$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: p0eJITyn4Vtj/OaGsXPkhYGbw4frbkXMB66D6JjNZrU= Subject key identifier: 3A:D0:CE:76:0A:DE:12:D9:63:70:FE:9D:11:F7:43:69:FC:ED:35:55 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: A9 Signing time: Fri 17 May 2024 06:44:48 +0000 Manifest this update: Fri 17 May 2024 06:44:48 +0000 Manifest next update: Fri 24 May 2024 06:44:48 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: nVcLVRcsbO2EdOlsLqYJ47XCuZeLxQQCNowwnnI60TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: May 17 06:44:48 2024 GMT Not After : May 24 06:44:48 2024 GMT Subject: CN=6646fce0-005c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:19:4d:e2:01:07:9b:4d:e3:98:c7:1f:6a: e4:8e:9e:62:b4:0b:f4:b2:f2:27:46:35:c3:d6:09: f5:b7:44:c8:8d:7d:34:e0:2e:e6:59:62:dc:7c:9f: f0:bc:6a:10:37:73:ec:ed:ce:03:a5:d4:6d:c7:15: 45:95:49:54:5f:68:fd:35:e1:0e:24:6a:57:d8:59: 8d:44:d8:bd:99:ed:ef:23:d3:ce:d3:3a:8a:8b:4c: 48:e2:c1:c1:40:5a:32:e1:21:5e:99:a4:3f:66:c9: 06:73:81:a2:22:ab:de:5b:6b:31:ba:9f:54:d4:4d: 83:f6:e1:07:b9:91:dc:44:2b:80:03:05:a7:d4:44: 25:13:08:90:de:b3:5f:d3:ed:4f:70:7d:fd:1e:7e: ca:36:b9:f9:08:97:3b:25:79:d0:f5:73:ed:ed:ec: e0:58:2c:7e:a9:87:2c:44:a0:b7:bb:a2:db:b2:91: 72:f2:ca:95:ed:b7:a1:54:ed:36:c5:65:7e:84:1b: e5:ae:e1:fd:90:b7:9e:6f:85:82:d6:59:b6:7a:80: b0:fc:56:77:a8:a2:7e:c3:cc:26:9c:37:aa:7c:c7: 76:f2:88:2e:11:68:9e:70:c3:c9:01:8f:48:88:70: b6:eb:8b:a2:7f:89:3c:e0:ce:90:10:8e:b9:ec:f1: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:CE:76:0A:DE:12:D9:63:70:FE:9D:11:F7:43:69:FC:ED:35:55 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ac:c8:35:8c:44:bb:a8:36:29:7d:10:de:18:4e:21:df:95: fc:f3:c7:e4:3a:53:bb:07:34:51:1a:b5:76:3a:95:04:f4:19: d4:cf:57:eb:21:89:fc:a9:cb:b0:02:e6:c2:65:c3:bc:c0:57: 47:ee:20:18:d2:95:0c:74:88:6f:7e:71:d3:fe:09:a7:2a:6e: 62:af:b6:a8:71:a1:de:7b:c2:a9:4f:ef:17:0e:fd:c6:4d:67: 98:6c:d1:63:05:96:d5:ca:40:48:f1:9a:ed:94:d6:e9:1a:3d: 57:6f:2c:a5:58:99:12:33:88:93:b7:85:b5:f7:ba:33:35:12: e9:89:36:1f:71:59:35:00:94:8f:92:f5:df:51:d6:3a:7e:03: 83:5f:2b:ee:21:ee:22:db:16:75:8d:b3:78:bb:ab:8e:75:c3: d7:db:ac:a7:bb:ec:8b:da:fb:e2:bc:45:47:15:3a:1f:ca:31: 04:2a:3d:7c:29:6a:39:50:42:79:4b:23:be:f9:89:1d:2f:08: 8a:40:57:f4:49:d5:91:ed:a2:95:60:d7:71:4a:de:b4:a6:43: 7c:61:a3:32:3d:73:11:8f:ee:8c:d7:5a:fa:1d:55:1c:5a:c4: 62:0f:55:0a:5c:70:99:22:c8:4a:b4:e1:ba:3a:67:f2:ac:f2: c7:4c:ef:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjQwNTE3MDY0NDQ4WhcNMjQwNTI0MDY0NDQ4WjAYMRYwFAYD VQQDEw02NjQ2ZmNlMC0wMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bsZTeIBB5tN45jHH2rkjp5itAv0svInRjXD1gn1t0TIjX004C7mWWLcfJ/w vGoQN3Ps7c4DpdRtxxVFlUlUX2j9NeEOJGpX2FmNRNi9me3vI9PO0zqKi0xI4sHB QFoy4SFemaQ/ZskGc4GiIqveW2sxup9U1E2D9uEHuZHcRCuAAwWn1EQlEwiQ3rNf 0+1PcH39Hn7KNrn5CJc7JXnQ9XPt7ezgWCx+qYcsRKC3u6LbspFy8sqV7behVO02 xWV+hBvlruH9kLeeb4WC1lm2eoCw/FZ3qKJ+w8wmnDeqfMd28oguEWiecMPJAY9I iHC264uif4k84M6QEI657PGgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrQznYK 3hLZY3D+nRH3Q2n87TVVMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rMg1jES7qDYpfRDeGE4h35X888fkOlO7BzRRGrV2OpUE9BnUz1fr IYn8qcuwAubCZcO8wFdH7iAY0pUMdIhvfnHT/gmnKm5ir7aocaHee8KpT+8XDv3G TWeYbNFjBZbVykBI8ZrtlNbpGj1XbyylWJkSM4iTt4W197ozNRLpiTYfcVk1AJSP kvXfUdY6fgODXyvuIe4i2xZ1jbN4u6uOdcPX26ynu+yL2vvivEVHFTofyjEEKj18 KWo5UEJ5SyO++YkdLwiKQFf0SdWR7aKVYNdxSt60pkN8YaMyPXMRj+6M11r6HVUc WsRiD1UKXHCZIshKtOG6OmfyrPLHTO/6 -----END CERTIFICATE-----Generated at Fri May 17 08:13:48 2024 by rpki-client on console-fra.rpki-client.org