$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft File: n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json) Hash identifier: foGbBHQiKQhVuLpldRDpQLroC+3OoxtIaqeptcCJnyY= Subject key identifier: 65:F5:DF:F6:0D:C0:55:48:82:17:AB:79:42:4D:8C:17:09:B0:96:EB Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65 Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165 Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft Manifest number: 05B0 Signing time: Fri 03 May 2024 00:30:44 +0000 Manifest this update: Fri 03 May 2024 00:30:43 +0000 Manifest next update: Fri 10 May 2024 00:30:43 +0000 Files and hashes: 1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: 4IxDoQpkAJkdR8uW7wDJQBwJDjpR9ovDUdOsc8Gi9o8=) 2: BF351C380A2111EEA26EAE0EC4F9AE02.roa (hash: 6QT6CPhzYpZnq1Xjp9V4CBTemz3kkald3v/CAIHlyYo=) 3: 6C42C95C0A0411EE9FEEAB44C4F9AE02.roa (hash: jKIeZzFJKLu1WcV7f7K+QJKwpaChyzsSZP4Z3XgXAbc=) 4: 6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (hash: /qJsDggjlX8kCVjkMifhy3HzpLPfyW63xOi3PYDL/Iw=) 5: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: zLBxXDVmPsLIMkQgOn3H3bBv/zGoHa9kv878IFQiD8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165 Validity Not Before: May 3 00:30:43 2024 GMT Not After : May 10 00:30:43 2024 GMT Subject: CN=66343034-dfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:35:04:07:0f:25:25:20:ae:11:51:fc:41: b2:18:5c:e6:1b:78:a6:d0:ea:30:20:38:00:55:c2: 77:d6:43:86:a2:6d:77:7c:14:bd:4b:1b:24:f5:85: a8:82:30:bf:3a:ab:50:f6:33:ea:eb:80:df:60:5d: c3:6a:16:21:d1:a0:02:33:dc:8b:3f:17:39:c1:76: ba:a1:00:56:7c:c1:0a:b8:39:2a:64:54:3c:89:27: 17:ff:28:32:da:3e:69:8c:08:c4:56:3d:b2:14:3f: 79:b7:42:59:c9:7e:f2:89:51:97:01:29:15:3d:5c: 6e:57:b4:04:57:e1:28:8a:37:9b:9c:c6:54:b7:16: 9c:35:35:04:99:e8:4a:38:df:20:98:ea:85:59:0a: c9:04:1b:d1:79:57:b5:97:71:52:9d:93:dd:4a:f2: 07:67:b6:a3:e3:04:44:c3:47:79:75:62:14:d8:a1: 7d:76:89:e5:c6:ed:1b:f8:67:db:9d:16:ec:5c:28: 01:c0:76:4f:4f:c5:ab:79:fb:bc:04:f6:75:ba:e2: 62:15:5f:6c:ec:5b:9e:45:11:4c:76:a9:de:03:ad: b0:5b:41:da:51:3b:86:8f:66:02:b1:d8:05:1f:e5: 48:3d:da:e5:54:98:02:06:b4:38:84:f1:f0:d6:8b: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:DF:F6:0D:C0:55:48:82:17:AB:79:42:4D:8C:17:09:B0:96:EB X509v3 Authority Key Identifier: keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:a6:db:90:c5:d9:64:de:65:a8:9f:ff:68:6d:65:09:0f: ae:8c:d8:a6:58:f2:de:e2:27:8e:ff:bc:38:92:86:5d:60:26: bc:ef:5f:8e:66:00:10:48:c9:51:b3:bf:5b:55:c4:63:bb:bb: 00:97:8d:96:bc:be:f9:51:31:b2:f9:b4:54:a1:9c:9a:2c:15: 00:fc:26:fa:aa:a6:af:90:28:8a:75:c3:3d:cf:93:78:2a:b3: 9a:78:aa:df:a5:53:27:72:bf:d1:b7:92:c7:37:24:af:fd:3e: ac:d2:6d:8e:2f:70:31:57:eb:b1:45:17:00:22:a5:16:e9:b4: 50:1b:a2:85:cd:ef:77:cb:40:63:b6:dd:10:0c:30:6e:66:1c: 74:87:40:e3:67:4b:45:5d:13:48:b4:68:02:65:f3:8f:46:ce: 79:d7:bc:fe:5d:6e:45:fb:e7:16:8b:fa:2d:a3:1a:dd:a2:e4: ad:bc:d9:c2:6d:c6:20:db:e0:71:56:2f:0c:30:d0:aa:e3:1f: 1d:f9:39:5a:fe:a9:9a:29:f3:a8:8d:7b:21:fe:a6:a7:88:7e: f1:45:4c:f8:44:94:0d:09:1c:f4:26:67:bc:fc:54:1f:62:ab: fa:3f:b4:01:76:2f:4a:98:7b:db:3f:c5:a7:e0:ff:38:56:80: 84:6c:52:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz NTlCMzAxNjUwHhcNMjQwNTAzMDAzMDQzWhcNMjQwNTEwMDAzMDQzWjAYMRYwFAYD VQQDEw02NjM0MzAzNC1kZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFY1BAcPJSUgrhFR/EGyGFzmG3im0OowIDgAVcJ31kOGom13fBS9Sxsk9YWo gjC/OqtQ9jPq64DfYF3DahYh0aACM9yLPxc5wXa6oQBWfMEKuDkqZFQ8iScX/ygy 2j5pjAjEVj2yFD95t0JZyX7yiVGXASkVPVxuV7QEV+EoijebnMZUtxacNTUEmehK ON8gmOqFWQrJBBvReVe1l3FSnZPdSvIHZ7aj4wREw0d5dWIU2KF9donlxu0b+Gfb nRbsXCgBwHZPT8Wrefu8BPZ1uuJiFV9s7FueRRFMdqneA62wW0HaUTuGj2YCsdgF H+VIPdrlVJgCBrQ4hPHw1otJ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX13/YN wFVIghereUJNjBcJsJbrMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0MwRS9FRTU5RTdGNDgwRjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdp ZDZ0dlZpX2pMZ2cxbXpBV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAny6bbkMXZZN5lqJ//aG1lCQ+ujNimWPLe4ieO/7w4koZdYCa871+O ZgAQSMlRs79bVcRju7sAl42WvL75UTGy+bRUoZyaLBUA/Cb6qqavkCiKdcM9z5N4 KrOaeKrfpVMncr/Rt5LHNySv/T6s0m2OL3AxV+uxRRcAIqUW6bRQG6KFze93y0Bj tt0QDDBuZhx0h0DjZ0tFXRNItGgCZfOPRs5517z+XW5F++cWi/otoxrdouStvNnC bcYg2+BxVi8MMNCq4x8d+Tla/qmaKfOojXsh/qaniH7xRUz4RJQNCRz0Jme8/FQf Yqv6P7QBdi9KmHvbP8Wn4P84VoCEbFJj -----END CERTIFICATE-----Generated at Fri May 3 01:30:27 2024 by rpki-client on console-fra.rpki-client.org