$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: iHU5NZhIIZamiKebOVyShnqtnuOG2q/sDhFQOFjYSm8= Subject key identifier: E0:42:B7:8E:D7:80:CB:52:CE:62:20:32:22:E7:E3:8D:AC:9D:41:44 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 039D Signing time: Sun 19 May 2024 02:35:40 +0000 Manifest this update: Sun 19 May 2024 02:35:40 +0000 Manifest next update: Sun 26 May 2024 02:35:40 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: b9ySx/NYaazPcSO1sLW5tWpm4HLNMztnvw9UUbz+SCg=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: t8vQxa/52rqt/b8S2ZS30M2W7RkkG9Y+HmsuhsTC7MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: May 19 02:35:40 2024 GMT Not After : May 26 02:35:40 2024 GMT Subject: CN=6649657c-5a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:97:39:61:75:87:7a:89:6f:77:71:2c:d3: df:b4:75:ee:36:c3:5c:e3:2f:43:56:51:8c:fa:af: 41:3c:dd:11:e5:a4:53:a1:d3:9f:c4:17:cc:87:47: ad:27:2b:1e:64:5f:79:35:06:c5:76:01:48:30:41: 3f:1c:8a:77:68:cc:3a:41:24:f6:b4:c5:5f:d8:33: dd:f5:42:90:8e:5b:28:c8:64:81:ad:72:d4:4a:0c: 8a:36:4f:37:22:bd:a6:3f:7c:db:3a:5d:82:b7:72: b4:79:dc:ca:b7:14:b1:dc:31:1f:20:72:6c:14:84: bb:cf:1f:0f:78:31:48:12:83:89:8d:f1:fe:ce:97: 3e:b0:c8:47:7c:d8:0b:e4:42:95:f4:ec:12:c7:7f: 26:b9:8b:f9:ff:6d:da:6f:e0:b0:1c:d5:42:cb:43: ff:05:7d:0a:3a:5b:8a:01:cd:08:15:62:dd:79:f6: 65:93:84:81:ca:6f:28:55:84:01:4a:c1:26:df:00: bc:7d:e3:e5:ac:19:ff:61:a1:74:d3:e8:ac:65:69: c0:7a:a3:4b:75:8d:c7:d4:dd:c4:67:1c:ba:f1:52: f0:a8:cc:4b:70:a8:73:6e:bf:7d:a2:ad:84:2e:d8: 04:78:7c:b3:25:77:d4:a3:9e:34:79:95:7b:75:30: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:42:B7:8E:D7:80:CB:52:CE:62:20:32:22:E7:E3:8D:AC:9D:41:44 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:14:e8:3c:40:f0:e0:a0:d3:f1:b1:a7:7e:25:4a:4f:23:0d: 50:d9:d4:da:6f:de:56:87:e3:5a:09:98:a9:bc:51:8a:61:09: 22:12:76:32:dd:40:75:02:e7:13:5d:9a:a6:19:0b:ad:37:18: 6d:0d:fc:b7:b5:3e:12:95:2d:2b:05:6b:88:ac:aa:a8:0b:a7: ae:c1:af:15:46:93:19:0c:32:1e:89:43:70:9f:24:ed:f6:4e: ed:6b:56:b6:9a:37:fd:d1:b2:d5:b5:0b:c6:3f:a7:0e:2c:16: c5:57:63:32:c3:00:25:62:44:d9:33:ef:ee:59:d4:9f:28:69: e0:2e:e1:e4:a5:b7:e6:e0:ad:3b:91:47:a7:5e:59:17:bf:6c: 61:3b:50:3f:44:40:c5:87:20:32:35:cc:c2:a7:0c:5e:d4:d4: ae:bd:e8:2e:a8:9f:e0:22:8e:85:bc:43:1e:86:33:bc:6d:dc: 44:eb:d1:5c:c3:d8:83:74:aa:36:ec:2a:e0:a1:8a:f0:be:69: f4:8c:a2:fc:5f:7e:97:05:84:e0:2c:f4:1c:68:19:5a:40:f7: 58:82:69:c3:c7:5a:83:df:08:98:9c:3f:c5:79:f1:33:b6:48: 05:fd:ff:63:3b:f3:b4:75:7e:2b:3e:79:ac:10:3d:04:de:56: 1e:ba:e6:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjQwNTE5MDIzNTQwWhcNMjQwNTI2MDIzNTQwWjAYMRYwFAYD VQQDEw02NjQ5NjU3Yy01YTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui6XOWF1h3qJb3dxLNPftHXuNsNc4y9DVlGM+q9BPN0R5aRTodOfxBfMh0et JyseZF95NQbFdgFIMEE/HIp3aMw6QST2tMVf2DPd9UKQjlsoyGSBrXLUSgyKNk83 Ir2mP3zbOl2Ct3K0edzKtxSx3DEfIHJsFIS7zx8PeDFIEoOJjfH+zpc+sMhHfNgL 5EKV9OwSx38muYv5/23ab+CwHNVCy0P/BX0KOluKAc0IFWLdefZlk4SBym8oVYQB SsEm3wC8fePlrBn/YaF00+isZWnAeqNLdY3H1N3EZxy68VLwqMxLcKhzbr99oq2E LtgEeHyzJXfUo540eZV7dTB9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBCt47X gMtSzmIgMiLn442snUFEMB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlFOg8QPDgoNPxsad+JUpPIw1Q2dTab95Wh+NaCZipvFGKYQkiEnYy 3UB1AucTXZqmGQutNxhtDfy3tT4SlS0rBWuIrKqoC6euwa8VRpMZDDIeiUNwnyTt 9k7ta1a2mjf90bLVtQvGP6cOLBbFV2MywwAlYkTZM+/uWdSfKGngLuHkpbfm4K07 kUenXlkXv2xhO1A/REDFhyAyNczCpwxe1NSuveguqJ/gIo6FvEMehjO8bdxE69Fc w9iDdKo27CrgoYrwvmn0jKL8X36XBYTgLPQcaBlaQPdYgmnDx1qD3wiYnD/FefEz tkgF/f9jO/O0dX4rPnmsED0E3lYeuub8 -----END CERTIFICATE-----Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org