$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: SJDH+jTWXP7B8dw0qvEEyZ4DtCX9EtP0S8v0Fzz5uUc= Subject key identifier: 19:BA:9C:08:95:A2:37:4B:85:52:EE:14:00:88:DB:BC:2B:C3:74:F6 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 01BB Signing time: Sun 19 May 2024 04:31:00 +0000 Manifest this update: Sun 19 May 2024 04:30:59 +0000 Manifest next update: Sun 26 May 2024 04:30:59 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: uLraxoN/YYDC/LnRXMdYjVnA3Kt0QmlquBzf2b/14Ms=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: Vn1njwEVgxNxywbNC8/q+2jE+mTxDV5g+ZsmY7VoKIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: May 19 04:30:59 2024 GMT Not After : May 26 04:30:59 2024 GMT Subject: CN=66498084-b1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:01:b9:cf:07:80:5d:51:ac:03:b3:73:c5: 17:24:db:f4:10:cb:49:77:f7:1a:93:e3:25:d9:5c: e2:ae:6a:1c:56:6b:bb:a8:e6:bb:3f:0b:d4:9c:a5: 5d:8c:41:8b:98:07:17:5d:61:d9:12:20:17:f4:36: 5c:6f:bb:dc:ac:96:35:ea:e0:f3:2e:9b:f6:f3:40: 00:b7:d0:aa:50:95:ac:6f:0c:6f:0b:99:a1:ca:7b: 85:92:de:16:3b:83:60:72:2a:a6:39:ef:b4:21:99: 9e:6c:0b:99:ea:1a:7d:6a:16:67:5a:80:84:44:7a: 91:b8:89:3e:b0:2c:1e:e4:cc:86:d4:14:91:06:c6: f0:a5:29:de:48:d8:e8:92:0b:a7:1d:09:db:ca:2e: 56:a1:31:8e:f3:89:38:33:62:94:44:8a:5c:3a:2c: 62:54:17:e4:a7:7e:1d:e0:c6:b9:8b:a9:42:7d:a7: a8:53:b9:44:20:c7:15:b7:26:cd:c8:3e:4e:fc:1f: 61:4b:2e:a8:48:40:24:b4:a5:1c:9e:ca:f9:75:4e: 82:00:50:9a:42:17:7e:9a:28:76:a4:ca:8b:da:fe: ca:47:a2:a6:ef:10:71:db:20:ba:72:e0:ae:59:c2: 3a:f0:9a:8a:b5:44:58:a2:be:a4:a7:6a:7e:48:08: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BA:9C:08:95:A2:37:4B:85:52:EE:14:00:88:DB:BC:2B:C3:74:F6 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:1e:92:00:5a:75:43:29:b3:8f:35:36:13:10:64:4b:4f:cb: 68:3e:4e:be:c7:8a:26:6b:92:9a:7f:ab:60:91:cb:2c:aa:8b: 9e:1d:45:53:23:c3:ef:91:7c:88:ea:9b:0b:bf:1f:ed:af:6b: 1b:9c:fb:b9:1c:35:d4:f8:b4:5c:86:cc:ee:af:ba:45:cd:12: 75:d5:3d:9f:35:3a:a3:e0:e9:47:63:3c:f1:72:65:ec:25:f9: c6:ef:f9:6c:21:a3:5d:53:e3:41:05:0d:d9:d4:a1:3c:cc:a8: ae:ff:eb:99:44:29:d4:07:21:78:e5:d6:f8:ab:8e:77:b3:10: 3f:69:0d:bf:c2:45:99:cf:67:61:83:ca:17:03:31:79:33:5b: d6:f3:bc:95:6f:91:7f:b5:8f:88:7e:04:57:55:0e:44:b2:1f: c7:72:60:53:31:cd:ba:aa:99:65:18:7e:ef:9a:84:47:ed:5d: 8e:f7:6e:53:6e:8c:7d:34:18:db:35:21:ac:32:04:2c:c1:d0: b6:ed:f4:f2:36:2d:76:d1:a8:3b:c4:70:0e:68:71:57:da:57: e6:a7:e9:5f:db:15:50:17:1e:0e:f1:69:14:81:99:0c:4c:f6: a3:fb:8d:17:34:66:17:0e:48:46:fd:95:a5:d7:1f:ac:49:75: fe:8f:f9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjQwNTE5MDQzMDU5WhcNMjQwNTI2MDQzMDU5WjAYMRYwFAYD VQQDEw02NjQ5ODA4NC1iMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3wBuc8HgF1RrAOzc8UXJNv0EMtJd/cak+Ml2VzirmocVmu7qOa7PwvUnKVd jEGLmAcXXWHZEiAX9DZcb7vcrJY16uDzLpv280AAt9CqUJWsbwxvC5mhynuFkt4W O4NgciqmOe+0IZmebAuZ6hp9ahZnWoCERHqRuIk+sCwe5MyG1BSRBsbwpSneSNjo kgunHQnbyi5WoTGO84k4M2KURIpcOixiVBfkp34d4Ma5i6lCfaeoU7lEIMcVtybN yD5O/B9hSy6oSEAktKUcnsr5dU6CAFCaQhd+mih2pMqL2v7KR6Km7xBx2yC6cuCu WcI68JqKtURYor6kp2p+SAhVNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm6nAiV ojdLhVLuFACI27wrw3T2MB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZHpIAWnVDKbOPNTYTEGRLT8toPk6+x4oma5Kaf6tgkcssqoueHUVT I8PvkXyI6psLvx/tr2sbnPu5HDXU+LRchszur7pFzRJ11T2fNTqj4OlHYzzxcmXs JfnG7/lsIaNdU+NBBQ3Z1KE8zKiu/+uZRCnUByF45db4q453sxA/aQ2/wkWZz2dh g8oXAzF5M1vW87yVb5F/tY+IfgRXVQ5Esh/HcmBTMc26qpllGH7vmoRH7V2O925T box9NBjbNSGsMgQswdC27fTyNi120ag7xHAOaHFX2lfmp+lf2xVQFx4O8WkUgZkM TPaj+40XNGYXDkhG/ZWl1x+sSXX+j/m1 -----END CERTIFICATE-----Generated at Sun May 19 05:08:03 2024 by rpki-client on console-ams.rpki-client.org