$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: uKU6BKGdAfQxE0bk3Xs2AsJDmnohu1weohxIaZtpnSE= Subject key identifier: 16:2D:B5:08:E4:A0:08:7D:D3:F9:FA:AA:C7:0F:17:28:EA:46:1A:94 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0876 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0858 Signing time: Sat 18 May 2024 21:47:22 +0000 Manifest this update: Sat 18 May 2024 21:47:21 +0000 Manifest next update: Sat 25 May 2024 21:47:21 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: VGFijrxfbJTwuBZkLfif2NBpR66lhMuSP7XWPcNRAqU=) 2: 5EE2D37A121011EDB028B50FC4F9AE02.roa (hash: M0r2GrmrfP23cRPeWlbRxVl5VdSzLJakkShDB4x+1bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: May 18 21:47:21 2024 GMT Not After : May 25 21:47:21 2024 GMT Subject: CN=664921e9-9c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:2e:f2:57:42:6b:3e:fe:26:e1:38:dd:dd: 54:50:99:6c:0d:57:08:e2:01:4f:98:32:94:21:c3: aa:01:87:72:7d:47:16:53:18:fb:1a:ea:de:9c:e2: 2f:a0:90:5d:e0:91:ea:9c:70:90:9f:0d:f7:9f:ef: 1f:03:c1:98:a6:d5:ee:e3:62:40:ad:1a:86:78:45: 7d:ee:4b:7e:b5:9b:91:6b:09:4b:19:f5:46:84:ab: 59:94:c1:b6:18:39:8d:5d:6f:e0:6a:96:8d:d9:58: 3e:1c:59:b1:fc:67:74:0a:a7:14:6e:d4:e9:47:57: 3b:c3:27:90:8f:2b:b8:42:3b:52:aa:9d:4d:f5:10: 70:90:b7:66:ba:c9:4f:d9:69:48:87:01:1e:97:3c: 62:c5:55:fa:57:cf:77:18:40:44:aa:af:2e:3a:57: 9f:ea:ad:36:60:72:00:80:31:0e:1a:dc:69:11:c7: fb:b9:1f:c6:26:f0:2a:69:17:39:25:10:4f:9a:a9: a3:55:12:df:c4:db:eb:b1:98:5f:40:56:5a:06:64: f7:46:a9:2d:fc:61:2a:b0:e0:07:09:72:60:f7:20: 0b:82:c4:18:aa:54:82:96:3d:5b:2b:0f:7d:e0:3b: 58:e6:2a:a7:d5:a3:50:cd:ba:4b:ea:14:47:ff:eb: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2D:B5:08:E4:A0:08:7D:D3:F9:FA:AA:C7:0F:17:28:EA:46:1A:94 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ae:75:b0:74:8c:e0:a3:b6:ef:7b:8a:ee:a9:32:21:dd:94: ef:a4:6d:50:e6:fc:86:48:a3:a0:57:ec:82:ba:2f:ec:35:09: 49:90:ef:c6:8c:83:49:5f:a2:a9:cf:21:33:e9:b8:5f:fa:96: 90:32:76:ab:3b:de:61:ba:a4:a8:40:f9:e2:0f:67:c1:a1:63: eb:71:35:75:8c:6b:ec:77:56:5d:00:c7:e7:af:9a:b0:85:20: 68:b8:a4:d8:d8:57:a7:64:87:09:21:33:8d:57:6f:ee:b7:5d: 1a:ee:7a:66:99:e2:7f:c0:b5:c9:04:d7:eb:d2:98:bc:53:d5: 04:23:f5:ba:f2:a1:46:80:dc:8f:b2:1b:9c:22:f1:8f:eb:ff: a9:6b:1a:dc:8a:51:9d:7b:ba:e7:da:39:8d:99:3c:d5:0b:61: a8:02:44:0f:b1:77:58:16:48:fe:d0:aa:90:c3:11:e7:44:84: 3c:b2:d1:1a:40:fb:55:c6:ee:c6:8e:03:6f:53:89:67:80:db: cf:72:a8:2f:92:78:65:3b:c7:10:25:fd:9b:0f:30:a2:00:7b: d2:7d:02:3c:6e:34:c5:6c:9d:09:05:0e:15:0b:ec:18:e0:ce: 54:31:78:1a:56:3d:16:b6:54:c2:19:67:71:11:21:b0:32:87: 26:90:07:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjQwNTE4MjE0NzIxWhcNMjQwNTI1MjE0NzIxWjAYMRYwFAYD VQQDEw02NjQ5MjFlOS05YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Qu8ldCaz7+JuE43d1UUJlsDVcI4gFPmDKUIcOqAYdyfUcWUxj7GurenOIv oJBd4JHqnHCQnw33n+8fA8GYptXu42JArRqGeEV97kt+tZuRawlLGfVGhKtZlMG2 GDmNXW/gapaN2Vg+HFmx/Gd0CqcUbtTpR1c7wyeQjyu4QjtSqp1N9RBwkLdmuslP 2WlIhwEelzxixVX6V893GEBEqq8uOlef6q02YHIAgDEOGtxpEcf7uR/GJvAqaRc5 JRBPmqmjVRLfxNvrsZhfQFZaBmT3Rqkt/GEqsOAHCXJg9yALgsQYqlSClj1bKw99 4DtY5iqn1aNQzbpL6hRH/+sJBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYttQjk oAh90/n6qscPFyjqRhqUMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLrnWwdIzgo7bve4ruqTIh3ZTvpG1Q5vyGSKOgV+yCui/sNQlJkO/G jINJX6KpzyEz6bhf+paQMnarO95huqSoQPniD2fBoWPrcTV1jGvsd1ZdAMfnr5qw hSBouKTY2FenZIcJITONV2/ut10a7npmmeJ/wLXJBNfr0pi8U9UEI/W68qFGgNyP shucIvGP6/+paxrcilGde7rn2jmNmTzVC2GoAkQPsXdYFkj+0KqQwxHnRIQ8stEa QPtVxu7GjgNvU4lngNvPcqgvknhlO8cQJf2bDzCiAHvSfQI8bjTFbJ0JBQ4VC+wY 4M5UMXgaVj0WtlTCGWdxESGwMocmkAe8 -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org