$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: KG6On8mT/LFIrqJelnKd4kQLWBZ6RKwllfqyRkjuV18= Subject key identifier: D1:B6:13:5A:8D:0B:88:EC:B7:1E:4C:28:4A:BD:94:9C:B6:FB:16:AC Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0919 Signing time: Thu 02 May 2024 21:21:30 +0000 Manifest this update: Thu 02 May 2024 21:21:29 +0000 Manifest next update: Thu 09 May 2024 21:21:29 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: MnTLoD40JaF6hNyU9EFwFF0lbqjMlPxIxdFJ4uaFCNw=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: E9Vh1zd2r3xPH9NetPmHbThTjDHFpwCzxwwWAc3+8aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: May 2 21:21:29 2024 GMT Not After : May 9 21:21:29 2024 GMT Subject: CN=663403d9-3563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:ed:ec:a5:7b:22:41:c3:e9:fb:bf:36:db: 0c:49:11:f6:c0:51:cd:8d:fe:7c:1f:94:9f:70:19: b6:be:a4:27:0b:87:86:61:6b:c4:03:2c:dc:4f:5b: a9:62:92:92:a8:39:bf:7a:6e:cb:01:57:14:f8:c4: 37:eb:7b:9b:a7:24:25:a1:81:a6:5e:fb:66:59:cf: c4:ac:1d:0c:b7:3f:92:07:a8:0a:91:a8:a6:f7:c3: e9:37:88:d8:a1:f3:87:a0:c9:df:5f:6a:9d:0e:5f: fe:f5:bc:e9:cc:78:a9:3f:35:4a:91:92:ba:6a:8c: 91:0b:19:e3:e3:ef:d4:3a:08:31:82:25:97:77:f3: 2d:6a:d1:c2:57:d4:6c:f5:12:89:59:25:d5:b3:a1: d1:6a:7c:8c:39:d1:17:d2:c0:2b:63:c7:26:fb:8a: 6d:85:7d:3f:0b:06:66:86:cd:ef:80:90:76:be:27: 02:b4:06:63:69:a5:1a:d8:e8:85:b5:8b:3e:d7:91: 40:ce:25:72:49:e2:d6:92:e0:38:5d:af:66:34:92: 17:e6:10:a3:01:c3:61:10:4d:51:4c:72:46:b1:4c: 76:9f:08:11:88:59:a1:6c:c4:45:36:d5:ac:9b:87: 18:22:c9:4a:95:10:ab:83:34:42:b6:7c:74:08:26: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:13:5A:8D:0B:88:EC:B7:1E:4C:28:4A:BD:94:9C:B6:FB:16:AC X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:46:a3:7b:58:d7:ca:bb:54:04:6c:05:02:54:67:59:1b:e0: 5c:6d:b5:d1:73:d2:77:c5:03:2b:2b:de:32:dd:95:f9:0a:25: 63:b1:c6:d5:4d:c4:a6:85:e1:88:2b:5d:ca:aa:45:24:47:d9: f5:1f:c6:e9:93:a9:0b:4f:6e:4a:da:45:e1:58:25:39:00:96: 70:62:53:f2:e0:53:08:94:d2:5d:0a:0e:88:f2:25:f5:38:a3: ad:6f:d8:a1:c9:1d:f2:03:2a:4b:23:97:fc:64:f7:ec:68:69: 5b:d9:12:72:e3:87:d7:4f:22:af:41:d7:55:39:8e:88:48:4f: 79:1f:b4:84:42:2f:92:07:fb:14:35:cd:ab:6e:d2:49:6e:71: 3f:2e:1d:35:c2:0c:f2:8f:61:7a:29:8d:52:54:a3:fb:5b:35: b2:71:c5:66:5c:91:14:f8:9d:84:ea:4c:b4:58:90:5e:dd:9b: c5:0e:01:51:59:1b:12:69:d4:1c:6f:e2:72:ba:0e:e0:f8:a6: 33:1d:02:8e:0e:82:65:14:e1:e6:96:34:5c:23:8f:bd:58:70: 62:06:15:f4:15:a0:4d:69:41:65:ea:d9:a6:4a:f4:64:6d:ac: 4c:28:3f:90:8e:16:f4:a3:83:fc:e0:80:fa:6f:91:1e:c0:8e: b2:85:63:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjQwNTAyMjEyMTI5WhcNMjQwNTA5MjEyMTI5WjAYMRYwFAYD VQQDEw02NjM0MDNkOS0zNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXLt7KV7IkHD6fu/NtsMSRH2wFHNjf58H5SfcBm2vqQnC4eGYWvEAyzcT1up YpKSqDm/em7LAVcU+MQ363ubpyQloYGmXvtmWc/ErB0Mtz+SB6gKkaim98PpN4jY ofOHoMnfX2qdDl/+9bzpzHipPzVKkZK6aoyRCxnj4+/UOggxgiWXd/MtatHCV9Rs 9RKJWSXVs6HRanyMOdEX0sArY8cm+4pthX0/CwZmhs3vgJB2vicCtAZjaaUa2OiF tYs+15FAziVySeLWkuA4Xa9mNJIX5hCjAcNhEE1RTHJGsUx2nwgRiFmhbMRFNtWs m4cYIslKlRCrgzRCtnx0CCZRcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG2E1qN C4jstx5MKEq9lJy2+xasMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcRqN7WNfKu1QEbAUCVGdZG+BcbbXRc9J3xQMrK94y3ZX5CiVjscbV TcSmheGIK13KqkUkR9n1H8bpk6kLT25K2kXhWCU5AJZwYlPy4FMIlNJdCg6I8iX1 OKOtb9ihyR3yAypLI5f8ZPfsaGlb2RJy44fXTyKvQddVOY6ISE95H7SEQi+SB/sU Nc2rbtJJbnE/Lh01wgzyj2F6KY1SVKP7WzWyccVmXJEU+J2E6ky0WJBe3ZvFDgFR WRsSadQcb+Jyug7g+KYzHQKODoJlFOHmljRcI4+9WHBiBhX0FaBNaUFl6tmmSvRk baxMKD+Qjhb0o4P84ID6b5EewI6yhWOo -----END CERTIFICATE-----Generated at Thu May 2 22:13:23 2024 by rpki-client on console-fra.rpki-client.org