$ rpki-client -vvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft File: 6VdtMs2hm7hvPBYuyf020_0lucE.mft (raw, json) Hash identifier: ezDHQkGIRahS3Sb/+5VGctBFAlHDFtjeR/T+Vhr2kdg= Subject key identifier: 36:5A:08:61:D4:8C:82:84:09:0D:88:48:43:3D:A0:31:F2:B7:DE:25 Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 Certificate issuer: /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft Manifest number: 010E Signing time: Mon 29 Apr 2024 05:12:45 +0000 Manifest this update: Mon 29 Apr 2024 05:12:45 +0000 Manifest next update: Mon 06 May 2024 05:12:45 +0000 Files and hashes: 1: 6VdtMs2hm7hvPBYuyf020_0lucE.crl (hash: Hpja2cSDDGugRFfVT4GfM/MgmrZK84reugnY7Y1I29Q=) 2: 01C299E0662611ED94A8DA42C4F9AE02.roa (hash: KA1a5w2LlGRKJLa3QIndB+iFVbArye3x/Kj5tQWmECY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1 Validity Not Before: Apr 29 05:12:45 2024 GMT Not After : May 6 05:12:45 2024 GMT Subject: CN=662f2c4d-1931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:f5:a1:1a:b6:1a:91:fe:e6:33:4e:36:9a: cd:55:72:79:ae:30:6b:1c:e5:6d:d3:6d:5a:22:db: f2:0a:4c:88:da:34:04:19:14:4b:48:02:90:d5:0b: 4b:fc:ce:f5:c2:5c:91:2f:45:dd:78:4e:5e:12:08: 81:d0:b6:c7:78:52:1f:f3:98:04:5c:27:86:a0:21: 55:59:3c:bd:a7:fb:17:0c:56:78:cd:07:7a:c7:54: 60:b8:79:9a:9e:21:e5:8d:6e:91:7c:b6:11:95:2e: 47:d6:4f:02:d9:5a:22:f1:f8:98:de:37:e6:e4:e0: 5d:31:96:ae:e2:9b:6f:4f:32:d5:16:4a:d6:4d:62: 03:0d:64:ed:23:48:fe:7a:19:10:4e:94:df:85:9f: e8:f5:d4:5c:b3:82:e8:53:98:c3:d7:d5:98:c8:4a: 86:99:bc:e7:28:1e:bc:e3:02:a1:74:37:14:af:5b: 19:38:b4:ef:de:c5:62:dd:4e:76:1a:da:2c:1b:3e: d2:76:ad:f0:43:6f:8b:f6:78:b8:44:2d:61:1d:8f: f6:c5:ac:81:9a:e3:e8:f2:e1:e0:a5:8e:1b:3b:78: 52:6a:d4:85:a4:37:8d:f0:9c:3d:fc:3a:29:09:93: a2:71:60:ff:b6:f2:63:18:26:25:ca:2e:c8:6c:9b: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5A:08:61:D4:8C:82:84:09:0D:88:48:43:3D:A0:31:F2:B7:DE:25 X509v3 Authority Key Identifier: keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:aa:85:e1:69:3e:ea:a1:d1:46:9a:ba:1b:c8:e0:8b:97:dc: 9b:63:a0:71:08:05:b2:df:4b:c8:83:10:15:d5:10:c1:54:2a: 8e:61:66:60:74:3e:0e:ba:cb:5c:14:b9:d5:d8:2b:9f:d6:97: d4:45:31:35:4a:74:54:46:43:16:4a:3f:37:4a:fb:12:62:d9: a0:c3:79:17:29:7f:84:83:69:52:60:e9:15:b4:3b:d1:11:15: 04:ea:3e:ec:0c:4b:5d:dc:31:db:22:62:12:1d:2e:5b:c1:4c: 73:29:98:34:4b:92:9d:b0:b9:ee:14:37:c2:56:8d:e3:8f:3e: 5e:ee:90:9a:50:c7:16:b8:47:5d:4a:3f:bf:75:76:3b:ae:ab: 47:ba:6d:8b:31:d1:00:f7:0a:34:4b:e0:01:54:1a:13:42:66: f7:67:e9:e5:50:03:58:96:d1:66:8f:4b:21:f9:35:24:ac:b6: 82:2c:15:ea:bd:1d:03:12:5a:7a:5c:dc:3f:0b:cd:3f:ea:ba: e0:1d:f1:e8:a2:50:5a:f0:86:a0:a7:ae:ae:f7:79:94:a6:22: 04:86:5c:68:1b:6c:fd:10:60:e3:ab:17:9f:3e:e4:c4:18:c9: ea:09:02:b5:82:39:25:5c:42:0d:6a:9a:b9:02:95:53:24:c2: f2:5f:80:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzNTkxMTAvBgNVBAUTKEU5NTc2RDMyQ0RBMTlCQjg2RjNDMTYyRUM5RkQzNkQz RkQyNUI5QzEwHhcNMjQwNDI5MDUxMjQ1WhcNMjQwNTA2MDUxMjQ1WjAYMRYwFAYD VQQDEw02NjJmMmM0ZC0xOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07z1oRq2GpH+5jNONprNVXJ5rjBrHOVt021aItvyCkyI2jQEGRRLSAKQ1QtL /M71wlyRL0XdeE5eEgiB0LbHeFIf85gEXCeGoCFVWTy9p/sXDFZ4zQd6x1RguHma niHljW6RfLYRlS5H1k8C2Voi8fiY3jfm5OBdMZau4ptvTzLVFkrWTWIDDWTtI0j+ ehkQTpTfhZ/o9dRcs4LoU5jD19WYyEqGmbznKB684wKhdDcUr1sZOLTv3sVi3U52 GtosGz7Sdq3wQ2+L9ni4RC1hHY/2xayBmuPo8uHgpY4bO3hSatSFpDeN8Jw9/Dop CZOicWD/tvJjGCYlyi7IbJsfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZaCGHU jIKECQ2ISEM9oDHyt94lMB8GA1UdIwQYMBaAFOlXbTLNoZu4bzwWLsn9NtP9JbnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTM1OS9DQTlBMzRCNjY2 MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03aHZQQll1eWYwMjBfMGx1 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZWZHRNczJobTdodlBCWXV5ZjAyMF8wbHVjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTM1OS9DQTlBMzRCNjY2MjMxMUVEOTE4NTVENDJDNEY5QUUwMi82VmR0TXMyaG03 aHZQQll1eWYwMjBfMGx1Y0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuqoXhaT7qodFGmrobyOCLl9ybY6BxCAWy30vIgxAV1RDBVCqOYWZg dD4OustcFLnV2Cuf1pfURTE1SnRURkMWSj83SvsSYtmgw3kXKX+Eg2lSYOkVtDvR ERUE6j7sDEtd3DHbImISHS5bwUxzKZg0S5KdsLnuFDfCVo3jjz5e7pCaUMcWuEdd Sj+/dXY7rqtHum2LMdEA9wo0S+ABVBoTQmb3Z+nlUANYltFmj0sh+TUkrLaCLBXq vR0DElp6XNw/C80/6rrgHfHoolBa8Iagp66u93mUpiIEhlxoG2z9EGDjqxefPuTE GMnqCQK1gjklXEINapq5ApVTJMLyX4Da -----END CERTIFICATE-----Generated at Mon Apr 29 05:41:29 2024 by rpki-client on console-fra.rpki-client.org