$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: pDbUNyNhqTy72oGHkxnIcxNlGNIa4v76LwIqByJLh4c= Subject key identifier: 5A:A0:06:2E:68:BD:B5:67:C9:A3:79:34:36:0F:26:29:AD:42:93:23 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: E1 Signing time: Fri 31 May 2024 06:48:18 +0000 Manifest this update: Fri 31 May 2024 06:48:17 +0000 Manifest next update: Fri 07 Jun 2024 06:48:17 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: G2Sb8zRmfesTbCOceX4N/JlCdTs4ZEUDIfSVt/eJeUc=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: mfSqfjA2ppzRUnLj8Yldp3Gan4uXukuUfrVgrxeeLjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: May 31 06:48:17 2024 GMT Not After : Jun 7 06:48:17 2024 GMT Subject: CN=665972b1-a89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:dc:67:4e:da:94:6a:f0:06:6c:f1:02:69: 32:59:d0:6e:e2:17:34:35:dd:41:bf:64:17:5d:d0: ff:f6:56:df:50:bc:78:8d:e4:5f:b4:cf:3f:fb:2c: 8d:cf:f7:0b:4e:c2:6b:1b:21:26:77:8d:f6:86:b6: 5f:a3:77:e7:14:3f:81:d0:cf:a0:7f:c2:1b:d0:27: d9:fb:75:98:fd:44:1d:45:41:45:53:ce:9d:e4:4c: a4:fd:a3:5e:4b:c3:07:79:36:9a:c0:18:2d:01:a3: 36:d9:ea:62:c4:af:cd:38:93:53:a2:f6:39:cb:c3: d7:b6:39:21:3a:2a:87:20:b5:39:7c:22:bf:2e:3e: 93:e0:e7:c7:15:0d:31:95:cd:08:20:a0:6a:09:a3: 87:5d:3f:f8:ea:41:98:2a:10:d7:f5:99:7f:27:79: 3c:52:99:b4:e0:0f:48:ae:f1:04:df:30:c5:b6:20: c1:d4:7b:44:6b:44:1a:90:69:5f:c4:e9:37:87:52: 33:17:88:b1:65:e0:c6:8f:19:b4:ab:cd:a7:af:b6: 0c:ae:f7:da:77:06:0e:a1:fc:bc:f5:9b:3c:8b:47: b1:3d:44:db:ca:2e:55:03:1c:bc:70:5f:49:a0:c7: d3:35:8f:98:e0:5b:58:d7:4a:b1:ed:e4:71:ff:29: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:06:2E:68:BD:B5:67:C9:A3:79:34:36:0F:26:29:AD:42:93:23 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:52:77:55:83:a7:66:24:fd:99:08:4e:95:15:d8:3f:2f:20: 90:06:1f:01:8a:c7:a4:4b:9d:24:0f:62:51:6b:3f:35:1d:5e: d8:6c:dd:0a:fb:4d:cc:ee:fb:4e:2c:a9:8f:4b:ba:4c:6e:25: 42:c4:82:e6:a8:c0:11:1b:d3:ad:68:e9:59:39:22:4e:ad:37: bf:f3:94:ea:0b:61:8f:c3:bc:cc:f0:17:99:40:d7:ed:f0:a6: d3:8c:41:4c:93:c5:4b:5b:92:46:cf:3c:7f:49:dd:5e:a0:c4: 30:13:68:97:de:d4:b4:fe:03:67:8b:14:eb:29:ff:77:82:b8: 2d:47:84:91:a9:ff:bb:21:24:d2:ad:a9:7d:ff:19:d6:c5:7f: 93:54:22:33:f2:5f:d3:71:03:36:1d:86:61:2f:d7:be:f5:5e: 75:59:9f:d6:5d:35:bb:33:e9:cd:53:d2:1a:33:4e:fb:71:b1: 6a:12:51:3a:66:2c:ae:77:20:ab:9b:bf:6e:c4:5a:1f:18:78: e8:dc:53:53:72:42:18:dd:c5:d2:a2:c0:fc:9b:e5:66:7a:47: a4:4d:21:13:3b:91:5b:fa:b8:e8:ee:8b:30:24:5f:73:83:9e: 52:44:64:db:52:e7:f1:ed:e4:5c:b2:93:6b:98:64:9d:30:a5: d0:6e:60:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjQwNTMxMDY0ODE3WhcNMjQwNjA3MDY0ODE3WjAYMRYwFAYD VQQDEw02NjU5NzJiMS1hODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztHcZ07alGrwBmzxAmkyWdBu4hc0Nd1Bv2QXXdD/9lbfULx4jeRftM8/+yyN z/cLTsJrGyEmd432hrZfo3fnFD+B0M+gf8Ib0CfZ+3WY/UQdRUFFU86d5Eyk/aNe S8MHeTaawBgtAaM22epixK/NOJNTovY5y8PXtjkhOiqHILU5fCK/Lj6T4OfHFQ0x lc0IIKBqCaOHXT/46kGYKhDX9Zl/J3k8Upm04A9IrvEE3zDFtiDB1HtEa0QakGlf xOk3h1IzF4ixZeDGjxm0q82nr7YMrvfadwYOofy89Zs8i0exPUTbyi5VAxy8cF9J oMfTNY+Y4FtY10qx7eRx/ylVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqgBi5o vbVnyaN5NDYPJimtQpMjMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/UndVg6dmJP2ZCE6VFdg/LyCQBh8BisekS50kD2JRaz81HV7YbN0K +03M7vtOLKmPS7pMbiVCxILmqMARG9OtaOlZOSJOrTe/85TqC2GPw7zM8BeZQNft 8KbTjEFMk8VLW5JGzzx/Sd1eoMQwE2iX3tS0/gNnixTrKf93grgtR4SRqf+7ISTS ral9/xnWxX+TVCIz8l/TcQM2HYZhL9e+9V51WZ/WXTW7M+nNU9IaM077cbFqElE6 ZiyudyCrm79uxFofGHjo3FNTckIY3cXSosD8m+VmekekTSETO5Fb+rjo7oswJF9z g55SRGTbUufx7eRcspNrmGSdMKXQbmCo -----END CERTIFICATE-----Generated at Fri May 31 10:01:45 2024 by rpki-client on console-ams.rpki-client.org