$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: jAE75Zl1nfFf46iPNcycXgXcIy8VJdhv7SNOmO6FXGI= Subject key identifier: 62:FF:B1:E3:14:E4:85:16:BB:3A:5A:25:C6:52:46:A9:85:D6:D6:13 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 20E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 20C5 Signing time: Sat 18 May 2024 16:16:36 +0000 Manifest this update: Sat 18 May 2024 16:16:35 +0000 Manifest next update: Sat 25 May 2024 16:16:35 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: dyzk1BM/9Mov7aDz6eaTSThDn7WiqHreapBQ72v/vzg=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: I5qY7a+FG0zOuas6VCCFx42Zv0OdC5+ZvEyOCBVw1Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8419 (0x20e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: May 18 16:16:35 2024 GMT Not After : May 25 16:16:35 2024 GMT Subject: CN=6648d464-dd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:79:14:1d:05:45:79:ec:bc:4e:cf:d0:a0: ff:ee:e3:9f:0a:a9:49:2c:a6:0d:6c:24:e4:93:bb: 81:9c:3b:e8:2f:1c:0a:a6:e0:11:f0:d5:e9:e4:45: ce:c8:39:57:32:2d:b5:f9:74:ce:2e:d1:6f:2e:d4: c4:12:b9:b3:17:88:55:c5:94:40:ea:51:0e:fc:17: 88:9f:b8:e6:7f:d1:05:58:90:1c:00:64:03:1a:b5: 82:18:6f:0e:26:eb:74:5c:97:ea:03:5e:c1:8d:95: 0a:3f:5e:fe:4d:87:60:e1:2e:02:d0:1c:72:5b:5d: 57:91:c7:53:a2:17:dd:14:e3:2a:27:64:a8:0a:83: ff:1b:a7:46:76:c9:77:9b:6f:c8:f1:97:3e:68:f0: c5:c1:62:12:47:25:b5:76:2f:41:b1:20:33:bc:27: 9b:f4:33:c7:ba:ee:80:9d:b4:42:44:9c:a3:53:a7: ac:1c:bd:6c:33:10:1a:dd:30:01:63:d9:be:1e:f1: e1:7d:d3:dd:9d:79:91:f2:7b:6b:4e:6b:9e:c2:5f: 2d:aa:7d:2e:d0:26:f0:51:8c:a9:62:10:39:e7:20: f7:7d:ea:89:05:f7:69:ee:3a:ad:35:63:b1:19:94: da:d4:f1:b7:3c:10:37:99:0e:36:91:5c:62:46:a0: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:B1:E3:14:E4:85:16:BB:3A:5A:25:C6:52:46:A9:85:D6:D6:13 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:1d:1b:20:22:0b:fe:ad:46:a3:9f:e2:30:9a:51:88:c9: 60:d6:5f:aa:4a:82:bd:84:58:ca:88:6c:5d:47:7d:b7:ae:d1: 36:50:b3:ae:92:17:8b:01:ba:fa:92:dc:31:35:df:43:2b:9b: 47:48:e3:c3:85:09:91:9e:a3:81:a2:2b:08:b4:94:9c:a4:67: 03:e0:0c:18:ff:b3:58:cc:47:99:17:95:0a:84:c9:da:43:6d: 39:3a:c9:f7:46:52:c6:67:40:93:06:c0:83:ba:d7:2c:44:a6: 6f:10:7d:79:4c:a6:f0:55:6f:ad:90:2e:24:61:3d:44:79:ed: 6a:60:0c:a7:87:1b:8b:57:cd:2a:13:64:d5:c4:6c:ac:82:e9: 61:09:1c:d3:9c:42:e6:bf:d0:c5:26:f2:29:b6:2c:6e:17:c8: fc:da:5f:2b:f8:2d:93:d3:fd:68:b9:7a:c6:d4:01:29:27:44: c3:af:30:54:1c:a3:29:ca:7d:74:2e:b5:62:39:9d:1d:d8:20: 9c:6c:05:f6:32:89:48:7f:2a:f0:a2:59:ab:86:9f:fc:e4:24: 71:cf:b8:70:81:fe:7a:76:6d:09:3d:8f:4e:b9:c8:ef:83:5a: a0:8f:57:26:67:e4:4d:fb:20:71:3a:8a:36:1b:d2:b2:87:df: 54:27:b8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjQwNTE4MTYxNjM1WhcNMjQwNTI1MTYxNjM1WjAYMRYwFAYD VQQDEw02NjQ4ZDQ2NC1kZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15h5FB0FRXnsvE7P0KD/7uOfCqlJLKYNbCTkk7uBnDvoLxwKpuAR8NXp5EXO yDlXMi21+XTOLtFvLtTEErmzF4hVxZRA6lEO/BeIn7jmf9EFWJAcAGQDGrWCGG8O Jut0XJfqA17BjZUKP17+TYdg4S4C0BxyW11XkcdTohfdFOMqJ2SoCoP/G6dGdsl3 m2/I8Zc+aPDFwWISRyW1di9BsSAzvCeb9DPHuu6AnbRCRJyjU6esHL1sMxAa3TAB Y9m+HvHhfdPdnXmR8ntrTmuewl8tqn0u0CbwUYypYhA55yD3feqJBfdp7jqtNWOx GZTa1PG3PBA3mQ42kVxiRqAEfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL/seMU 5IUWuzpaJcZSRqmF1tYTMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrR0bICIL/q1Go5/iMJpRiMlg1l+qSoK9hFjKiGxdR323rtE2ULOu kheLAbr6ktwxNd9DK5tHSOPDhQmRnqOBoisItJScpGcD4AwY/7NYzEeZF5UKhMna Q205Osn3RlLGZ0CTBsCDutcsRKZvEH15TKbwVW+tkC4kYT1Eee1qYAynhxuLV80q E2TVxGysgulhCRzTnELmv9DFJvIptixuF8j82l8r+C2T0/1ouXrG1AEpJ0TDrzBU HKMpyn10LrViOZ0d2CCcbAX2MolIfyrwolmrhp/85CRxz7hwgf56dm0JPY9Oucjv g1qgj1cmZ+RN+yBxOoo2G9Kyh99UJ7gb -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org