$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: Qj24xSZ+XP57jGr8DYcGzrJmXucqLI5FCpmwWjLlAeA= Subject key identifier: 4A:7A:2F:82:FF:D5:56:95:D3:C3:44:0B:37:47:81:44:33:40:B0:78 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 08B5 Signing time: Sat 18 May 2024 21:31:54 +0000 Manifest this update: Sat 18 May 2024 21:31:53 +0000 Manifest next update: Sat 25 May 2024 21:31:53 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: uCWZu78lc3dJScRS3nHeaddUUSFXHO50Pm5R1oo4KCA=) 2: 746D55EAC51911EE8C160640C4F9AE02.roa (hash: C7WiojBMyjzUqbt+nYfQDnjpXlvmjFMh4IIYxSxNxeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: May 18 21:31:53 2024 GMT Not After : May 25 21:31:53 2024 GMT Subject: CN=66491e4a-ad42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:ae:7b:b3:a2:b3:7f:3c:2a:5f:a9:b4:b9: 4c:34:52:da:96:1f:d3:2a:4a:70:2e:32:56:9b:2b: 5e:82:12:04:45:86:d5:81:b4:2c:6a:04:b9:ac:bf: f7:5c:f0:27:08:71:d8:1d:cb:bd:c7:00:40:6a:3c: 92:a8:d8:1f:5f:d7:9a:e2:a6:4f:d2:a8:75:e1:2f: 34:63:ee:a7:73:4d:02:bf:5b:56:1b:45:ba:43:0f: cc:8a:c5:46:f5:f5:70:97:19:d0:62:12:43:97:ac: f9:81:09:b4:98:57:23:9d:c5:e6:07:01:a1:c3:4b: a1:89:63:c8:b1:55:67:96:57:40:8d:6b:81:97:a9: 68:9d:b9:a3:7a:57:c8:68:1c:d0:f9:42:e6:3a:41: af:5d:e0:71:0a:a1:e8:8e:84:6b:97:56:6f:ef:b3: 7d:8a:48:61:23:22:74:87:2c:23:45:a7:90:56:0f: 58:80:e0:ea:cb:1e:1c:76:e6:d0:2d:94:f8:92:82: d5:af:16:c4:ae:c2:d9:02:ac:b3:cb:fd:df:c7:1c: 99:fe:15:3d:5a:e8:4e:03:84:ec:7c:98:b5:80:f9: 33:32:8c:a5:66:15:a7:fb:11:eb:07:82:91:9c:6b: b4:22:d0:46:bd:0b:07:c9:13:30:14:48:95:da:22: 08:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:2F:82:FF:D5:56:95:D3:C3:44:0B:37:47:81:44:33:40:B0:78 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1a:e3:dc:5e:24:30:67:5a:89:40:86:84:53:15:a8:86:26: 9e:99:a1:c6:fb:5c:78:2e:62:40:ff:2d:f3:d5:e6:6c:51:af: 7d:a9:3c:74:20:7c:98:29:c1:7f:9c:62:36:d4:6a:67:32:cc: 62:5c:5a:80:d1:12:a1:20:12:11:74:21:cd:81:3b:b4:b1:88: d6:2e:7a:8e:9c:70:d7:f2:4e:ae:eb:3b:ab:b6:39:32:ac:8b: e3:92:31:37:6a:85:a7:5f:d7:7b:17:fb:79:8c:7c:24:d0:e1: 1e:cd:d0:f5:a4:5c:fe:92:cb:32:2f:5c:4d:19:ec:df:00:70: 61:ff:cd:9d:66:26:26:2c:b5:2c:48:44:cc:77:b7:ed:1e:05: b7:8f:e8:d9:d0:a1:18:0f:11:4a:cd:b0:38:90:7f:39:11:af: 77:b6:e2:d8:68:a7:2f:8b:86:0c:1d:d0:b2:fe:04:8c:dd:3e: bd:b2:b7:ed:31:32:f8:5a:20:23:cb:6f:3e:8e:3a:21:41:90: 9f:08:0b:b8:67:00:8d:14:34:a2:45:c0:fe:af:db:93:38:71: 14:f1:56:24:c8:f8:b1:78:33:bf:7b:8a:9d:5a:f7:e3:59:ee: 3c:da:a1:9b:7e:78:8a:ac:ac:8d:b4:b5:ef:68:e9:9e:3f:7c: d6:45:b2:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjQwNTE4MjEzMTUzWhcNMjQwNTI1MjEzMTUzWjAYMRYwFAYD VQQDEw02NjQ5MWU0YS1hZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bSue7Ois388Kl+ptLlMNFLalh/TKkpwLjJWmyteghIERYbVgbQsagS5rL/3 XPAnCHHYHcu9xwBAajySqNgfX9ea4qZP0qh14S80Y+6nc00Cv1tWG0W6Qw/MisVG 9fVwlxnQYhJDl6z5gQm0mFcjncXmBwGhw0uhiWPIsVVnlldAjWuBl6lonbmjelfI aBzQ+ULmOkGvXeBxCqHojoRrl1Zv77N9ikhhIyJ0hywjRaeQVg9YgODqyx4cdubQ LZT4koLVrxbErsLZAqyzy/3fxxyZ/hU9WuhOA4TsfJi1gPkzMoylZhWn+xHrB4KR nGu0ItBGvQsHyRMwFEiV2iIIGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp6L4L/ 1VaV08NECzdHgUQzQLB4MB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVGuPcXiQwZ1qJQIaEUxWohiaemaHG+1x4LmJA/y3z1eZsUa99qTx0 IHyYKcF/nGI21GpnMsxiXFqA0RKhIBIRdCHNgTu0sYjWLnqOnHDX8k6u6zurtjky rIvjkjE3aoWnX9d7F/t5jHwk0OEezdD1pFz+kssyL1xNGezfAHBh/82dZiYmLLUs SETMd7ftHgW3j+jZ0KEYDxFKzbA4kH85Ea93tuLYaKcvi4YMHdCy/gSM3T69srft MTL4WiAjy28+jjohQZCfCAu4ZwCNFDSiRcD+r9uTOHEU8VYkyPixeDO/e4qdWvfj We482qGbfniKrKyNtLXvaOmeP3zWRbJM -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org