$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: bHaZx6VvDYtUQuUhlrHszrfWAj3KhGvrZ6ZK4nxNYkg= Subject key identifier: BB:82:71:95:CD:28:AE:3C:EB:D3:FA:2D:FB:E4:F9:CC:68:27:A0:6F Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 059F Signing time: Sun 19 May 2024 00:21:49 +0000 Manifest this update: Sun 19 May 2024 00:21:48 +0000 Manifest next update: Sun 26 May 2024 00:21:48 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: bIbY9n4lxZXflQxVrKDwzLm0JjUGmfQByaRZaZ2RJBM=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: eZsMbIYCNANfm1H6l8fPlIIihvMzp3IStvDQqRzqYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: May 19 00:21:48 2024 GMT Not After : May 26 00:21:48 2024 GMT Subject: CN=6649461d-ea0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:b5:f0:f1:f6:0e:09:15:4a:68:a7:66:73: 2c:f5:84:07:28:9c:40:bc:c3:32:d4:96:56:d0:4b: f2:15:11:19:17:78:15:8a:ef:0e:a4:ea:1d:08:2e: 91:d5:b2:ff:bc:7b:db:03:21:7c:c5:08:0e:18:ac: c6:af:bc:26:b5:c1:2a:61:6b:87:94:9d:1f:c4:6a: 90:dc:ae:4f:ae:ad:05:79:d6:b5:4c:73:3e:40:1f: 17:98:05:ca:f2:da:e1:c1:53:2f:a7:57:10:63:21: be:6b:4b:9f:14:a6:c2:92:c5:16:f4:2c:0d:33:6a: 76:5f:ed:14:72:35:73:4e:d8:7b:74:e8:f9:2b:d6: 8c:09:62:61:bb:76:1c:c0:ff:50:c9:c8:e0:7f:5b: 28:11:37:25:4b:90:12:ff:04:2f:d3:5a:bb:1b:a0: a0:16:06:64:79:26:2b:c7:67:61:1c:ba:21:a9:49: 14:ec:ff:44:44:c1:9f:d2:53:ff:9f:b2:93:4a:3b: 84:82:21:10:52:f5:e8:2e:02:56:5f:ff:ac:d1:9a: b2:52:9c:2a:f6:78:97:f4:d5:2b:d4:e7:77:31:6f: 40:5b:0e:68:3b:0b:af:bf:04:9a:ea:68:63:29:f4: b2:c2:2c:9a:6b:df:89:d5:fa:9b:c0:af:7f:40:a3: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:82:71:95:CD:28:AE:3C:EB:D3:FA:2D:FB:E4:F9:CC:68:27:A0:6F X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f6:eb:f9:c7:fb:61:cb:20:ee:83:c0:2f:f5:a0:94:cf:5d: 6f:06:a9:15:34:9c:37:4c:8b:04:45:c7:b8:94:49:78:67:93: 31:f6:20:2c:93:a1:f8:d7:ef:53:3e:9e:f5:36:16:5a:8b:47: 37:53:3a:e0:ec:09:f4:81:3f:73:d2:66:ca:e6:54:16:1c:8a: a8:69:ae:3b:95:b1:b5:f9:c1:fb:39:57:c8:27:fa:c2:a5:ec: c6:79:fe:2d:dd:3f:f4:5f:89:2f:60:0e:3f:78:75:76:39:66: 23:c4:b4:39:42:ed:59:5f:c5:e9:c5:fc:39:1f:77:b9:c5:72: 6f:21:2b:34:82:13:4a:4c:82:21:02:09:67:ee:f9:27:50:e7: 69:db:7e:bc:b4:a6:13:c8:24:fb:8c:ae:ac:9c:b8:ab:35:f7: ff:01:45:91:b6:4c:64:d9:79:ac:ba:6d:5f:2b:46:02:d0:17: e6:9f:98:41:15:81:8b:e2:0d:a6:a4:e2:c5:20:82:cb:f0:d9: 1d:d4:28:46:7e:60:98:90:89:5d:b4:8c:93:67:c7:cd:5a:76: e3:5d:af:3f:d3:ba:8c:86:87:9a:5b:5c:6a:86:75:12:bd:0c: fb:a2:71:3c:94:9a:01:59:5f:0f:2e:cb:89:47:5c:48:54:a8: 8a:44:c9:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjQwNTE5MDAyMTQ4WhcNMjQwNTI2MDAyMTQ4WjAYMRYwFAYD VQQDEw02NjQ5NDYxZC1lYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nW18PH2DgkVSminZnMs9YQHKJxAvMMy1JZW0EvyFREZF3gViu8OpOodCC6R 1bL/vHvbAyF8xQgOGKzGr7wmtcEqYWuHlJ0fxGqQ3K5Prq0Feda1THM+QB8XmAXK 8trhwVMvp1cQYyG+a0ufFKbCksUW9CwNM2p2X+0UcjVzTth7dOj5K9aMCWJhu3Yc wP9Qycjgf1soETclS5AS/wQv01q7G6CgFgZkeSYrx2dhHLohqUkU7P9ERMGf0lP/ n7KTSjuEgiEQUvXoLgJWX/+s0ZqyUpwq9niX9NUr1Od3MW9AWw5oOwuvvwSa6mhj KfSywiyaa9+J1fqbwK9/QKPk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuCcZXN KK4869P6Lfvk+cxoJ6BvMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp9uv5x/thyyDug8Av9aCUz11vBqkVNJw3TIsERce4lEl4Z5Mx9iAs k6H41+9TPp71NhZai0c3Uzrg7An0gT9z0mbK5lQWHIqoaa47lbG1+cH7OVfIJ/rC pezGef4t3T/0X4kvYA4/eHV2OWYjxLQ5Qu1ZX8Xpxfw5H3e5xXJvISs0ghNKTIIh Agln7vknUOdp2368tKYTyCT7jK6snLirNff/AUWRtkxk2Xmsum1fK0YC0Bfmn5hB FYGL4g2mpOLFIILL8Nkd1ChGfmCYkIldtIyTZ8fNWnbjXa8/07qMhoeaW1xqhnUS vQz7onE8lJoBWV8PLsuJR1xIVKiKRMlA -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org