$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: aFqtlrBCuYlHYF8yHpIlTxYoa8mWuBCdIXOYOsUtees= Subject key identifier: E7:20:A3:04:2B:64:4C:27:14:8C:29:C3:F2:A3:E7:D6:7A:C7:90:30 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0F23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0F0D Signing time: Sat 04 May 2024 18:25:01 +0000 Manifest this update: Sat 04 May 2024 18:25:01 +0000 Manifest next update: Sat 11 May 2024 18:25:01 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: 7+M58egkR+thuLOQmk1zhWtsqwf///0R6Lu9ydVsuyc=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: t5d/tqSi5Ak9PYp92aRcAW1miOjLpd8PCdqy2sv9Qk4=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: May 4 18:25:01 2024 GMT Not After : May 11 18:25:01 2024 GMT Subject: CN=66367d7d-1d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:5f:53:94:1d:a0:17:5d:d0:f1:49:6e:8d: 74:e5:af:7d:c0:04:75:0e:12:07:4f:79:ba:d2:54: 59:3b:35:2b:38:bf:a1:c3:d8:b1:15:fd:14:3b:8d: 00:7c:88:df:3a:b4:4d:5b:0c:c9:c8:00:69:00:40: b9:98:b8:76:03:dc:7f:e8:a5:4f:ec:e8:95:30:e0: 8e:d4:e1:c7:48:96:39:56:4b:0b:76:17:b8:62:4a: d5:29:7f:24:e0:8e:e0:da:81:bf:1b:6e:b0:38:75: 01:34:68:2a:c6:69:9e:2b:73:f1:29:fe:02:65:2f: 2d:3d:cb:37:9a:30:de:c1:00:4f:aa:32:3f:5d:10: 0d:d1:de:66:f3:66:dc:b7:ea:25:8b:63:4e:64:62: 10:07:fb:12:3e:4f:bc:c2:b1:71:0a:30:c0:ea:1a: a4:59:af:d1:73:97:9c:ec:d5:8a:43:73:ac:6b:40: 79:54:82:91:6d:26:02:b5:c9:f6:85:a6:37:3c:80: 22:8b:b3:68:58:50:b6:0d:a0:d8:2f:0f:ce:34:c9: d1:96:e8:3f:f3:26:f9:07:31:31:9d:c0:c6:ac:0c: 82:0b:f2:d9:26:a6:f3:1b:3d:35:78:d3:ed:9a:9b: cf:63:f4:ce:74:9c:4c:6a:e6:af:5b:63:4e:cd:a1: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:20:A3:04:2B:64:4C:27:14:8C:29:C3:F2:A3:E7:D6:7A:C7:90:30 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:32:1d:af:4c:40:be:e5:7b:e0:c4:f1:b3:b5:60:e1:a7:b7: ba:72:0f:4b:7a:30:14:ca:06:88:93:31:45:28:2e:15:4b:8c: 54:a6:de:a5:17:4c:3d:f0:46:90:e4:c9:50:e7:32:0f:bb:2e: f0:ca:50:c1:49:46:83:f1:c9:27:99:1c:3f:00:9b:ee:4c:24: db:62:7d:46:ed:48:fc:ce:5c:ed:25:c8:15:cf:1a:94:9d:df: cc:89:36:8b:ba:10:39:e7:08:2f:d6:07:40:b2:3b:71:12:55: 7b:f8:e6:05:99:86:7d:94:a8:44:0a:1b:33:22:b0:f2:b1:8b: b5:46:52:9f:02:f5:8e:39:24:e7:ff:62:d9:cd:53:12:08:67: c3:5b:d6:fb:8b:5c:57:e6:24:fb:86:05:8f:a8:52:45:29:b2: df:ce:74:70:14:39:32:5c:3b:1c:01:21:a2:b8:46:08:bc:ff: d2:c1:db:4d:c5:8a:7a:a3:11:63:d4:90:1d:4b:ad:01:88:fa: 7c:88:95:19:52:35:14:5a:ed:51:86:e4:b4:92:14:19:24:73: 46:7a:1b:3f:a5:11:7b:3e:6f:f9:f6:35:d8:b3:08:bc:e9:14: 27:0e:5e:fb:d1:84:c5:99:44:e7:6a:21:22:5f:9d:57:05:8d: a2:2d:60:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjQwNTA0MTgyNTAxWhcNMjQwNTExMTgyNTAxWjAYMRYwFAYD VQQDEw02NjM2N2Q3ZC0xZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqApfU5QdoBdd0PFJbo105a99wAR1DhIHT3m60lRZOzUrOL+hw9ixFf0UO40A fIjfOrRNWwzJyABpAEC5mLh2A9x/6KVP7OiVMOCO1OHHSJY5VksLdhe4YkrVKX8k 4I7g2oG/G26wOHUBNGgqxmmeK3PxKf4CZS8tPcs3mjDewQBPqjI/XRAN0d5m82bc t+oli2NOZGIQB/sSPk+8wrFxCjDA6hqkWa/Rc5ec7NWKQ3Osa0B5VIKRbSYCtcn2 haY3PIAii7NoWFC2DaDYLw/ONMnRlug/8yb5BzExncDGrAyCC/LZJqbzGz01eNPt mpvPY/TOdJxMauavW2NOzaGcNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcgowQr ZEwnFIwpw/Kj59Z6x5AwMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnMh2vTEC+5XvgxPGztWDhp7e6cg9LejAUygaIkzFFKC4VS4xUpt6l F0w98EaQ5MlQ5zIPuy7wylDBSUaD8cknmRw/AJvuTCTbYn1G7Uj8zlztJcgVzxqU nd/MiTaLuhA55wgv1gdAsjtxElV7+OYFmYZ9lKhEChszIrDysYu1RlKfAvWOOSTn /2LZzVMSCGfDW9b7i1xX5iT7hgWPqFJFKbLfznRwFDkyXDscASGiuEYIvP/SwdtN xYp6oxFj1JAdS60BiPp8iJUZUjUUWu1RhuS0khQZJHNGehs/pRF7Pm/59jXYswi8 6RQnDl770YTFmUTnaiEiX51XBY2iLWAb -----END CERTIFICATE-----Generated at Sat May 4 19:58:37 2024 by rpki-client on console-ams.rpki-client.org