$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: zaJGCXCUwX2I5Hq8z0LXd3iTvtcw0/WsFHUTt+WwmkA= Subject key identifier: 9B:01:D6:47:9C:35:0C:67:52:B7:3A:F7:4F:70:77:0D:BA:6D:95:98 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 08B0 Signing time: Mon 06 May 2024 21:38:41 +0000 Manifest this update: Mon 06 May 2024 21:38:40 +0000 Manifest next update: Mon 13 May 2024 21:38:40 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: IMxUse3J5gUnz8MaZLcYsKxggQRQ2MAz7iKU8tSX+iQ=) 2: 746D55EAC51911EE8C160640C4F9AE02.roa (hash: C7WiojBMyjzUqbt+nYfQDnjpXlvmjFMh4IIYxSxNxeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: May 6 21:38:40 2024 GMT Not After : May 13 21:38:40 2024 GMT Subject: CN=66394de1-ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:df:5e:c4:13:4c:c1:17:c3:65:c8:85:66: 4a:5f:15:d8:75:5f:23:57:d3:00:43:c3:fd:0b:74: 48:4a:c2:48:52:1a:ce:7d:c1:ba:7e:2c:53:a3:b1: b5:75:3b:ca:63:20:15:4a:7e:e0:89:3c:b9:19:88: 72:90:24:2a:36:4f:bb:a1:b1:ab:dd:96:66:d7:9f: 98:90:25:8d:80:91:c8:6c:8b:e2:03:07:e1:40:06: 69:e1:1e:56:92:32:6f:61:9d:e9:47:19:0e:b8:a4: b5:c3:69:9f:aa:5c:35:08:ac:78:0d:92:d3:ec:d6: 28:51:c4:92:d9:b6:c4:5c:8c:10:3b:d3:ba:62:82: 48:f1:39:6e:70:fe:11:c2:68:65:6d:16:21:7b:e2: d4:41:17:e2:0b:26:c8:7b:d5:ab:ca:39:45:e9:4a: 0d:60:46:89:c8:65:b5:fa:c4:a1:44:17:a5:73:b6: 56:18:56:35:62:bc:84:da:84:c3:1e:a5:14:80:03: 9e:9d:2d:49:9b:9f:53:b1:ab:10:b5:e3:3c:71:ac: d9:0e:c8:5b:0b:ff:c8:d7:91:71:9a:54:1c:1e:42: 03:4b:f1:fc:d5:9a:1f:35:ea:0f:ca:73:21:27:85: db:96:d7:03:ed:30:d7:23:bb:30:cb:74:6e:9f:cd: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:D6:47:9C:35:0C:67:52:B7:3A:F7:4F:70:77:0D:BA:6D:95:98 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:4c:3f:db:76:b8:15:7d:93:a6:1f:20:de:1d:6d:82:1a: ce:df:b9:c9:51:28:1f:56:ce:42:da:55:ba:be:64:ba:f2:b1: a9:d7:2b:0b:31:4d:cf:b3:ce:42:3e:97:35:c6:0a:96:a1:64: 13:e7:78:ab:b6:69:63:82:6b:a3:aa:dd:a7:00:ba:15:ef:95: 03:38:f0:d6:4c:49:d8:6c:e6:df:b8:e4:c8:4a:15:53:bf:03: ac:b2:53:ce:94:ac:e2:44:a4:5e:85:3e:ed:45:6c:9b:ba:1e: de:1f:e6:61:17:65:b8:ac:43:2d:d1:76:ac:19:6a:da:9c:85: da:4c:39:fd:2f:30:d8:df:83:3d:9f:5f:bf:1c:de:82:39:30: 06:86:77:93:e9:e2:64:84:cb:51:c0:f8:1b:5f:79:36:11:ce: 3d:40:ed:f5:19:2a:a1:39:0b:e4:cb:90:11:3d:33:5e:a8:4c: 00:25:ae:38:5e:f2:1e:e0:3d:04:4e:5e:2f:de:cb:77:ea:a3: 42:73:ee:e3:c2:1c:fe:6d:69:b5:f0:41:7a:69:54:06:a3:18: 6e:63:5e:57:31:70:0f:ae:7f:f7:00:ed:1e:d0:73:ef:53:42: 76:9e:b9:dc:1a:b8:a6:a4:11:b2:8a:86:d3:49:b8:0a:47:19: 26:bd:cb:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjQwNTA2MjEzODQwWhcNMjQwNTEzMjEzODQwWjAYMRYwFAYD VQQDEw02NjM5NGRlMS1lYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpPfXsQTTMEXw2XIhWZKXxXYdV8jV9MAQ8P9C3RISsJIUhrOfcG6fixTo7G1 dTvKYyAVSn7giTy5GYhykCQqNk+7obGr3ZZm15+YkCWNgJHIbIviAwfhQAZp4R5W kjJvYZ3pRxkOuKS1w2mfqlw1CKx4DZLT7NYoUcSS2bbEXIwQO9O6YoJI8TlucP4R wmhlbRYhe+LUQRfiCybIe9WryjlF6UoNYEaJyGW1+sShRBelc7ZWGFY1YryE2oTD HqUUgAOenS1Jm59TsasQteM8cazZDshbC//I15FxmlQcHkIDS/H81ZofNeoPynMh J4XbltcD7TDXI7swy3Run83cKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsB1kec NQxnUrc6909wdw26bZWYMB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSEw/23a4FX2Tph8g3h1tghrO37nJUSgfVs5C2lW6vmS68rGp1ysL MU3Ps85CPpc1xgqWoWQT53irtmljgmujqt2nALoV75UDOPDWTEnYbObfuOTIShVT vwOsslPOlKziRKRehT7tRWybuh7eH+ZhF2W4rEMt0XasGWranIXaTDn9LzDY34M9 n1+/HN6COTAGhneT6eJkhMtRwPgbX3k2Ec49QO31GSqhOQvky5ARPTNeqEwAJa44 XvIe4D0ETl4v3st36qNCc+7jwhz+bWm18EF6aVQGoxhuY15XMXAPrn/3AO0e0HPv U0J2nrncGrimpBGyiobTSbgKRxkmvcsC -----END CERTIFICATE-----Generated at Mon May 6 22:40:54 2024 by rpki-client on console-ams.rpki-client.org