$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: zvlnr0ULrXsoAF3+HZW+WZmazYGPQ5gKtgm8UsLNxkg= Subject key identifier: 79:00:1F:94:00:B0:9C:BA:CC:49:31:59:8F:D3:6C:27:D9:E9:B9:79 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 01A9 Signing time: Sat 27 Apr 2024 04:29:39 +0000 Manifest this update: Sat 27 Apr 2024 04:29:39 +0000 Manifest next update: Sat 04 May 2024 04:29:39 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: SMsUO8pibJuBlqJJiVE0L92k2GA42BF5fuF0Ct9gN6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Apr 27 04:29:39 2024 GMT Not After : May 4 04:29:39 2024 GMT Subject: CN=662c7f33-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:55:04:a5:fc:57:1a:2a:0c:aa:07:73:0c: b3:33:a3:26:a7:69:27:cc:e0:76:84:54:4d:22:92: 20:30:2f:61:c7:e9:8b:65:ee:69:7c:7a:ac:0f:87: a5:62:c9:ae:9f:1d:92:83:02:08:19:17:1b:f5:e4: 72:a5:ff:74:1d:34:91:cb:2c:bb:2e:d0:64:ef:2a: d4:16:f9:2b:82:70:83:58:2a:27:a1:9f:30:cc:dc: 19:6e:6a:fd:e9:3d:6f:3a:0c:86:13:f8:f1:41:09: dd:ec:72:b9:c8:1d:f6:d4:49:b7:cb:3b:e3:3f:79: 0f:bc:11:b9:d4:b2:7f:85:14:00:55:dd:85:08:d3: 6b:29:ed:5e:a1:5b:9c:66:9d:3d:c8:d5:a7:35:99: 32:24:56:50:d8:1b:b1:e1:a5:47:49:b7:fd:8e:f5: ed:69:55:9a:60:81:6c:b0:a5:6c:37:c1:fd:38:94: 57:4a:2f:2b:f9:50:88:fe:84:0f:da:95:a4:08:72: 0e:4f:bb:f0:ad:4f:08:64:dc:e2:a0:f3:ea:40:75: f5:a9:ec:7c:6d:6f:53:f6:85:00:f7:fd:d2:58:6c: c2:bc:99:b3:27:b2:b8:57:30:a7:d1:a5:a5:68:6c: b6:18:93:43:1a:b5:89:ad:ee:b5:0f:73:ac:31:08: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:1F:94:00:B0:9C:BA:CC:49:31:59:8F:D3:6C:27:D9:E9:B9:79 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:de:6f:d5:8d:81:e4:c6:08:f4:47:0e:f5:3c:d5:0d:bc:55: 5c:83:e1:4b:44:31:8a:c4:6d:7d:d2:06:1e:0c:cf:b2:1f:70: f2:9b:68:a4:86:7a:83:98:1a:9a:23:0d:c1:e4:7e:91:10:ef: be:e0:68:00:0d:96:49:24:c3:30:21:8c:77:30:a0:be:ea:63: 0c:58:f8:27:0d:94:8e:2a:da:db:cc:34:35:07:0e:a7:8b:70: 97:11:70:2b:b2:f2:d1:95:e7:f5:86:0f:ed:f4:61:4d:f9:7a: 65:10:59:81:e2:1b:b3:d0:69:90:94:00:8a:a9:69:f2:98:75: 4c:50:2f:cb:d3:6d:6f:67:81:26:5d:b5:66:32:77:f2:35:21: 72:57:d3:af:88:5e:0e:8b:78:76:6b:cb:da:fa:62:d7:b3:dd: 55:5b:46:38:b9:93:29:51:03:7a:c8:99:70:97:81:e7:7a:e2: fb:a8:7e:de:e2:59:5b:61:03:d7:1b:98:23:c3:ea:0c:02:f5: b0:f0:ad:6a:91:a8:8a:e4:90:d9:07:47:21:21:f0:d3:6d:e6: 4d:7c:6a:de:f7:62:52:ca:c8:ae:e9:bf:3d:a9:37:c5:05:f7: ef:a5:05:fd:24:f1:98:aa:ab:80:18:94:de:98:ee:e8:61:51: 48:0f:4d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjQwNDI3MDQyOTM5WhcNMjQwNTA0MDQyOTM5WjAYMRYwFAYD VQQDEw02NjJjN2YzMy1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqxVBKX8VxoqDKoHcwyzM6Mmp2knzOB2hFRNIpIgMC9hx+mLZe5pfHqsD4el Ysmunx2SgwIIGRcb9eRypf90HTSRyyy7LtBk7yrUFvkrgnCDWConoZ8wzNwZbmr9 6T1vOgyGE/jxQQnd7HK5yB321Em3yzvjP3kPvBG51LJ/hRQAVd2FCNNrKe1eoVuc Zp09yNWnNZkyJFZQ2Bux4aVHSbf9jvXtaVWaYIFssKVsN8H9OJRXSi8r+VCI/oQP 2pWkCHIOT7vwrU8IZNzioPPqQHX1qex8bW9T9oUA9/3SWGzCvJmzJ7K4VzCn0aWl aGy2GJNDGrWJre61D3OsMQg+7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkAH5QA sJy6zEkxWY/TbCfZ6bl5MB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ3m/VjYHkxgj0Rw71PNUNvFVcg+FLRDGKxG190gYeDM+yH3Dym2ik hnqDmBqaIw3B5H6REO++4GgADZZJJMMwIYx3MKC+6mMMWPgnDZSOKtrbzDQ1Bw6n i3CXEXArsvLRlef1hg/t9GFN+XplEFmB4huz0GmQlACKqWnymHVMUC/L021vZ4Em XbVmMnfyNSFyV9OviF4Oi3h2a8va+mLXs91VW0Y4uZMpUQN6yJlwl4HneuL7qH7e 4llbYQPXG5gjw+oMAvWw8K1qkaiK5JDZB0chIfDTbeZNfGre92JSysiu6b89qTfF BffvpQX9JPGYqquAGJTemO7oYVFID02c -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org