$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: S/70jKgSSF5shIW0uVe3cDB6/kOFVHxzQGm5JXaK+6s= Subject key identifier: 29:65:40:F4:CF:3F:98:26:9E:B0:A3:E3:2B:26:D2:C4:6F:18:2A:16 Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 54 Signing time: Sat 01 Jun 2024 09:21:13 +0000 Manifest this update: Sat 01 Jun 2024 09:21:12 +0000 Manifest next update: Sat 08 Jun 2024 09:21:12 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: S6boz/waplnWN8TAFn/3Pvct5OY/TWkFyLhwhA1TVG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Jun 1 09:21:12 2024 GMT Not After : Jun 8 09:21:12 2024 GMT Subject: CN=665ae808-91a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:81:ec:10:89:04:a2:d8:28:ce:d0:7d:fa: c8:24:ea:bf:87:3d:7b:1d:7b:93:40:a5:ab:d3:61: 0d:88:b8:aa:e5:d4:b8:75:aa:13:70:2b:57:34:b2: ed:e2:81:ed:6e:b6:57:25:a6:00:4a:a0:11:cd:33: 01:80:36:10:d6:49:cb:83:84:13:2d:d1:f5:90:e6: b6:f5:32:25:7b:5a:3a:d6:db:94:79:c7:92:82:a0: 0d:94:d7:88:5b:31:2f:71:bb:f3:96:93:53:c1:cf: 7a:f9:cc:92:9c:ab:78:cc:09:5e:e7:81:41:7f:b0: ec:6a:f2:43:f4:ca:b8:4f:17:11:6f:2d:a0:a1:11: a7:8c:5c:a5:f1:ed:b3:7c:f4:19:fd:dc:62:eb:ee: c0:ef:36:a7:62:e8:3a:06:1f:93:ef:02:c7:95:06: b5:9b:74:d8:df:c4:49:86:41:62:2e:f9:04:af:81: de:f0:e7:e6:bc:e2:42:bc:d9:5f:c6:11:c2:63:9b: f3:23:bd:0b:c8:01:71:fc:df:cb:1e:79:1a:b3:06: 01:7d:f4:6c:30:f4:13:8b:1c:e7:41:2a:af:b8:47: 8a:e3:6d:5f:54:e8:f8:06:7f:e1:15:4a:9e:2c:1a: af:2d:a4:d4:d2:27:32:24:06:08:29:ac:7f:38:41: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:40:F4:CF:3F:98:26:9E:B0:A3:E3:2B:26:D2:C4:6F:18:2A:16 X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:58:3c:fa:cd:a0:9c:47:94:ce:15:dd:05:96:6d:be:46:4f: a3:60:ec:cf:fe:09:eb:19:6e:35:66:9a:38:82:54:54:9b:9b: e4:2c:dc:2b:c2:73:b8:99:71:35:12:f2:96:1b:13:33:eb:ff: ec:c8:ca:f0:d7:1f:b2:d5:b8:4f:3b:77:bf:95:ec:e9:75:4c: d5:f7:d7:74:e7:23:1d:ac:12:88:9f:ee:bc:9e:7e:f0:98:42: 7e:57:1b:10:11:26:e5:bc:a1:09:a5:ff:63:5e:44:aa:02:f6: e8:a3:c1:b8:cc:88:6b:7b:9a:b5:ec:42:8e:83:6b:de:2a:61: dd:3f:69:f3:bc:a2:94:c0:92:ed:b1:e1:20:20:85:b6:57:55: c4:e8:0c:4b:02:7a:44:d2:ff:b1:14:27:4c:e6:97:19:ac:93: 50:c3:6f:43:b7:f7:d2:13:98:df:fd:c5:da:4d:59:f7:53:4a: 3c:af:54:a8:68:e2:65:c9:3e:66:98:09:19:d2:e7:66:52:2e: bc:dc:c4:2f:a1:ca:d1:57:13:99:b4:f2:5d:a7:15:eb:f4:2b: a5:e7:52:7e:f2:e2:47:c9:0c:d5:5a:4e:b5:01:fa:d0:b0:bc: cd:16:e8:89:e0:8f:35:a4:8f:bc:2a:93:1e:7d:1e:9e:47:17: 12:87:f0:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUI1QTExMC8GA1UEBRMoQjFENTc2QzBDNzhFNUNGNThENDgzN0EyNkM5MjYzQzYz RjEzMTVERDAeFw0yNDA2MDEwOTIxMTJaFw0yNDA2MDgwOTIxMTJaMBgxFjAUBgNV BAMTDTY2NWFlODA4LTkxYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUU4HsEIkEotgoztB9+sgk6r+HPXsde5NApavTYQ2IuKrl1Lh1qhNwK1c0su3i ge1utlclpgBKoBHNMwGANhDWScuDhBMt0fWQ5rb1MiV7WjrW25R5x5KCoA2U14hb MS9xu/OWk1PBz3r5zJKcq3jMCV7ngUF/sOxq8kP0yrhPFxFvLaChEaeMXKXx7bN8 9Bn93GLr7sDvNqdi6DoGH5PvAseVBrWbdNjfxEmGQWIu+QSvgd7w5+a84kK82V/G EcJjm/MjvQvIAXH838seeRqzBgF99Gww9BOLHOdBKq+4R4rjbV9U6PgGf+EVSp4s Gq8tpNTSJzIkBggprH84QUbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKWVA9M8/ mCaesKPjKybSxG8YKhYwHwYDVR0jBBgwFoAUsdV2wMeOXPWNSDeibJJjxj8TFd0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQjVBLzdDMDc1RTE4QTNC MzExRUVBRDY2MjkxOUM0RjlBRTAyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZk MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2RWMndNZU9YUFdOU0RlaWJKSmp4ajhURmQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QjVBLzdDMDc1RTE4QTNCMzExRUVBRDY2MjkxOUM0RjlBRTAyL3NkVjJ3TWVPWFBX TlNEZWliSkpqeGo4VEZkMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIxYPPrNoJxHlM4V3QWWbb5GT6Ng7M/+CesZbjVmmjiCVFSbm+Qs3CvC c7iZcTUS8pYbEzPr/+zIyvDXH7LVuE87d7+V7Ol1TNX313TnIx2sEoif7ryefvCY Qn5XGxARJuW8oQml/2NeRKoC9uijwbjMiGt7mrXsQo6Da94qYd0/afO8opTAku2x 4SAghbZXVcToDEsCekTS/7EUJ0zmlxmsk1DDb0O399ITmN/9xdpNWfdTSjyvVKho 4mXJPmaYCRnS52ZSLrzcxC+hytFXE5m08l2nFev0K6XnUn7y4kfJDNVaTrUB+tCw vM0W6IngjzWkj7wqkx59Hp5HFxKH8AY= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:13 2024 by rpki-client on console-ams.rpki-client.org