$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: XBCJwMb94xzy1uSZ6bBn9aMWmOPfifeeiqmyr4QDIPU= Subject key identifier: 0F:7F:9F:B1:53:8A:EE:8F:14:4F:0E:95:F2:9F:53:9F:F5:8B:5F:4F Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: D7 Signing time: Fri 03 May 2024 06:07:23 +0000 Manifest this update: Fri 03 May 2024 06:07:23 +0000 Manifest next update: Fri 10 May 2024 06:07:23 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: 78L+Zr9niKQC6oz49T9qPTbBQQzu2Hmvh+1Q+e0c3iI=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: yoMXZm0LgcOJnV0IoBVg2laJUkPV5hmT1fMRlUH17pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: May 3 06:07:23 2024 GMT Not After : May 10 06:07:23 2024 GMT Subject: CN=66347f1b-464a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0a:9e:73:c7:3b:68:ab:81:92:24:f1:01:39: f6:fa:55:18:68:67:a0:e2:10:1d:6a:98:32:c5:6b: ba:17:3e:93:6a:bd:6d:5e:59:53:de:d3:5f:bf:28: 30:f2:e7:86:76:f7:5b:f0:eb:20:a2:0f:c5:cc:1d: 74:24:56:99:d2:4a:ab:65:ff:a6:41:1e:9e:89:4b: 7d:f2:43:a7:14:15:83:7e:50:47:f0:09:ac:71:a5: 89:bc:3d:b9:fc:23:00:3c:f3:ef:4f:26:01:8d:2b: 01:8c:10:34:af:20:60:e6:41:a1:c4:be:c2:e0:16: c1:59:a7:fe:34:ee:21:63:c4:42:e5:f9:53:12:3b: a7:b2:1e:3f:1a:44:13:7f:73:3b:b9:11:8f:33:b3: 41:47:0a:1a:f7:61:1d:f6:94:4c:dd:81:34:e0:b9: 63:95:68:d0:0d:d6:5b:e2:64:5c:fb:30:01:e4:a8: 4a:6b:6f:4c:0b:b7:f2:82:71:99:ed:43:50:59:dc: af:51:a0:c2:fd:6f:bf:d1:0d:da:00:54:f4:c5:a3: e9:37:73:2e:04:45:ca:eb:98:e8:62:65:94:22:9c: 4b:38:be:fc:0a:c1:45:69:85:47:a9:57:22:f1:11: 1d:a1:42:88:3b:e9:71:e0:f1:32:0a:ed:fa:01:3d: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7F:9F:B1:53:8A:EE:8F:14:4F:0E:95:F2:9F:53:9F:F5:8B:5F:4F X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:73:35:7b:97:e2:b0:eb:e2:6a:a4:07:5b:e0:9f:43:5a: 25:e7:85:95:a7:79:e8:89:3c:5b:55:4c:04:61:2d:5f:90:70: 57:8f:e4:fa:54:ee:97:87:a7:0a:a7:96:bb:45:2c:5c:4e:fb: d5:ae:6a:1e:5f:d7:fb:6c:77:4a:f3:77:35:9f:a4:3c:2c:7c: 10:f7:7c:e7:4c:67:c6:3d:01:b3:3d:16:83:c0:23:ff:ad:2c: d0:85:8b:ca:14:18:38:49:23:2d:9d:a3:3b:3b:23:8f:f1:30: b7:fc:08:79:23:dc:72:a2:a6:46:bd:83:67:c9:87:8d:59:a0: dc:db:af:14:8a:ac:49:62:08:30:b4:a8:a6:c1:f0:7f:11:54: c4:f0:6a:81:c4:f6:99:6c:c6:f0:5b:be:51:a8:75:59:dd:0a: b9:a4:34:4c:bf:d2:c0:91:a3:5c:45:b6:7d:7c:b3:03:8d:08: 5c:73:78:3a:6b:20:cc:7f:fb:2f:52:41:5b:df:48:f8:92:2a: 2b:a2:69:88:0b:be:91:6f:0c:ef:e9:ed:8a:41:2d:d9:58:41: 8f:ec:e9:65:7b:16:71:ec:ed:c3:02:63:42:e8:47:09:8a:46: cd:68:bd:99:b7:e6:90:8c:70:bf:97:8d:50:77:0c:ad:00:d7: 4d:a7:bf:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjQwNTAzMDYwNzIzWhcNMjQwNTEwMDYwNzIzWjAYMRYwFAYD VQQDEw02NjM0N2YxYi00NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8wqec8c7aKuBkiTxATn2+lUYaGeg4hAdapgyxWu6Fz6Tar1tXllT3tNfvygw 8ueGdvdb8Osgog/FzB10JFaZ0kqrZf+mQR6eiUt98kOnFBWDflBH8AmscaWJvD25 /CMAPPPvTyYBjSsBjBA0ryBg5kGhxL7C4BbBWaf+NO4hY8RC5flTEjunsh4/GkQT f3M7uRGPM7NBRwoa92Ed9pRM3YE04LljlWjQDdZb4mRc+zAB5KhKa29MC7fygnGZ 7UNQWdyvUaDC/W+/0Q3aAFT0xaPpN3MuBEXK65joYmWUIpxLOL78CsFFaYVHqVci 8REdoUKIO+lx4PEyCu36AT3+2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9/n7FT iu6PFE8OlfKfU5/1i19PMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNb3M1e5fisOviaqQHW+CfQ1ol54WVp3noiTxbVUwEYS1fkHBXj+T6 VO6Xh6cKp5a7RSxcTvvVrmoeX9f7bHdK83c1n6Q8LHwQ93znTGfGPQGzPRaDwCP/ rSzQhYvKFBg4SSMtnaM7OyOP8TC3/Ah5I9xyoqZGvYNnyYeNWaDc268UiqxJYggw tKimwfB/EVTE8GqBxPaZbMbwW75RqHVZ3Qq5pDRMv9LAkaNcRbZ9fLMDjQhcc3g6 ayDMf/svUkFb30j4kiorommIC76Rbwzv6e2KQS3ZWEGP7OllexZx7O3DAmNC6EcJ ikbNaL2Zt+aQjHC/l41QdwytANdNp78k -----END CERTIFICATE-----Generated at Fri May 3 08:21:09 2024 by rpki-client on console-ams.rpki-client.org