$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: lQ7ZgILcPZzFKrdqFkuKEwqeg/gki+LpR5i49jIQQe4= Subject key identifier: 6C:2F:68:9B:71:71:D6:6C:6A:DE:8F:97:92:20:65:4F:3B:02:45:88 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 05A5 Signing time: Sun 19 May 2024 00:18:25 +0000 Manifest this update: Sun 19 May 2024 00:18:23 +0000 Manifest next update: Sun 26 May 2024 00:18:23 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: /ivdVEyraTTt3VfrKC8KbhV5mtBZdoJFHckInLL1eDQ=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: EjsnNsR1VMYGUtaVh/eRjO2xs0TMAOXQ41mC5L848LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: May 19 00:18:23 2024 GMT Not After : May 26 00:18:23 2024 GMT Subject: CN=66494550-b502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:7c:c3:f2:30:75:b5:ac:dc:9e:7c:0e:ec: 40:1b:c3:9e:ab:7f:dd:d6:40:c6:60:4d:2a:4c:19: aa:69:c3:b7:16:5e:8f:74:29:e2:99:ad:ee:1f:75: 60:6c:1f:7e:30:75:1e:39:1f:b5:9c:97:93:5c:f3: 21:16:0f:e7:29:58:9e:7c:bd:26:0e:d0:69:52:13: 7a:12:34:b3:98:e2:5a:ab:90:1f:cd:83:b8:01:f6: a6:75:4e:74:f1:84:af:0d:b6:db:7b:b3:f2:63:c5: 76:5b:4b:04:0c:fd:a1:4f:23:54:10:69:f5:9d:bf: 81:26:53:12:a0:3d:11:f3:cb:6d:68:4b:8d:14:33: 82:9b:49:d5:d7:19:67:47:35:08:f3:fc:14:cb:20: 5a:95:e0:41:a1:c0:a8:83:c9:5a:50:5c:14:f6:19: be:3f:56:71:0d:2d:44:fb:18:70:0f:8d:d7:d3:2b: fe:20:9f:e5:62:e1:d7:c8:a8:93:51:62:4c:ef:55: 44:90:e0:c2:54:7a:cb:43:59:e5:57:b7:25:3b:35: ec:28:2b:07:0f:13:6e:f1:1e:28:3f:a9:a6:fe:1b: fc:30:f4:f0:76:7e:78:e9:4d:6c:26:8e:bb:46:7f: aa:5c:7b:c4:2e:38:76:35:b6:76:cc:be:57:67:68: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:68:9B:71:71:D6:6C:6A:DE:8F:97:92:20:65:4F:3B:02:45:88 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:55:d4:94:ea:4e:28:0d:b1:5f:00:f6:40:04:2d:87:4e:3d: 6e:f4:e6:a7:c3:35:0c:1a:95:36:8f:c2:18:e1:0b:67:80:61: 59:ed:28:e7:c7:44:b8:37:b9:8d:d9:24:3c:ba:d9:0a:70:97: 30:b2:c4:50:65:cc:f6:a1:4a:a6:a3:07:9b:e2:ba:6e:73:de: a5:57:7d:7e:3f:39:1b:d1:b7:9e:1c:37:4a:c9:d1:af:d0:2b: 50:73:b9:49:ff:99:5c:92:ad:d0:5e:5f:12:2f:11:e6:a5:9c: 43:24:0f:a9:6c:3c:6f:07:d5:0d:9f:08:44:6e:11:bf:18:0f: ae:d9:b0:9d:f5:f3:4a:1b:d6:7e:f0:b8:01:d4:a9:dc:5d:82: 9f:bb:5a:d5:bb:9c:30:74:29:3b:4b:bf:93:3c:e0:70:3d:6b: 79:41:49:a8:8c:c6:a0:42:e8:27:14:d5:ec:f5:81:57:98:37: 4a:bd:f3:f7:8c:56:71:b5:cb:e0:42:0c:4d:02:14:6a:09:aa: 63:a2:48:5e:f8:4e:18:a0:27:cc:e0:db:07:00:a7:ff:81:67: c1:18:47:11:5d:17:05:2a:cb:f0:ca:7a:be:6c:b8:8d:fa:99: 40:2a:cf:e4:d2:8c:af:8a:c1:e1:2e:0f:d5:c7:91:27:3e:e5: 6e:ee:a6:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjQwNTE5MDAxODIzWhcNMjQwNTI2MDAxODIzWjAYMRYwFAYD VQQDEw02NjQ5NDU1MC1iNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iN8w/IwdbWs3J58DuxAG8Oeq3/d1kDGYE0qTBmqacO3Fl6PdCnima3uH3Vg bB9+MHUeOR+1nJeTXPMhFg/nKViefL0mDtBpUhN6EjSzmOJaq5AfzYO4AfamdU50 8YSvDbbbe7PyY8V2W0sEDP2hTyNUEGn1nb+BJlMSoD0R88ttaEuNFDOCm0nV1xln RzUI8/wUyyBaleBBocCog8laUFwU9hm+P1ZxDS1E+xhwD43X0yv+IJ/lYuHXyKiT UWJM71VEkODCVHrLQ1nlV7clOzXsKCsHDxNu8R4oP6mm/hv8MPTwdn546U1sJo67 Rn+qXHvELjh2NbZ2zL5XZ2g+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwvaJtx cdZsat6Pl5IgZU87AkWIMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3VdSU6k4oDbFfAPZABC2HTj1u9OanwzUMGpU2j8IY4QtngGFZ7Sjn x0S4N7mN2SQ8utkKcJcwssRQZcz2oUqmoweb4rpuc96lV31+Pzkb0beeHDdKydGv 0CtQc7lJ/5lckq3QXl8SLxHmpZxDJA+pbDxvB9UNnwhEbhG/GA+u2bCd9fNKG9Z+ 8LgB1KncXYKfu1rVu5wwdCk7S7+TPOBwPWt5QUmojMagQugnFNXs9YFXmDdKvfP3 jFZxtcvgQgxNAhRqCapjokhe+E4YoCfM4NsHAKf/gWfBGEcRXRcFKsvwynq+bLiN +plAKs/k0oyvisHhLg/Vx5EnPuVu7qZY -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org