$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft File: rlT2Go-9_rnvA0VXvInXETsBUDw.mft (raw, json) Hash identifier: 2HLPNpnZxIdil7rqGfQVPnvkmOEB5+MVenb7piRM7wI= Subject key identifier: 14:67:8F:1A:5E:7A:2D:FF:B9:25:19:EB:AB:F7:4B:23:1B:04:CF:5B Authority key identifier: AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C Certificate issuer: /CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft Manifest number: 1098 Signing time: Tue 30 Apr 2024 19:07:50 +0000 Manifest this update: Tue 30 Apr 2024 19:07:49 +0000 Manifest next update: Tue 07 May 2024 19:07:49 +0000 Files and hashes: 1: rlT2Go-9_rnvA0VXvInXETsBUDw.crl (hash: pJ+e1i+AcOz+SkoBRjrTti2Lwq1S4ZuMRpnZ9KHV+pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542/serialNumber=AE54F61A8FBDFEB9EF034557BC89D7113B01503C Validity Not Before: Apr 30 19:07:49 2024 GMT Not After : May 7 19:07:49 2024 GMT Subject: CN=66314186-1713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:9a:53:d2:8d:46:dc:c7:ef:aa:2e:01:16: 83:cf:46:1c:26:e7:9f:26:b9:11:71:d4:11:0d:a2: 98:d6:0a:0b:a5:7a:46:e0:fa:0a:c6:e4:37:f1:a9: b0:30:f5:af:29:c7:4e:46:3b:99:cb:ed:b3:42:0d: ba:3c:f1:f8:60:30:a5:98:3e:1f:81:ad:69:33:88: ef:6e:2e:36:87:a7:7f:41:c8:89:b3:93:58:c2:3d: 37:b1:d1:10:9e:9e:3f:e9:e9:4c:32:ed:7f:36:1a: ba:31:81:db:90:85:bf:6a:ca:b4:3e:0e:61:32:a8: 97:2b:4c:b8:f0:c1:68:f4:82:0b:61:c0:13:bf:ea: 6a:06:6a:b6:c0:83:17:ce:69:f4:ee:30:28:9b:6c: ad:2d:03:a5:cd:63:3c:71:75:ff:06:df:ec:dd:f5: 65:1d:a7:3c:76:54:67:37:9e:66:fa:fb:d3:fd:43: f8:73:4d:03:82:ac:1a:ff:3c:09:45:e2:c3:ff:51: 05:c2:f4:f2:0a:2b:62:9f:ef:7c:98:4c:53:5a:e7: 35:8c:d1:7c:b9:d8:d0:73:19:68:5e:01:39:a8:05: b5:0e:fa:33:71:26:bb:48:ae:17:88:a4:20:60:5a: 9b:e3:c5:42:db:27:9e:a0:34:d7:69:f6:0a:17:6a: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:8F:1A:5E:7A:2D:FF:B9:25:19:EB:AB:F7:4B:23:1B:04:CF:5B X509v3 Authority Key Identifier: keyid:AE:54:F6:1A:8F:BD:FE:B9:EF:03:45:57:BC:89:D7:11:3B:01:50:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlT2Go-9_rnvA0VXvInXETsBUDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/rlT2Go-9_rnvA0VXvInXETsBUDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:61:ae:c0:d2:0d:6b:7d:97:76:5a:86:c3:4d:0e:6b:52:d3: 99:7c:36:0a:da:ea:99:a7:ed:e9:e5:c4:ec:a8:12:0d:0c:eb: cb:bd:aa:56:71:61:e5:b4:e3:f4:64:e6:41:68:af:ec:11:37: ac:41:65:7c:45:a4:31:33:ec:46:d8:1b:2b:4f:9f:c3:d2:d5: 90:9c:41:c7:f8:a0:2a:52:fe:b1:f8:53:eb:63:f4:3a:7d:bf: 9a:ae:a3:0c:18:74:21:69:ad:72:f3:7b:03:a8:27:a3:04:ce: f8:d5:7e:51:07:f5:c4:7b:be:b9:be:30:a5:b6:00:58:5f:9c: 4e:76:10:e2:5b:c8:00:84:df:01:24:de:68:71:de:a8:21:07: fe:ee:8a:c7:56:d9:27:f0:67:0d:74:e1:7e:a4:86:c7:10:30: 43:72:5a:14:12:43:a3:23:d1:42:a3:8f:b4:31:35:0b:77:76: ff:96:3e:b1:a2:1a:61:55:53:b6:0b:5a:f8:cb:b3:51:c0:7c: cf:4c:86:d9:29:ea:24:2b:9a:73:fe:8b:4c:13:15:8f:be:96: 3e:5b:7e:05:f9:78:f7:47:53:3c:42:38:07:bd:32:af:35:7f: e0:a1:c3:21:8e:02:67:24:d3:0a:26:77:fc:26:6a:48:7d:6c: 05:2e:9c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEFFNTRGNjFBOEZCREZFQjlFRjAzNDU1N0JDODlENzEx M0IwMTUwM0MwHhcNMjQwNDMwMTkwNzQ5WhcNMjQwNTA3MTkwNzQ5WjAYMRYwFAYD VQQDEw02NjMxNDE4Ni0xNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzmaU9KNRtzH76ouARaDz0YcJuefJrkRcdQRDaKY1goLpXpG4PoKxuQ38amw MPWvKcdORjuZy+2zQg26PPH4YDClmD4fga1pM4jvbi42h6d/QciJs5NYwj03sdEQ np4/6elMMu1/Nhq6MYHbkIW/asq0Pg5hMqiXK0y48MFo9IILYcATv+pqBmq2wIMX zmn07jAom2ytLQOlzWM8cXX/Bt/s3fVlHac8dlRnN55m+vvT/UP4c00Dgqwa/zwJ ReLD/1EFwvTyCitin+98mExTWuc1jNF8udjQcxloXgE5qAW1DvozcSa7SK4XiKQg YFqb48VC2yeeoDTXafYKF2phLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRnjxpe ei3/uSUZ66v3SyMbBM9bMB8GA1UdIwQYMBaAFK5U9hqPvf657wNFV7yJ1xE7AVA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9ybnZBMFZYdkluWEVUc0JV RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JsVDJHby05X3JudkEwVlh2SW5YRVRzQlVEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9ybFQyR28tOV9y bnZBMFZYdkluWEVUc0JVRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATYa7A0g1rfZd2WobDTQ5rUtOZfDYK2uqZp+3p5cTsqBINDOvLvapW cWHltOP0ZOZBaK/sETesQWV8RaQxM+xG2BsrT5/D0tWQnEHH+KAqUv6x+FPrY/Q6 fb+arqMMGHQhaa1y83sDqCejBM741X5RB/XEe765vjCltgBYX5xOdhDiW8gAhN8B JN5ocd6oIQf+7orHVtkn8GcNdOF+pIbHEDBDcloUEkOjI9FCo4+0MTULd3b/lj6x ohphVVO2C1r4y7NRwHzPTIbZKeokK5pz/otMExWPvpY+W34F+Xj3R1M8QjgHvTKv NX/gocMhjgJnJNMKJnf8JmpIfWwFLpyc -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:58 2024 by rpki-client on console-ams.rpki-client.org