$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft File: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json) Hash identifier: /f6shwlnudFC+CvT3RQ0CfQ1pnXBB6HWhu/YIscC7fY= Subject key identifier: AF:53:BF:7E:B6:82:CA:5F:E8:01:49:F9:89:11:6B:46:C6:C6:9D:75 Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft Manifest number: 0426 Signing time: Sun 19 May 2024 02:07:25 +0000 Manifest this update: Sun 19 May 2024 02:07:25 +0000 Manifest next update: Sun 26 May 2024 02:07:25 +0000 Files and hashes: 1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: PqUwJsVIAIuv3xtLgaa5/DTXQFHc8BC6e6iCuwqZiTQ=) 2: 2578D808319C11EEAA55E221C4F9AE02.roa (hash: yFpANFbvU6JKS5wYTKNARBce5ydMGAflPd6ZY+OPwWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Validity Not Before: May 19 02:07:25 2024 GMT Not After : May 26 02:07:25 2024 GMT Subject: CN=66495edd-55dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:0a:47:59:3a:3d:66:6f:03:a9:f0:0a:5e: 16:ab:eb:3f:a7:70:83:7a:c5:7e:d3:62:4d:6c:8c: 82:e5:75:45:2d:51:66:7d:46:33:19:6a:b4:0f:52: 27:53:27:38:bf:99:78:22:93:6a:7e:f5:56:a7:0a: 82:e4:bf:7b:62:76:38:6f:92:0b:79:13:f7:5a:59: 05:0c:7b:4d:90:8b:c0:b5:80:b3:dc:fa:cc:e6:50: fa:20:93:68:80:61:8e:22:a6:8c:d3:ff:83:b3:7b: bb:70:57:05:56:c2:a3:fd:56:82:d9:35:82:91:d6: b5:b0:a1:94:ee:e8:42:39:3d:bc:d1:33:a0:85:0b: 78:6d:e6:ba:f4:23:39:c8:60:66:41:88:15:c2:d4: a7:bd:7c:20:a2:18:1b:e6:ca:b5:f2:56:41:33:f0: f5:f1:d2:e1:8f:13:bf:67:4c:d3:25:3c:48:05:a4: 52:68:52:05:fa:8c:8e:a9:02:5e:c6:7a:ce:30:19: 51:34:42:1d:70:3a:f2:e3:af:20:37:f2:e5:ea:3c: 19:95:9e:99:a6:c3:31:cf:99:97:e2:e8:78:2c:fe: cb:90:78:72:8d:23:a0:83:e9:4f:76:3b:5f:c3:d7: 55:8a:1a:6f:4f:c2:1c:77:fe:e1:6f:30:e6:5a:29: 0b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:53:BF:7E:B6:82:CA:5F:E8:01:49:F9:89:11:6B:46:C6:C6:9D:75 X509v3 Authority Key Identifier: keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1f:b0:c0:39:c8:a1:c1:b9:af:7d:9a:d9:13:c3:fc:0b:ee: 48:5a:22:37:05:bb:a1:69:5e:53:e0:09:80:c7:2a:13:19:9e: c6:10:53:f9:41:23:61:f2:dc:df:4f:52:c2:9b:03:59:81:a4: 50:20:2c:d8:11:d1:f2:e8:aa:fe:09:17:36:95:4e:ff:dd:05: 72:47:be:12:a7:87:c2:db:02:f1:68:6b:40:b4:32:be:57:a2: 0b:ea:d2:46:96:31:05:74:78:a5:b5:75:31:ea:d9:b0:28:91: ca:71:2f:3e:97:8e:49:c3:72:57:0f:d2:4a:f4:da:99:06:87: 8d:34:8a:03:27:8b:ee:7c:13:a9:e5:50:8c:b1:83:59:f9:95: e7:5f:3e:23:18:9b:8c:77:dd:59:5b:0b:31:dd:fd:2e:06:8d: aa:10:33:f8:21:8e:4b:c4:36:da:54:d2:c1:2e:57:72:6d:1f: 97:6d:cd:15:3b:e4:56:2e:48:36:cc:31:74:2d:c6:8b:7f:15: 12:47:81:64:c2:7b:bf:7d:c3:7a:90:be:5a:6f:b2:12:3e:20: 56:ad:a9:42:be:89:86:b2:eb:9a:a7:88:33:92:d8:55:65:da: 00:b2:60:e1:ca:88:db:37:8f:e5:a4:75:ef:12:bd:0e:48:5c: cf:0e:bb:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz Qzg4RUQ1N0IwHhcNMjQwNTE5MDIwNzI1WhcNMjQwNTI2MDIwNzI1WjAYMRYwFAYD VQQDEw02NjQ5NWVkZC01NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA160KR1k6PWZvA6nwCl4Wq+s/p3CDesV+02JNbIyC5XVFLVFmfUYzGWq0D1In Uyc4v5l4IpNqfvVWpwqC5L97YnY4b5ILeRP3WlkFDHtNkIvAtYCz3PrM5lD6IJNo gGGOIqaM0/+Ds3u7cFcFVsKj/VaC2TWCkda1sKGU7uhCOT280TOghQt4bea69CM5 yGBmQYgVwtSnvXwgohgb5sq18lZBM/D18dLhjxO/Z0zTJTxIBaRSaFIF+oyOqQJe xnrOMBlRNEIdcDry468gN/Ll6jwZlZ6ZpsMxz5mX4uh4LP7LkHhyjSOgg+lPdjtf w9dVihpvT8Icd/7hbzDmWikLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9Tv362 gspf6AFJ+YkRa0bGxp11MB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaH7DAOcihwbmvfZrZE8P8C+5IWiI3BbuhaV5T4AmAxyoTGZ7GEFP5 QSNh8tzfT1LCmwNZgaRQICzYEdHy6Kr+CRc2lU7/3QVyR74Sp4fC2wLxaGtAtDK+ V6IL6tJGljEFdHiltXUx6tmwKJHKcS8+l45Jw3JXD9JK9NqZBoeNNIoDJ4vufBOp 5VCMsYNZ+ZXnXz4jGJuMd91ZWwsx3f0uBo2qEDP4IY5LxDbaVNLBLldybR+Xbc0V O+RWLkg2zDF0LcaLfxUSR4Fkwnu/fcN6kL5ab7ISPiBWralCvomGsuuap4gzkthV ZdoAsmDhyojbN4/lpHXvEr0OSFzPDrtQ -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org