$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: uRiMTQUa98gwDC98xpBFcLwPuEl86c2ALVrFv6VmpJ0= Subject key identifier: A5:25:2F:EA:31:E3:48:11:2F:27:A5:5B:75:79:10:19:D0:E1:94:98 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0CF9 Signing time: Fri 24 May 2024 14:47:02 +0000 Manifest this update: Fri 24 May 2024 14:47:01 +0000 Manifest next update: Fri 31 May 2024 14:47:01 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 6HLJnA4qr5ryTackCm59W2M2kQBAjc6o3dSIqIZeRpI=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: maGIW10auxPqCj749VnwJ932XyvRLeAm2wgEbABGHH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: May 24 14:47:01 2024 GMT Not After : May 31 14:47:01 2024 GMT Subject: CN=6650a866-6ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:8a:61:a0:e4:6b:22:95:6a:9c:c4:f2:ad: 97:56:c0:74:bf:1f:7c:3b:e6:89:87:6e:bd:af:4b: 52:cf:35:b0:7d:8c:2a:a7:bd:31:41:c8:a6:09:71: 7c:bd:e7:45:78:ef:1c:be:91:73:60:6a:f8:7a:0f: a6:a2:01:f9:66:3a:66:14:8e:41:bb:ca:a6:53:37: cf:dd:34:83:b1:a3:9e:9a:d4:ce:49:53:eb:7e:d9: 86:b3:4a:3b:8a:c5:90:0d:72:9a:68:d0:47:4b:57: 3d:4f:1b:3d:24:21:01:cc:5b:4d:29:37:a6:8c:bc: fe:51:f3:54:94:43:7b:e5:40:ba:f3:bd:3a:aa:8b: 21:83:6f:bb:5d:00:ac:45:1a:d5:6c:9c:ec:84:41: 65:c6:9c:b4:a8:19:23:bd:ed:c8:de:97:0d:4d:88: 55:5b:8b:bf:b0:f1:3a:34:09:b6:d1:b4:af:fb:06: 05:6a:5b:3b:17:b8:fe:9a:ee:30:d9:e2:71:4b:8d: 78:0c:f6:d1:15:e1:cd:40:d7:b3:42:86:2c:4d:e1: cd:40:86:cf:95:41:e9:5e:83:a8:79:cb:1f:c6:da: 20:0f:cf:fd:0f:c1:c7:b0:30:d3:25:1f:04:8c:9b: 2a:53:07:b3:df:d5:a2:17:82:e7:46:32:2b:63:a4: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:2F:EA:31:E3:48:11:2F:27:A5:5B:75:79:10:19:D0:E1:94:98 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:04:85:58:84:7c:6c:5f:91:73:2e:dd:c5:50:a1:61:f7:f4: 5d:f1:40:5a:89:be:ca:72:9d:45:52:cb:3f:70:ef:e9:3d:02: 0a:ff:34:a8:35:b7:70:1d:6d:fe:65:2f:ec:d1:46:00:03:df: 21:0f:1d:d6:e7:15:1c:be:87:ec:6f:72:6e:e8:9b:9e:a5:dc: 41:a3:37:d6:1d:33:13:ec:6e:82:15:0b:31:f3:23:17:b6:9c: 0c:7d:56:f5:34:0a:03:49:a8:ee:96:1b:c3:8c:de:db:ce:0d: d1:57:d8:3a:52:45:c5:b9:6e:e5:33:45:bd:a3:38:da:82:bd: af:0d:20:46:a8:e0:85:cc:10:cc:7d:d0:ce:50:55:37:8e:b7: 0f:37:a4:eb:93:8e:ab:cf:8f:b6:1d:71:14:28:68:c5:62:42: 47:6b:88:ed:8b:3a:10:8c:cd:a5:f3:c4:d3:5a:37:d2:99:4d: 4c:00:24:05:25:46:a0:5f:a1:46:f6:a4:8e:4b:f8:0e:3d:36: 07:4a:da:6b:56:82:5e:dc:6e:d5:b9:05:94:02:2c:fb:76:ef: 2a:85:d8:8e:66:4f:31:df:20:bb:64:57:6b:1d:bd:a9:1e:6e: e8:13:c6:0e:e4:86:ba:3c:3f:a3:e3:9d:29:7e:15:1e:d8:96: 26:17:98:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjQwNTI0MTQ0NzAxWhcNMjQwNTMxMTQ0NzAxWjAYMRYwFAYD VQQDEw02NjUwYTg2Ni02ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rOKYaDkayKVapzE8q2XVsB0vx98O+aJh269r0tSzzWwfYwqp70xQcimCXF8 vedFeO8cvpFzYGr4eg+mogH5ZjpmFI5Bu8qmUzfP3TSDsaOemtTOSVPrftmGs0o7 isWQDXKaaNBHS1c9Txs9JCEBzFtNKTemjLz+UfNUlEN75UC68706qoshg2+7XQCs RRrVbJzshEFlxpy0qBkjve3I3pcNTYhVW4u/sPE6NAm20bSv+wYFals7F7j+mu4w 2eJxS414DPbRFeHNQNezQoYsTeHNQIbPlUHpXoOoecsfxtogD8/9D8HHsDDTJR8E jJsqUwez39WiF4LnRjIrY6SffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUlL+ox 40gRLyelW3V5EBnQ4ZSYMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOBIVYhHxsX5FzLt3FUKFh9/Rd8UBaib7Kcp1FUss/cO/pPQIK/zSo NbdwHW3+ZS/s0UYAA98hDx3W5xUcvofsb3Ju6JuepdxBozfWHTMT7G6CFQsx8yMX tpwMfVb1NAoDSajulhvDjN7bzg3RV9g6UkXFuW7lM0W9ozjagr2vDSBGqOCFzBDM fdDOUFU3jrcPN6Trk46rz4+2HXEUKGjFYkJHa4jtizoQjM2l88TTWjfSmU1MACQF JUagX6FG9qSOS/gOPTYHStprVoJe3G7VuQWUAiz7du8qhdiOZk8x3yC7ZFdrHb2p Hm7oE8YO5Ia6PD+j450pfhUe2JYmF5gU -----END CERTIFICATE-----Generated at Fri May 24 15:43:21 2024 by rpki-client on console-fra.rpki-client.org