$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft File: v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft (raw, json) Hash identifier: 4MPcISCJCOg58lgixupxM5tw/yAlPxI2yIH54t4Ndns= Subject key identifier: D7:C2:9F:EF:AD:03:9B:7F:3B:A1:A8:BF:A2:98:9F:F9:39:75:DC:BE Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft Manifest number: 0556 Signing time: Sun 05 May 2024 00:58:43 +0000 Manifest this update: Sun 05 May 2024 00:58:43 +0000 Manifest next update: Sun 12 May 2024 00:58:43 +0000 Files and hashes: 1: v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl (hash: Qs6VtmvfwiG7xEfVLkM1eZ1CZWRNZQ8nhUXo1c/uThM=) 2: 4368CA9A13E611EE8ECA2D3CC4F9AE02.roa (hash: yKwNxVeonIdgtuuYCMC+YfTZ9LgOgeGner+1vNjHbGY=) 3: 4482148613E611EE8ECA2D3CC4F9AE02.roa (hash: Ijhx8Kiq2ZRk9RM3zR/8iq2hK61Acd0PgbXzaXqASQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: May 5 00:58:43 2024 GMT Not After : May 12 00:58:43 2024 GMT Subject: CN=6636d9c3-2b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:60:63:ca:0b:0c:97:e8:84:e2:ab:5e:fa: 26:a2:38:ed:79:35:c8:78:7c:73:e8:0b:cb:96:b2: a6:f4:ea:0f:5d:d0:ff:0f:8a:7f:1b:12:c5:3f:5e: 75:b7:e6:58:12:60:69:a3:3c:c5:a8:8e:1b:a7:9a: 6b:3d:dc:5b:11:1b:20:d7:d8:61:37:82:28:b9:c0: dd:60:da:f9:7f:c0:75:cc:b9:12:19:e6:9e:09:12: c3:34:f4:40:93:ce:1a:81:a7:25:40:5c:55:b3:95: a6:83:15:25:fa:11:af:d5:3f:6e:d2:b6:86:5d:c3: 18:ee:3f:8a:f8:33:86:0e:3d:88:55:83:2e:c6:25: f0:81:67:01:8d:cb:52:a1:46:6b:62:ae:5c:2d:ca: f5:47:0b:1c:18:e8:03:bc:46:55:7f:4d:09:d0:2c: 58:76:c7:b1:87:92:17:54:9c:6c:e9:65:a1:d8:b7: 04:b4:53:2a:b4:9c:54:a8:0b:66:5c:22:ea:20:b1: f9:e4:b0:c5:a0:6c:b3:cd:79:62:18:54:ce:86:af: 3f:40:d8:82:3f:d9:09:d1:cf:6a:56:64:81:c0:5b: 00:2b:20:1c:23:d4:ff:5a:3c:32:42:65:2b:27:29: dc:e3:9c:2c:c8:b4:64:8d:1e:24:85:16:8e:6a:0e: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:9F:EF:AD:03:9B:7F:3B:A1:A8:BF:A2:98:9F:F9:39:75:DC:BE X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ff:39:9a:e7:0d:14:c7:d2:36:02:0f:62:69:61:dd:e0:43: 03:e8:1b:ad:64:3f:70:d4:86:a7:80:82:14:ea:2a:2f:58:ec: a2:f8:83:19:37:5f:d2:06:c6:ce:0d:5d:14:b5:74:9c:19:41: d8:a2:f0:b6:74:ac:b6:1d:51:94:49:14:14:09:22:f7:6a:ad: e0:0d:93:6f:bd:54:10:9c:0e:9a:1a:7e:33:55:84:e1:8e:16: cc:93:6b:f7:3c:f8:6c:04:51:48:60:ae:e7:60:f5:86:0b:b2: c0:3d:f2:ef:81:f6:20:fe:cf:95:59:e7:a2:52:1e:9f:ba:16: de:c5:f1:41:7d:25:b3:b4:ff:2f:48:4e:55:b0:81:e0:35:7b: 1f:50:79:e0:02:35:bf:72:47:68:43:f8:c5:01:9f:73:1d:88: e1:99:3a:58:ef:8e:25:c3:ec:94:58:8d:fe:69:03:16:14:78: 25:f1:4f:49:17:15:51:d1:24:52:2f:42:6e:97:c6:dd:3f:2e: 5f:db:ba:49:c5:7e:f8:84:f2:f6:51:17:18:49:f6:1c:0f:18: 9a:df:02:da:66:8c:bc:5a:09:25:a1:44:68:88:91:87:10:a7: 90:83:79:a1:74:de:03:cb:fc:5a:e2:65:ab:8f:e2:44:49:20: 14:8e:53:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjQwNTA1MDA1ODQzWhcNMjQwNTEyMDA1ODQzWjAYMRYwFAYD VQQDEw02NjM2ZDljMy0yYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0ZgY8oLDJfohOKrXvomojjteTXIeHxz6AvLlrKm9OoPXdD/D4p/GxLFP151 t+ZYEmBpozzFqI4bp5prPdxbERsg19hhN4IoucDdYNr5f8B1zLkSGeaeCRLDNPRA k84agaclQFxVs5WmgxUl+hGv1T9u0raGXcMY7j+K+DOGDj2IVYMuxiXwgWcBjctS oUZrYq5cLcr1RwscGOgDvEZVf00J0CxYdsexh5IXVJxs6WWh2LcEtFMqtJxUqAtm XCLqILH55LDFoGyzzXliGFTOhq8/QNiCP9kJ0c9qVmSBwFsAKyAcI9T/WjwyQmUr Jync45wsyLRkjR4khRaOag5HkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfCn++t A5t/O6Gov6KYn/k5ddy+MB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUJCRi8xMjZCOTA5QTlEQkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVP OEEtTTZNYmI2dnNGSGhsTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/zma5w0Ux9I2Ag9iaWHd4EMD6ButZD9w1IangIIU6iovWOyi+IMZ N1/SBsbODV0UtXScGUHYovC2dKy2HVGUSRQUCSL3aq3gDZNvvVQQnA6aGn4zVYTh jhbMk2v3PPhsBFFIYK7nYPWGC7LAPfLvgfYg/s+VWeeiUh6fuhbexfFBfSWztP8v SE5VsIHgNXsfUHngAjW/ckdoQ/jFAZ9zHYjhmTpY744lw+yUWI3+aQMWFHgl8U9J FxVR0SRSL0Jul8bdPy5f27pJxX74hPL2URcYSfYcDxia3wLaZoy8WgkloURoiJGH EKeQg3mhdN4Dy/xa4mWrj+JESSAUjlPb -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org