$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: /5R3L3jKi9FCcBdtlXtBZGONOzzGBYAuwQXK2nceo6M= Subject key identifier: B2:E1:31:3D:9D:A2:97:6E:F2:B2:4E:3E:35:C0:F7:EF:83:03:23:F2 Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 0477 Signing time: Sun 19 May 2024 01:41:16 +0000 Manifest this update: Sun 19 May 2024 01:41:16 +0000 Manifest next update: Sun 26 May 2024 01:41:16 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: ZZNYijjFC1QhzS4CFc4TKnjZZ7FBRS8j+8h0L0fpDZo=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: veSmbVji3pBKrgMKJbGq+KO1HuBY79NuLYXXcENVDCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: May 19 01:41:16 2024 GMT Not After : May 26 01:41:16 2024 GMT Subject: CN=664958bc-0294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:d4:21:3d:ec:eb:50:16:43:3d:eb:77:1a: e9:ef:1b:5d:5b:a7:34:96:6b:7d:96:ce:65:b8:af: 65:b0:60:8f:85:71:27:51:0c:08:6e:d3:d2:dc:f8: 27:28:cf:e0:97:fd:eb:2a:2d:5d:4e:dd:f5:15:28: 90:c1:2c:99:ad:8f:a3:ac:3e:61:06:f4:7c:c7:31: 0d:92:06:9e:e7:b4:1c:4d:05:af:16:49:4d:26:97: a3:be:7a:62:37:1c:2c:66:99:ac:83:14:62:90:48: d8:e1:4b:4f:9f:1f:07:4f:aa:9b:f0:bf:83:7a:73: 78:d8:ff:59:af:bd:93:ce:d6:3a:78:cc:44:47:e3: cb:ba:e2:0a:04:39:93:20:39:67:ca:16:77:14:7e: 91:fc:dd:3e:94:8e:3c:b6:51:32:0c:6f:5f:48:fb: 46:7e:42:60:80:ad:14:6c:38:78:57:7c:97:af:18: b5:56:15:8d:f4:47:76:07:d2:5b:93:e5:31:a0:7c: bd:56:3a:88:38:16:11:53:87:d5:90:44:ae:a8:15: 07:82:d2:ba:2b:55:af:db:51:36:56:f4:f7:c6:d6: 03:16:97:0a:ed:bd:47:82:51:39:9d:fc:67:fb:62: 2e:03:7c:f7:9e:c5:54:1e:19:8d:97:d1:86:fe:2d: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:31:3D:9D:A2:97:6E:F2:B2:4E:3E:35:C0:F7:EF:83:03:23:F2 X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d1:73:66:3e:35:c7:08:af:c8:f6:ec:fd:e2:05:cb:9d:1a: ac:67:21:3b:53:36:0e:c8:fa:1c:26:f3:de:e4:31:2d:28:6d: 10:22:3f:f1:aa:47:aa:a4:6a:55:af:9a:e9:3e:38:e8:c5:56: 42:08:b3:50:41:d8:04:70:68:4f:9a:6f:ad:91:2d:22:6a:a1: 28:c6:3f:e9:5b:62:e1:0c:34:7d:ae:87:5d:c0:9b:54:32:54: f3:92:c6:a3:71:01:55:bc:ff:a3:6d:9c:c0:82:b1:1a:72:c5: 74:fa:7f:d5:4d:b0:c3:7a:0e:2c:3e:07:15:2f:8f:b4:fb:10: 99:e8:43:5b:51:09:8d:c4:5d:6e:da:2d:40:df:ad:74:10:59: 11:cf:6c:e6:fd:52:3f:1e:86:4b:d4:39:37:b8:9e:8f:15:46: e8:cc:c7:60:eb:35:dd:eb:64:8a:58:19:c4:e1:41:c4:5b:e1: d8:07:e7:ee:6d:06:8d:13:c6:bf:e3:27:3b:2e:7a:19:b7:e9: b2:82:2f:05:05:cd:4a:9f:6a:3a:b8:6a:b8:97:79:ad:a0:ba: fb:c8:a2:6e:25:e6:ff:0f:0a:d7:00:a4:64:27:9b:43:73:c6: 6c:39:69:b1:fe:bf:84:3b:5f:ab:a8:3b:02:16:16:bd:0e:f5: 26:b4:11:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjQwNTE5MDE0MTE2WhcNMjQwNTI2MDE0MTE2WjAYMRYwFAYD VQQDEw02NjQ5NThiYy0wMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJDUIT3s61AWQz3rdxrp7xtdW6c0lmt9ls5luK9lsGCPhXEnUQwIbtPS3Pgn KM/gl/3rKi1dTt31FSiQwSyZrY+jrD5hBvR8xzENkgae57QcTQWvFklNJpejvnpi NxwsZpmsgxRikEjY4UtPnx8HT6qb8L+DenN42P9Zr72TztY6eMxER+PLuuIKBDmT IDlnyhZ3FH6R/N0+lI48tlEyDG9fSPtGfkJggK0UbDh4V3yXrxi1VhWN9Ed2B9Jb k+UxoHy9VjqIOBYRU4fVkESuqBUHgtK6K1Wv21E2VvT3xtYDFpcK7b1HglE5nfxn +2IuA3z3nsVUHhmNl9GG/i2AqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLhMT2d opdu8rJOPjXA9++DAyPyMB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb0XNmPjXHCK/I9uz94gXLnRqsZyE7UzYOyPocJvPe5DEtKG0QIj/x qkeqpGpVr5rpPjjoxVZCCLNQQdgEcGhPmm+tkS0iaqEoxj/pW2LhDDR9roddwJtU MlTzksajcQFVvP+jbZzAgrEacsV0+n/VTbDDeg4sPgcVL4+0+xCZ6ENbUQmNxF1u 2i1A3610EFkRz2zm/VI/HoZL1Dk3uJ6PFUbozMdg6zXd62SKWBnE4UHEW+HYB+fu bQaNE8a/4yc7LnoZt+mygi8FBc1Kn2o6uGq4l3mtoLr7yKJuJeb/DwrXAKRkJ5tD c8ZsOWmx/r+EO1+rqDsCFha9DvUmtBEI -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org