$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: d5qClB0xVHB194a7R6Uua427f7A+8/Q+bJoPSMLivuY= Subject key identifier: CA:E9:14:27:29:3B:F5:5A:73:9C:AB:54:C0:D7:6C:48:35:F7:B8:A5 Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0BDB Signing time: Sat 04 May 2024 19:13:34 +0000 Manifest this update: Sat 04 May 2024 19:13:33 +0000 Manifest next update: Sat 11 May 2024 19:13:33 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: OZihCyK3gAjwhfIr5sZxZl7650xkBF1qXmzoXi62qao=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: pjMkyMYT5Kd5Onu44Wh/MhrOgUl1AW4Ni8kXARqOIXE=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: UlDA7w/+0KHaD2dlRNhXd2T+XWH2yCwy1a4TnLwF5+c=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: KOkcxFkgs+tvKpwVSPTdbjlP2a3aZlPgsitLXyhAd5s=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: ibj8KgitiLOO63xInpDEW7gNAYWQe6nI4+x8vt/ZxMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: May 4 19:13:33 2024 GMT Not After : May 11 19:13:33 2024 GMT Subject: CN=663688de-4e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:53:de:e9:e1:c9:38:2d:b8:4c:d0:14:fd: 0d:5a:b0:b0:8e:14:e4:6f:b7:26:0c:be:70:ea:19: fd:30:12:2a:c2:70:66:af:47:de:98:db:e7:f8:84: 2e:76:6f:3f:af:6a:6e:ea:1d:c7:d0:46:d3:dd:14: a6:d0:7b:6a:a7:5d:8c:02:aa:f7:0f:39:19:8e:d3: 42:73:66:b5:87:81:29:39:7a:41:3b:d9:e7:35:cc: 5d:3b:87:95:d9:80:c3:ca:0c:63:01:8c:ff:ad:61: 5a:ad:24:5c:05:fa:c4:79:84:80:a5:3d:8c:d8:cc: 04:f3:84:4a:4d:81:fa:dc:fa:92:55:e8:32:06:f3: 0d:ff:b4:85:06:08:94:ea:5f:a4:df:2e:07:13:15: d4:0d:a3:4a:d7:af:8e:23:db:25:ae:bc:88:bf:de: 82:39:cb:e6:11:49:d2:fb:9d:48:24:87:b3:46:f0: eb:c6:ce:75:ff:de:2b:e5:a4:6a:a9:87:44:ba:0f: e7:c8:7e:1e:f0:fb:14:92:72:64:75:25:3b:32:a0: b7:10:7d:fc:c5:41:cd:5b:c4:3f:a2:dd:0b:b7:70: 9c:18:7d:88:42:5c:e6:f2:fc:a3:71:bf:08:c5:eb: 5e:cb:6d:21:d6:2c:4a:38:57:52:60:f2:a8:10:22: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E9:14:27:29:3B:F5:5A:73:9C:AB:54:C0:D7:6C:48:35:F7:B8:A5 X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:33:76:7e:5d:65:1f:09:05:8c:73:0c:b6:cd:02:91:2d: b4:61:f8:3c:36:64:54:9a:0a:7c:21:b7:af:ec:04:d7:25:3d: 8d:79:50:d8:36:f4:1a:12:e5:e8:b3:59:b5:30:64:1b:e1:85: 43:8f:d4:ca:bb:4e:17:77:ea:42:ad:d7:f4:f8:f7:82:bb:3b: 41:e2:69:59:4d:47:65:af:1a:e4:6f:84:1f:8b:6f:3e:09:a6: 15:36:99:49:36:e5:31:63:03:b5:2a:47:ad:42:11:7d:d3:41: fe:67:2b:06:28:a1:0f:35:54:1b:49:09:06:ef:1e:05:cd:ec: 37:d9:2b:c4:cf:fb:c1:64:89:7a:45:49:f1:f9:57:e7:19:74: 1d:6d:50:39:7d:90:cc:fa:30:96:e7:6d:e0:13:63:91:53:6e: db:54:ab:e7:9e:ce:20:5d:4f:9d:27:71:28:02:b2:b3:2d:4e: 33:88:29:9b:1f:35:ea:dd:1e:9c:aa:f6:33:fd:43:38:fb:e8: e5:1b:e2:e4:7b:a5:ae:10:45:2d:c3:56:5d:de:9c:29:83:13: a5:11:b5:68:2f:31:eb:fc:94:72:70:11:fc:e8:40:f1:97:66: 99:25:4e:b2:fe:e6:9c:14:33:82:65:dc:c0:d1:b7:9c:85:47: 05:54:92:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjQwNTA0MTkxMzMzWhcNMjQwNTExMTkxMzMzWjAYMRYwFAYD VQQDEw02NjM2ODhkZS00ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquVT3unhyTgtuEzQFP0NWrCwjhTkb7cmDL5w6hn9MBIqwnBmr0femNvn+IQu dm8/r2pu6h3H0EbT3RSm0Htqp12MAqr3DzkZjtNCc2a1h4EpOXpBO9nnNcxdO4eV 2YDDygxjAYz/rWFarSRcBfrEeYSApT2M2MwE84RKTYH63PqSVegyBvMN/7SFBgiU 6l+k3y4HExXUDaNK16+OI9slrryIv96COcvmEUnS+51IJIezRvDrxs51/94r5aRq qYdEug/nyH4e8PsUknJkdSU7MqC3EH38xUHNW8Q/ot0Lt3CcGH2IQlzm8vyjcb8I xetey20h1ixKOFdSYPKoECL61QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrpFCcp O/Vac5yrVMDXbEg197ilMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWATN2fl1lHwkFjHMMts0CkS20Yfg8NmRUmgp8Ibev7ATXJT2NeVDY NvQaEuXos1m1MGQb4YVDj9TKu04Xd+pCrdf0+PeCuztB4mlZTUdlrxrkb4Qfi28+ CaYVNplJNuUxYwO1KketQhF900H+ZysGKKEPNVQbSQkG7x4Fzew32SvEz/vBZIl6 RUnx+VfnGXQdbVA5fZDM+jCW523gE2ORU27bVKvnns4gXU+dJ3EoArKzLU4ziCmb HzXq3R6cqvYz/UM4++jlG+Lke6WuEEUtw1Zd3pwpgxOlEbVoLzHr/JRycBH86EDx l2aZJU6y/uacFDOCZdzA0bechUcFVJII -----END CERTIFICATE-----Generated at Sat May 4 20:37:09 2024 by rpki-client on console-fra.rpki-client.org