5WjAYMRYwFAYD VQQDEw02NjMxNTExMS1mY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2hbZeQnD8P/nt9SLzSG1dkJOv3dnlWL2WE08daHYtRevCtis9bhndOt6qlo HUNjTsisn0CTV/hoU8IjC1ZRB9nGo07vQDTYZKqOOhXOmen113RT84BF9RytkmXK SvTkztcwf59MdgY3SmK/OqLDByFLEN66D8Kf77e4icH4eSff12jngDx7oVslaYi/ LIo9eAMq24udOI0Oe0dflQtej4HndERtAMmPjpaGSN60/G3L/RaOfSabUSony21w X5xuEEiqL/K/vQ2PoK86Z/TF9oA0Gi7uJvGIVOipoUcOpFOQh7oc6ZoSg+WLgdt2 Tb3ou7u+WMJKhgCH9Aoq4yzGtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1w5CEI YY6r4aXoWM4i1Rp/56h9MB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeinGgQtRQlj/XL6LqXraY91EhOZYEjUTE46ctzDnWIA5Yp28zZBpU gXi+aCeiOno1HaZCbMXHojTZjbmPQskJQA1mjR2esv/9pKe9+TKWWUfkHebyL0va HmsNCnZZS8CqRDTYrtFMWZpiN1lPQGbZzGfAAcYcbxxcn4T5d7whEV7aEMHWDaID gqgm7z9SCUGQNPbET28MvAq6IIFjJeo6KfC9KMeDKk7PQG90liCHYWhO1rcfaZqb +9AUaO5zY5Eaklre+uY4yDuHOU3gMKrzVij5C3Y6isolyvt90VJVHJY/2ywe1d6f xWjMSGhRehlpx8UA8rnKNMOIZWfJrPbY -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org