$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: ztpedIbMX/vAP7Iq8uTFa799M5keh8FAb06UAg9hGx0= Subject key identifier: 30:08:D1:8B:D6:8A:88:43:50:29:A5:00:A1:66:B7:AC:F7:D5:3A:10 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 05FB Signing time: Sat 18 May 2024 23:56:10 +0000 Manifest this update: Sat 18 May 2024 23:56:09 +0000 Manifest next update: Sat 25 May 2024 23:56:09 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: GBswpir0xJVZL6dJIEN11WbyDk+FIwC3H4Q/Hyx8giw=) 2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: khUt0DvlY61bAlm32dmPwWDchl/1RN02B/RJjPd4MZQ=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: yqGpCO8lcS6aLjqGTiN2U4Jbdfhrxn3UOKDstddgk/o=) 4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: eDBzV5c+YfE8xKLwuR4/9vbZEx4V5q6WLygz4lLx4+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: May 18 23:56:09 2024 GMT Not After : May 25 23:56:09 2024 GMT Subject: CN=6649401a-f3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:b1:2b:82:a4:95:d1:16:a6:95:3f:4d:a6: 5d:5a:65:91:f2:ee:94:0d:a9:4f:5c:5d:07:3e:db: e8:b1:49:36:f2:1b:61:80:65:47:77:d0:47:d1:76: 7f:12:b6:b0:18:ec:8b:08:a7:7d:18:d8:17:3d:28: b0:36:a6:46:ee:c8:db:38:0e:b3:44:de:6c:b2:a5: 3c:4d:59:fd:17:db:ab:73:e5:4f:9f:53:58:49:e4: 17:83:c3:83:3e:26:ba:d0:18:14:12:34:ab:f1:e4: c1:24:ec:2f:52:1f:d1:04:c6:69:a4:e1:7f:e3:e4: 00:39:32:13:47:48:c6:cb:c6:3d:a7:58:eb:f6:70: f9:96:bc:c3:d5:f5:09:fd:ef:c4:a6:24:33:6e:0d: 03:02:7f:da:6e:cb:b5:78:63:c6:8a:43:1d:6b:ff: 88:37:21:1d:92:c0:fa:48:a4:17:5d:f6:18:e4:7c: db:7a:4d:0c:df:c3:01:c4:5d:21:5f:ef:0e:2f:97: 9f:9e:80:b2:10:7c:be:ce:94:b7:3f:98:fe:2b:64: 93:c2:df:14:8a:cd:80:e7:5d:35:13:87:e6:0b:f5: 81:e3:f5:d2:83:f0:4c:44:a0:95:73:a6:93:f8:c5: 8d:60:00:4c:1e:cf:49:9f:57:92:cf:e4:eb:8b:a7: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:08:D1:8B:D6:8A:88:43:50:29:A5:00:A1:66:B7:AC:F7:D5:3A:10 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:73:cc:90:2b:9e:13:eb:53:33:ca:b9:85:0d:9e:46:46:45: 27:a6:71:ca:14:6d:86:20:90:34:00:df:dd:81:48:23:83:51: 58:af:6b:2b:20:59:20:2f:20:8f:7d:52:10:ca:6a:81:56:ba: 2c:9e:ae:6f:a4:47:30:5c:ac:28:fb:20:1a:fe:40:c0:b6:97: 58:b3:16:16:a3:02:9b:e4:92:f9:ab:25:8c:7a:56:76:82:b9: 42:7b:fe:4d:25:71:ab:26:d2:d4:6c:67:72:29:0c:a4:2f:13: 20:2b:d8:65:6f:d8:3d:fa:e4:d5:94:88:08:52:bd:91:50:26: 87:12:c1:5a:80:33:e8:ac:9a:3d:e9:f3:36:a9:54:25:79:15: 8f:99:be:4d:23:25:e4:6a:aa:4e:c4:6d:ae:e3:8e:d9:02:1c: 09:17:3a:ce:d8:21:eb:e9:08:10:e9:72:89:e1:6f:95:08:40: 23:2b:bd:60:84:c5:a7:73:49:77:8d:14:bc:0b:fa:77:d8:e9: 87:04:19:88:ae:97:ec:b9:14:43:36:5f:11:55:21:7e:fc:81: 1c:69:8a:c2:a7:b9:71:a7:dc:65:7f:25:38:96:ac:06:58:f1: a9:20:19:b0:4f:d0:cd:78:c4:de:75:e9:14:d7:bf:a6:41:ae: 00:0c:c2:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjQwNTE4MjM1NjA5WhcNMjQwNTI1MjM1NjA5WjAYMRYwFAYD VQQDEw02NjQ5NDAxYS1mM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXWxK4KkldEWppU/TaZdWmWR8u6UDalPXF0HPtvosUk28hthgGVHd9BH0XZ/ ErawGOyLCKd9GNgXPSiwNqZG7sjbOA6zRN5ssqU8TVn9F9urc+VPn1NYSeQXg8OD Pia60BgUEjSr8eTBJOwvUh/RBMZppOF/4+QAOTITR0jGy8Y9p1jr9nD5lrzD1fUJ /e/EpiQzbg0DAn/absu1eGPGikMda/+INyEdksD6SKQXXfYY5Hzbek0M38MBxF0h X+8OL5efnoCyEHy+zpS3P5j+K2STwt8Uis2A5101E4fmC/WB4/XSg/BMRKCVc6aT +MWNYABMHs9Jn1eSz+Tri6eNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAI0YvW iohDUCmlAKFmt6z31ToQMB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALc8yQK54T61MzyrmFDZ5GRkUnpnHKFG2GIJA0AN/dgUgjg1FYr2sr IFkgLyCPfVIQymqBVrosnq5vpEcwXKwo+yAa/kDAtpdYsxYWowKb5JL5qyWMelZ2 grlCe/5NJXGrJtLUbGdyKQykLxMgK9hlb9g9+uTVlIgIUr2RUCaHEsFagDPorJo9 6fM2qVQleRWPmb5NIyXkaqpOxG2u447ZAhwJFzrO2CHr6QgQ6XKJ4W+VCEAjK71g hMWnc0l3jRS8C/p32OmHBBmIrpfsuRRDNl8RVSF+/IEcaYrCp7lxp9xlfyU4lqwG WPGpIBmwT9DNeMTedekU17+mQa4ADMIS -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org