$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft File: T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json) Hash identifier: UqsvF/o+JC6pBHL9tXDgCi0MzA/wMvPFOSZUvm3+HMg= Subject key identifier: AD:54:66:C1:15:CC:7B:13:4F:4C:D2:09:77:03:64:0E:C5:99:3A:73 Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 Certificate issuer: /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft Manifest number: 0221 Signing time: Sun 05 May 2024 04:12:02 +0000 Manifest this update: Sun 05 May 2024 04:12:02 +0000 Manifest next update: Sun 12 May 2024 04:12:02 +0000 Files and hashes: 1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: bSAWNIAmHxeE5WsmgqI1oLYAYwo7pDv3aXRtn3I8OUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Validity Not Before: May 5 04:12:02 2024 GMT Not After : May 12 04:12:02 2024 GMT Subject: CN=66370712-3032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:ad:26:aa:f0:58:1b:93:fa:83:a0:95:34: 3e:22:90:89:fa:56:62:2b:49:85:b5:7f:5a:52:16: bc:83:78:25:c2:d4:16:9a:25:52:92:50:ed:2c:31: 07:10:d6:1a:80:38:3a:07:58:2f:ab:d7:d5:f1:4c: a5:7d:44:e9:16:5a:30:8f:ee:f1:9f:2d:7c:34:13: 1b:11:60:98:94:b0:11:7f:7a:39:03:1a:5e:92:07: a9:f2:fb:3e:80:ca:9e:7f:78:c2:81:83:fe:d8:b6: f1:84:3e:ec:13:dd:2a:83:fc:bb:61:36:73:8b:61: fe:42:ef:c7:67:4d:27:28:50:37:dd:a6:d3:0c:52: c1:a3:49:aa:d7:1e:f5:92:49:56:69:ab:1a:a7:52: 66:a0:1f:19:c4:08:91:8d:51:82:19:5b:c5:43:cb: ef:d6:ef:4f:2d:e3:c3:47:98:ed:6b:d8:13:92:f2: 95:89:ab:4f:62:9e:9a:4f:1c:54:b9:54:99:fc:76: 42:97:36:41:26:44:39:dd:b4:dc:28:7d:49:ef:0b: 6b:bb:e0:3d:03:67:ed:3e:da:9f:d4:a4:a8:cd:fd: ee:e4:14:5f:25:5e:d1:8b:64:14:b8:1a:66:02:8c: d1:dc:8d:ec:08:6d:18:ed:e1:d0:39:63:c7:e9:35: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:66:C1:15:CC:7B:13:4F:4C:D2:09:77:03:64:0E:C5:99:3A:73 X509v3 Authority Key Identifier: keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c7:ad:37:f4:69:70:5f:b6:00:c6:ac:14:8e:09:ef:ad:00: ff:3d:62:7b:23:e5:00:68:32:1b:82:16:11:52:f0:8e:27:6c: 6e:ed:57:1c:c4:0f:57:d3:65:e3:24:41:29:d6:00:af:de:14: 0e:2e:e5:bb:1a:85:a4:01:25:46:ae:fa:96:b9:a6:f8:7d:96: 00:bf:a2:89:33:4b:88:d7:bb:be:7f:61:70:eb:06:54:ad:34: 1a:05:4b:35:ff:e9:4c:ee:bf:ea:1c:74:2d:c1:45:0d:3e:53: f5:66:dd:b8:0c:52:ce:b1:fb:85:c5:c7:fd:01:73:c5:ab:da: 94:74:bb:9f:65:b0:5b:eb:90:07:b1:49:b7:f5:17:0d:96:bf: f5:76:9b:8e:e2:4a:2f:91:3b:af:ae:00:0d:fd:07:12:0d:7e: 7e:b4:0d:47:f5:58:d6:c4:6d:8f:50:b0:aa:41:c6:58:11:a9: cc:72:48:44:51:67:26:87:d5:64:66:64:a8:f4:18:f1:76:ee: 4b:7f:b9:4f:93:31:88:d0:0c:d4:a5:24:e5:33:db:3e:b2:fd: 42:e6:e0:c0:d9:f6:1b:50:d7:65:e2:ec:2b:56:85:a7:8a:eb: d8:36:c6:3b:dd:d6:d3:b6:20:9f:a2:89:f3:10:50:0b:6a:ec: 8a:89:6e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG OTM5NDQ0QTMwHhcNMjQwNTA1MDQxMjAyWhcNMjQwNTEyMDQxMjAyWjAYMRYwFAYD VQQDEw02NjM3MDcxMi0zMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRatJqrwWBuT+oOglTQ+IpCJ+lZiK0mFtX9aUha8g3glwtQWmiVSklDtLDEH ENYagDg6B1gvq9fV8UylfUTpFlowj+7xny18NBMbEWCYlLARf3o5Axpekgep8vs+ gMqef3jCgYP+2LbxhD7sE90qg/y7YTZzi2H+Qu/HZ00nKFA33abTDFLBo0mq1x71 kklWaasap1JmoB8ZxAiRjVGCGVvFQ8vv1u9PLePDR5jta9gTkvKViatPYp6aTxxU uVSZ/HZClzZBJkQ53bTcKH1J7wtru+A9A2ftPtqf1KSozf3u5BRfJV7Ri2QUuBpm AozR3I3sCG0Y7eHQOWPH6TWQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1UZsEV zHsTT0zSCXcDZA7FmTpzMB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnx6039GlwX7YAxqwUjgnvrQD/PWJ7I+UAaDIbghYRUvCOJ2xu7Vcc xA9X02XjJEEp1gCv3hQOLuW7GoWkASVGrvqWuab4fZYAv6KJM0uI17u+f2Fw6wZU rTQaBUs1/+lM7r/qHHQtwUUNPlP1Zt24DFLOsfuFxcf9AXPFq9qUdLufZbBb65AH sUm39RcNlr/1dpuO4kovkTuvrgAN/QcSDX5+tA1H9VjWxG2PULCqQcZYEanMckhE UWcmh9VkZmSo9Bjxdu5Lf7lPkzGI0AzUpSTlM9s+sv1C5uDA2fYbUNdl4uwrVoWn iuvYNsY73dbTtiCfoonzEFALauyKiW7M -----END CERTIFICATE-----Generated at Sun May 5 05:30:50 2024 by rpki-client on console-ams.rpki-client.org