$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: mJ1XBl9zg53dJ3o9eQlmdz0bIa4p16rQIMOo4xTTuNk= Subject key identifier: D6:77:C8:BD:D8:6F:CD:C1:D9:B6:B4:F5:F0:C8:29:0B:40:13:54:82 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 01B1 Signing time: Sun 19 May 2024 04:33:17 +0000 Manifest this update: Sun 19 May 2024 04:33:16 +0000 Manifest next update: Sun 26 May 2024 04:33:16 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: zZSOf5+QZDUw9DXsuw6MYW4Mv1J7XOW2+RQqdeOCQHU=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 9NKplmN+iiuv6c+kMy1FA50u91JuPs1rSgUrzKrPqRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: May 19 04:33:16 2024 GMT Not After : May 26 04:33:16 2024 GMT Subject: CN=6649810d-9805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:6c:8f:06:b3:2c:2a:61:18:25:9c:a2:1b: bb:9e:19:64:51:da:d2:54:89:eb:33:b8:92:c3:08: 35:e4:df:3f:87:25:37:5e:3f:a8:3c:6c:e4:72:1c: f1:9e:61:fa:73:5e:a7:a9:1f:71:0e:3f:6e:b6:a4: 14:42:f0:36:4c:1f:41:b6:83:57:d1:27:41:e4:01: 24:75:52:9d:41:4d:f7:4e:3f:61:21:02:be:f2:76: f6:4c:20:ad:32:d9:f1:cd:c4:2d:c6:5e:e0:1c:fd: 8c:1e:25:01:d4:1d:4c:d7:35:48:f2:56:c8:4f:4a: 9f:6e:70:db:c8:86:0a:1a:03:e9:5d:31:a5:9f:45: 8f:4e:07:01:9e:04:f3:3f:6d:c5:22:fa:ba:a1:2b: 05:fb:f4:73:63:b8:6e:ce:f7:2e:d9:a6:f3:e0:45: 5b:66:10:d1:4d:7a:f1:f7:cb:bb:cb:51:13:40:18: 95:e0:64:e3:6b:14:a4:09:81:f9:10:a5:38:0d:d1: 66:f8:b8:d5:e3:27:89:2c:00:7f:98:9c:4c:6b:c1: ce:fa:e4:19:ec:01:75:14:8e:d9:30:d4:50:a6:c4: f3:f7:ff:18:40:d0:3f:79:c0:bd:9a:a3:3b:46:ac: 4a:21:be:1e:f5:26:26:3e:77:b6:20:9b:a1:2e:db: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:C8:BD:D8:6F:CD:C1:D9:B6:B4:F5:F0:C8:29:0B:40:13:54:82 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:1c:88:b9:fc:ea:11:10:be:f2:60:cc:16:e3:45:11:58: f5:a0:9c:3e:93:77:35:f8:98:b4:ce:25:0d:02:6e:bb:2c:04: 33:54:39:4f:a2:fd:01:ee:ca:99:e4:af:10:50:de:c7:16:ba: d2:f7:d8:17:90:99:b8:14:5a:02:d4:59:8e:20:05:14:8f:0d: 83:ff:2c:cd:93:6d:70:ea:57:3d:84:1e:6e:07:9f:69:4a:c5: b7:bc:5d:ff:04:70:8a:c1:11:09:b8:dd:07:15:b2:f9:7e:99: 17:32:53:46:7c:e5:91:3b:7a:7f:56:98:71:54:d9:96:d7:b8: e1:87:43:4d:1f:13:b8:73:1b:59:e9:5d:5b:5e:24:50:17:21: 85:88:17:ef:9e:47:0d:61:d1:92:f3:0b:8a:29:f1:35:46:5c: 06:47:45:fc:5c:61:84:49:c5:03:c2:57:76:fa:eb:5e:5d:00: f8:c0:6a:1b:94:59:5a:ed:aa:3f:a2:5f:4a:3c:c5:06:1c:45: 4f:e4:1e:20:cc:73:45:cb:f4:9b:ed:3b:b7:bf:dd:b3:04:fe: b5:95:e3:05:83:71:d6:82:d6:3e:55:c1:52:a0:d9:2e:79:18: 9e:36:c2:f2:6f:f4:83:df:f4:2c:cc:a9:7e:b8:5c:36:6f:db: 34:7d:1e:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjQwNTE5MDQzMzE2WhcNMjQwNTI2MDQzMzE2WjAYMRYwFAYD VQQDEw02NjQ5ODEwZC05ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuJsjwazLCphGCWcohu7nhlkUdrSVInrM7iSwwg15N8/hyU3Xj+oPGzkchzx nmH6c16nqR9xDj9utqQUQvA2TB9BtoNX0SdB5AEkdVKdQU33Tj9hIQK+8nb2TCCt MtnxzcQtxl7gHP2MHiUB1B1M1zVI8lbIT0qfbnDbyIYKGgPpXTGln0WPTgcBngTz P23FIvq6oSsF+/RzY7huzvcu2abz4EVbZhDRTXrx98u7y1ETQBiV4GTjaxSkCYH5 EKU4DdFm+LjV4yeJLAB/mJxMa8HO+uQZ7AF1FI7ZMNRQpsTz9/8YQNA/ecC9mqM7 RqxKIb4e9SYmPne2IJuhLtvcKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ3yL3Y b83B2ba09fDIKQtAE1SCMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJBByIufzqERC+8mDMFuNFEVj1oJw+k3c1+Ji0ziUNAm67LAQzVDlP ov0B7sqZ5K8QUN7HFrrS99gXkJm4FFoC1FmOIAUUjw2D/yzNk21w6lc9hB5uB59p SsW3vF3/BHCKwREJuN0HFbL5fpkXMlNGfOWRO3p/VphxVNmW17jhh0NNHxO4cxtZ 6V1bXiRQFyGFiBfvnkcNYdGS8wuKKfE1RlwGR0X8XGGEScUDwld2+uteXQD4wGob lFla7ao/ol9KPMUGHEVP5B4gzHNFy/Sb7Tu3v92zBP61leMFg3HWgtY+VcFSoNku eRieNsLyb/SD3/QszKl+uFw2b9s0fR5s -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org