$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: cLZPPGFPbPIEl6qFoVino4FhgZ53EkTE2BebkkykZTU= Subject key identifier: 69:48:12:5F:79:E0:F9:EA:0C:55:9E:B8:97:59:F8:46:75:B4:17:FF Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 0440 Signing time: Tue 07 May 2024 01:54:57 +0000 Manifest this update: Tue 07 May 2024 01:54:56 +0000 Manifest next update: Tue 14 May 2024 01:54:56 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: GGKfyOv7DYPSd56Kbfoi0n9fvmLcySN1wj0Qfn/cYcs=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: J9GTnq8LkKcwug50dEL+V9oQl5YRXvqQS5iPY9mGj/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: May 7 01:54:56 2024 GMT Not After : May 14 01:54:56 2024 GMT Subject: CN=663989f1-824e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:a5:49:af:e7:65:d1:b4:ef:4f:59:b6:ec: 52:99:74:66:e5:41:9e:de:84:ce:4a:1b:0b:f0:88: 2e:15:80:f0:82:77:f4:db:de:6b:58:6a:43:c8:70: 1d:0a:04:62:5d:0c:e2:33:b4:c9:96:d2:58:64:7b: 87:07:33:03:52:65:00:43:74:83:d4:69:f9:b2:69: 4f:7e:e0:52:52:f4:c9:bf:02:27:95:2e:17:cc:82: 11:1a:87:bf:22:7e:d9:29:76:eb:2a:75:ca:b0:85: cb:81:47:49:81:8f:2d:0e:f1:69:6e:69:cf:37:9e: 04:88:95:6d:25:20:80:e5:c3:f4:d4:07:11:a6:b4: d6:7d:ff:96:86:bc:cb:22:ef:47:fc:8a:15:51:3e: d3:bc:e0:e4:50:43:a3:45:80:d2:59:b6:66:1b:88: fb:20:48:84:b3:7d:11:63:5e:96:07:67:a9:4b:32: 17:bb:49:f9:fa:99:31:7d:38:0e:9e:29:96:17:43: ee:71:71:d7:0c:11:cf:cb:46:85:81:15:f6:f4:72: e2:93:28:c8:28:29:0c:e9:23:7b:c6:99:19:3f:48: 60:18:00:6f:d0:eb:73:23:b7:df:37:5d:39:f3:e5: 46:54:46:09:02:c4:36:f2:c9:06:ed:3e:13:56:c9: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:48:12:5F:79:E0:F9:EA:0C:55:9E:B8:97:59:F8:46:75:B4:17:FF X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e8:78:73:44:a1:bb:70:57:94:65:86:68:1c:ce:d3:a7:39: 9e:c0:a6:63:b9:81:e0:8c:a9:b0:74:6d:ac:09:80:23:1e:d1: 14:01:7f:97:99:7a:3d:a4:c3:5f:c7:05:88:c8:21:ee:ff:3d: 29:6e:04:07:05:6e:32:42:d6:a8:d5:5f:84:f9:5e:cd:6d:49: da:9c:2b:97:32:5b:0e:be:0b:30:ed:55:51:e3:1c:c5:63:26: 6a:2e:80:8c:5f:e1:fb:7f:e9:71:c6:d1:e4:df:72:be:a8:be: 9f:62:f6:08:16:eb:44:c0:5e:fb:86:63:89:e3:ad:e6:68:aa: 59:a2:15:97:ec:18:36:87:20:df:df:a0:e9:ff:81:fc:9b:d0: e7:c6:1c:ce:1c:7c:bf:71:60:4e:99:ed:0b:bf:93:da:cf:e6: d7:7d:9c:ea:11:0d:59:4c:d6:26:db:8c:bf:6b:d8:8f:5a:f4: c7:b9:f5:c2:d4:90:68:91:0c:61:cd:32:c9:61:2b:9b:50:e8: 69:d8:3c:14:c9:e8:a6:a8:87:7e:94:56:fb:9c:7e:5a:f9:79: ea:12:ad:a5:43:a7:b3:f5:2c:ad:9d:26:f8:9d:b9:d2:24:60: fe:a5:1d:c6:b0:0a:f9:98:0b:da:6d:76:f9:77:2c:98:68:4f: 76:ee:78:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjQwNTA3MDE1NDU2WhcNMjQwNTE0MDE1NDU2WjAYMRYwFAYD VQQDEw02NjM5ODlmMS04MjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv++lSa/nZdG0709ZtuxSmXRm5UGe3oTOShsL8IguFYDwgnf0295rWGpDyHAd CgRiXQziM7TJltJYZHuHBzMDUmUAQ3SD1Gn5smlPfuBSUvTJvwInlS4XzIIRGoe/ In7ZKXbrKnXKsIXLgUdJgY8tDvFpbmnPN54EiJVtJSCA5cP01AcRprTWff+WhrzL Iu9H/IoVUT7TvODkUEOjRYDSWbZmG4j7IEiEs30RY16WB2epSzIXu0n5+pkxfTgO nimWF0PucXHXDBHPy0aFgRX29HLikyjIKCkM6SN7xpkZP0hgGABv0OtzI7ffN105 8+VGVEYJAsQ28skG7T4TVskgRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlIEl95 4PnqDFWeuJdZ+EZ1tBf/MB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV6HhzRKG7cFeUZYZoHM7TpzmewKZjuYHgjKmwdG2sCYAjHtEUAX+X mXo9pMNfxwWIyCHu/z0pbgQHBW4yQtao1V+E+V7NbUnanCuXMlsOvgsw7VVR4xzF YyZqLoCMX+H7f+lxxtHk33K+qL6fYvYIFutEwF77hmOJ463maKpZohWX7Bg2hyDf 36Dp/4H8m9DnxhzOHHy/cWBOme0Lv5Paz+bXfZzqEQ1ZTNYm24y/a9iPWvTHufXC 1JBokQxhzTLJYSubUOhp2DwUyeimqId+lFb7nH5a+XnqEq2lQ6ez9SytnSb4nbnS JGD+pR3GsAr5mAvabXb5dyyYaE927nhe -----END CERTIFICATE-----Generated at Tue May 7 03:10:20 2024 by rpki-client on console-ams.rpki-client.org