$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: 9Rn+4/mFdv/m1C9wpxbhVLMheqpGrQnyUlI8rxFl3KU= Subject key identifier: 42:55:1A:90:7F:38:E5:42:69:DD:30:A2:91:E3:47:A3:38:BA:D8:4A Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: CE Signing time: Fri 03 May 2024 06:18:36 +0000 Manifest this update: Fri 03 May 2024 06:18:35 +0000 Manifest next update: Fri 10 May 2024 06:18:35 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: evollnY2RlBM0Nl6mKPxyN/2h0x2Edhx69chUPL9sy0=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: tNyP3GpxOVlhdC8dzuHPeKXAK1xluCFT4wJaTwr6yJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: May 3 06:18:35 2024 GMT Not After : May 10 06:18:35 2024 GMT Subject: CN=663481bb-be9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:8c:9a:8b:88:30:de:e3:99:01:93:0c:e4: 6d:bf:50:6d:31:c3:23:7b:03:ad:9b:2b:f4:c1:e8: 4e:93:b7:72:41:f8:b6:65:e7:a2:76:fd:e1:2a:82: 0a:15:98:6a:49:14:e1:50:11:13:d4:9c:61:0d:bb: 9a:b0:e4:53:da:d8:0e:0d:f0:64:4b:08:05:7c:d9: f5:c8:61:bb:f7:d4:46:dc:eb:6f:f6:06:10:48:0c: ec:47:0c:2b:fd:00:31:93:5b:ba:cc:38:e2:5e:39: 19:34:32:e7:dc:00:0b:4b:d8:c9:27:5e:93:06:d7: 5c:fb:5e:3c:41:57:aa:f8:0c:f3:60:96:75:90:db: 5d:97:c7:66:f0:f4:f0:a4:59:b1:45:e9:e4:a5:7b: bb:cc:e5:34:1c:5d:c0:02:84:16:cf:7d:a6:a3:cd: 41:f6:08:3e:cf:7c:19:17:40:09:e2:33:79:9f:21: f6:2d:ad:3f:a2:45:5e:e5:8e:26:99:8a:f0:a5:a1: eb:4c:9d:79:c0:f2:63:a1:f4:3d:63:bb:e0:b8:16: 0b:22:68:57:98:a0:10:30:9d:9b:8c:ca:d1:2d:f7: 0c:29:9b:f8:fa:0b:0b:ed:d6:ac:95:61:fa:7e:36: 5a:0c:b0:62:44:c7:28:80:1b:c3:c7:f7:5e:9d:6e: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:1A:90:7F:38:E5:42:69:DD:30:A2:91:E3:47:A3:38:BA:D8:4A X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:66:55:1b:b8:a1:e7:e5:ba:fe:24:ad:58:0d:5d:88:34:5d: e5:73:b3:06:22:a1:c0:6e:42:e2:6a:a6:8f:c7:cc:4a:10:6c: 4b:ad:0d:30:dd:e5:32:b8:27:f0:3b:32:cf:c0:fd:83:be:00: 82:6d:3d:1f:f4:f5:f0:87:a0:6f:8f:69:94:38:f3:12:02:ec: 09:e3:12:4f:cc:47:1a:22:f2:7e:07:81:c5:d0:fe:28:91:8e: 12:20:38:78:69:67:0b:38:61:01:ae:29:47:1e:b6:ee:19:a1: cb:7a:89:4a:1c:fc:53:78:fa:85:21:88:07:25:05:8f:95:86: 44:e4:2b:fd:0f:13:b1:62:85:23:38:c8:e4:94:c3:34:9b:77: 5f:ff:89:81:10:cf:2d:e5:e0:54:4c:82:ff:af:23:c2:44:e6: f5:ab:cc:e2:78:f0:2f:73:66:e3:ba:59:2c:3d:78:2e:8d:21: 43:f8:26:68:06:40:5a:05:32:a0:e6:a0:9d:01:58:21:d5:66: 2e:42:09:30:11:1e:0c:25:05:dd:a3:ac:0b:f6:bd:b1:b3:13: 42:ea:77:48:eb:89:69:8b:2e:d1:a1:aa:8e:fd:87:20:e9:91: f0:24:3a:3e:68:40:34:04:67:2e:3a:99:d8:a7:3a:2c:45:3b: 5a:53:92:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjQwNTAzMDYxODM1WhcNMjQwNTEwMDYxODM1WjAYMRYwFAYD VQQDEw02NjM0ODFiYi1iZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kuMmouIMN7jmQGTDORtv1BtMcMjewOtmyv0wehOk7dyQfi2Zeeidv3hKoIK FZhqSRThUBET1JxhDbuasORT2tgODfBkSwgFfNn1yGG799RG3Otv9gYQSAzsRwwr /QAxk1u6zDjiXjkZNDLn3AALS9jJJ16TBtdc+148QVeq+AzzYJZ1kNtdl8dm8PTw pFmxRenkpXu7zOU0HF3AAoQWz32mo81B9gg+z3wZF0AJ4jN5nyH2La0/okVe5Y4m mYrwpaHrTJ15wPJjofQ9Y7vguBYLImhXmKAQMJ2bjMrRLfcMKZv4+gsL7daslWH6 fjZaDLBiRMcogBvDx/denW4o3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJVGpB/ OOVCad0wopHjR6M4uthKMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcZlUbuKHn5br+JK1YDV2INF3lc7MGIqHAbkLiaqaPx8xKEGxLrQ0w 3eUyuCfwOzLPwP2DvgCCbT0f9PXwh6Bvj2mUOPMSAuwJ4xJPzEcaIvJ+B4HF0P4o kY4SIDh4aWcLOGEBrilHHrbuGaHLeolKHPxTePqFIYgHJQWPlYZE5Cv9DxOxYoUj OMjklMM0m3df/4mBEM8t5eBUTIL/ryPCROb1q8ziePAvc2bjulksPXgujSFD+CZo BkBaBTKg5qCdAVgh1WYuQgkwER4MJQXdo6wL9r2xsxNC6ndI64lpiy7RoaqO/Ycg 6ZHwJDo+aEA0BGcuOpnYpzosRTtaU5LI -----END CERTIFICATE-----Generated at Fri May 3 09:08:47 2024 by rpki-client on console-fra.rpki-client.org