$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: /uqNY3rk8yUkjTVZo9y7Bd9dyYfmfqv8PC+aTnJnvyc= Subject key identifier: 9B:25:1F:F0:D3:C3:90:9E:93:1C:1C:0B:59:1A:6E:1B:84:2A:EF:78 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0172 Signing time: Sun 19 May 2024 04:48:41 +0000 Manifest this update: Sun 19 May 2024 04:48:40 +0000 Manifest next update: Sun 26 May 2024 04:48:40 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: wMqa7Rco6feh2jSC2AgF1KWNI5O3LlX8epWDfvtT9HY=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: g9HS+SRgps9RZhKOWWLH99Ykg9DnbRNJ1pvU0zcEtXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: May 19 04:48:40 2024 GMT Not After : May 26 04:48:40 2024 GMT Subject: CN=664984a8-2000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:8f:ad:6e:82:ff:c7:c6:7d:5b:ac:01:4e: dd:3a:6e:10:35:45:0d:aa:a6:a6:f5:8f:a9:42:36: 1f:d0:db:5d:20:96:7c:ad:19:46:e1:d2:8c:ea:98: 99:4e:56:da:ea:ef:23:6f:12:9a:df:3d:2f:62:01: 24:92:a7:5c:bf:90:32:18:d8:80:90:14:29:68:b3: d8:2d:b7:63:4b:8a:44:87:c6:dc:a3:08:9d:49:1e: 7d:fd:88:61:93:dd:00:13:1b:d6:f0:dd:eb:8a:f6: e7:83:a2:70:b0:30:66:6b:e3:6d:78:76:49:3b:ce: 63:9f:81:6c:0d:69:cf:df:81:94:0e:d9:5d:c8:37: 0e:d3:32:9a:4c:ff:35:0c:5b:76:00:53:34:b7:90: 4f:35:b0:bc:ba:30:86:22:e4:b6:37:79:6a:6d:2a: 51:2c:80:44:dd:77:29:f9:dc:c4:cb:30:8e:1f:88: 05:b9:59:a8:00:df:7a:91:96:cb:6a:b1:c0:b4:92: 43:40:d2:87:d9:1b:9e:fa:8a:f0:d3:dc:fa:52:d0: 08:ad:c3:c7:40:15:22:1b:dc:1b:d4:7f:ac:86:93: 9c:7e:cb:09:3b:e5:b2:1f:b1:22:f8:53:ab:12:ae: 76:ee:11:f1:c5:cf:36:cf:e4:90:e8:8d:cf:a7:6b: 63:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:25:1F:F0:D3:C3:90:9E:93:1C:1C:0B:59:1A:6E:1B:84:2A:EF:78 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c6:db:83:ff:21:7f:6f:4f:c9:ea:cd:ee:27:d2:9a:c6:b2: 91:8e:13:06:0f:02:4d:f3:98:81:9e:79:b9:7e:e7:58:91:42: f4:f3:70:50:19:65:3d:90:57:b6:61:2b:9c:58:c6:b8:72:fe: 87:cf:f6:ee:a5:5c:38:c3:86:75:af:7d:ad:1f:71:f7:b1:cd: 98:97:a4:b7:cf:9b:73:f4:8f:d6:06:d7:b2:b6:a4:b1:63:a5: e8:12:e6:f4:47:fa:25:bd:cd:46:fd:4a:84:74:5b:c5:77:ea: 71:c7:d4:7f:11:30:ef:06:40:e4:c3:68:48:ce:35:b2:5b:cd: 9c:c9:e5:24:20:d4:f0:3c:f7:2a:c5:10:34:61:ed:5b:56:90: c0:ae:5e:c3:82:53:e8:b9:76:34:3f:5f:1d:ac:b2:96:dd:5b: c5:f5:f8:ab:f1:dc:8f:2c:b5:c5:96:9f:f4:7c:2e:28:ea:11: 02:a7:33:90:35:b7:c7:6e:12:a9:6e:73:56:43:8d:f4:dd:a7: 88:06:46:c3:e0:a3:e5:0b:ed:10:06:aa:3a:24:57:ab:69:24: 2f:d9:05:ad:09:11:46:b7:2c:03:87:7a:6b:11:09:af:9b:b2: ad:c4:f9:6f:11:26:26:2c:ca:67:e9:48:16:32:5a:13:b6:28: 40:e0:0c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjQwNTE5MDQ0ODQwWhcNMjQwNTI2MDQ0ODQwWjAYMRYwFAYD VQQDEw02NjQ5ODRhOC0yMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5WPrW6C/8fGfVusAU7dOm4QNUUNqqam9Y+pQjYf0NtdIJZ8rRlG4dKM6piZ Tlba6u8jbxKa3z0vYgEkkqdcv5AyGNiAkBQpaLPYLbdjS4pEh8bcowidSR59/Yhh k90AExvW8N3rivbng6JwsDBma+NteHZJO85jn4FsDWnP34GUDtldyDcO0zKaTP81 DFt2AFM0t5BPNbC8ujCGIuS2N3lqbSpRLIBE3Xcp+dzEyzCOH4gFuVmoAN96kZbL arHAtJJDQNKH2Rue+orw09z6UtAIrcPHQBUiG9wb1H+shpOcfssJO+WyH7Ei+FOr Eq527hHxxc82z+SQ6I3Pp2tjpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJslH/DT w5CekxwcC1kabhuEKu94MB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpxtuD/yF/b0/J6s3uJ9KaxrKRjhMGDwJN85iBnnm5fudYkUL083BQ GWU9kFe2YSucWMa4cv6Hz/bupVw4w4Z1r32tH3H3sc2Yl6S3z5tz9I/WBteytqSx Y6XoEub0R/olvc1G/UqEdFvFd+pxx9R/ETDvBkDkw2hIzjWyW82cyeUkINTwPPcq xRA0Ye1bVpDArl7DglPouXY0P18drLKW3VvF9fir8dyPLLXFlp/0fC4o6hECpzOQ NbfHbhKpbnNWQ4303aeIBkbD4KPlC+0QBqo6JFeraSQv2QWtCRFGtywDh3prEQmv m7KtxPlvESYmLMpn6UgWMloTtihA4AxU -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org