$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: tBbo+RjdeCutembcnIe5GbAgEhoxvaa4gqdlo1bOXnk= Subject key identifier: 08:DD:78:78:8B:1C:6F:D1:E7:75:46:40:BD:B6:16:3A:BB:A1:BF:96 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 156A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1563 Signing time: Fri 31 May 2024 17:30:37 +0000 Manifest this update: Fri 31 May 2024 17:30:37 +0000 Manifest next update: Fri 07 Jun 2024 17:30:37 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: dvyBDoO3gCI0rQ5To6DvjfiqQ7j7WXQNV3bEWoOZ2MY=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: lIHsFfSb4do9Pbeacgj8wJgBwwid8CHai2Y4Mrf8vqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5482 (0x156a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: May 31 17:30:37 2024 GMT Not After : Jun 7 17:30:37 2024 GMT Subject: CN=665a093d-56be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:ef:80:7f:9d:fb:f9:92:e6:ce:0c:3e:83: f0:f2:62:f7:5f:2d:57:cd:3c:fb:fb:9a:35:f6:3b: 52:55:e3:46:9c:db:35:4a:e4:c7:92:75:c7:69:b5: 34:e9:21:b5:a9:7e:59:b2:8c:d5:d7:f8:6a:7e:4b: 95:d0:cd:22:24:89:99:70:0f:4c:95:b2:f0:ea:f0: 7d:d4:eb:75:98:c1:8f:df:b4:22:44:46:30:ac:12: 0c:64:d6:25:cb:67:68:b7:4c:0c:74:a2:fd:9e:d2: 34:5f:f4:b9:d8:a6:8a:8e:42:17:cb:43:5c:82:d6: 9f:b0:73:f5:83:6a:9c:39:3a:2d:22:02:36:39:8c: 9a:85:6e:57:f5:fb:48:cd:2c:63:d3:c6:27:d3:9e: 56:5d:be:1c:60:b8:f9:86:5c:f2:cd:3a:cd:65:a2: 6b:b7:5a:c8:33:bc:fe:50:ca:f6:07:7d:db:00:9a: a2:fd:3c:35:53:c8:a9:55:94:9a:cc:f8:f1:b4:55: b5:48:48:d1:89:55:4d:c0:a4:24:3d:25:51:da:de: 7e:6a:66:21:c9:87:87:48:e5:70:f3:ab:ee:f9:b8: 17:0a:25:06:28:5b:05:2f:52:08:46:7d:2d:1d:ce: ce:ac:c1:95:09:6c:b8:8d:f3:24:43:84:8f:c6:88: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:78:78:8B:1C:6F:D1:E7:75:46:40:BD:B6:16:3A:BB:A1:BF:96 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d7:c5:90:57:a1:b8:a9:1d:e0:cc:3f:82:4a:97:a8:85:d9: ce:cd:f1:a3:ad:61:7c:10:ea:21:3b:c5:66:5b:16:08:06:61: 40:cc:65:48:85:10:6a:65:53:d2:34:69:34:77:08:2f:72:3a: f3:aa:50:ef:fe:bd:af:59:da:b4:1b:ab:ea:90:80:2c:81:69: f5:ed:2b:e9:7b:c4:ce:c1:2d:5d:11:80:b1:6f:62:78:83:f6: 7d:f8:98:f9:3b:9f:a1:25:fb:c8:8b:f0:8e:03:18:53:a9:41: 2f:bb:33:32:0d:11:54:0e:06:27:11:69:86:27:42:35:55:2d: e7:7d:e7:f0:b4:63:16:98:74:9c:2f:1a:1b:de:56:89:67:ae: e5:4d:d9:33:04:6c:d4:c4:df:6d:8a:90:9d:60:3d:69:fa:b7: 4b:d7:d3:aa:34:55:49:26:dd:ab:7e:90:14:c3:ba:fe:7d:07: b7:b4:9b:2b:07:b2:ae:7a:6f:d2:80:a9:89:80:75:d0:54:03: b0:71:45:6e:0e:ea:79:de:4a:7e:20:e1:41:ed:57:a0:29:bd: 5a:b4:c1:5e:79:4d:d3:d7:33:1a:cd:d8:e0:fa:c7:70:64:28: a6:ac:f9:90:9e:ad:a4:2a:08:71:07:74:43:18:74:3d:b3:eb: d3:b3:c1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjQwNTMxMTczMDM3WhcNMjQwNjA3MTczMDM3WjAYMRYwFAYD VQQDEw02NjVhMDkzZC01NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDHvgH+d+/mS5s4MPoPw8mL3Xy1XzTz7+5o19jtSVeNGnNs1SuTHknXHabU0 6SG1qX5ZsozV1/hqfkuV0M0iJImZcA9MlbLw6vB91Ot1mMGP37QiREYwrBIMZNYl y2dot0wMdKL9ntI0X/S52KaKjkIXy0NcgtafsHP1g2qcOTotIgI2OYyahW5X9ftI zSxj08Yn055WXb4cYLj5hlzyzTrNZaJrt1rIM7z+UMr2B33bAJqi/Tw1U8ipVZSa zPjxtFW1SEjRiVVNwKQkPSVR2t5+amYhyYeHSOVw86vu+bgXCiUGKFsFL1IIRn0t Hc7OrMGVCWy4jfMkQ4SPxohD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjdeHiL HG/R53VGQL22Fjq7ob+WMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE18WQV6G4qR3gzD+CSpeohdnOzfGjrWF8EOohO8VmWxYIBmFAzGVI hRBqZVPSNGk0dwgvcjrzqlDv/r2vWdq0G6vqkIAsgWn17Svpe8TOwS1dEYCxb2J4 g/Z9+Jj5O5+hJfvIi/COAxhTqUEvuzMyDRFUDgYnEWmGJ0I1VS3nfefwtGMWmHSc Lxob3laJZ67lTdkzBGzUxN9tipCdYD1p+rdL19OqNFVJJt2rfpAUw7r+fQe3tJsr B7Kuem/SgKmJgHXQVAOwcUVuDup53kp+IOFB7VegKb1atMFeeU3T1zMazdjg+sdw ZCimrPmQnq2kKghxB3RDGHQ9s+vTs8Fz -----END CERTIFICATE-----Generated at Fri May 31 20:34:05 2024 by rpki-client on console-ams.rpki-client.org