$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json) Hash identifier: KkCJpJwNAoKIoLbVYp4mIVElj0j2udcbp0LpMcMVl7s= Subject key identifier: 39:B3:89:24:36:60:F3:1C:27:0A:7E:95:8B:AF:CD:4F:B4:55:4E:B4 Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft Manifest number: 0451 Signing time: Sun 19 May 2024 01:53:26 +0000 Manifest this update: Sun 19 May 2024 01:53:25 +0000 Manifest next update: Sun 26 May 2024 01:53:25 +0000 Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: YbGGsLk+z3EP4/yu5GVkQrnf6clQKvJ7GMBTZO9KXpE=) 2: C847114C07D411ECBF875117C4F9AE02.roa (hash: 8jiWS5tF75Q6xeG+tS7HXmjjPoQpozn1Cf2cagIPojY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Validity Not Before: May 19 01:53:25 2024 GMT Not After : May 26 01:53:25 2024 GMT Subject: CN=66495b96-a77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4e:2a:ed:a7:1a:5f:cc:ba:fc:6c:45:cb:0b: 3e:89:54:82:a6:f8:93:f3:0d:2b:17:ed:86:78:cc: 75:b7:94:f7:ec:2a:19:b4:49:5d:1d:8a:c5:cc:c6: ea:30:b9:c5:5f:f4:c9:35:06:9d:9a:70:96:4f:54: 9d:cf:0b:b0:32:fb:23:45:8f:76:fe:7a:f9:c3:46: 53:dc:97:71:7d:4a:4d:6a:9e:6a:84:1e:14:8e:a4: 89:ba:23:38:6c:28:51:10:e9:7a:fb:8c:00:fb:f6: 85:6f:7e:67:0a:4d:af:04:c9:ab:84:24:eb:65:55: 2e:3f:07:e5:0f:99:42:59:62:8f:e5:21:2d:d2:67: 9d:9d:49:68:a2:db:a7:8c:55:c2:3c:bb:4e:7f:71: 3f:8f:3c:df:45:07:77:cc:e4:b6:bb:5a:ed:51:97: 4f:90:cc:29:af:10:8c:47:8c:9e:18:45:0b:61:d4: 0d:2f:0b:8a:26:44:e1:1b:26:a0:74:7c:3b:d5:49: 30:37:4e:51:d8:6e:35:be:23:dc:c3:fe:2c:11:71: fe:54:f4:87:95:e1:33:c1:bb:47:3f:4f:4e:3d:f9: f3:d2:58:59:d5:0e:91:db:2a:9d:d3:e4:5e:68:82: 86:63:da:6f:2a:1f:b7:19:04:b4:6b:1e:0a:bc:d4: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:89:24:36:60:F3:1C:27:0A:7E:95:8B:AF:CD:4F:B4:55:4E:B4 X509v3 Authority Key Identifier: keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2e:d2:82:a9:70:5d:bf:4b:75:82:5a:7a:bb:f3:82:63:83: 4f:5f:53:47:59:c3:d0:be:63:4d:b1:3b:a1:15:d2:6e:94:e8: 9e:f4:e5:fa:34:94:24:bb:3b:da:2a:0d:5d:33:81:bb:5a:81: 2f:7d:d6:2e:c2:26:24:b4:2c:c1:9f:61:0f:36:77:a4:2b:7f: 39:0b:29:a1:5d:e5:34:ba:b5:64:5b:e6:9e:50:b1:75:6d:60: a6:94:f5:b1:f3:22:3f:a3:c7:d9:2e:92:ca:6e:5d:02:7e:4d: 89:bc:91:f3:0c:f0:74:55:ef:ab:7b:9a:10:37:8c:be:ed:f2: 1f:f7:fc:16:22:d0:c5:29:c8:cb:9b:cd:ab:ee:41:b1:ce:5b: ff:5d:0d:11:64:9c:9c:40:a0:aa:a1:67:b4:99:af:a2:b9:3b: e1:04:10:e4:30:e7:ae:5c:c7:31:3f:b1:2d:6b:4a:c8:f4:49: 23:f8:fc:e9:55:3a:36:32:0f:82:6e:af:68:f9:0b:ac:d3:91: 39:34:e7:a8:55:7f:7e:04:d9:62:db:c9:32:ac:cb:81:86:60: 0c:9d:75:ef:01:f5:fe:29:01:ac:a4:5d:0b:e2:0c:47:4e:0c: a2:d0:43:3a:28:02:fe:0a:23:e5:34:ec:d5:de:a9:44:0c:08: 0f:5e:54:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4 Mzc3RjIyMkIwHhcNMjQwNTE5MDE1MzI1WhcNMjQwNTI2MDE1MzI1WjAYMRYwFAYD VQQDEw02NjQ5NWI5Ni1hNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4k4q7acaX8y6/GxFyws+iVSCpviT8w0rF+2GeMx1t5T37CoZtEldHYrFzMbq MLnFX/TJNQadmnCWT1SdzwuwMvsjRY92/nr5w0ZT3JdxfUpNap5qhB4UjqSJuiM4 bChREOl6+4wA+/aFb35nCk2vBMmrhCTrZVUuPwflD5lCWWKP5SEt0mednUlootun jFXCPLtOf3E/jzzfRQd3zOS2u1rtUZdPkMwprxCMR4yeGEULYdQNLwuKJkThGyag dHw71UkwN05R2G41viPcw/4sEXH+VPSHleEzwbtHP09OPfnz0lhZ1Q6R2yqd0+Re aIKGY9pvKh+3GQS0ax4KvNQAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmziSQ2 YPMcJwp+lYuvzU+0VU60MB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3 RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVBRS80NkQ0MjJGMDA3RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29q RG5uNDhvejkxdEtEZF9JaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdLtKCqXBdv0t1glp6u/OCY4NPX1NHWcPQvmNNsTuhFdJulOie9OX6 NJQkuzvaKg1dM4G7WoEvfdYuwiYktCzBn2EPNnekK385CymhXeU0urVkW+aeULF1 bWCmlPWx8yI/o8fZLpLKbl0Cfk2JvJHzDPB0Ve+re5oQN4y+7fIf9/wWItDFKcjL m82r7kGxzlv/XQ0RZJycQKCqoWe0ma+iuTvhBBDkMOeuXMcxP7Eta0rI9Ekj+Pzp VTo2Mg+Cbq9o+Qus05E5NOeoVX9+BNli28kyrMuBhmAMnXXvAfX+KQGspF0L4gxH Tgyi0EM6KAL+CiPlNOzV3qlEDAgPXlRZ -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org