$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft File: 9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json) Hash identifier: juoX8AXjp0tPkrdDvClfh0+b1BViwxd5MnCwJqxD+bU= Subject key identifier: C9:15:CD:2F:1C:49:A5:61:F6:73:75:41:71:B2:81:69:1D:71:46:A4 Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft Manifest number: 06B8 Signing time: Wed 24 Apr 2024 23:05:27 +0000 Manifest this update: Wed 24 Apr 2024 23:05:26 +0000 Manifest next update: Wed 01 May 2024 23:05:26 +0000 Files and hashes: 1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: P9Qoy6SRDMcCLOyqI0Bz+kwa6eBNK/iCPc0dvgNVqS8=) 2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: coNsqWlIs1IR7kR/A8Mb6dILYr6YwFGx5wxCyfnD3SQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 23:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Validity Not Before: Apr 24 23:05:26 2024 GMT Not After : May 1 23:05:26 2024 GMT Subject: CN=66299037-3167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:be:e9:b9:8f:ef:ab:ee:c8:43:c3:a4:62: 26:c5:17:44:dc:01:ac:f6:9a:92:4b:2a:88:55:58: 6a:cd:c2:ed:42:06:65:6c:ca:54:c5:87:4e:15:b5: 08:93:ee:84:1a:57:0e:6b:aa:97:68:e9:fe:23:80: c4:80:a4:18:09:7d:e1:d8:ea:61:1a:32:12:c3:31: d5:3b:9a:2e:d7:97:43:e8:33:9d:f0:9a:3b:89:0f: b1:9e:07:86:be:e1:24:5a:7a:bb:03:31:71:a8:64: a8:2f:fd:0f:0e:83:15:55:56:ef:64:01:3f:89:3e: 59:a8:ed:e5:94:55:60:31:e9:7e:79:d2:c2:38:ee: 70:07:5f:ec:85:2f:24:b6:9d:40:bb:5f:dd:1b:a8: 6d:14:29:73:dc:a5:0b:2a:a7:1e:8a:0e:89:52:a7: 4d:9a:ec:e6:a4:21:80:06:ce:80:55:70:22:80:2c: fb:d6:9f:51:b9:14:1e:63:b1:b9:bc:bd:c1:40:c6: d1:90:95:d2:42:87:32:67:22:0d:95:2a:e7:42:7c: f2:c7:d0:86:32:9f:6c:90:77:bf:65:e6:19:cd:ff: 5e:ec:3d:f9:c2:46:93:ba:d7:10:38:cb:32:18:a8: e7:19:78:01:99:c9:95:5d:0c:9d:b0:84:14:0c:48: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:CD:2F:1C:49:A5:61:F6:73:75:41:71:B2:81:69:1D:71:46:A4 X509v3 Authority Key Identifier: keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:0e:07:da:a9:13:72:14:8b:5d:1a:69:b0:41:1e:b1:ac: 63:73:e1:1a:f2:23:1a:2a:60:44:41:0b:8f:8a:47:c8:72:4e: e6:49:a3:88:5c:c2:a0:fb:71:e3:66:6e:04:0e:54:03:3a:e5: 00:dd:28:47:dc:3f:01:92:c2:10:8f:c0:90:62:2d:d8:d0:be: c6:c9:59:c5:08:1a:60:d0:af:94:39:07:67:d7:9a:f8:a8:8e: 97:2b:f5:93:ad:83:a8:83:6e:d2:fb:dc:bc:75:0e:1b:1b:3b: 55:55:cd:d3:72:60:bb:67:0f:b2:ff:bc:b9:8e:db:24:39:e4: d7:1f:72:35:36:f1:4e:14:19:1d:c8:d5:14:26:6b:6e:84:f3: c3:9e:5b:d8:92:db:51:86:9e:d4:dd:90:22:1d:dc:22:19:4f: 18:6f:06:0f:e6:9a:45:5c:ae:aa:9c:29:70:09:86:11:b9:eb: da:ea:52:1b:05:84:4f:8a:c7:d3:f6:2b:15:77:d6:ab:3f:cb: 85:6d:a3:98:22:22:5c:45:7c:fb:8c:78:6c:17:cc:7d:a5:10: 7a:d5:ce:1f:fb:79:45:ea:2b:01:fe:92:f4:05:a2:65:89:6f: 4f:59:68:bc:59:d6:91:38:ab:0a:f1:30:ef:e4:70:5b:96:da: a3:55:73:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk5MEUxMTAvBgNVBAUTKEY1RDA0NzQ5MERFM0E0RURDRkRDMzdGNkVDQUI5NDkz OERBN0M2RjYwHhcNMjQwNDI0MjMwNTI2WhcNMjQwNTAxMjMwNTI2WjAYMRYwFAYD VQQDEw02NjI5OTAzNy0zMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AO+6bmP76vuyEPDpGImxRdE3AGs9pqSSyqIVVhqzcLtQgZlbMpUxYdOFbUI k+6EGlcOa6qXaOn+I4DEgKQYCX3h2OphGjISwzHVO5ou15dD6DOd8Jo7iQ+xngeG vuEkWnq7AzFxqGSoL/0PDoMVVVbvZAE/iT5ZqO3llFVgMel+edLCOO5wB1/shS8k tp1Au1/dG6htFClz3KULKqceig6JUqdNmuzmpCGABs6AVXAigCz71p9RuRQeY7G5 vL3BQMbRkJXSQocyZyINlSrnQnzyx9CGMp9skHe/ZeYZzf9e7D35wkaTutcQOMsy GKjnGXgBmcmVXQydsIQUDEgFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkVzS8c SaVh9nN1QXGygWkdcUakMB8GA1UdIwQYMBaAFPXQR0kN46Ttz9w39uyrlJONp8b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkwRS83RTQ2NEIzNDEw NTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBPM1AzRGYyN0t1VWs0Mm54 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlkQkhTUTNqcE8zUDNEZjI3S3VVazQybnh2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTkwRS83RTQ2NEIzNDEwNTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBP M1AzRGYyN0t1VWs0Mm54dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3dA4H2qkTchSLXRppsEEesaxjc+Ea8iMaKmBEQQuPikfIck7mSaOI XMKg+3HjZm4EDlQDOuUA3ShH3D8BksIQj8CQYi3Y0L7GyVnFCBpg0K+UOQdn15r4 qI6XK/WTrYOog27S+9y8dQ4bGztVVc3TcmC7Zw+y/7y5jtskOeTXH3I1NvFOFBkd yNUUJmtuhPPDnlvYkttRhp7U3ZAiHdwiGU8YbwYP5ppFXK6qnClwCYYRueva6lIb BYRPisfT9isVd9arP8uFbaOYIiJcRXz7jHhsF8x9pRB61c4f+3lF6isB/pL0BaJl iW9PWWi8WdaROKsK8TDv5HBbltqjVXNd -----END CERTIFICATE-----Generated at Thu Apr 25 02:01:19 2024 by rpki-client on console-ams.rpki-client.org