$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: HNOIlWab0TmFTgPNeLpThOq+NAZwgp6OKXrA/Eur4To= Subject key identifier: 53:B5:23:E2:6D:2F:67:D0:60:49:B4:7A:2B:CA:52:AF:40:C0:54:2A Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 70 Signing time: Sun 19 May 2024 07:43:19 +0000 Manifest this update: Sun 19 May 2024 07:43:18 +0000 Manifest next update: Sun 26 May 2024 07:43:18 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: P+0kE+h1Q9x12fm6ml00Fzpbein7cYXwFJ8Cl45wOnw=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: l+h6QC1zh6GYWuyjr3RC0+yRq6gXwDXuYFGWbJV0SOY=) 3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: /chNCNiWGN9zH7X0ZvfAl9V/fysm8g1d8cdyiR1utf0=) 4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: mO8mxDIIKwzeck92OjSIJU9brMW8s5g1DTkLL3rzFmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: May 19 07:43:18 2024 GMT Not After : May 26 07:43:18 2024 GMT Subject: CN=6649ad97-169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:e3:c2:ff:c8:e3:77:cf:7c:d5:45:18:44: 17:d4:e3:63:b8:0c:2e:fa:aa:74:94:aa:eb:7f:10: 54:65:17:e1:36:0f:98:2b:1b:12:20:16:14:73:91: aa:7b:80:cd:53:e9:cc:19:f2:95:3a:91:72:60:29: 78:47:15:7c:7d:c7:4f:72:5b:36:ed:a8:84:a0:ef: 88:77:b8:96:06:16:0e:21:d0:ad:76:b2:c7:8f:01: 5d:fa:6a:87:23:c0:4f:5f:c0:f2:22:8e:b6:a1:0e: be:a9:c0:c4:0b:ab:27:de:e4:eb:51:31:a3:f6:86: d3:87:7f:fa:c8:c2:69:fe:c0:3b:af:89:c4:91:16: fe:ad:1c:8b:4e:09:55:71:a8:ed:60:25:42:38:a5: b1:51:c8:d3:22:89:8d:18:0b:cc:9e:5f:30:b3:25: 4c:7b:d8:be:91:92:db:79:1e:dc:4e:b0:b5:2a:01: 54:63:14:e1:f7:b1:f1:24:43:a0:a2:14:7c:b6:8f: 46:ad:47:20:4e:bd:62:a9:22:50:c3:1a:a3:62:1b: e2:33:b6:63:7a:d4:0d:82:1a:7c:77:e6:f7:ac:94: 6d:3f:3a:8e:19:14:2d:ec:bf:7a:e2:b3:48:5b:8d: 52:90:47:83:a4:30:e6:18:cf:92:52:89:b5:0b:79: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:23:E2:6D:2F:67:D0:60:49:B4:7A:2B:CA:52:AF:40:C0:54:2A X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ff:ad:c7:b3:df:66:2a:0e:1e:44:d7:f4:43:27:c5:99:39: 6c:c2:4e:de:15:ca:f6:30:f8:d1:cf:9d:22:66:14:77:dc:1c: 92:71:cd:1a:64:80:90:24:ab:54:3d:0f:53:da:49:34:78:7b: fa:bb:ec:7e:82:5a:13:1d:63:a0:9e:f3:60:5e:da:39:85:fb: 7d:c9:18:ad:46:e7:7f:96:cf:f9:cd:0c:d5:0f:7f:7f:99:f7: 2d:af:49:b6:92:54:b1:3c:db:8a:fd:5c:f1:5a:ba:1e:6a:7a: c9:dd:17:e1:c8:3f:1d:74:5a:d3:f4:6d:24:85:cd:5d:ab:38: be:a8:3b:56:54:18:d7:33:f6:26:f9:61:c6:92:6e:33:98:04: e2:df:fa:db:20:cd:ab:ff:ca:5f:5a:50:71:a0:06:cd:d0:06: 1b:d1:95:81:cd:de:94:de:73:33:68:07:62:c2:df:55:1e:c5: af:62:cc:9f:8d:30:38:9d:e9:70:0f:ac:4a:55:a1:ea:78:42: 98:5e:06:12:02:87:df:e4:2c:0d:31:dc:30:57:c1:f1:08:e6: c0:1b:3b:76:02:cf:b7:8e:f0:12:b0:a7:56:98:f4:bd:71:a2: 65:e3:b9:a9:12:7c:af:11:f7:2e:ce:af:1e:56:d0:d8:a6:cc: 40:12:13:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODYyMDExMC8GA1UEBRMoQTQwOEFDOTRBMEQzMzZGNDczMjQ5MDVBOTE4QUYyNDkw MkYwREU4QjAeFw0yNDA1MTkwNzQzMThaFw0yNDA1MjYwNzQzMThaMBgxFjAUBgNV BAMTDTY2NDlhZDk3LTE2OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+eOPC/8jjd8981UUYRBfU42O4DC76qnSUqut/EFRlF+E2D5grGxIgFhRzkap7 gM1T6cwZ8pU6kXJgKXhHFXx9x09yWzbtqISg74h3uJYGFg4h0K12ssePAV36aocj wE9fwPIijrahDr6pwMQLqyfe5OtRMaP2htOHf/rIwmn+wDuvicSRFv6tHItOCVVx qO1gJUI4pbFRyNMiiY0YC8yeXzCzJUx72L6Rktt5HtxOsLUqAVRjFOH3sfEkQ6Ci FHy2j0atRyBOvWKpIlDDGqNiG+IztmN61A2CGnx35veslG0/Oo4ZFC3sv3ris0hb jVKQR4OkMOYYz5JSibULeQVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU7Uj4m0v Z9BgSbR6K8pSr0DAVCowHwYDVR0jBBgwFoAUpAislKDTNvRzJJBakYrySQLw3osw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NjIwLzBFOTE5OTM0ODg0 MjExRUVBN0Q4QzgxNEM0RjlBRTAyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEFpc2xLRFROdlJ6SkpCYWtZcnlTUUx3M29zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NjIwLzBFOTE5OTM0ODg0MjExRUVBN0Q4QzgxNEM0RjlBRTAyL3BBaXNsS0RUTnZS ekpKQmFrWXJ5U1FMdzNvcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACr/rcez32YqDh5E1/RDJ8WZOWzCTt4VyvYw+NHPnSJmFHfcHJJxzRpk gJAkq1Q9D1PaSTR4e/q77H6CWhMdY6Ce82Be2jmF+33JGK1G53+Wz/nNDNUPf3+Z 9y2vSbaSVLE824r9XPFauh5qesndF+HIPx10WtP0bSSFzV2rOL6oO1ZUGNcz9ib5 YcaSbjOYBOLf+tsgzav/yl9aUHGgBs3QBhvRlYHN3pTeczNoB2LC31Uexa9izJ+N MDid6XAPrEpVoep4QpheBhICh9/kLA0x3DBXwfEI5sAbO3YCz7eO8BKwp1aY9L1x omXjuakSfK8R9y7Orx5W0NimzEASE3Q= -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org