$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: sP1EGW2Vqw4JbxdOmlhZKseatcNnQUcyP0WREKLxf4w= Subject key identifier: 78:64:E5:33:47:96:63:F0:98:6B:27:46:78:6C:E9:73:30:8A:ED:30 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0B84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0B6E Signing time: Sat 04 May 2024 19:47:08 +0000 Manifest this update: Sat 04 May 2024 19:47:08 +0000 Manifest next update: Sat 11 May 2024 19:47:08 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: iLSSPyFI+sST5jFPwFg0l2GJO3Seo0VH/Z/WExsWUOk=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: I4EoI6EvFD8uF5xXaD7VpZlmW1j8IbDq4Geu8lB9O4I=) 3: 3762D3A44BA311EEA33D4B34C4F9AE02.roa (hash: obKCJC/08yw2rrw9bRktaljaZCvc77/t2dJiX2Gawj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2948 (0xb84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: May 4 19:47:08 2024 GMT Not After : May 11 19:47:08 2024 GMT Subject: CN=663690bc-bfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:d5:f0:8a:d1:4d:39:e6:22:79:0c:3f:01: 6e:70:f5:d2:ff:fd:1e:5b:e5:a3:db:3c:a9:e2:47: 2b:05:14:67:1e:59:81:4d:e5:e3:53:70:1e:64:20: aa:47:eb:18:1d:dd:bd:9a:41:3c:9d:db:cc:1c:a5: d7:d3:01:25:b1:ba:3c:35:31:a4:9a:43:4c:db:c5: 86:6f:e6:3a:18:f7:b2:bd:0a:73:26:e4:82:56:96: ba:4c:2d:95:3a:1d:bc:4a:6a:4e:f7:07:a9:d6:a5: 81:20:55:6b:41:1f:57:c1:cd:ff:97:10:10:93:db: 50:b4:67:37:18:3f:91:ea:dc:16:5a:6f:b2:9f:9d: 6b:49:cf:18:98:61:c7:db:3f:23:85:4e:77:0b:e3: 57:cd:5f:d2:84:0d:e9:eb:1b:4c:d0:2b:44:7c:90: d9:a8:39:1d:56:5b:f4:aa:83:f0:2a:a6:03:36:ce: 66:f0:80:6e:a7:59:7f:50:4c:c0:bb:49:16:33:15: 28:d1:51:6d:85:3d:0b:2f:4b:7c:2e:2d:9b:c5:06: 29:1b:3d:5a:e2:cf:a8:00:d5:b5:cb:e5:27:9c:04: bf:4f:eb:14:35:d4:f4:a5:51:2d:d7:2d:79:bd:c8: 93:27:b7:a7:5c:45:22:68:18:20:1b:99:5c:2c:e9: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:E5:33:47:96:63:F0:98:6B:27:46:78:6C:E9:73:30:8A:ED:30 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1c:a0:d1:4e:03:34:9c:93:fc:9c:0d:e3:3d:9d:f5:e1:54: 6c:81:f9:cb:55:e0:50:88:a0:96:d7:5d:64:4c:f1:81:cb:86: a0:67:68:41:6a:2b:4c:3c:e9:cc:da:34:ef:f4:14:a0:5f:f4: d9:c9:ef:ed:3a:a1:4f:2e:a0:25:36:7d:36:62:f3:d1:a4:d8: a8:ce:41:1f:2e:32:64:02:84:d3:1d:68:a6:3d:98:8b:d8:ec: 31:cf:12:03:6c:71:70:f4:37:f5:16:ff:89:d2:4f:6d:41:39: 15:f4:b1:57:02:64:36:94:72:48:08:8c:05:c4:ab:e6:df:2a: 06:f9:e5:56:e5:e6:42:12:91:c4:1c:69:27:a7:55:d2:98:35: 43:17:a2:57:2a:d7:38:8f:c0:e8:3d:f6:b8:c9:b4:7f:ad:50: 8f:e9:1b:08:0d:73:59:9d:9c:4c:fc:be:d2:15:c1:e2:ce:68: 87:24:7f:a2:5c:1a:88:1e:1d:ed:9b:63:13:7f:4f:a8:83:b2: 4f:c7:7e:58:39:8a:fb:27:6e:a8:7c:99:08:04:c6:24:a2:44: 7b:46:32:3e:61:68:8f:0f:11:5b:3a:03:41:b7:2d:55:62:8a: 4d:1d:9a:1d:43:f7:d4:7d:99:77:2a:4d:1b:81:3a:96:e4:34: c5:0f:40:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjQwNTA0MTk0NzA4WhcNMjQwNTExMTk0NzA4WjAYMRYwFAYD VQQDEw02NjM2OTBiYy1iZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHPV8IrRTTnmInkMPwFucPXS//0eW+Wj2zyp4kcrBRRnHlmBTeXjU3AeZCCq R+sYHd29mkE8ndvMHKXX0wElsbo8NTGkmkNM28WGb+Y6GPeyvQpzJuSCVpa6TC2V Oh28SmpO9wep1qWBIFVrQR9Xwc3/lxAQk9tQtGc3GD+R6twWWm+yn51rSc8YmGHH 2z8jhU53C+NXzV/ShA3p6xtM0CtEfJDZqDkdVlv0qoPwKqYDNs5m8IBup1l/UEzA u0kWMxUo0VFthT0LL0t8Li2bxQYpGz1a4s+oANW1y+UnnAS/T+sUNdT0pVEt1y15 vciTJ7enXEUiaBggG5lcLOnOrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhk5TNH lmPwmGsnRnhs6XMwiu0wMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HKDRTgM0nJP8nA3jPZ314VRsgfnLVeBQiKCW111kTPGBy4agZ2hB aitMPOnM2jTv9BSgX/TZye/tOqFPLqAlNn02YvPRpNiozkEfLjJkAoTTHWimPZiL 2OwxzxIDbHFw9Df1Fv+J0k9tQTkV9LFXAmQ2lHJICIwFxKvm3yoG+eVW5eZCEpHE HGknp1XSmDVDF6JXKtc4j8DoPfa4ybR/rVCP6RsIDXNZnZxM/L7SFcHizmiHJH+i XBqIHh3tm2MTf0+og7JPx35YOYr7J26ofJkIBMYkokR7RjI+YWiPDxFbOgNBty1V YopNHZodQ/fUfZl3Kk0bgTqW5DTFD0Ci -----END CERTIFICATE-----Generated at Sat May 4 20:37:20 2024 by rpki-client on console-fra.rpki-client.org