$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json) Hash identifier: f/3J1buLvMK/eYCIBCMY4h3/lZgFTHq0OLTdOxo1v9g= Subject key identifier: B0:9D:CC:2C:6D:45:03:9D:60:08:46:56:EF:C4:4F:F4:13:8B:DF:F2 Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft Manifest number: DC Signing time: Sun 19 May 2024 06:01:37 +0000 Manifest this update: Sun 19 May 2024 06:01:36 +0000 Manifest next update: Sun 26 May 2024 06:01:36 +0000 Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: rx6EvV76LlQB+tqZ2/0m+zymkbZV3FaMXv6VNLhpHuM=) 2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: ZzGWfShy+q0K03Ilr3Gj1zQvQhciFYMihkhjni/eMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: May 19 06:01:36 2024 GMT Not After : May 26 06:01:36 2024 GMT Subject: CN=664995c1-6963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:51:ad:94:03:1a:bd:28:75:18:ee:da:63: ed:fa:9f:64:b9:f5:2b:54:cf:40:66:39:0a:87:2f: 07:ae:85:71:e8:7d:bc:31:71:18:d0:5d:2b:f3:4b: 95:fd:f1:ab:11:68:15:62:88:72:95:bc:d8:4b:a5: 28:8d:82:b8:b2:39:de:33:1e:fa:d4:a8:4f:37:b2: 21:5c:ec:85:6f:a5:50:31:b8:ce:30:14:94:b4:d8: 64:5f:4e:23:b1:b1:5a:a0:b7:31:9c:40:e4:f8:08: fc:f1:be:2d:a7:fb:ed:19:6d:ca:49:bc:fb:a4:63: e9:91:21:cb:7b:c1:d3:1c:f2:64:ab:32:67:ee:bc: 5e:74:32:6f:db:fa:1c:db:16:a0:f9:32:2f:4d:eb: 33:57:db:5f:ff:08:29:f5:12:97:53:ca:3a:c8:7e: 31:a1:19:27:6e:02:d6:90:11:96:3d:b6:0b:d3:c8: 51:64:15:01:93:29:81:33:7d:41:88:cd:76:be:9f: 28:f6:b4:ca:ce:fc:3e:1f:f0:40:30:7f:e2:97:52: 8b:ac:95:3e:6d:0e:ef:d1:c3:21:53:66:f0:27:d0: 91:4e:8b:f0:7d:f7:83:80:b7:9d:db:40:00:e3:7f: d8:15:e5:61:d8:22:90:56:ac:dd:7c:bb:a7:4f:30: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:CC:2C:6D:45:03:9D:60:08:46:56:EF:C4:4F:F4:13:8B:DF:F2 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:74:ab:41:e6:db:17:1f:0b:9b:30:bd:f1:fb:08:66:d7:1e: 02:59:58:8f:f5:ba:ea:16:71:65:51:90:30:e0:69:fc:55:b2: 1d:97:6e:2d:94:84:72:3b:26:bf:c9:96:10:38:d4:b8:dc:0e: da:70:0a:99:86:8e:3e:d9:ab:25:0b:e4:fc:1a:56:c0:0f:2f: de:4a:4f:c1:50:21:8b:06:ba:f9:e8:66:a3:0c:f0:3e:db:78: 42:c7:74:51:7a:3a:da:be:27:44:bf:82:f8:8c:48:29:d3:c4: ef:d2:a5:13:fe:52:0b:2a:f3:16:24:36:75:41:82:64:e1:8e: a6:96:9b:7d:8c:b9:35:b9:fa:d3:eb:e5:84:61:7e:c3:32:25: 28:96:23:39:99:9b:fd:88:50:e4:a9:52:68:7a:37:b6:e8:58: ef:d3:d3:0f:11:e6:c7:47:2a:0e:e8:82:10:43:c4:e3:01:fb: 57:d5:87:e0:27:0c:1d:77:b4:52:07:39:cc:b3:15:f3:44:c2: 07:28:5e:4d:c3:ef:2f:59:56:0b:bc:04:7d:e1:55:89:16:6d: f8:18:0b:66:e6:42:1d:30:2a:94:35:9a:3d:16:7f:60:e7:02: c7:bd:2d:e9:e7:09:a7:ea:fe:22:38:8f:8e:ae:7b:96:cc:5f: 7e:57:d9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjQwNTE5MDYwMTM2WhcNMjQwNTI2MDYwMTM2WjAYMRYwFAYD VQQDEw02NjQ5OTVjMS02OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumdRrZQDGr0odRju2mPt+p9kufUrVM9AZjkKhy8HroVx6H28MXEY0F0r80uV /fGrEWgVYohylbzYS6UojYK4sjneMx761KhPN7IhXOyFb6VQMbjOMBSUtNhkX04j sbFaoLcxnEDk+Aj88b4tp/vtGW3KSbz7pGPpkSHLe8HTHPJkqzJn7rxedDJv2/oc 2xag+TIvTeszV9tf/wgp9RKXU8o6yH4xoRknbgLWkBGWPbYL08hRZBUBkymBM31B iM12vp8o9rTKzvw+H/BAMH/il1KLrJU+bQ7v0cMhU2bwJ9CRTovwffeDgLed20AA 43/YFeVh2CKQVqzdfLunTzD9uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCdzCxt RQOdYAhGVu/ET/QTi9/yMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjhEOS9BRjVDREIwNEM3MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURK Mm41dklMSnRMelVMcHNKQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjdKtB5tsXHwubML3x+whm1x4CWViP9brqFnFlUZAw4Gn8VbIdl24t lIRyOya/yZYQONS43A7acAqZho4+2aslC+T8GlbADy/eSk/BUCGLBrr56GajDPA+ 23hCx3RRejravidEv4L4jEgp08Tv0qUT/lILKvMWJDZ1QYJk4Y6mlpt9jLk1ufrT 6+WEYX7DMiUoliM5mZv9iFDkqVJoeje26Fjv09MPEebHRyoO6IIQQ8TjAftX1Yfg Jwwdd7RSBznMsxXzRMIHKF5Nw+8vWVYLvAR94VWJFm34GAtm5kIdMCqUNZo9Fn9g 5wLHvS3p5wmn6v4iOI+OrnuWzF9+V9lq -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org