$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft File: AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json) Hash identifier: u5plfrCJWPqaNX5LbdyD8ndYlnJMvJRT4nTBj8liFsE= Subject key identifier: 5E:D1:04:E5:92:82:A5:A5:94:6E:5B:C0:AB:4F:A9:B6:5B:6B:A1:28 Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D Certificate issuer: /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft Manifest number: 11 Signing time: Sun 19 May 2024 08:47:45 +0000 Manifest this update: Sun 19 May 2024 08:47:44 +0000 Manifest next update: Sun 26 May 2024 08:47:44 +0000 Files and hashes: 1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: OegCUxhJqBiTPHwrmrdsLzuxkgImZWXfOHRTd32maao=) 2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: FAsIeX/amsnKoAaVSpT+BmFdivRozZBNtYBMb+2BVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Validity Not Before: May 19 08:47:44 2024 GMT Not After : May 26 08:47:44 2024 GMT Subject: CN=6649bcb1-1a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:8e:98:04:d1:4b:4d:ad:87:77:2b:b5:c7: d2:e6:b9:b5:25:13:dd:d1:de:55:10:0d:4b:b2:0c: b5:67:9c:f6:ee:fe:d4:9b:a6:a9:03:07:10:17:89: a4:23:fa:07:14:a2:bb:3d:53:09:1c:c5:c7:ab:c9: a9:5a:56:0e:c0:0d:5e:2a:fd:d6:c7:dc:cf:34:af: 56:01:ca:16:82:7d:de:7e:27:b2:79:78:47:3a:5a: c7:4c:10:95:00:e6:cf:04:6f:56:7d:2c:6a:97:e7: e0:b9:60:62:6c:5a:38:42:3b:d3:05:8a:a3:bd:bf: 68:a2:08:5b:59:4d:17:f9:11:2e:be:c6:93:c1:53: 41:2e:4c:54:ba:78:4a:ba:f7:07:42:26:e9:09:1b: 97:ad:7d:f3:cf:6c:30:ed:03:e6:fc:96:89:57:06: f8:c7:0e:03:ed:9b:b3:16:7f:49:95:3a:04:ea:a0: 53:12:01:62:51:37:6f:e4:01:46:0e:48:a8:28:fa: 91:34:c5:2f:9f:63:26:6f:a2:25:e0:d5:d3:9f:d2: 20:76:39:64:20:f6:57:b0:65:9b:de:0e:aa:66:05: 75:6f:3e:7c:0a:70:88:8c:57:5d:46:9e:0d:9b:b0: 31:f8:98:59:98:cd:61:fa:e2:80:4e:10:9a:94:1f: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D1:04:E5:92:82:A5:A5:94:6E:5B:C0:AB:4F:A9:B6:5B:6B:A1:28 X509v3 Authority Key Identifier: keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f8:b2:e4:e0:1e:f0:74:48:32:05:d2:9b:a2:08:d1:ee:c9: 48:ec:bd:92:ba:09:d7:ad:3f:18:19:f0:99:16:85:61:22:48: fb:3c:37:5b:35:f2:1c:40:a8:71:e5:98:22:fa:ca:9d:1a:c3: 58:c1:f6:d9:4c:aa:3a:7d:46:63:d0:9c:76:16:3b:07:50:38: 03:7f:7b:b3:a8:fc:d1:68:d0:a4:72:6a:60:9a:3c:11:48:04: 5e:99:15:39:c6:d1:eb:78:40:0c:6e:a9:62:d5:f6:59:ed:d7: 3f:45:10:9d:bd:5a:a3:c0:16:b3:9b:60:d7:56:50:f7:e1:b5: 33:b0:dd:14:cb:39:ef:15:2a:3d:b3:13:3d:25:27:81:69:78: 9d:46:84:0b:d1:3b:99:64:ab:13:1a:65:6e:b6:c8:03:d0:79: e4:97:09:ed:d8:1d:b5:c2:c0:a7:12:9b:4f:7c:6b:ce:d8:3a: 06:f4:95:75:df:69:5d:d5:94:f4:18:98:fc:2d:99:8a:80:24: 13:01:10:5d:c8:1c:05:3f:ea:d3:bb:a9:a6:1c:20:79:1a:99: 24:9d:79:9e:02:ab:30:73:73:2a:a3:a3:76:a3:e1:33:aa:4e: 25:25:2f:bc:ea:b1:48:9a:2e:0d:d6:37:58:3d:74:c0:bf:25: 69:bd:e1:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjBEODExMC8GA1UEBRMoMDA4QjIzNTFCRTlGRDY2RDM4QjExMDUwNjc5NzM0RjQ0 RkE1RDk3RDAeFw0yNDA1MTkwODQ3NDRaFw0yNDA1MjYwODQ3NDRaMBgxFjAUBgNV BAMTDTY2NDliY2IxLTFhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6346YBNFLTa2Hdyu1x9LmubUlE93R3lUQDUuyDLVnnPbu/tSbpqkDBxAXiaQj +gcUors9UwkcxceryalaVg7ADV4q/dbH3M80r1YByhaCfd5+J7J5eEc6WsdMEJUA 5s8Eb1Z9LGqX5+C5YGJsWjhCO9MFiqO9v2iiCFtZTRf5ES6+xpPBU0EuTFS6eEq6 9wdCJukJG5etffPPbDDtA+b8lolXBvjHDgPtm7MWf0mVOgTqoFMSAWJRN2/kAUYO SKgo+pE0xS+fYyZvoiXg1dOf0iB2OWQg9lewZZveDqpmBXVvPnwKcIiMV11Gng2b sDH4mFmYzWH64oBOEJqUHxrdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXtEE5ZKC paWUblvAq0+ptltroSgwHwYDVR0jBBgwFoAUAIsjUb6f1m04sRBQZ5c09E+l2X0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMEQ4LzA3QUFCQ0RBRkIx MTExRUU5MTIzMzkxQkM0RjlBRTAyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJY MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUlzalViNmYxbTA0c1JCUVo1YzA5RS1sMlgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MEQ4LzA3QUFCQ0RBRkIxMTExRUU5MTIzMzkxQkM0RjlBRTAyL0FJc2pVYjZmMW0w NHNSQlFaNWMwOUUtbDJYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADv4suTgHvB0SDIF0puiCNHuyUjsvZK6CdetPxgZ8JkWhWEiSPs8N1s1 8hxAqHHlmCL6yp0aw1jB9tlMqjp9RmPQnHYWOwdQOAN/e7Oo/NFo0KRyamCaPBFI BF6ZFTnG0et4QAxuqWLV9lnt1z9FEJ29WqPAFrObYNdWUPfhtTOw3RTLOe8VKj2z Ez0lJ4FpeJ1GhAvRO5lkqxMaZW62yAPQeeSXCe3YHbXCwKcSm098a87YOgb0lXXf aV3VlPQYmPwtmYqAJBMBEF3IHAU/6tO7qaYcIHkamSSdeZ4CqzBzcyqjo3aj4TOq TiUlL7zqsUiaLg3WN1g9dMC/JWm94V8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org