$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: kN6PQrNm1tUjWXeCR+/OKToErIk1HVFIPCS5lFU0eWc= Subject key identifier: 41:A4:E3:4E:18:18:DB:A4:5E:67:AD:16:74:C8:F9:A8:29:C3:00:46 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 06FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 06F5 Signing time: Mon 06 May 2024 22:49:50 +0000 Manifest this update: Mon 06 May 2024 22:49:49 +0000 Manifest next update: Mon 13 May 2024 22:49:49 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: q5LQFAiwWQ2z9vdm8VhusEyqcxXPlV8vZZz5UMvMvxw=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: /bFK6mYJTCXC/pV1oiZj4Bqj+TrA/G35/V0Xsbj2Yz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1790 (0x6fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: May 6 22:49:49 2024 GMT Not After : May 13 22:49:49 2024 GMT Subject: CN=66395e8e-d483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:81:71:5c:63:18:7c:fc:c2:59:e2:71:5a: 5f:6a:e0:41:8a:80:0e:0e:5b:4d:c1:4c:35:a6:f0: 4c:7d:f6:25:a4:fc:1e:18:4b:ed:34:8b:01:56:b8: 9c:dc:a6:f7:e5:e0:7f:04:3d:b3:bb:23:c2:45:fc: 2f:19:9d:41:78:35:2f:d9:b1:8c:f3:9a:59:b6:3f: 31:ba:5a:b8:c1:07:1a:11:df:cd:bf:05:33:24:a6: f7:e9:32:ef:b6:1b:2e:95:dc:3c:18:5c:c2:b1:8a: 3b:b1:15:ec:1a:8f:4e:2a:96:83:ad:a9:55:b7:e0: 24:a9:5c:33:09:32:04:da:7d:ae:31:30:ce:5d:6d: a0:21:ca:f6:d6:2b:13:c6:79:44:26:17:c9:5c:a6: 83:7e:8f:8d:6c:49:f1:c1:16:86:01:30:5c:34:a0: b8:89:22:bf:97:30:8c:2a:84:6c:97:d0:d8:89:9b: 21:ac:f0:2b:8a:1c:a8:67:3a:4c:91:cc:b9:95:5f: cd:b9:b4:43:e0:d8:ed:1f:1d:31:23:77:cf:01:fb: f0:60:86:4a:ae:6a:f2:32:bd:bf:82:6c:f2:61:6c: 45:49:71:a0:96:a6:64:9e:38:c7:7f:0e:8f:08:81: 21:3e:22:64:63:c7:88:aa:1d:9e:51:b8:6a:bc:8c: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:E3:4E:18:18:DB:A4:5E:67:AD:16:74:C8:F9:A8:29:C3:00:46 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:d4:53:39:0e:1f:de:de:cb:1a:2e:7b:d3:78:7f:67:92: ba:b1:42:c8:4d:6c:2c:42:ae:03:66:e9:ec:8f:c0:bd:4e:5f: bc:2c:75:df:07:ef:4a:ff:de:86:13:ef:08:df:44:ab:1c:a4: 93:47:f0:61:9b:a6:ed:51:31:45:d9:48:93:b4:57:0f:8f:ad: ff:d8:48:d2:82:18:f2:cc:04:0d:11:d7:58:df:a5:4e:76:99: b5:c9:7c:cf:a1:41:13:71:ea:7b:00:e7:20:85:6c:84:c9:d0: 32:df:6a:2b:0b:2d:17:64:7d:81:46:b3:c5:43:71:28:a1:05: d7:bf:c8:6c:72:d2:69:4c:b5:c3:75:45:30:a8:1d:ee:fb:ca: af:8f:9e:d2:bb:a1:e7:da:81:b3:f9:e3:ba:2d:59:df:fd:52: 37:d0:27:46:c0:ad:98:4c:27:9f:a8:7e:0c:34:30:0c:d5:79: f6:7c:07:f1:5f:ac:2e:e6:c8:5c:27:fa:bf:95:f8:bc:2a:5c: ae:2d:77:ee:56:3a:f5:67:77:8f:cc:16:f4:ae:2b:78:0f:34: 21:b9:55:b0:53:4e:d9:25:eb:36:90:01:71:93:de:90:4e:97: f4:3e:61:75:ca:9c:b8:9b:d2:ac:d9:f0:fc:09:a4:c7:d1:a1: 22:e7:5e:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjQwNTA2MjI0OTQ5WhcNMjQwNTEzMjI0OTQ5WjAYMRYwFAYD VQQDEw02NjM5NWU4ZS1kNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm6BcVxjGHz8wlnicVpfauBBioAODltNwUw1pvBMffYlpPweGEvtNIsBVric 3Kb35eB/BD2zuyPCRfwvGZ1BeDUv2bGM85pZtj8xulq4wQcaEd/NvwUzJKb36TLv thsuldw8GFzCsYo7sRXsGo9OKpaDralVt+AkqVwzCTIE2n2uMTDOXW2gIcr21isT xnlEJhfJXKaDfo+NbEnxwRaGATBcNKC4iSK/lzCMKoRsl9DYiZshrPArihyoZzpM kcy5lV/NubRD4NjtHx0xI3fPAfvwYIZKrmryMr2/gmzyYWxFSXGglqZknjjHfw6P CIEhPiJkY8eIqh2eUbhqvIzPDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGk404Y GNukXmetFnTI+agpwwBGMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIQdRTOQ4f3t7LGi5703h/Z5K6sULITWwsQq4DZunsj8C9Tl+8LHXf B+9K/96GE+8I30SrHKSTR/Bhm6btUTFF2UiTtFcPj63/2EjSghjyzAQNEddY36VO dpm1yXzPoUETcep7AOcghWyEydAy32orCy0XZH2BRrPFQ3EooQXXv8hsctJpTLXD dUUwqB3u+8qvj57Su6Hn2oGz+eO6LVnf/VI30CdGwK2YTCefqH4MNDAM1Xn2fAfx X6wu5shcJ/q/lfi8KlyuLXfuVjr1Z3ePzBb0rit4DzQhuVWwU07ZJes2kAFxk96Q Tpf0PmF1ypy4m9Ks2fD8CaTH0aEi516e -----END CERTIFICATE-----Generated at Tue May 7 01:58:28 2024 by rpki-client on console-fra.rpki-client.org