$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: hKNrzxFPWLI+tiCFbWmrbltbZSr02MHKJW+FiBWyN8M= Subject key identifier: C1:8E:E5:8A:36:13:E1:CE:FD:56:2D:F7:A4:B0:B0:F9:36:F8:04:4E Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 083A Signing time: Thu 02 May 2024 21:51:08 +0000 Manifest this update: Thu 02 May 2024 21:51:07 +0000 Manifest next update: Thu 09 May 2024 21:51:07 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: pVVTKHoBG1jFI+7LvsYEWhEle5Jz/nPa+X8U5Pnb1Q8=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 8Yc+WgLaaoreJ9eKvM0OeJLyMm+xPpLtaXaXyW6wTJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: May 2 21:51:07 2024 GMT Not After : May 9 21:51:07 2024 GMT Subject: CN=66340acb-bbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:de:1f:3c:44:c7:9c:2c:a9:1a:9f:89:95: 98:7f:30:44:8e:3a:46:77:f2:2c:26:99:08:d0:76: 44:58:ad:9e:05:5a:b3:17:ba:59:44:f6:df:af:50: ad:d1:25:d0:21:58:30:ba:84:d6:ca:5f:81:35:e3: 2c:c8:38:a2:ed:3c:b6:07:c8:48:d9:06:97:45:7b: 2a:0d:fa:26:b5:46:7a:c7:d6:81:27:ec:a5:ff:b4: 8b:ea:8e:99:d8:a3:e7:a9:b7:ee:80:b8:88:b1:f7: 44:8a:d1:06:8d:45:f7:d5:75:b6:73:4a:84:4c:e9: 68:13:3c:0f:db:63:d7:4e:d5:51:3e:f3:66:a0:bf: c0:03:d5:0d:98:a3:e9:b8:1a:a4:62:f4:5a:5d:4c: 65:27:6f:ac:58:e6:23:97:3c:83:f6:4e:12:68:16: ac:45:52:c5:cb:18:6f:eb:4b:85:67:94:d7:b0:d8: 41:8b:88:4d:97:b9:68:c6:3b:a0:ec:0d:13:2e:49: 1d:08:4b:ea:58:4b:39:cc:94:bb:7f:6b:be:c1:23: 3c:63:6e:bc:c3:bb:16:a8:8f:da:1c:77:b6:9e:8e: ab:87:38:5a:72:41:42:b3:f1:70:92:e2:49:74:77: a3:2f:c2:16:a1:0f:af:16:a3:9d:98:2f:6b:d2:c6: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8E:E5:8A:36:13:E1:CE:FD:56:2D:F7:A4:B0:B0:F9:36:F8:04:4E X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d4:17:59:94:ff:ee:96:2b:18:fa:d1:05:8b:64:1f:2c:43: 0d:1d:c9:77:87:ef:14:39:5e:6c:53:4a:21:9a:b2:ec:a1:d6: 1f:c9:09:f6:7e:30:4b:a4:c1:af:14:9a:70:55:ca:1d:d8:41: c9:59:d0:78:b5:2a:7d:9f:35:ce:23:06:f6:21:e3:13:0b:1b: bb:15:40:94:6e:43:35:e2:ee:2f:b9:1c:0c:a0:0d:ac:9b:6f: a5:18:0d:c9:e8:a0:ca:bd:72:7f:f6:dc:5e:56:74:ee:7d:2c: af:73:25:84:db:87:ce:10:93:59:55:17:cd:21:2c:69:48:a4: 6f:3a:1e:36:26:fd:ca:04:6b:c0:17:a9:01:ce:be:e7:b3:76: 82:97:bc:19:ab:7b:2b:7a:e3:03:2d:31:96:30:68:4d:ae:4c: 72:1f:fe:d6:d1:84:8c:2c:8d:29:52:4c:ab:e3:2d:68:dc:a8: c5:eb:c8:64:34:a2:6e:51:1a:0b:77:a6:80:0a:79:89:fb:16: 2e:99:eb:35:3d:4f:3f:95:7b:0e:4c:26:ed:70:27:aa:06:d4: 0c:46:bb:85:c2:d7:28:4b:72:15:ac:86:09:98:23:ea:b4:17: cb:63:30:a4:43:7f:05:cc:00:fe:78:52:eb:79:ed:41:e5:40: 0a:94:58:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjQwNTAyMjE1MTA3WhcNMjQwNTA5MjE1MTA3WjAYMRYwFAYD VQQDEw02NjM0MGFjYi1iYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO7eHzxEx5wsqRqfiZWYfzBEjjpGd/IsJpkI0HZEWK2eBVqzF7pZRPbfr1Ct 0SXQIVgwuoTWyl+BNeMsyDii7Ty2B8hI2QaXRXsqDfomtUZ6x9aBJ+yl/7SL6o6Z 2KPnqbfugLiIsfdEitEGjUX31XW2c0qETOloEzwP22PXTtVRPvNmoL/AA9UNmKPp uBqkYvRaXUxlJ2+sWOYjlzyD9k4SaBasRVLFyxhv60uFZ5TXsNhBi4hNl7loxjug 7A0TLkkdCEvqWEs5zJS7f2u+wSM8Y268w7sWqI/aHHe2no6rhzhackFCs/FwkuJJ dHejL8IWoQ+vFqOdmC9r0sa+nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGO5Yo2 E+HO/VYt96SwsPk2+AROMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+1BdZlP/ulisY+tEFi2QfLEMNHcl3h+8UOV5sU0ohmrLsodYfyQn2 fjBLpMGvFJpwVcod2EHJWdB4tSp9nzXOIwb2IeMTCxu7FUCUbkM14u4vuRwMoA2s m2+lGA3J6KDKvXJ/9txeVnTufSyvcyWE24fOEJNZVRfNISxpSKRvOh42Jv3KBGvA F6kBzr7ns3aCl7wZq3sreuMDLTGWMGhNrkxyH/7W0YSMLI0pUkyr4y1o3KjF68hk NKJuURoLd6aACnmJ+xYumes1PU8/lXsOTCbtcCeqBtQMRruFwtcoS3IVrIYJmCPq tBfLYzCkQ38FzAD+eFLree1B5UAKlFgv -----END CERTIFICATE-----Generated at Thu May 2 22:28:53 2024 by rpki-client on console-ams.rpki-client.org