$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: FoAAlUKg7kt8uDeGpFzC21pPsFEuOcivh9PC78SBTaY= Subject key identifier: 09:60:12:ED:61:7E:B4:9A:BA:22:52:15:5C:17:75:31:7E:85:87:A0 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 012A Signing time: Sun 19 May 2024 05:06:44 +0000 Manifest this update: Sun 19 May 2024 05:06:44 +0000 Manifest next update: Sun 26 May 2024 05:06:43 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: AH+jdI2uxvngPXPQU7uNxvy3EjUy9j4iwSc2AgbQk0A=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: nNolV6pGC+51y0HfDWOeN167s3LmxvmNsiZckSYAvXg=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: i7wRWkvg7vS6wr4a7kGEzT/c0WRahwhqZQnRfyjAoJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: May 19 05:06:44 2024 GMT Not After : May 26 05:06:43 2024 GMT Subject: CN=664988e4-cea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:07:c0:6a:e0:cf:af:ea:de:dc:b2:24:22: cc:54:49:4e:52:1c:b4:4b:c9:69:cb:3a:97:97:7c: c8:2c:f7:1a:70:1e:8e:fc:ef:8f:ee:bf:18:e5:bc: f0:3c:73:b0:06:67:fe:58:60:31:eb:19:c7:c0:1f: 4a:15:b5:b0:43:4c:f1:0e:9d:45:aa:f8:7a:4a:b6: c3:cb:7a:13:ec:79:cc:d7:9e:7e:18:7b:5b:12:6e: 47:ad:58:bd:93:7d:55:7c:c6:15:da:ed:b9:ec:bd: 69:b4:aa:0a:93:bf:4c:64:ea:fa:10:1d:4d:c0:46: c7:10:cf:ae:85:35:40:38:6f:5c:80:10:d7:36:55: e2:66:17:74:11:e8:53:64:ac:fb:9c:3f:9d:6a:a6: 79:4b:d3:1f:c7:29:5c:c3:1f:66:bf:8a:49:4c:d5: f9:6a:f8:be:1e:8b:97:e3:4b:65:29:28:8a:10:f8: c6:8a:7b:eb:6d:9c:04:3d:68:8c:97:5a:23:d7:1f: f2:dd:d4:74:05:fb:f2:34:1e:f7:6b:f0:5a:d7:cb: f9:1c:a0:98:57:f1:ef:47:4c:45:04:83:67:ff:8b: 42:ac:ca:c3:9b:e8:4c:31:32:d4:f1:b0:b6:c6:a8: 87:49:b0:f9:0d:e0:56:b6:40:9c:65:25:5d:e8:4e: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:12:ED:61:7E:B4:9A:BA:22:52:15:5C:17:75:31:7E:85:87:A0 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:4d:c4:5d:b5:75:ba:fc:8f:f9:f7:25:94:e9:6c:8c:bf: 9d:85:a3:17:0b:ac:32:35:7b:3a:42:5b:3b:df:75:b6:3f:f5: c2:fc:4d:ea:88:77:78:00:55:50:d5:50:e7:57:a8:29:07:82: b5:08:91:fd:f0:22:0b:95:81:26:eb:31:97:fd:bf:b1:8f:10: da:96:b5:5e:b1:52:ca:8a:8a:6b:87:5c:85:23:06:04:72:c2: 1c:37:13:5f:93:14:a0:07:28:88:ab:67:dc:65:bc:82:68:46: 63:25:60:1b:1c:77:20:ff:1b:17:ac:b6:a3:c4:2b:93:74:e3: 14:18:ce:f3:cb:4c:f8:52:f6:f5:e6:bb:39:64:7c:c8:f0:46: 8d:b7:60:3d:f2:65:14:5c:d9:81:99:f6:a1:5d:d5:d0:65:80: 05:c3:a7:0d:c5:87:14:cd:02:2c:1a:a7:9f:52:d6:6e:37:7a: 2d:3f:13:7b:4b:3a:7a:b3:b1:75:d1:62:52:a3:2c:1d:b5:e4: 95:b7:62:ad:ca:9a:c2:4a:76:30:7b:33:bd:ca:93:a5:75:4b: dc:56:45:93:76:5b:d1:ab:68:b7:42:79:31:fc:84:24:71:b7: 25:b6:c4:b7:77:f4:5d:2b:ec:c2:0e:7e:0c:8a:61:03:9d:12: ea:d7:b2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjQwNTE5MDUwNjQ0WhcNMjQwNTI2MDUwNjQzWjAYMRYwFAYD VQQDEw02NjQ5ODhlNC1jZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm44HwGrgz6/q3tyyJCLMVElOUhy0S8lpyzqXl3zILPcacB6O/O+P7r8Y5bzw PHOwBmf+WGAx6xnHwB9KFbWwQ0zxDp1Fqvh6SrbDy3oT7HnM155+GHtbEm5HrVi9 k31VfMYV2u257L1ptKoKk79MZOr6EB1NwEbHEM+uhTVAOG9cgBDXNlXiZhd0EehT ZKz7nD+daqZ5S9Mfxylcwx9mv4pJTNX5avi+HouX40tlKSiKEPjGinvrbZwEPWiM l1oj1x/y3dR0BfvyNB73a/Ba18v5HKCYV/HvR0xFBINn/4tCrMrDm+hMMTLU8bC2 xqiHSbD5DeBWtkCcZSVd6E4C/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlgEu1h frSauiJSFVwXdTF+hYegMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqk3EXbV1uvyP+fcllOlsjL+dhaMXC6wyNXs6Qls733W2P/XC/E3q iHd4AFVQ1VDnV6gpB4K1CJH98CILlYEm6zGX/b+xjxDalrVesVLKioprh1yFIwYE csIcNxNfkxSgByiIq2fcZbyCaEZjJWAbHHcg/xsXrLajxCuTdOMUGM7zy0z4Uvb1 5rs5ZHzI8EaNt2A98mUUXNmBmfahXdXQZYAFw6cNxYcUzQIsGqefUtZuN3otPxN7 Szp6s7F10WJSoywdteSVt2KtyprCSnYwezO9ypOldUvcVkWTdlvRq2i3Qnkx/IQk cbcltsS3d/RdK+zCDn4MimEDnRLq17LA -----END CERTIFICATE-----Generated at Sun May 19 06:14:32 2024 by rpki-client on console-ams.rpki-client.org