$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: auVvL+zPkQVQrnfbVGc08fCra9s+HRPi52wlAmvXkRk= Subject key identifier: 69:79:46:F6:45:03:3D:37:6B:C4:20:6E:AC:CF:2C:B3:02:7A:09:7A Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0147 Signing time: Sun 19 May 2024 04:56:26 +0000 Manifest this update: Sun 19 May 2024 04:56:26 +0000 Manifest next update: Sun 26 May 2024 04:56:26 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: skfmG6SNaWbZLDcmsTvA8diulfooc/nTIUeRVhWdvo0=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: TVDVEAcyy/AEflArfcqFC77C1KGTIMHM0wpYYMewUMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: May 19 04:56:26 2024 GMT Not After : May 26 04:56:26 2024 GMT Subject: CN=6649867a-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:8f:87:92:90:ad:c0:03:36:fb:c1:a9:f1: df:57:f0:e6:e3:5e:57:bb:41:f2:d7:15:da:d0:1f: 4a:e8:6e:83:37:15:13:4a:61:88:9d:79:01:1a:9f: 98:4f:c9:a9:1a:14:7c:cb:fd:26:a0:68:2c:69:ed: 25:d0:c7:ca:dd:b4:a1:dc:41:7c:76:91:30:e7:1f: c7:4f:6f:3b:e8:8b:e7:c9:3d:35:1a:4d:da:20:51: b7:79:ec:cb:b7:c5:52:c9:15:4a:14:9a:1c:a5:e6: be:e0:c0:3a:59:7e:7d:11:41:93:8b:16:a7:8c:a9: 07:6f:94:6a:58:95:50:a0:71:d9:d3:63:73:5b:83: 0a:bb:92:97:90:73:05:5f:45:93:11:40:df:67:26: f4:a6:b8:93:98:58:64:88:65:de:c2:60:2b:c4:cb: 03:33:a5:a3:7d:3d:0c:14:1f:a6:86:4c:c1:89:f1: 4b:6c:97:30:9d:0f:02:21:86:1a:c0:3f:68:00:b5: 8a:32:18:87:b7:06:05:b5:22:6b:e5:1a:79:ce:84: cd:16:cb:bc:b9:75:38:2f:8d:05:09:34:cb:a2:80: 55:c7:e3:22:a6:cc:32:a3:c4:8f:9a:77:8d:09:7e: 1e:c1:e0:9c:f1:03:a8:df:7a:2a:e2:7a:fb:18:96: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:79:46:F6:45:03:3D:37:6B:C4:20:6E:AC:CF:2C:B3:02:7A:09:7A X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2a:79:76:c5:ea:63:07:96:3e:fc:59:7f:79:ad:31:4e:52: e5:0f:e5:8c:18:d1:38:fc:cc:47:54:80:38:fb:61:8f:ef:9e: 37:e0:03:f1:b3:27:9a:04:a6:5b:e6:64:fd:06:42:59:8c:75: c4:a1:6a:ff:1f:2e:00:e6:40:95:00:52:64:b8:0a:e7:f3:fc: be:aa:2c:88:6b:69:3f:e6:a2:32:12:cd:96:56:0a:25:5d:1e: 82:87:20:95:eb:51:66:f0:db:e2:ad:7a:27:98:5d:32:53:fc: 46:b2:fb:72:50:0f:24:dd:89:aa:c2:27:51:65:b8:ad:d2:81: ce:f0:24:b8:80:5e:a5:4a:91:50:d6:72:25:0f:e8:76:36:49: 9a:eb:63:4e:e6:6b:55:3d:a0:7b:27:98:57:b9:f4:5d:33:7f: dc:af:3c:ea:be:57:41:08:c0:ec:44:8e:e2:3b:e4:c7:a5:78: a4:75:a8:11:b0:5b:45:17:57:1c:73:ca:24:d3:40:55:41:20: ca:50:a0:04:c5:32:e0:b6:0e:d8:e8:c0:d9:54:49:c2:93:d4: ba:0c:bb:b2:2f:4b:54:cc:16:3b:8d:b5:ff:b8:4d:5c:2b:01: f3:e0:73:e5:58:7e:62:95:14:73:19:53:80:3b:75:a7:5c:46: 24:73:07:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjQwNTE5MDQ1NjI2WhcNMjQwNTI2MDQ1NjI2WjAYMRYwFAYD VQQDEw02NjQ5ODY3YS03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApI2Ph5KQrcADNvvBqfHfV/Dm415Xu0Hy1xXa0B9K6G6DNxUTSmGInXkBGp+Y T8mpGhR8y/0moGgsae0l0MfK3bSh3EF8dpEw5x/HT2876IvnyT01Gk3aIFG3eezL t8VSyRVKFJocpea+4MA6WX59EUGTixanjKkHb5RqWJVQoHHZ02NzW4MKu5KXkHMF X0WTEUDfZyb0priTmFhkiGXewmArxMsDM6WjfT0MFB+mhkzBifFLbJcwnQ8CIYYa wD9oALWKMhiHtwYFtSJr5Rp5zoTNFsu8uXU4L40FCTTLooBVx+Mipswyo8SPmneN CX4eweCc8QOo33oq4nr7GJb61QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl5RvZF Az03a8QgbqzPLLMCegl6MB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKnl2xepjB5Y+/Fl/ea0xTlLlD+WMGNE4/MxHVIA4+2GP75434APx syeaBKZb5mT9BkJZjHXEoWr/Hy4A5kCVAFJkuArn8/y+qiyIa2k/5qIyEs2WVgol XR6ChyCV61Fm8NvirXonmF0yU/xGsvtyUA8k3YmqwidRZbit0oHO8CS4gF6lSpFQ 1nIlD+h2Nkma62NO5mtVPaB7J5hXufRdM3/crzzqvldBCMDsRI7iO+THpXikdagR sFtFF1ccc8ok00BVQSDKUKAExTLgtg7Y6MDZVEnCk9S6DLuyL0tUzBY7jbX/uE1c KwHz4HPlWH5ilRRzGVOAO3WnXEYkcwfm -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org