$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: OObhV/FcInyxbtBn11i0e+zsOxfj2rL7d9py185XsWk= Subject key identifier: 27:74:DA:5B:2A:10:C2:57:5D:BE:81:3B:49:A1:99:A8:FD:06:FE:1C Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 05AA Signing time: Sun 19 May 2024 01:05:56 +0000 Manifest this update: Sun 19 May 2024 01:05:55 +0000 Manifest next update: Sun 26 May 2024 01:05:55 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: MeJ9SfPbCj+xWhu/fciQwV22mDXz/f7HN19oxRp51vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: May 19 01:05:55 2024 GMT Not After : May 26 01:05:55 2024 GMT Subject: CN=66495074-db36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:04:14:a8:86:2d:2d:98:33:0e:43:1b:be: 98:04:15:9e:13:f0:9d:97:ce:85:2e:db:80:c5:24: 99:23:30:6b:a1:83:fc:ed:06:c4:b3:e2:95:7e:fd: 4d:39:25:a8:0f:5f:c2:17:1f:c7:f0:35:b0:a3:16: f9:4f:5e:47:bb:72:03:38:bf:0b:21:85:40:02:e3: 01:2d:ca:86:be:2f:83:75:05:d4:95:de:68:d4:bb: a8:96:56:e9:49:f4:a7:0a:d1:29:da:3e:61:22:b7: 7e:5c:22:3b:a5:70:48:c0:73:dc:db:b4:34:67:34: 28:7e:9d:07:99:6d:d5:ad:59:71:b5:6a:ff:4e:34: d0:1d:ff:6f:d2:31:91:fd:25:ae:17:8c:19:c3:c2: f5:d0:41:1e:cd:6e:35:63:ab:a8:07:f6:d4:38:dd: cd:d8:19:2d:63:8d:69:69:40:e1:4f:ee:69:35:9f: 3e:46:36:f2:8f:84:f8:8a:91:83:df:90:56:72:36: 3e:da:ff:4e:1f:aa:42:d0:44:a7:3d:4c:e6:a2:9c: cb:a7:ff:64:9b:22:f5:c0:26:d7:cc:90:c8:c6:71: 45:67:e3:df:59:9c:33:97:27:91:10:62:ae:f5:32: 81:23:70:61:14:07:46:8f:8a:5b:b4:01:12:bc:fa: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:74:DA:5B:2A:10:C2:57:5D:BE:81:3B:49:A1:99:A8:FD:06:FE:1C X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ec:c7:cf:07:90:26:f8:05:2c:89:31:88:75:f5:2f:33:40: d3:0f:02:c4:f3:bf:a4:40:84:d9:6d:6d:ce:11:70:c1:c3:b8: f4:fe:02:ae:63:4d:ed:e7:e3:a9:64:25:11:26:7d:e1:21:48: f8:ae:7c:76:24:14:36:2d:fb:89:07:bd:70:dc:35:68:7a:e6: 34:d2:d0:19:ec:00:a6:71:f7:ef:04:53:f6:c3:e7:8f:9e:10: ee:d3:75:1e:2d:3e:32:15:31:7e:4d:29:9e:ee:ff:17:4d:b3: a1:ca:5c:18:86:53:a1:e3:eb:b3:4c:dc:a2:2f:9b:7a:35:a5: 23:f7:56:bc:19:a4:30:a6:6a:c7:3f:e1:61:2f:07:93:9d:ab: 58:d5:58:4b:23:f0:05:a7:a2:76:0b:e0:3f:84:d3:b9:36:26: 68:f4:18:ed:b8:40:4e:6a:47:88:88:a9:32:2d:eb:61:b5:35: 4b:87:13:df:9c:5e:e0:e6:56:a2:ed:54:9d:47:b0:29:72:4f: c7:99:68:e1:6c:18:3d:3d:89:0f:7a:1a:ba:90:60:36:bc:67: 03:cc:d7:c3:a2:c7:9d:3d:46:11:4c:ab:2b:d5:f0:cb:a3:1c: 05:e8:17:36:9c:fb:1d:13:49:5e:63:bb:4e:e3:da:8c:ba:56: 5b:89:e7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjQwNTE5MDEwNTU1WhcNMjQwNTI2MDEwNTU1WjAYMRYwFAYD VQQDEw02NjQ5NTA3NC1kYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYsEFKiGLS2YMw5DG76YBBWeE/Cdl86FLtuAxSSZIzBroYP87QbEs+KVfv1N OSWoD1/CFx/H8DWwoxb5T15Hu3IDOL8LIYVAAuMBLcqGvi+DdQXUld5o1Luollbp SfSnCtEp2j5hIrd+XCI7pXBIwHPc27Q0ZzQofp0HmW3VrVlxtWr/TjTQHf9v0jGR /SWuF4wZw8L10EEezW41Y6uoB/bUON3N2BktY41paUDhT+5pNZ8+Rjbyj4T4ipGD 35BWcjY+2v9OH6pC0ESnPUzmopzLp/9kmyL1wCbXzJDIxnFFZ+PfWZwzlyeREGKu 9TKBI3BhFAdGj4pbtAESvPoVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd02lsq EMJXXb6BO0mhmaj9Bv4cMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67MfPB5Am+AUsiTGIdfUvM0DTDwLE87+kQITZbW3OEXDBw7j0/gKu Y03t5+OpZCURJn3hIUj4rnx2JBQ2LfuJB71w3DVoeuY00tAZ7ACmcffvBFP2w+eP nhDu03UeLT4yFTF+TSme7v8XTbOhylwYhlOh4+uzTNyiL5t6NaUj91a8GaQwpmrH P+FhLweTnatY1VhLI/AFp6J2C+A/hNO5NiZo9BjtuEBOakeIiKkyLethtTVLhxPf nF7g5lai7VSdR7Apck/HmWjhbBg9PYkPehq6kGA2vGcDzNfDosedPUYRTKsr1fDL oxwF6Bc2nPsdE0leY7tO49qMulZbieee -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org