$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft File: 5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json) Hash identifier: 0FHBo3DxQsdFBw3FH4t2UV9aYhvbsZaFW/W2ZYtS8V8= Subject key identifier: 1E:19:9D:70:10:AC:15:A9:74:1C:66:04:0D:06:F7:4B:E0:D6:30:02 Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 Certificate issuer: /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 14:44:39 +0000 Manifest this update: Sat 18 May 2024 14:44:38 +0000 Manifest next update: Sat 25 May 2024 14:44:38 +0000 Files and hashes: 1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: hR6LJiwc7V4ocDIvwMMURAVzYj0d4mJR2q4Qh2bHs7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Validity Not Before: May 18 14:44:38 2024 GMT Not After : May 25 14:44:38 2024 GMT Subject: CN=6648bed6-2a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:64:e6:ed:5d:51:41:10:72:e7:3a:de:93: a6:49:90:9e:ab:cc:05:6a:31:74:91:f7:11:e6:94: 2d:80:b1:19:75:3e:f1:cc:0a:33:91:05:9f:ad:a0: 45:d2:7c:07:d3:99:9e:2a:a8:76:d4:52:e7:ac:19: da:53:15:a2:b1:17:be:80:09:4e:4a:af:da:cf:a8: 34:a5:3f:70:5f:04:39:b4:1c:c0:2f:0c:ec:27:74: 97:87:26:9f:6c:1f:42:2c:40:55:4d:f2:1b:81:d0: 0b:02:96:c3:d8:c4:f2:42:80:bb:8b:61:b8:29:ed: 9f:33:83:46:87:92:a6:f9:bd:e0:aa:00:59:8a:b6: 38:b8:e2:68:17:4c:07:f9:a6:41:95:2f:ed:55:7b: 35:9a:28:08:06:c7:02:c1:98:ab:7b:53:08:00:a6: d0:45:b2:76:83:b1:50:7c:59:91:c3:24:36:81:98: e6:ee:f0:3c:0f:8b:92:81:9b:78:9c:90:00:a6:f1: f5:5a:dd:1f:9c:1e:d7:61:16:6d:57:fe:da:e1:6c: f0:28:05:a1:39:8f:c0:45:8a:81:bd:5f:6f:f1:e0: 76:fd:b4:44:cd:10:2e:49:a5:0c:37:ca:f5:c8:0a: ab:4d:8d:81:a2:7c:e3:5b:d4:2a:ba:c1:dd:65:2d: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:9D:70:10:AC:15:A9:74:1C:66:04:0D:06:F7:4B:E0:D6:30:02 X509v3 Authority Key Identifier: keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:05:29:74:ad:5c:78:11:2d:e2:16:be:e1:54:7f:f0:83:0c: 5a:13:82:5e:2c:c7:02:f3:23:6f:8b:e9:aa:95:b6:02:fc:cf: 6c:20:10:89:48:31:22:ca:d3:f9:34:6d:a7:8d:ec:92:0e:ca: 55:05:9e:8c:73:a4:d1:61:6a:93:24:47:0b:89:25:b4:e9:fe: da:10:ab:a9:b4:c9:91:66:af:8c:65:85:8c:69:77:36:a1:88: 96:46:64:f3:e3:6d:6b:25:89:7d:40:45:ce:89:36:64:6c:e1: 85:f2:b3:98:03:0e:68:75:10:28:c7:36:08:8f:a2:5e:c8:84: 73:8a:6e:84:b3:3a:91:5e:1e:60:c1:51:08:b1:ae:05:84:e9: 13:a8:ae:c9:79:ac:ef:56:e3:86:01:5b:3f:14:5d:d0:fc:ec: f1:40:95:ff:d1:42:85:50:a2:5e:8c:cc:dc:6e:b4:81:f6:eb: ce:9c:68:40:bf:05:cc:49:c5:f3:71:1e:eb:1b:9d:6e:0b:02: ff:83:e4:5c:5e:15:38:03:5d:3a:45:ab:a0:97:f1:6a:6c:4d: cc:4b:cf:0d:0f:fe:12:4b:9b:5e:6b:ce:21:76:50:e9:91:3d: f5:26:b4:2d:af:29:58:ae:52:db:b6:4a:78:91:44:30:9f:57: 83:a6:b0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBQUYxMTAvBgNVBAUTKEU0Q0E2NUI4RDBDN0IxNjVEOUMyMkE3QUJERjgxQUE2 NkZBQUQ0RDEwHhcNMjQwNTE4MTQ0NDM4WhcNMjQwNTI1MTQ0NDM4WjAYMRYwFAYD VQQDEw02NjQ4YmVkNi0yYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoZk5u1dUUEQcuc63pOmSZCeq8wFajF0kfcR5pQtgLEZdT7xzAozkQWfraBF 0nwH05meKqh21FLnrBnaUxWisRe+gAlOSq/az6g0pT9wXwQ5tBzALwzsJ3SXhyaf bB9CLEBVTfIbgdALApbD2MTyQoC7i2G4Ke2fM4NGh5Km+b3gqgBZirY4uOJoF0wH +aZBlS/tVXs1migIBscCwZire1MIAKbQRbJ2g7FQfFmRwyQ2gZjm7vA8D4uSgZt4 nJAApvH1Wt0fnB7XYRZtV/7a4WzwKAWhOY/ARYqBvV9v8eB2/bREzRAuSaUMN8r1 yAqrTY2BonzjW9QqusHdZS2KeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4ZnXAQ rBWpdBxmBA0G90vg1jACMB8GA1UdIwQYMBaAFOTKZbjQx7Fl2cIqer34GqZvqtTR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFBRi9GM0YxOEIyQzFE OEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNXWFp3aXA2dmZnYXBtLXEx TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVNcGx1TkRIc1dYWndpcDZ2ZmdhcG0tcTFORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFBRi9GM0YxOEIyQzFEOEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNX WFp3aXA2dmZnYXBtLXExTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJBSl0rVx4ES3iFr7hVH/wgwxaE4JeLMcC8yNvi+mqlbYC/M9sIBCJ SDEiytP5NG2njeySDspVBZ6Mc6TRYWqTJEcLiSW06f7aEKuptMmRZq+MZYWMaXc2 oYiWRmTz421rJYl9QEXOiTZkbOGF8rOYAw5odRAoxzYIj6JeyIRzim6EszqRXh5g wVEIsa4FhOkTqK7JeazvVuOGAVs/FF3Q/OzxQJX/0UKFUKJejMzcbrSB9uvOnGhA vwXMScXzcR7rG51uCwL/g+RcXhU4A106Raugl/FqbE3MS88ND/4SS5tea84hdlDp kT31JrQtrylYrlLbtkp4kUQwn1eDprDy -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org