$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft File: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft (raw, json) Hash identifier: CKLylOhMAIceiy5oJr3AGb3ssE8Bu+Rcz0PTrKHJtbg= Subject key identifier: 4A:84:1A:1E:C1:B9:20:92:7E:C1:C7:35:86:54:77:BB:E0:21:D4:11 Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft Manifest number: 019D Signing time: Sun 19 May 2024 04:39:56 +0000 Manifest this update: Sun 19 May 2024 04:39:56 +0000 Manifest next update: Sun 26 May 2024 04:39:55 +0000 Files and hashes: 1: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl (hash: hoE6AYlLcM7lRQU1PW4YFeT1DN7e8CPQ8nxexJgWtSc=) 2: BDA9DE001C5E11ED94861F7CC4F9AE02.roa (hash: wNkDXswoIsfNaXhGA/YZud+t9elugH4UWLxwSpJ5NY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Validity Not Before: May 19 04:39:56 2024 GMT Not After : May 26 04:39:55 2024 GMT Subject: CN=6649829c-3bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:ca:d1:e9:36:85:3b:dd:24:66:da:65:04: 46:1a:6a:c7:76:5e:93:64:9c:eb:53:94:57:81:38: 79:d7:8c:ab:eb:96:b9:37:7a:8e:95:c0:8f:d8:df: fe:a4:d2:a3:0f:7c:31:ca:ce:2c:46:88:2a:5a:e3: 87:b0:38:10:72:f3:39:33:d3:d3:5f:66:4a:57:20: 47:04:73:76:a6:48:f6:5a:a1:cb:3a:52:8f:dc:b7: 96:b5:b1:f9:30:47:18:c5:1d:ee:ea:52:8b:ec:dd: e9:fb:60:1f:9e:8e:0f:dd:d5:58:16:a9:4c:e4:f9: 02:bb:86:87:65:f9:79:d6:f2:47:bf:ca:d1:c8:7b: d1:bc:7c:c3:56:0c:d1:15:1c:c4:67:8a:70:d0:d1: 30:e7:cb:5d:ef:5a:0f:3f:58:ce:36:1e:bc:5e:c7: 7c:29:90:90:ad:59:71:f9:ac:5d:21:5c:7c:5f:d5: 69:0c:36:31:be:4b:ee:6e:58:ce:e0:0f:9b:b6:bf: 3f:6c:57:27:fc:39:32:7f:0c:a7:75:0b:57:a9:15: 81:cd:ed:18:98:78:3b:30:8e:a9:99:03:3c:85:2e: ad:e9:85:26:f1:0f:74:56:a1:26:5b:96:62:26:d1: 83:13:28:5e:bc:ea:74:b3:21:87:06:5f:62:dc:45: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:1A:1E:C1:B9:20:92:7E:C1:C7:35:86:54:77:BB:E0:21:D4:11 X509v3 Authority Key Identifier: keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2c:1d:5e:b8:10:a9:04:a8:b8:a6:fa:1d:b1:15:64:d8:3e: 27:2e:66:1b:a6:af:a3:1d:64:0b:5e:1e:94:7e:94:bd:67:00: f2:dc:5a:eb:12:8c:26:5b:d3:d5:99:84:f1:78:8b:87:8e:91: 94:20:53:a9:16:00:9b:f7:29:35:e8:f2:43:ed:7f:8a:9c:d8: 80:31:ca:42:26:48:23:88:1b:6a:21:67:d5:16:e7:b0:07:ac: 2b:4c:17:29:16:26:74:73:9b:a0:7b:34:69:f4:82:95:31:a2: e2:38:be:c0:8f:50:ab:f3:a3:ed:bc:30:9e:fc:ec:ab:03:f9: d0:b8:e9:50:ce:1d:a0:8a:d4:f9:66:26:68:d5:40:35:aa:72: 58:3a:6c:c1:c7:32:2d:14:8a:2b:85:4b:d6:c4:aa:5d:c9:7f: 23:b4:34:34:b2:5b:ec:fa:97:5e:0e:d8:a6:a2:da:8b:9c:dc: cd:c3:67:67:ae:82:50:26:79:9d:d7:74:0d:8b:c3:cc:3f:e5: fd:fb:bc:49:95:8b:58:5f:ea:e5:24:6d:09:e1:aa:92:bf:6f: e4:2d:89:7f:a1:94:7d:74:20:26:ac:5a:a1:fd:d5:93:44:e1: 5b:3d:93:a5:02:84:69:19:4c:40:7a:82:f5:1d:9c:bd:81:b8: 9d:a0:2d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRBNTAxMTAvBgNVBAUTKDk0ODMwRjk0MEQ4RERDN0Y5ODlCN0NBQjEzNjI4M0NG NDMyOTYwQkQwHhcNMjQwNTE5MDQzOTU2WhcNMjQwNTI2MDQzOTU1WjAYMRYwFAYD VQQDEw02NjQ5ODI5Yy0zYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNDK0ek2hTvdJGbaZQRGGmrHdl6TZJzrU5RXgTh514yr65a5N3qOlcCP2N/+ pNKjD3wxys4sRogqWuOHsDgQcvM5M9PTX2ZKVyBHBHN2pkj2WqHLOlKP3LeWtbH5 MEcYxR3u6lKL7N3p+2Afno4P3dVYFqlM5PkCu4aHZfl51vJHv8rRyHvRvHzDVgzR FRzEZ4pw0NEw58td71oPP1jONh68Xsd8KZCQrVlx+axdIVx8X9VpDDYxvkvubljO 4A+btr8/bFcn/DkyfwyndQtXqRWBze0YmHg7MI6pmQM8hS6t6YUm8Q90VqEmW5Zi JtGDEyhevOp0syGHBl9i3EWkGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqEGh7B uSCSfsHHNYZUd7vgIdQRMB8GA1UdIwQYMBaAFJSDD5QNjdx/mJt8qxNig89DKWC9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEE1MC9GN0E2NEIwQTE4 NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNILVltM3lyRTJLRHowTXBZ TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJTVBsQTJOM0gtWW0zeXJFMktEejBNcFlMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEE1MC9GN0E2NEIwQTE4NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNI LVltM3lyRTJLRHowTXBZTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0LB1euBCpBKi4pvodsRVk2D4nLmYbpq+jHWQLXh6UfpS9ZwDy3Frr EowmW9PVmYTxeIuHjpGUIFOpFgCb9yk16PJD7X+KnNiAMcpCJkgjiBtqIWfVFuew B6wrTBcpFiZ0c5ugezRp9IKVMaLiOL7Aj1Cr86PtvDCe/OyrA/nQuOlQzh2gitT5 ZiZo1UA1qnJYOmzBxzItFIorhUvWxKpdyX8jtDQ0slvs+pdeDtimotqLnNzNw2dn roJQJnmd13QNi8PMP+X9+7xJlYtYX+rlJG0J4aqSv2/kLYl/oZR9dCAmrFqh/dWT ROFbPZOlAoRpGUxAeoL1HZy9gbidoC2f -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org