$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: /gLGbJzZDD5VNXb1FTOzJq+gf+eihRGhfjMb8mJRgjE= Subject key identifier: C3:A5:9C:F6:D0:2B:AB:3C:EC:2B:33:91:63:86:78:E5:2E:96:48:31 Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 1543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 153C Signing time: Sat 18 May 2024 17:17:48 +0000 Manifest this update: Sat 18 May 2024 17:17:47 +0000 Manifest next update: Sat 25 May 2024 17:17:47 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: qpCy92kDemdNOOGII74YwO1bvj4MROlTAAGnS8eLOHk=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: BF2VGBgoPnm6Z1fnJTCT+uDo2m/5w1bUZm8gMPEWeSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5443 (0x1543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: May 18 17:17:47 2024 GMT Not After : May 25 17:17:47 2024 GMT Subject: CN=6648e2bb-c14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:ea:e4:aa:d2:23:a0:47:6e:f1:92:24:aa: 15:1e:26:e2:32:94:d4:23:f0:5d:09:2d:31:bc:b4: fb:6c:d5:23:15:c9:dd:ed:37:9d:d7:54:27:5f:73: a3:04:84:4d:e2:aa:46:be:00:93:9d:3c:df:6d:ca: d3:ec:3a:66:f4:f0:e8:67:c2:c2:23:c2:81:00:09: 62:3d:ea:de:39:b1:c3:e4:b8:c3:a8:39:38:40:4d: c3:c0:ba:97:b7:c9:03:3d:b1:3b:56:13:be:f8:52: cf:d0:e4:4d:70:b6:af:63:9d:72:9c:30:fe:ef:f0: c8:15:30:16:12:47:83:aa:7a:cd:d3:fe:03:b8:cf: 8d:7f:d2:17:e7:e4:7e:4f:0b:00:60:58:bf:22:b0: 16:44:5f:49:20:0c:b5:84:78:37:a7:6e:0a:5e:13: 5f:12:b2:58:6f:3e:17:c8:a6:11:c0:fa:0c:55:5b: 6b:49:0a:ee:49:51:12:6d:91:11:91:2d:6c:ec:ef: 3a:37:d4:53:5d:81:54:94:70:fb:3a:8e:6b:ad:17: 7d:b6:78:88:69:e8:35:22:1d:7d:b3:75:66:20:a7: de:a4:09:38:e6:d1:d4:10:ac:9e:1e:7e:64:b6:c3: 2e:af:44:2c:21:36:ce:23:01:72:70:96:d6:b6:78: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A5:9C:F6:D0:2B:AB:3C:EC:2B:33:91:63:86:78:E5:2E:96:48:31 X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:75:9a:26:0b:34:ab:0b:37:fb:d0:64:55:7e:b8:bd:48: e4:8d:d5:61:d1:15:30:78:54:6b:04:1f:4a:c4:31:7f:e9:fb: ed:2d:5e:7b:d1:08:98:ca:96:53:50:9c:40:8f:c4:9d:fb:00: 0a:7f:13:9d:a0:6e:c6:d1:60:2b:17:a4:18:a1:d6:b2:f6:3c: 29:1f:ee:df:c8:ed:b7:7a:37:c2:8b:85:38:8b:c1:8e:0d:66: 1a:45:2a:8e:3d:0a:b0:99:67:2f:f4:95:fb:80:14:66:17:ce: a6:c5:09:ca:b9:f0:44:b9:65:2c:2b:99:66:83:ee:94:89:38: 50:9d:a6:33:a9:b9:9c:c7:bc:65:f3:ed:f5:f0:2e:82:6c:ce: 8d:74:f2:dc:b5:e2:7f:a8:97:95:ae:fc:d9:03:5e:18:68:4b: f3:58:28:35:b3:c1:2b:95:b7:b8:f2:c1:de:fd:df:89:17:96: c6:5e:23:9f:ab:2c:bd:4f:29:33:0a:38:6b:2d:65:56:e6:f3: 57:6f:b8:2a:7e:70:96:a0:40:88:ff:e8:c4:ed:a6:fd:7e:5c: b3:b9:20:2c:41:78:ac:30:9f:4e:c6:e0:b1:9a:e7:dc:18:b6: 91:40:e2:62:09:03:74:87:9f:d3:f1:69:14:15:86:e6:fd:ad: 4d:07:2d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjQwNTE4MTcxNzQ3WhcNMjQwNTI1MTcxNzQ3WjAYMRYwFAYD VQQDEw02NjQ4ZTJiYi1jMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOjq5KrSI6BHbvGSJKoVHibiMpTUI/BdCS0xvLT7bNUjFcnd7Ted11QnX3Oj BIRN4qpGvgCTnTzfbcrT7Dpm9PDoZ8LCI8KBAAliPereObHD5LjDqDk4QE3DwLqX t8kDPbE7VhO++FLP0ORNcLavY51ynDD+7/DIFTAWEkeDqnrN0/4DuM+Nf9IX5+R+ TwsAYFi/IrAWRF9JIAy1hHg3p24KXhNfErJYbz4XyKYRwPoMVVtrSQruSVESbZER kS1s7O86N9RTXYFUlHD7Oo5rrRd9tniIaeg1Ih19s3VmIKfepAk45tHUEKyeHn5k tsMur0QsITbOIwFycJbWtnhrXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOlnPbQ K6s87CszkWOGeOUulkgxMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/U3WaJgs0qws3+9BkVX64vUjkjdVh0RUweFRrBB9KxDF/6fvtLV57 0QiYypZTUJxAj8Sd+wAKfxOdoG7G0WArF6QYoday9jwpH+7fyO23ejfCi4U4i8GO DWYaRSqOPQqwmWcv9JX7gBRmF86mxQnKufBEuWUsK5lmg+6UiThQnaYzqbmcx7xl 8+318C6CbM6NdPLcteJ/qJeVrvzZA14YaEvzWCg1s8Erlbe48sHe/d+JF5bGXiOf qyy9TykzCjhrLWVW5vNXb7gqfnCWoECI/+jE7ab9flyzuSAsQXisMJ9OxuCxmufc GLaRQOJiCQN0h5/T8WkUFYbm/a1NBy0e -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org