$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft File: V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json) Hash identifier: 5BvMb7+xJdEN4cP1wKuaiXGslbdfCiIDuGB8BWZhwEA= Subject key identifier: 1F:5C:23:27:5C:1A:78:7B:35:51:21:3E:7F:83:FF:78:94:4B:6C:4B Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft Manifest number: 0FD5 Signing time: Sat 18 May 2024 18:02:39 +0000 Manifest this update: Sat 18 May 2024 18:02:38 +0000 Manifest next update: Sat 25 May 2024 18:02:38 +0000 Files and hashes: 1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: pnmRx7lUNz3Gd1+hbbQLiPNH7YZ+smgoclaRtr8pGK0=) 2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: C8JsnhtWjYarCU9m/K8bGYnqYfArGmox1aAnINCcEgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: May 18 18:02:38 2024 GMT Not After : May 25 18:02:38 2024 GMT Subject: CN=6648ed3e-5213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:7a:8b:3a:b7:dd:f7:69:66:e8:de:b5:c0: 69:a8:c6:93:1c:90:9a:5d:06:2e:1d:fa:2d:aa:ea: 3a:ce:0d:ff:b8:b2:f2:0b:f9:79:83:d4:0d:0d:8c: 04:77:bc:6e:d7:42:43:fa:18:91:a7:04:44:e1:92: bb:61:d7:ff:d1:c4:32:f9:59:72:60:1f:8f:3c:49: c1:ae:58:db:e7:91:af:c4:4e:a3:2f:de:f5:74:c6: 8c:34:ce:de:05:99:78:21:c1:ff:05:35:2c:1e:38: 93:28:96:61:e2:40:7c:0a:fc:50:b3:92:f7:d6:ea: 95:e2:6d:38:18:e0:60:f2:28:c0:57:47:66:67:53: 76:76:36:00:7f:7d:ef:23:90:96:4b:08:94:e2:77: 65:b1:34:6d:c8:0f:44:17:c7:af:5b:40:d3:69:1d: 94:6c:8b:9b:5b:a1:73:43:d2:e9:43:e4:8e:4b:78: 3f:6d:cc:06:d7:cc:34:a0:e7:ac:5c:30:b5:18:15: 68:a4:b7:c2:de:6a:c1:58:55:b9:ce:31:b8:18:bc: 1e:87:28:80:18:dd:ba:83:29:b9:bc:52:b0:33:3e: da:09:97:d6:d8:60:60:b6:72:ff:52:b3:ee:3f:ba: d3:fd:10:e0:e0:f1:8e:6b:d0:7c:4c:aa:e5:2f:f0: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:23:27:5C:1A:78:7B:35:51:21:3E:7F:83:FF:78:94:4B:6C:4B X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:26:fb:8f:a7:a9:67:f3:00:82:69:a1:30:fa:0e:10:5d:c3: 42:d7:3a:49:bf:2f:0e:1b:49:a2:63:8c:d4:c6:0e:ab:ec:2c: 76:6d:50:fa:50:cc:04:91:3d:96:dc:c4:11:5e:02:a1:94:92: 58:92:3d:3e:d1:95:89:92:40:56:a3:cf:40:64:29:57:5e:ca: 4b:1f:58:d7:8c:e1:6c:cf:e2:02:11:9d:a4:f5:bd:97:ca:66: 2e:99:24:a1:4f:52:e2:bb:20:4c:9d:ec:61:7e:59:32:61:dd: 01:d0:4d:ec:a0:e2:e7:76:2b:97:aa:c1:9d:04:3d:f6:9a:e0: 1a:44:9e:c4:57:1e:c1:26:8b:97:0c:1a:b2:55:dc:07:82:20: f1:26:ce:f1:1c:4e:86:73:a2:d4:a4:20:38:1a:79:ff:7c:3f: f1:f5:c8:4d:14:d1:8f:b0:36:60:48:20:2f:dd:14:ca:de:f5: b0:9d:62:35:eb:0c:81:3c:c7:3d:14:73:a7:9f:e9:17:26:53: c4:44:e9:c7:62:b3:dd:f4:f6:63:c3:ef:e1:7d:cf:90:cd:82: 65:9b:64:3c:bf:2c:e0:31:76:f9:71:ca:6b:59:99:0d:d8:89: b7:f8:cb:c5:96:a8:6f:63:73:e8:c7:6b:c8:cd:2b:cd:aa:52: 50:c8:20:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjQwNTE4MTgwMjM4WhcNMjQwNTI1MTgwMjM4WjAYMRYwFAYD VQQDEw02NjQ4ZWQzZS01MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcd6izq33fdpZujetcBpqMaTHJCaXQYuHfotquo6zg3/uLLyC/l5g9QNDYwE d7xu10JD+hiRpwRE4ZK7Ydf/0cQy+VlyYB+PPEnBrljb55GvxE6jL971dMaMNM7e BZl4IcH/BTUsHjiTKJZh4kB8CvxQs5L31uqV4m04GOBg8ijAV0dmZ1N2djYAf33v I5CWSwiU4ndlsTRtyA9EF8evW0DTaR2UbIubW6FzQ9LpQ+SOS3g/bcwG18w0oOes XDC1GBVopLfC3mrBWFW5zjG4GLwehyiAGN26gym5vFKwMz7aCZfW2GBgtnL/UrPu P7rT/RDg4PGOa9B8TKrlL/A89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9cIydc Gnh7NVEhPn+D/3iUS2xLMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA1Qi9CMzE5NjZDNDJDNUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2 aFpqaDlGX0dNM21hZXgwUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAJvuPp6ln8wCCaaEw+g4QXcNC1zpJvy8OG0miY4zUxg6r7Cx2bVD6 UMwEkT2W3MQRXgKhlJJYkj0+0ZWJkkBWo89AZClXXspLH1jXjOFsz+ICEZ2k9b2X ymYumSShT1LiuyBMnexhflkyYd0B0E3soOLndiuXqsGdBD32muAaRJ7EVx7BJouX DBqyVdwHgiDxJs7xHE6Gc6LUpCA4Gnn/fD/x9chNFNGPsDZgSCAv3RTK3vWwnWI1 6wyBPMc9FHOnn+kXJlPEROnHYrPd9PZjw+/hfc+QzYJlm2Q8vyzgMXb5ccprWZkN 2Im3+MvFlqhvY3Pox2vIzSvNqlJQyCA3 -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org