$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: TGsoqOWj24nuMnALkO6clFusRb+0VjooBvV8eXERZz8= Subject key identifier: 61:25:4C:84:DB:FD:F8:4A:BC:FD:49:E4:BA:27:92:21:6C:EF:BA:BF Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0B90 Signing time: Sat 18 May 2024 19:17:40 +0000 Manifest this update: Sat 18 May 2024 19:17:40 +0000 Manifest next update: Sat 25 May 2024 19:17:40 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: PFptPSSppY0dCzEydWwnu13nTTq1ElLUbZs1fYX+rvc=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: v9azMDMl/yRYmoLHg8R81AQm2XRIdcogmkiu0bE+WLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: May 18 19:17:40 2024 GMT Not After : May 25 19:17:40 2024 GMT Subject: CN=6648fed4-e184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:59:f0:93:87:ce:a6:f7:52:d7:07:b8:20: 12:e0:39:3a:bb:86:82:f6:65:64:c7:84:76:c0:4e: 5b:ae:ec:0e:87:25:15:bb:10:20:f3:7c:ba:63:d5: ba:6c:7f:46:4d:e9:ab:5d:5f:ad:61:27:f3:d4:c6: 0a:c6:ff:32:64:e0:d1:94:c2:af:3f:9a:c7:ea:94: c3:87:01:28:b0:30:fc:41:88:44:13:3c:fc:fd:65: 8c:83:b3:cf:7f:b3:1b:0f:59:b8:96:4e:f9:df:85: c3:ad:61:a2:2e:7c:5f:74:64:2f:df:05:20:ec:09: 2f:00:61:d3:fb:0e:50:18:1d:d8:b7:9e:44:d5:9b: 43:6c:2b:2b:9f:5c:15:7e:c8:0e:8b:2e:2e:bd:ad: 91:bd:15:af:3f:52:8c:6a:73:e9:73:4f:75:63:78: 79:5c:11:da:d4:65:86:e2:3d:5c:c8:c1:fe:dd:5b: 1b:07:91:c7:74:5a:5d:5c:49:f9:d9:9c:21:c9:b6: 41:c4:9e:61:8a:cc:23:e1:a0:2e:7a:93:2c:e0:e2: 99:da:fd:53:d8:02:e1:d0:dc:ea:b6:85:98:af:51: 02:a3:da:47:04:a7:7e:56:a5:66:ec:0a:be:00:56: df:f9:c9:68:73:76:d0:a5:d7:ad:fd:5c:d4:58:cd: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:25:4C:84:DB:FD:F8:4A:BC:FD:49:E4:BA:27:92:21:6C:EF:BA:BF X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d3:a3:98:45:e1:86:66:bf:1b:89:e5:22:c2:44:19:5a:0d: 66:15:63:25:f6:d9:d4:26:ea:3f:80:f8:f5:0a:7b:21:8e:ce: 8c:14:91:e6:9a:bd:cd:62:0e:f9:05:1f:57:a9:e1:12:73:2b: a6:69:e8:27:2b:e8:db:c2:5b:d3:b8:39:92:ae:bc:41:3c:8c: 0f:62:86:24:c5:8e:5a:03:cc:54:57:14:8d:2d:6a:57:39:ef: 9d:1e:d3:00:53:29:21:6a:74:12:28:a5:d6:f9:48:4b:3a:b0: 96:fa:43:a6:4c:8d:bd:72:ff:dd:94:31:75:06:96:99:67:88: 0e:19:65:79:09:03:60:34:b0:05:ec:06:1c:62:7c:a4:0f:b2: 1f:5e:4b:1c:b5:3d:f7:00:18:37:3a:50:03:ad:fc:66:c9:f7: 27:c6:2f:a2:47:2c:a4:02:4e:64:20:51:5b:45:92:78:00:ab: f7:02:db:cb:33:a0:46:7c:44:69:00:3a:a5:10:85:f5:db:19: 3f:c5:b9:e8:42:51:2d:65:41:8f:5e:3b:27:5d:fa:17:f0:7f: 3a:0c:a8:47:de:ea:78:d5:4a:d4:03:92:26:aa:8f:8f:7c:c2: 82:f6:4b:5a:91:a5:5a:8f:3c:15:08:b9:fc:e2:e5:23:35:1d: 0d:f6:df:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjQwNTE4MTkxNzQwWhcNMjQwNTI1MTkxNzQwWjAYMRYwFAYD VQQDEw02NjQ4ZmVkNC1lMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RRZ8JOHzqb3UtcHuCAS4Dk6u4aC9mVkx4R2wE5bruwOhyUVuxAg83y6Y9W6 bH9GTemrXV+tYSfz1MYKxv8yZODRlMKvP5rH6pTDhwEosDD8QYhEEzz8/WWMg7PP f7MbD1m4lk7534XDrWGiLnxfdGQv3wUg7AkvAGHT+w5QGB3Yt55E1ZtDbCsrn1wV fsgOiy4uva2RvRWvP1KManPpc091Y3h5XBHa1GWG4j1cyMH+3VsbB5HHdFpdXEn5 2ZwhybZBxJ5hiswj4aAuepMs4OKZ2v1T2ALh0NzqtoWYr1ECo9pHBKd+VqVm7Aq+ AFbf+cloc3bQpdet/VzUWM1TGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGElTITb /fhKvP1J5LonkiFs77q/MB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb06OYReGGZr8bieUiwkQZWg1mFWMl9tnUJuo/gPj1Cnshjs6MFJHm mr3NYg75BR9XqeEScyumaegnK+jbwlvTuDmSrrxBPIwPYoYkxY5aA8xUVxSNLWpX Oe+dHtMAUykhanQSKKXW+UhLOrCW+kOmTI29cv/dlDF1BpaZZ4gOGWV5CQNgNLAF 7AYcYnykD7IfXksctT33ABg3OlADrfxmyfcnxi+iRyykAk5kIFFbRZJ4AKv3AtvL M6BGfERpADqlEIX12xk/xbnoQlEtZUGPXjsnXfoX8H86DKhH3up41UrUA5Imqo+P fMKC9ktakaVajzwVCLn84uUjNR0N9t97 -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org