$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json) Hash identifier: wITpqvPJUQLQ+fV+8K0LnNWVduWoscTU6SzuabAazxE= Subject key identifier: 1D:E4:DF:37:40:8A:47:58:55:AD:86:71:1D:11:26:DB:ED:29:3B:6E Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft Manifest number: 0AA9 Signing time: Sat 18 May 2024 20:09:16 +0000 Manifest this update: Sat 18 May 2024 20:09:15 +0000 Manifest next update: Sat 25 May 2024 20:09:15 +0000 Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: xTy2Ii80ZXcoN/1xrSAZPxiU4lMvkm11gycoFp7FLfM=) 2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: +AY4f5uhDa+iIwRiDR23i6XlDUBAKMl99YAiHZiRwOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Validity Not Before: May 18 20:09:15 2024 GMT Not After : May 25 20:09:15 2024 GMT Subject: CN=66490aeb-d879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:9e:9a:b7:97:8b:5d:d6:2e:2f:6b:e1:b3: 69:a2:2d:70:d5:15:13:c0:57:af:43:a3:64:b3:8d: 46:2c:16:ec:d4:3d:d9:a8:65:a2:87:ce:72:98:46: c5:94:32:52:96:ca:c1:04:ea:37:09:66:46:de:67: 2e:a6:dc:7c:7b:10:fa:44:bc:43:96:50:45:3f:7b: 9f:68:cd:00:89:0e:80:98:19:e2:19:d5:d6:4d:84: 08:69:1a:be:ca:e0:f7:9c:46:0f:05:04:67:51:7b: a0:15:c7:09:1e:40:0c:de:a9:34:02:6b:93:cb:12: 7b:bd:87:5a:8f:c8:fd:db:da:b3:52:36:dc:86:cf: 61:81:66:1b:c6:b6:9e:dc:fa:e1:8b:d1:6a:23:38: 99:d3:9f:0b:7b:86:0d:22:1b:80:9f:6e:a1:0d:44: ad:dc:fd:bc:c5:e5:86:39:73:97:d0:70:80:8d:c3: b0:c3:12:3d:c4:80:88:c6:4b:d8:38:e3:eb:f5:6a: 1e:37:15:81:a0:a8:bd:e8:78:40:5d:d6:bc:20:e1: e2:89:4a:e4:b1:ec:a3:73:8b:6a:de:79:bc:91:91: a3:0e:d0:4c:e3:90:bc:ad:d4:72:00:f2:ec:2d:63: 90:24:11:61:b7:f2:90:15:04:4d:1e:e9:81:fd:dc: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E4:DF:37:40:8A:47:58:55:AD:86:71:1D:11:26:DB:ED:29:3B:6E X509v3 Authority Key Identifier: keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7a:54:fe:be:78:05:e6:a1:07:61:df:4f:62:d3:40:ea:25: 17:b0:fe:a5:34:13:f9:5e:0c:97:8d:23:ad:94:ef:04:59:d3: 52:25:b1:07:f6:d9:0c:75:44:60:b9:a9:fe:44:be:c2:9f:56: 35:4d:d7:54:27:6e:9b:f6:c5:fc:b1:cc:a7:4c:9f:fd:4f:9c: ca:a6:72:e0:87:da:93:ee:30:6c:66:c0:ce:b0:4d:7e:d0:3a: ae:56:3d:89:97:87:a9:45:e5:3c:65:dc:9a:ea:de:74:14:91: 8c:09:ce:17:b6:e4:72:94:34:db:9b:93:82:59:9a:47:5d:14: f8:06:cb:67:ce:ac:62:b4:39:73:23:1c:7f:56:8b:e1:da:b7: b1:9e:58:9a:20:fa:a7:85:49:3f:75:49:2a:f4:0e:f8:28:de: d1:a9:58:6f:c0:e1:4e:53:7a:9a:14:6a:b7:73:1e:80:c8:7b: 83:be:32:e6:27:e4:de:f1:93:01:af:ad:2f:5e:b5:8a:99:10: 5b:a5:c0:6c:29:7e:c0:fc:ef:d9:6e:7b:5d:67:07:69:98:54: 2e:22:2f:eb:5d:35:d7:2d:f8:77:b4:30:61:cd:53:f2:5d:d7: 5b:63:31:00:e4:9d:76:f8:af:99:ea:b6:cb:23:08:34:2f:da: a1:d7:94:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3MDExMTAvBgNVBAUTKEU1MkRFOEIxOTE5MzM4QTNFMjU1NjY0RTg4MDQ4QTU2 OThBMTIwRDAwHhcNMjQwNTE4MjAwOTE1WhcNMjQwNTI1MjAwOTE1WjAYMRYwFAYD VQQDEw02NjQ5MGFlYi1kODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV+emreXi13WLi9r4bNpoi1w1RUTwFevQ6Nks41GLBbs1D3ZqGWih85ymEbF lDJSlsrBBOo3CWZG3mcuptx8exD6RLxDllBFP3ufaM0AiQ6AmBniGdXWTYQIaRq+ yuD3nEYPBQRnUXugFccJHkAM3qk0AmuTyxJ7vYdaj8j929qzUjbchs9hgWYbxrae 3Prhi9FqIziZ058Le4YNIhuAn26hDUSt3P28xeWGOXOX0HCAjcOwwxI9xICIxkvY OOPr9WoeNxWBoKi96HhAXda8IOHiiUrkseyjc4tq3nm8kZGjDtBM45C8rdRyAPLs LWOQJBFht/KQFQRNHumB/dxRyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3k3zdA ikdYVa2GcR0RJtvtKTtuMB8GA1UdIwQYMBaAFOUt6LGRkzij4lVmTogEilaYoSDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDcwMS81NDAwQzQxODMw MzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9LUGlWV1pPaUFTS1ZwaWhJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTM29zWkdUT0tQaVZXWk9pQVNLVnBpaElOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDcwMS81NDAwQzQxODMwMzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9L UGlWV1pPaUFTS1ZwaWhJTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGelT+vngF5qEHYd9PYtNA6iUXsP6lNBP5XgyXjSOtlO8EWdNSJbEH 9tkMdURguan+RL7Cn1Y1TddUJ26b9sX8scynTJ/9T5zKpnLgh9qT7jBsZsDOsE1+ 0DquVj2Jl4epReU8Zdya6t50FJGMCc4XtuRylDTbm5OCWZpHXRT4BstnzqxitDlz Ixx/Vovh2rexnliaIPqnhUk/dUkq9A74KN7RqVhvwOFOU3qaFGq3cx6AyHuDvjLm J+Te8ZMBr60vXrWKmRBbpcBsKX7A/O/ZbntdZwdpmFQuIi/rXTXXLfh3tDBhzVPy XddbYzEA5J12+K+Z6rbLIwg0L9qh15S5 -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org