$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json) Hash identifier: DOjmSVf62+HPUs8HVCXyZTn4twGDMnw+LOhuGrZ5bB8= Subject key identifier: 6C:3C:1C:4B:71:C6:7D:CD:A2:9C:77:1E:51:7B:1E:7A:22:48:5A:B5 Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft Manifest number: 019A Signing time: Sun 19 May 2024 04:42:21 +0000 Manifest this update: Sun 19 May 2024 04:42:21 +0000 Manifest next update: Sun 26 May 2024 04:42:21 +0000 Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: fPTXyZFhVOWeuALivZ0FFKdtnmrecTp2ZCLwXFrtSFo=) 2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: IwjuKCD97eJEKGGmOQ5Nag3muStG8Nve98elP/V9zzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: May 19 04:42:21 2024 GMT Not After : May 26 04:42:21 2024 GMT Subject: CN=6649832d-3f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:8b:1e:db:85:81:70:69:e2:99:35:d5:12: 17:23:ac:8a:7c:19:1e:a0:11:9b:3a:ee:63:fa:5e: 1d:1f:09:e8:4f:07:c5:8f:fc:b4:26:64:e6:1f:1f: 52:dd:aa:a5:4b:4e:a4:fe:04:47:cb:e6:30:f6:36: c5:ae:3c:b7:60:cd:66:c5:63:54:fa:a3:ac:e8:c2: 0c:02:92:3b:b0:02:d6:92:91:95:2f:43:2e:75:c4: 15:41:f3:95:bc:48:43:e5:0d:c6:20:bd:9d:db:be: 1c:93:ae:71:90:04:b2:17:02:47:8a:c0:92:35:37: b3:f6:ec:70:3b:66:17:ac:24:00:7f:a8:ca:a9:2e: 89:d6:31:cf:01:35:0f:35:e6:5a:02:68:33:1b:03: 5a:e7:24:29:fe:9e:d5:df:7d:f9:b9:08:08:68:4e: 15:ad:b0:d4:25:0e:c1:9b:43:05:cc:fb:09:7b:0c: ba:8b:4b:72:c9:81:83:e9:0e:a5:e8:0a:e6:99:c7: 0f:04:8e:5a:ee:3c:74:64:6a:22:cc:80:2b:df:d7: 7c:cf:61:bc:15:cc:9f:fc:8c:67:be:0d:81:bb:b4: 26:7a:da:8f:ea:c2:f7:a8:d7:97:09:8d:f8:0b:49: 2e:ae:26:d2:91:1e:06:5f:04:d3:23:98:f9:c2:51: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3C:1C:4B:71:C6:7D:CD:A2:9C:77:1E:51:7B:1E:7A:22:48:5A:B5 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:99:02:8b:3f:57:b3:52:63:1a:a4:7a:59:d4:f5:ee:fa:fb: bb:11:2a:34:59:c9:9e:39:85:a0:d9:00:61:2a:f2:f2:40:90: 09:04:19:76:1a:23:83:8b:6a:a1:de:32:11:fa:4e:3f:4c:c0: b6:b4:3c:af:15:81:ba:f6:f3:5a:cb:91:4a:f3:b7:68:9b:b4: 64:c5:03:d9:c7:b8:4e:b5:ef:ea:2b:f3:a1:2f:f8:68:22:03: 11:0f:f8:a2:c0:96:8b:5c:74:30:38:df:f2:f1:d7:55:b7:45: b9:0c:75:b6:29:d2:c9:91:ae:f8:ae:0e:f2:67:4e:e3:65:e8: 5c:19:44:67:df:bf:09:12:d6:6a:b2:1d:1c:5b:a1:d0:b5:b2: bd:79:87:83:6b:d7:26:76:ca:03:34:c3:6b:14:01:1e:34:b2: 75:70:43:c8:0e:52:f1:a3:42:ee:77:03:e7:91:69:d7:69:e5: c4:86:b2:06:d8:c9:34:c8:13:2b:12:f3:9d:99:88:39:62:0f: 36:7b:59:39:fb:d4:5f:62:08:d6:db:6c:85:9b:eb:4f:88:10: dd:98:51:cd:3b:d6:75:8d:dd:a0:ea:e4:38:b5:e6:21:3e:c1: c1:d0:14:42:64:f5:a3:9b:6b:8e:be:a8:f7:97:05:f4:78:f7: a5:bb:e9:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjQwNTE5MDQ0MjIxWhcNMjQwNTI2MDQ0MjIxWjAYMRYwFAYD VQQDEw02NjQ5ODMyZC0zZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmaLHtuFgXBp4pk11RIXI6yKfBkeoBGbOu5j+l4dHwnoTwfFj/y0JmTmHx9S 3aqlS06k/gRHy+Yw9jbFrjy3YM1mxWNU+qOs6MIMApI7sALWkpGVL0MudcQVQfOV vEhD5Q3GIL2d274ck65xkASyFwJHisCSNTez9uxwO2YXrCQAf6jKqS6J1jHPATUP NeZaAmgzGwNa5yQp/p7V3335uQgIaE4VrbDUJQ7Bm0MFzPsJewy6i0tyyYGD6Q6l 6ArmmccPBI5a7jx0ZGoizIAr39d8z2G8Fcyf/Ixnvg2Bu7QmetqP6sL3qNeXCY34 C0kuribSkR4GXwTTI5j5wlEZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw8HEtx xn3Nopx3HlF7HnoiSFq1MB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1t TlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArmQKLP1ezUmMapHpZ1PXu+vu7ESo0WcmeOYWg2QBhKvLyQJAJBBl2 GiODi2qh3jIR+k4/TMC2tDyvFYG69vNay5FK87dom7RkxQPZx7hOte/qK/OhL/ho IgMRD/iiwJaLXHQwON/y8ddVt0W5DHW2KdLJka74rg7yZ07jZehcGURn378JEtZq sh0cW6HQtbK9eYeDa9cmdsoDNMNrFAEeNLJ1cEPIDlLxo0LudwPnkWnXaeXEhrIG 2Mk0yBMrEvOdmYg5Yg82e1k5+9RfYgjW22yFm+tPiBDdmFHNO9Z1jd2g6uQ4teYh PsHB0BRCZPWjm2uOvqj3lwX0ePelu+lG -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org