$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: JHbBnC0m4HSPGTi0+MN4w8eanpFHVqu7qJWleyoHzoQ= Subject key identifier: 7F:78:B3:93:01:17:CD:45:68:D2:68:31:58:9A:5C:6F:9F:F7:F8:D6 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 1461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 1458 Signing time: Thu 02 May 2024 17:27:16 +0000 Manifest this update: Thu 02 May 2024 17:27:16 +0000 Manifest next update: Thu 09 May 2024 17:27:16 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: rn0/EBz44bv0GASU+h4cwz3B7jwKKEuHpmwrHAE63ZI=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: j96PTlFpoRCT0sM9GV/HTNOgabv8BE28v1KYhTEUe9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5217 (0x1461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: May 2 17:27:16 2024 GMT Not After : May 9 17:27:16 2024 GMT Subject: CN=6633ccf4-3404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:72:ae:f8:9e:0a:41:f0:92:36:1f:ce:a6: 29:e3:53:0c:26:b5:b2:ba:5f:24:3a:e2:9d:09:b8: 00:a1:10:90:93:eb:89:83:ba:69:05:13:9e:cb:0e: 85:76:68:c0:71:04:1e:36:93:03:fd:27:4e:14:1f: fe:28:24:04:cd:9c:db:aa:ff:08:06:12:4f:de:8c: e9:ed:6e:ba:9e:36:eb:43:f9:bd:b0:ce:68:b6:84: 66:7e:ce:60:47:95:f5:32:af:6c:76:cf:70:b0:4f: ab:19:d1:74:a4:00:09:63:6e:e5:2a:1a:ff:b0:f2: 16:ec:91:e8:d8:2e:14:5a:42:77:f3:01:99:06:d5: c8:85:2e:7f:b5:1f:d4:a2:25:1c:82:24:1b:f4:7a: 10:8c:12:5d:6c:b2:ba:a1:fa:f6:61:d8:29:4d:13: 00:f6:06:cd:24:b3:42:cd:a6:87:8f:37:6e:ae:41: 6c:95:f3:02:1c:8b:7b:d6:ab:63:28:65:c9:da:53: 4d:7b:54:6f:4a:38:78:71:7e:7a:e8:19:e8:70:bc: c4:5e:06:da:e8:86:b1:de:d0:e7:36:7f:5a:31:c7: e9:2f:30:83:31:14:42:be:90:22:1d:c0:66:0b:af: 56:67:e1:69:e7:3f:bc:c3:2d:3a:b6:4e:d2:37:be: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:B3:93:01:17:CD:45:68:D2:68:31:58:9A:5C:6F:9F:F7:F8:D6 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:02:b5:05:fb:8a:fa:67:f9:bc:d1:0d:eb:73:70:3c:1a:e2: 9f:14:fb:18:35:5c:f6:0f:b8:2d:3d:2d:e1:9d:16:d8:21:ad: 13:26:bd:ea:7b:e2:42:0a:ef:1a:17:2f:7f:b5:3c:2c:b4:52: 0c:ff:50:19:b6:c9:c6:95:d8:9b:34:b7:72:c7:88:a4:03:b6: 2b:6e:17:fb:26:cf:e7:99:42:1e:0b:6a:ec:d4:60:f8:84:2c: 5e:d1:bc:eb:30:cf:fc:b2:47:87:ac:fb:6b:8b:e0:19:62:b3: cf:c3:ec:e5:49:ef:14:f2:40:90:2c:33:aa:df:7d:96:74:07: fc:4a:05:39:d2:75:84:b9:cf:01:3a:da:f8:0e:2e:45:fa:59: db:bd:a6:7e:82:b2:56:a2:3b:02:80:7b:f1:c0:0b:32:48:2e: 08:f1:58:32:36:55:12:68:b4:b0:7c:9f:b4:10:a0:3f:fa:d4: 8b:d1:86:46:3f:67:5c:21:a2:d8:51:65:12:7c:36:24:e6:b1: 5c:bc:a5:fa:54:4b:8e:be:b6:3b:22:51:b6:ab:fd:12:a6:bc: d3:39:58:72:c6:44:9d:bc:9a:29:df:83:a0:85:a3:ba:d7:f3: f4:dc:40:1a:64:30:4a:52:9b:9e:19:50:53:aa:d7:d2:c6:42: c9:14:c9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjQwNTAyMTcyNzE2WhcNMjQwNTA5MTcyNzE2WjAYMRYwFAYD VQQDEw02NjMzY2NmNC0zNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUNyrvieCkHwkjYfzqYp41MMJrWyul8kOuKdCbgAoRCQk+uJg7ppBROeyw6F dmjAcQQeNpMD/SdOFB/+KCQEzZzbqv8IBhJP3ozp7W66njbrQ/m9sM5otoRmfs5g R5X1Mq9sds9wsE+rGdF0pAAJY27lKhr/sPIW7JHo2C4UWkJ38wGZBtXIhS5/tR/U oiUcgiQb9HoQjBJdbLK6ofr2YdgpTRMA9gbNJLNCzaaHjzdurkFslfMCHIt71qtj KGXJ2lNNe1RvSjh4cX566BnocLzEXgba6Iax3tDnNn9aMcfpLzCDMRRCvpAiHcBm C69WZ+Fp5z+8wy06tk7SN75j9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH94s5MB F81FaNJoMViaXG+f9/jWMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaArUF+4r6Z/m80Q3rc3A8GuKfFPsYNVz2D7gtPS3hnRbYIa0TJr3q e+JCCu8aFy9/tTwstFIM/1AZtsnGldibNLdyx4ikA7Yrbhf7Js/nmUIeC2rs1GD4 hCxe0bzrMM/8skeHrPtri+AZYrPPw+zlSe8U8kCQLDOq332WdAf8SgU50nWEuc8B Otr4Di5F+lnbvaZ+grJWojsCgHvxwAsySC4I8VgyNlUSaLSwfJ+0EKA/+tSL0YZG P2dcIaLYUWUSfDYk5rFcvKX6VEuOvrY7IlG2q/0SprzTOVhyxkSdvJop34OghaO6 1/P03EAaZDBKUpueGVBTqtfSxkLJFMnv -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org