$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: jw+6HDF39bu/bZr+tfO+bP0KArOLy0pc2UAchnhb5zY= Subject key identifier: 06:97:9B:5D:93:AA:E1:CF:CD:7C:18:6A:DA:67:75:18:A8:56:DE:79 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0AD3 Signing time: Fri 26 Apr 2024 20:03:40 +0000 Manifest this update: Fri 26 Apr 2024 20:03:39 +0000 Manifest next update: Fri 03 May 2024 20:03:39 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: EseZhbKgQH/K3zT9hPThuJgJMMlJAPoaK1mJYO3Bw6A=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: PGLf8L8QiEjV7hVDA42GOFBiY+0vSEuMTlxgwCxlk10=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: ECR/I9Pj4D6jqPe0lD9cDYMTbbDQP9g2mUIbLZmkUfk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: iScwIGnCk3Nr+9NgBEDkU3UMHy6opWhBkp7ncUEo7Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Apr 26 20:03:39 2024 GMT Not After : May 3 20:03:39 2024 GMT Subject: CN=662c089b-5d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f1:4b:4f:73:3f:bf:49:94:df:c2:be:68:3b: c6:4b:63:82:ff:ca:1d:eb:60:41:70:eb:9c:d3:08: e6:f1:4f:32:a8:fd:15:92:0d:ff:12:4b:64:f3:3d: 65:d0:78:c8:d8:3f:98:87:1f:54:51:fa:1d:e3:79: 82:91:86:1a:36:c0:35:a8:0b:89:33:b5:0d:d7:ca: 70:f2:36:24:7d:99:44:0d:9c:6a:1c:cc:8b:28:aa: c2:ad:78:20:7d:d5:8d:6d:a5:b6:26:c1:5b:e7:e9: 67:bb:08:8a:23:91:5b:63:4e:65:9a:71:22:4d:18: d1:c2:7b:93:ad:51:61:7a:2b:86:d1:43:d9:1e:ae: ad:e5:e8:f9:56:c9:15:7a:e5:45:9d:b3:dc:04:9b: 39:14:a0:4a:b9:81:16:c4:f4:2e:90:f6:21:36:77: dc:04:7b:74:b8:2d:93:d3:0d:f9:c3:ed:0c:b8:27: 28:77:0a:3f:03:33:74:3c:4b:b8:7e:5e:88:be:a8: 4a:c2:cb:f7:fe:dd:04:0b:55:25:92:df:9b:25:57: 67:37:ff:c9:0d:50:e6:15:24:73:d8:18:30:67:98: ce:af:17:1f:4f:fc:54:a8:f3:fb:a6:27:73:cd:ac: 69:b4:ad:38:a1:c4:13:79:5a:9b:f2:60:b0:81:d4: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:9B:5D:93:AA:E1:CF:CD:7C:18:6A:DA:67:75:18:A8:56:DE:79 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1f:e0:23:0f:b6:87:fc:b6:7c:4d:8c:28:ab:0d:1e:ee:8d: b5:e0:a3:6f:06:e2:2a:60:cd:c7:ff:a6:b9:a3:65:e9:6d:0a: 38:84:2b:5b:2d:f8:6e:ec:74:5a:73:cd:35:5a:6c:4b:dc:e4: b4:9a:b0:5b:b0:ce:23:01:c1:0e:15:ca:68:00:fd:46:1b:c3: c8:86:f9:d8:c9:1d:d2:5f:22:48:5c:e8:ba:a0:b5:28:7c:0b: e3:f7:ab:83:05:97:62:91:18:6e:af:b3:85:c9:13:cd:34:e1: f4:d6:02:92:f2:d1:c1:75:51:f6:40:82:70:51:29:57:e1:a6: 3a:d1:00:97:d8:33:5e:15:39:9e:4f:d3:44:b5:d9:06:14:eb: ee:6e:74:d9:6f:d7:12:a9:42:ff:16:ae:c0:66:49:bd:26:1a: b3:90:58:07:43:fb:2d:54:73:d0:c8:00:b5:06:75:76:99:66: 2b:bb:2a:a5:b2:c5:28:c9:30:eb:4f:bb:46:b8:6a:1d:ea:d3: 84:d4:27:e2:ea:e4:61:01:45:76:96:1a:19:7f:26:e5:ac:23: c4:72:c9:76:0b:f2:17:18:db:cc:d1:97:b0:06:37:a7:a0:09: 21:b8:5f:df:96:86:a9:53:9e:c9:d5:92:ca:73:ea:46:e1:c4: 9e:82:59:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjQwNDI2MjAwMzM5WhcNMjQwNTAzMjAwMzM5WjAYMRYwFAYD VQQDEw02NjJjMDg5Yi01ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PFLT3M/v0mU38K+aDvGS2OC/8od62BBcOuc0wjm8U8yqP0Vkg3/Ektk8z1l 0HjI2D+Yhx9UUfod43mCkYYaNsA1qAuJM7UN18pw8jYkfZlEDZxqHMyLKKrCrXgg fdWNbaW2JsFb5+lnuwiKI5FbY05lmnEiTRjRwnuTrVFheiuG0UPZHq6t5ej5VskV euVFnbPcBJs5FKBKuYEWxPQukPYhNnfcBHt0uC2T0w35w+0MuCcodwo/AzN0PEu4 fl6IvqhKwsv3/t0EC1Ulkt+bJVdnN//JDVDmFSRz2BgwZ5jOrxcfT/xUqPP7pidz zaxptK04ocQTeVqb8mCwgdRfhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaXm12T quHPzXwYatpndRioVt55MB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqH+AjD7aH/LZ8TYwoqw0e7o214KNvBuIqYM3H/6a5o2XpbQo4hCtb Lfhu7HRac801WmxL3OS0mrBbsM4jAcEOFcpoAP1GG8PIhvnYyR3SXyJIXOi6oLUo fAvj96uDBZdikRhur7OFyRPNNOH01gKS8tHBdVH2QIJwUSlX4aY60QCX2DNeFTme T9NEtdkGFOvubnTZb9cSqUL/Fq7AZkm9JhqzkFgHQ/stVHPQyAC1BnV2mWYruyql ssUoyTDrT7tGuGod6tOE1Cfi6uRhAUV2lhoZfyblrCPEcsl2C/IXGNvM0ZewBjen oAkhuF/floapU57J1ZLKc+pG4cSeglmh -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:05 2024 by rpki-client on console-ams.rpki-client.org