$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: g97Aa8qsvV3Ij9c8J937GRxG3eTY6du2tHBFTrHJrjU= Subject key identifier: B8:7A:51:2B:18:56:A4:63:C0:B0:90:10:D8:00:E9:29:80:79:96:37 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0B6A Signing time: Mon 06 May 2024 19:38:58 +0000 Manifest this update: Mon 06 May 2024 19:38:57 +0000 Manifest next update: Mon 13 May 2024 19:38:57 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 3kno7f2JCrxzaMhftFY+/eKhk9EBolrMmQTucsuLRoI=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: ReXGjvFy+TWrsr7RgwOcoe4seJnPX23TJX01LZAfVPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: May 6 19:38:57 2024 GMT Not After : May 13 19:38:57 2024 GMT Subject: CN=663931d2-3102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:92:8a:63:5f:74:4a:bf:53:8e:71:ff:06: 3d:71:89:e4:8c:43:78:5d:08:5b:73:10:cc:ce:53: ad:97:20:7d:07:1b:5f:31:13:91:f3:eb:d6:b4:76: 36:70:64:fa:15:b3:d8:a9:06:27:db:cb:12:08:c6: b6:2e:05:7b:23:a5:5c:7d:ac:df:13:9b:5b:17:2f: ac:d2:84:cd:58:61:d0:0a:83:8a:06:e9:f4:5a:04: 50:a7:15:bd:01:bb:2b:f8:a9:76:62:a1:2c:f3:fa: 86:1a:71:a9:f0:f3:07:23:8b:e2:7b:25:13:27:d0: e2:ae:5e:04:9f:cb:6d:e5:32:fc:f0:91:32:af:e9: 11:96:98:55:25:df:8f:a3:ff:6f:ff:1a:07:bb:bf: f4:12:48:34:50:15:5b:7c:8e:36:00:8f:23:f3:1f: b8:1d:8d:4d:b1:ca:27:28:c3:40:a6:55:b0:fc:eb: 1c:4d:26:c6:7b:3a:81:94:82:03:f5:5c:aa:82:9c: 6c:d8:a7:63:34:c9:f1:44:d6:66:db:e9:24:d9:a4: 22:e4:83:19:a2:a8:98:4b:d1:f1:85:f5:ce:f3:18: 00:a6:a9:37:7f:a9:70:6b:18:40:2b:52:88:82:e2: bd:3b:b9:d1:6a:5d:26:5c:84:4c:f1:2d:12:ac:d3: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:51:2B:18:56:A4:63:C0:B0:90:10:D8:00:E9:29:80:79:96:37 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:bf:ea:5c:4d:f4:10:94:27:89:cf:d2:e5:f8:b4:b1:d5: 45:03:f4:eb:b9:fd:a0:e0:80:80:de:61:13:93:59:76:ac:1f: 6a:49:35:db:5d:4e:f7:c3:5e:b4:98:2f:e5:6e:75:b9:f7:de: eb:80:aa:03:f6:13:a0:a3:14:5e:5f:5a:a4:58:49:1f:23:85: 53:93:72:e5:1f:5f:bd:fb:f7:4b:b1:53:16:2f:21:e4:1d:2e: 88:0a:13:8d:7c:60:b8:be:51:18:00:8c:ca:8f:16:8d:f2:e2: c4:ce:0c:4e:c1:70:f9:d7:4e:6f:51:0d:a7:41:d0:bf:a3:5a: d4:0d:18:73:8b:ab:41:97:4d:1d:26:4b:a1:b9:f9:a5:2f:d7: f2:37:f2:af:87:2e:fc:4b:ea:86:96:05:e7:ca:73:78:95:c1: 58:ee:02:a5:1a:e7:84:d6:bd:82:fc:48:73:4a:63:df:07:8b: 65:9b:66:f6:a9:da:4e:58:98:a0:58:94:2b:e1:65:e6:be:43: 10:67:2b:a6:c6:0c:84:b9:92:e4:b7:54:61:93:33:bc:80:90: bc:d0:15:df:3c:d4:f7:d6:e9:db:71:7c:d4:15:15:6b:7d:0b: 4c:96:ad:7f:f2:82:b5:7d:cb:99:0b:58:46:7a:5b:18:d2:f9: 8c:6e:5f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjQwNTA2MTkzODU3WhcNMjQwNTEzMTkzODU3WjAYMRYwFAYD VQQDEw02NjM5MzFkMi0zMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hiSimNfdEq/U45x/wY9cYnkjEN4XQhbcxDMzlOtlyB9BxtfMROR8+vWtHY2 cGT6FbPYqQYn28sSCMa2LgV7I6VcfazfE5tbFy+s0oTNWGHQCoOKBun0WgRQpxW9 Absr+Kl2YqEs8/qGGnGp8PMHI4vieyUTJ9Dirl4En8tt5TL88JEyr+kRlphVJd+P o/9v/xoHu7/0Ekg0UBVbfI42AI8j8x+4HY1NsconKMNAplWw/OscTSbGezqBlIID 9Vyqgpxs2KdjNMnxRNZm2+kk2aQi5IMZoqiYS9HxhfXO8xgApqk3f6lwaxhAK1KI guK9O7nRal0mXIRM8S0SrNMLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh6USsY VqRjwLCQENgA6SmAeZY3MB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv0L/qXE30EJQnic/S5fi0sdVFA/Truf2g4ICA3mETk1l2rB9qSTXb XU73w160mC/lbnW5997rgKoD9hOgoxReX1qkWEkfI4VTk3LlH1+9+/dLsVMWLyHk HS6IChONfGC4vlEYAIzKjxaN8uLEzgxOwXD5105vUQ2nQdC/o1rUDRhzi6tBl00d JkuhufmlL9fyN/Kvhy78S+qGlgXnynN4lcFY7gKlGueE1r2C/EhzSmPfB4tlm2b2 qdpOWJigWJQr4WXmvkMQZyumxgyEuZLkt1RhkzO8gJC80BXfPNT31unbcXzUFRVr fQtMlq1/8oK1fcuZC1hGelsY0vmMbl/M -----END CERTIFICATE-----Generated at Mon May 6 22:40:55 2024 by rpki-client on console-ams.rpki-client.org