$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json) Hash identifier: 9W8UZfNLLwFNLwG1i1yUcOpaVdQN0K9L7qPENQWzFc4= Subject key identifier: 43:1B:4F:47:DD:C2:B0:92:ED:D2:0E:DD:F6:63:12:04:2C:E6:EA:71 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft Manifest number: 0398 Signing time: Sun 05 May 2024 02:43:53 +0000 Manifest this update: Sun 05 May 2024 02:43:52 +0000 Manifest next update: Sun 12 May 2024 02:43:52 +0000 Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: PHsVqXv3LdeG+Yq9JCngVEu55cjT0YxVL2u7gXFfW7E=) 2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: olvikDhKtOHpoejSx0CBxdNeA8P8hk9v8NtYbJZS3cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: May 5 02:43:52 2024 GMT Not After : May 12 02:43:52 2024 GMT Subject: CN=6636f268-d56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:06:11:e9:7e:38:42:24:76:cf:c5:ce:b7:9b: 9e:9b:d9:e0:b0:96:b2:a9:d6:1c:64:53:42:2b:5d: e5:a8:b0:35:64:e8:c7:74:1e:aa:f8:99:bc:18:ed: 19:b4:03:48:0c:dd:9c:b6:d2:52:6e:d6:39:d6:1f: 30:80:fb:a6:1d:17:17:03:96:1d:c0:eb:27:ac:b6: 54:18:24:54:89:bf:0b:d9:95:27:d5:7f:5c:57:27: 09:4f:e6:59:b1:f5:01:52:8f:28:48:96:77:61:64: 53:bd:5a:e8:3d:71:b2:2b:c3:86:50:7c:27:c4:d3: 58:46:4a:8b:cb:e3:a0:89:69:0b:ea:0b:a7:bd:c8: 81:e8:c9:02:6f:65:de:b7:32:ed:21:05:15:e0:9d: fe:6f:fe:7e:42:7d:bf:4f:69:31:38:ce:99:1f:ac: 66:bc:bd:3c:96:20:f7:df:99:b6:5f:8e:36:80:85: 2a:76:c8:af:6f:ed:60:68:25:e9:06:80:61:2d:51: 30:00:fe:31:2e:4d:e4:08:fb:e5:44:ac:f2:0e:d4: 04:d6:af:43:e1:d2:38:19:d1:7b:9c:f8:62:1f:a6: 74:63:32:0a:78:65:a1:5f:a9:a6:13:43:8e:9e:7b: c6:53:b7:43:c6:a7:ec:3f:e5:a1:86:34:73:e0:2a: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:4F:47:DD:C2:B0:92:ED:D2:0E:DD:F6:63:12:04:2C:E6:EA:71 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:89:2a:b1:47:06:0a:18:24:74:0f:55:f0:8e:f9:1e:72:f1: 77:02:fe:69:19:87:c6:78:d0:a6:7c:19:e5:bc:0f:07:e5:31: d6:d5:f0:dd:0e:33:0c:84:de:5b:2a:63:db:69:3d:7f:40:93: 60:24:b2:cf:bd:3e:d0:d9:28:be:69:18:e6:12:f2:2b:d6:27: 38:1e:36:a7:37:ac:90:e9:ea:b5:6e:2a:44:12:37:9b:36:4d: e0:54:a1:45:15:74:c3:01:c1:fa:6f:d0:d7:4c:67:f2:3a:76: 21:5c:17:59:f1:4d:fe:d9:ab:6a:23:b7:b0:21:5c:8a:6b:60: 0c:43:10:7e:d0:a0:12:4e:81:23:2d:34:bc:74:32:e3:df:d9: ed:ec:ac:c2:19:72:46:5d:c5:f3:5a:03:41:ee:c7:10:bc:dd: 09:2c:28:1c:b6:e2:bd:15:80:13:55:68:1e:2f:5e:46:c3:18: 0b:6a:87:bd:46:d2:64:77:2f:74:0d:9f:3c:da:d5:cc:15:9d: 86:2d:17:10:82:90:fb:56:d5:b9:0c:17:63:b0:cd:4b:2a:3c: e0:35:a7:df:cb:02:59:5c:3a:9b:79:6b:70:3e:34:d3:2c:05: 53:cd:fe:d3:df:8f:b0:72:a6:d4:62:b0:09:c1:af:f2:ae:79: 46:b9:27:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjQwNTA1MDI0MzUyWhcNMjQwNTEyMDI0MzUyWjAYMRYwFAYD VQQDEw02NjM2ZjI2OC1kNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AYR6X44QiR2z8XOt5uem9ngsJayqdYcZFNCK13lqLA1ZOjHdB6q+Jm8GO0Z tANIDN2cttJSbtY51h8wgPumHRcXA5YdwOsnrLZUGCRUib8L2ZUn1X9cVycJT+ZZ sfUBUo8oSJZ3YWRTvVroPXGyK8OGUHwnxNNYRkqLy+OgiWkL6gunvciB6MkCb2Xe tzLtIQUV4J3+b/5+Qn2/T2kxOM6ZH6xmvL08liD335m2X442gIUqdsivb+1gaCXp BoBhLVEwAP4xLk3kCPvlRKzyDtQE1q9D4dI4GdF7nPhiH6Z0YzIKeGWhX6mmE0OO nnvGU7dDxqfsP+WhhjRz4Co/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMbT0fd wrCS7dIO3fZjEgQs5upxMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPiSqxRwYKGCR0D1XwjvkecvF3Av5pGYfGeNCmfBnlvA8H5THW1fDd DjMMhN5bKmPbaT1/QJNgJLLPvT7Q2Si+aRjmEvIr1ic4HjanN6yQ6eq1bipEEjeb Nk3gVKFFFXTDAcH6b9DXTGfyOnYhXBdZ8U3+2atqI7ewIVyKa2AMQxB+0KASToEj LTS8dDLj39nt7KzCGXJGXcXzWgNB7scQvN0JLCgctuK9FYATVWgeL15GwxgLaoe9 RtJkdy90DZ882tXMFZ2GLRcQgpD7VtW5DBdjsM1LKjzgNaffywJZXDqbeWtwPjTT LAVTzf7T34+wcqbUYrAJwa/yrnlGuSe+ -----END CERTIFICATE-----Generated at Sun May 5 03:47:42 2024 by rpki-client on console-fra.rpki-client.org