$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json) Hash identifier: l3blKpu5TyRZeYp1DE8ubVK3yTnwEoJmWktL9okOWRM= Subject key identifier: 58:38:00:B6:CA:DA:E1:59:BC:09:D4:99:4C:F1:95:A9:40:CB:4C:AD Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft Manifest number: 0207 Signing time: Sun 05 May 2024 04:15:36 +0000 Manifest this update: Sun 05 May 2024 04:15:35 +0000 Manifest next update: Sun 12 May 2024 04:15:35 +0000 Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: 9rsS8dltJX5Tq9deAb0dHJnGr57Pn7EZxyzAHZsDOek=) 2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: 73iYbiY2Wul1xMmK3DxupjGwt6Lq4kvQz+oyGEwf1mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457 Validity Not Before: May 5 04:15:35 2024 GMT Not After : May 12 04:15:35 2024 GMT Subject: CN=663707e7-b0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:3b:21:cd:50:00:60:80:f5:ba:91:b8:27: 27:d5:be:36:87:c7:21:c4:32:e8:44:44:8b:92:48: 1e:9b:db:71:a3:43:0a:0b:7a:c5:12:59:e6:50:c3: 2d:55:29:3f:b3:68:0d:dd:5d:8c:95:48:ea:bf:f5: 63:c9:7b:48:39:45:23:60:91:23:f2:8e:91:31:04: bb:63:c3:fe:ca:2d:50:84:1b:9e:93:7b:f8:84:09: a5:dc:4c:8a:58:24:e5:d1:e0:aa:f7:92:a0:ff:78: 76:44:2c:0f:ee:14:df:de:2a:be:78:a2:fd:3f:5d: 3c:57:66:59:27:35:88:0c:bf:4b:47:8a:cb:e6:0c: ab:23:63:5c:bf:9c:f2:d3:1d:0b:52:43:b9:6b:84: f0:12:e7:13:5b:4f:9d:08:8e:21:ee:0d:d7:b3:48: 90:46:82:ab:72:67:01:07:b3:1a:d8:81:af:56:81: 2b:24:26:d0:6b:02:4c:f8:b8:65:ed:cd:a2:7f:4f: 26:90:04:20:05:63:fb:e7:c9:48:da:db:e1:a5:4e: dc:94:8b:9f:9b:44:5e:85:76:3f:fe:cc:e9:55:1d: 41:af:4c:53:fe:c9:b0:b7:c5:0e:9e:22:6f:8f:6e: 7d:3c:77:58:b0:c7:a7:da:b2:68:b6:f1:39:c1:c3: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:38:00:B6:CA:DA:E1:59:BC:09:D4:99:4C:F1:95:A9:40:CB:4C:AD X509v3 Authority Key Identifier: keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:25:69:67:09:70:b7:cf:b5:b0:91:5f:11:20:a7:01:ad:ac: 20:63:2a:f6:3d:d6:68:10:25:0c:18:eb:3b:f5:59:fd:11:d8: 45:1e:be:60:78:2b:8a:30:e1:6f:9e:7f:06:35:99:4b:81:bc: e1:d7:13:42:4b:b2:1f:c6:0f:cd:a4:3e:77:d7:78:fc:19:d3: 8c:f7:3a:33:f3:01:5d:3c:88:34:df:38:3e:bd:43:a9:cc:5e: b4:be:05:a1:20:a5:e1:43:79:d6:6f:39:df:44:e8:3e:3d:00: c9:74:10:34:91:f5:ea:cd:70:e0:25:0a:ad:71:a5:0c:9b:7c: 0f:43:98:b1:59:c5:f0:9c:fe:3b:3d:78:39:ef:6d:d5:2b:6a: 4f:8f:0d:41:24:2b:da:81:20:42:43:ac:51:57:68:1d:99:2a: f9:71:c3:8a:d6:56:68:0e:5d:b0:a3:23:ac:35:0b:d4:02:c9: 2d:1e:cc:5c:24:f4:c1:34:76:ee:fb:8f:ab:9c:84:50:30:d3: 6c:57:1e:38:61:32:e6:7f:0b:c8:ba:17:8a:f2:ab:2e:7a:55: 1f:eb:07:58:77:47:c8:25:83:ca:2d:4b:e3:f5:68:a0:4a:de: a2:c8:31:b3:63:3d:83:68:b6:a7:b1:9d:c7:a0:04:66:38:9a: 8b:9a:4f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFNzcxMTAvBgNVBAUTKDQ5MjgyODVCMENFNTY0MDMwMDEwMDE0RTYzNUUzQjdB Q0M2Mjk0NTcwHhcNMjQwNTA1MDQxNTM1WhcNMjQwNTEyMDQxNTM1WjAYMRYwFAYD VQQDEw02NjM3MDdlNy1iMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0g7Ic1QAGCA9bqRuCcn1b42h8chxDLoRESLkkgem9txo0MKC3rFElnmUMMt VSk/s2gN3V2MlUjqv/VjyXtIOUUjYJEj8o6RMQS7Y8P+yi1QhBuek3v4hAml3EyK WCTl0eCq95Kg/3h2RCwP7hTf3iq+eKL9P108V2ZZJzWIDL9LR4rL5gyrI2Ncv5zy 0x0LUkO5a4TwEucTW0+dCI4h7g3Xs0iQRoKrcmcBB7Ma2IGvVoErJCbQawJM+Lhl 7c2if08mkAQgBWP758lI2tvhpU7clIufm0RehXY//szpVR1Br0xT/smwt8UOniJv j259PHdYsMen2rJotvE5wcN0JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFg4ALbK 2uFZvAnUmUzxlalAy0ytMB8GA1UdIwQYMBaAFEkoKFsM5WQDABABTmNeO3rMYpRX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUU3Ny8xMjFDRjEzNEVC MjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpBTUFFQUZPWTE0N2VzeGls RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NTZ29Xd3psWkFNQUVBRk9ZMTQ3ZXN4aWxGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUU3Ny8xMjFDRjEzNEVCMjcxMUVDOTI4RDBBNkZDNEY5QUUwMi9TU2dvV3d6bFpB TUFFQUZPWTE0N2VzeGlsRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSJWlnCXC3z7WwkV8RIKcBrawgYyr2PdZoECUMGOs79Vn9EdhFHr5g eCuKMOFvnn8GNZlLgbzh1xNCS7Ifxg/NpD5313j8GdOM9zoz8wFdPIg03zg+vUOp zF60vgWhIKXhQ3nWbznfROg+PQDJdBA0kfXqzXDgJQqtcaUMm3wPQ5ixWcXwnP47 PXg5723VK2pPjw1BJCvagSBCQ6xRV2gdmSr5ccOK1lZoDl2woyOsNQvUAsktHsxc JPTBNHbu+4+rnIRQMNNsVx44YTLmfwvIuheK8qsuelUf6wdYd0fIJYPKLUvj9Wig St6iyDGzYz2DaLansZ3HoARmOJqLmk+c -----END CERTIFICATE-----Generated at Sun May 5 05:21:58 2024 by rpki-client on console-fra.rpki-client.org