$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json) Hash identifier: b/OOn5oi/yrqaX6/LIUs8gE1HAbL2W7ZbzxOrIDO2Qk= Subject key identifier: 9D:9D:D5:42:B6:F1:F3:40:9F:17:D9:D8:23:7C:53:AB:F2:84:7F:37 Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft Manifest number: 1225 Signing time: Sat 04 May 2024 20:24:21 +0000 Manifest this update: Sat 04 May 2024 20:24:20 +0000 Manifest next update: Sat 11 May 2024 20:24:20 +0000 Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: 5bAotLdLXoA7ooYEz53EWc21jitNRsGJVq0tHWH/wYk=) 2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: IW7LXVcbi9wiFPMILg6JU1RNMCUNAiTI3E8d9d0dT/g=) 3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: DLeS0zPVo1GXq+y9erAJGv8PPnf+LNimN04EFu+X8DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Validity Not Before: May 4 20:24:20 2024 GMT Not After : May 11 20:24:20 2024 GMT Subject: CN=66369975-21f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:a2:1c:f7:68:0c:f0:e1:90:43:d1:45:e3: d5:06:ef:c7:6c:cf:56:30:b0:86:5f:a6:1b:19:b7: 11:ca:a5:45:a5:a3:ff:32:29:10:af:81:98:10:1f: a7:d8:0a:4d:c0:99:77:05:e1:71:7a:44:ec:d0:a9: 73:e5:34:b1:29:aa:d1:6e:1a:f0:21:5d:d9:c0:2e: cf:08:34:c3:78:62:7a:4a:e9:94:9f:04:7b:05:82: 27:d4:69:5b:58:00:4d:da:dd:43:4a:6d:ff:02:54: b6:ce:b8:6a:a8:2a:03:19:f7:18:ca:fc:68:d4:db: 2a:34:6d:4f:8e:1e:bf:e0:02:c1:20:28:96:30:c2: 5c:81:52:23:b3:80:8c:23:97:e9:46:04:46:6d:9b: 8c:a4:4b:90:78:4b:07:9f:f2:73:b3:b5:cf:12:d2: 11:d1:64:34:f4:e7:f4:f7:c7:df:d9:95:9a:64:97: a0:ea:4c:37:3a:c2:ff:82:19:b0:f5:6a:7c:65:e1: 8c:bf:8c:02:73:70:98:de:38:b4:a7:f4:cc:70:97: 68:8f:62:1b:0d:b8:89:02:da:35:4a:74:c0:e4:b7: 77:fb:da:fb:3c:87:16:6a:57:4a:a5:34:0f:3e:64: 19:48:34:94:8e:3e:2a:10:f6:d5:f8:c2:91:a9:bb: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9D:D5:42:B6:F1:F3:40:9F:17:D9:D8:23:7C:53:AB:F2:84:7F:37 X509v3 Authority Key Identifier: keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:59:5b:e2:1f:b0:bc:fb:bd:d8:c8:82:26:5d:ff:41:4e: 13:ad:ab:f8:49:0b:0c:53:9c:4c:f6:f3:43:2b:a3:da:4a:98: 43:12:b2:4b:7b:e1:57:16:15:66:06:55:55:e8:80:29:a3:4e: ea:85:96:af:e8:34:00:00:58:3c:21:f4:91:cb:92:b0:66:12: cf:51:5c:e2:fa:7b:d2:98:b4:b4:c1:42:89:73:26:e6:fe:7f: ad:eb:c8:32:08:da:e6:a0:6c:e2:24:7c:4e:7d:0d:6c:fc:14: db:35:84:9a:f4:6e:77:f5:aa:5f:91:12:53:f2:a0:b6:c0:d8: b0:8b:68:22:b6:a6:ef:6c:19:55:ca:d2:e4:d5:26:ac:ee:b6: 08:17:80:e8:b4:00:bb:d6:71:8e:e1:8f:ca:b5:dd:28:74:95: 52:45:12:ed:42:b2:3a:45:a0:e0:d4:a1:6f:5b:9b:bc:dd:ae: 8e:92:26:cc:95:78:21:14:fe:9d:01:7f:af:d7:ba:09:f4:1b: f6:bb:fb:e2:b4:b9:8d:f2:94:cd:2b:07:76:99:95:2b:ca:70: 53:8d:0b:3f:73:9f:c3:90:70:4e:fd:0b:f1:d8:66:00:0d:51: 27:7e:c5:7a:ac:5e:a5:25:f1:b5:7f:83:dc:ab:8c:ef:65:c1: 3a:c1:eb:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4 M0QwMUJCMTAwHhcNMjQwNTA0MjAyNDIwWhcNMjQwNTExMjAyNDIwWjAYMRYwFAYD VQQDEw02NjM2OTk3NS0yMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVSiHPdoDPDhkEPRRePVBu/HbM9WMLCGX6YbGbcRyqVFpaP/MikQr4GYEB+n 2ApNwJl3BeFxekTs0Klz5TSxKarRbhrwIV3ZwC7PCDTDeGJ6SumUnwR7BYIn1Glb WABN2t1DSm3/AlS2zrhqqCoDGfcYyvxo1NsqNG1Pjh6/4ALBICiWMMJcgVIjs4CM I5fpRgRGbZuMpEuQeEsHn/Jzs7XPEtIR0WQ09Of098ff2ZWaZJeg6kw3OsL/ghmw 9Wp8ZeGMv4wCc3CY3ji0p/TMcJdoj2IbDbiJAto1SnTA5Ld3+9r7PIcWaldKpTQP PmQZSDSUjj4qEPbV+MKRqbt4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2d1UK2 8fNAnxfZ2CN8U6vyhH83MB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZb1lb4h+wvPu92MiCJl3/QU4Trav4SQsMU5xM9vNDK6PaSphDErJL e+FXFhVmBlVV6IApo07qhZav6DQAAFg8IfSRy5KwZhLPUVzi+nvSmLS0wUKJcybm /n+t68gyCNrmoGziJHxOfQ1s/BTbNYSa9G539apfkRJT8qC2wNiwi2gitqbvbBlV ytLk1Sas7rYIF4DotAC71nGO4Y/Ktd0odJVSRRLtQrI6RaDg1KFvW5u83a6OkibM lXghFP6dAX+v17oJ9Bv2u/vitLmN8pTNKwd2mZUrynBTjQs/c5/DkHBO/Qvx2GYA DVEnfsV6rF6lJfG1f4Pcq4zvZcE6wevb -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org