$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: y5qebhBMoiM5yTYapYkW7ey1GWYu+KI4BeIyFMR3Se8= Subject key identifier: B0:B6:3B:9B:A5:E1:3A:BF:0E:D1:9B:EB:4E:09:DD:BE:64:4E:42:5A Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1614 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 15A2 Signing time: Sat 18 May 2024 17:08:30 +0000 Manifest this update: Sat 18 May 2024 17:08:30 +0000 Manifest next update: Sat 25 May 2024 17:08:30 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: snj+JMt8BYP3jwe1lJrN8PTa7ni4fkjt/RJ9LhWngSE=) 2: F6117244FD3011EE8E789C50C4F9AE02.roa (hash: oYjhSYgXWQrJ2BsnPj39jL9rhhE985p6eckQr1CMyeY=) 3: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: lsOmam/li1bkfNd+RqIYHcsa5LlCUkskqa4cLcEJ5uo=) 4: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: r0YSGkf4Uly1T3ccnKqscdpAXe/eUhnq2u7Y+nWyVFA=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: JKnsYkOp9VjEacI33Ba4AJhjDKF19c/H5ySudQCEfcg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: PIer1s9fnShnuMBkKYfM0HDQ4suxju3yxP90XcCs/1k=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: 2fbDRTJBk5Ytg+eSm5CyRuKLRNTxFiA579mgfklTst4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5652 (0x1614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: May 18 17:08:30 2024 GMT Not After : May 25 17:08:30 2024 GMT Subject: CN=6648e08e-662e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:59:d1:7e:7f:f8:c9:b1:cd:25:99:fd:54: a2:2a:00:74:e2:a0:71:8b:0d:84:5c:85:65:3e:8b: f6:50:58:e6:3c:c1:dc:03:4b:02:8d:24:16:5d:8c: e8:b7:10:0e:f8:1a:66:0c:da:fe:23:04:1b:3a:63: 5d:8b:22:fe:fc:c9:a2:ad:4c:35:5f:2a:a5:a9:31: 71:45:d3:8c:1c:89:d6:8d:cc:15:38:ad:98:73:8f: 24:0b:64:26:5b:99:3e:0d:62:18:f8:77:a4:26:59: 9e:98:f0:8c:b7:b7:e9:f2:04:4e:3f:b4:90:3b:96: 65:f5:a5:66:ef:46:88:fe:76:a7:0a:f6:8d:ec:07: 84:a0:05:c2:2a:ec:84:7a:ec:34:63:2f:c0:11:cd: 06:91:22:0b:6a:e8:5e:09:f0:9d:2a:37:b3:b2:58: 13:bc:03:f6:f3:54:6b:db:1c:01:f0:bd:ef:68:7c: 88:4f:bc:9b:a9:16:c2:82:9f:3f:2d:3a:b1:d4:b1: 3d:8c:70:96:d6:d0:ec:c7:a8:ea:c0:b2:94:7c:86: 2f:93:27:0c:84:6a:e3:1f:8c:54:5c:8d:cd:7d:f1: 15:d8:db:82:29:4e:33:b5:1a:2a:03:c0:2e:f9:50: a2:15:77:a5:fa:28:91:6a:94:78:88:1a:cb:01:e3: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:3B:9B:A5:E1:3A:BF:0E:D1:9B:EB:4E:09:DD:BE:64:4E:42:5A X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:01:4d:e9:44:a8:9c:c5:6a:5c:36:52:ef:5a:b5:67:a0:66: 6e:c4:55:d9:88:70:5d:f3:bb:ea:d7:69:3a:1f:67:db:34:ce: 91:db:d2:37:ef:4d:d4:bb:27:50:f6:c5:fb:41:42:66:81:e7: e0:47:99:ab:22:1f:7e:89:9a:c1:ff:17:19:a1:77:ba:25:80: 47:b8:02:57:35:df:8a:bb:88:de:20:ac:76:73:7c:59:d3:df: 89:ca:d7:cf:8a:a4:f7:6d:f8:81:15:df:22:79:81:af:22:49: 15:19:04:9d:66:f0:a9:49:19:74:1f:74:c1:1f:24:28:44:fe: 8d:24:63:65:36:26:94:70:bf:a3:23:17:ba:fd:cd:2e:52:c0: 31:38:d1:49:63:ec:95:67:ce:67:94:c3:9e:91:68:e5:7d:a8: 52:45:4a:65:3a:32:f3:ef:93:8b:31:d0:82:ec:a2:86:1c:b8: 48:0d:37:75:c5:39:95:50:6d:87:9a:93:e8:40:4f:1d:c9:86: be:f7:79:17:b6:55:c6:9e:b8:4d:77:c2:02:c8:90:8d:e1:c8: 15:c5:8d:e7:bf:aa:45:15:4b:c9:25:34:a2:78:d1:b2:6a:ab: 56:2b:16:e5:66:56:5f:5e:1f:4a:3d:22:b9:d8:f3:76:2a:d5: 53:16:ca:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjQwNTE4MTcwODMwWhcNMjQwNTI1MTcwODMwWjAYMRYwFAYD VQQDEw02NjQ4ZTA4ZS02NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotRZ0X5/+MmxzSWZ/VSiKgB04qBxiw2EXIVlPov2UFjmPMHcA0sCjSQWXYzo txAO+BpmDNr+IwQbOmNdiyL+/MmirUw1XyqlqTFxRdOMHInWjcwVOK2Yc48kC2Qm W5k+DWIY+HekJlmemPCMt7fp8gROP7SQO5Zl9aVm70aI/nanCvaN7AeEoAXCKuyE euw0Yy/AEc0GkSILauheCfCdKjezslgTvAP281Rr2xwB8L3vaHyIT7ybqRbCgp8/ LTqx1LE9jHCW1tDsx6jqwLKUfIYvkycMhGrjH4xUXI3NffEV2NuCKU4ztRoqA8Au +VCiFXel+iiRapR4iBrLAeNAgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC2O5ul 4Tq/DtGb604J3b5kTkJaMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3AU3pRKicxWpcNlLvWrVnoGZuxFXZiHBd87vq12k6H2fbNM6R29I3 703UuydQ9sX7QUJmgefgR5mrIh9+iZrB/xcZoXe6JYBHuAJXNd+Ku4jeIKx2c3xZ 09+JytfPiqT3bfiBFd8ieYGvIkkVGQSdZvCpSRl0H3TBHyQoRP6NJGNlNiaUcL+j Ixe6/c0uUsAxONFJY+yVZ85nlMOekWjlfahSRUplOjLz75OLMdCC7KKGHLhIDTd1 xTmVUG2HmpPoQE8dyYa+93kXtlXGnrhNd8ICyJCN4cgVxY3nv6pFFUvJJTSieNGy aqtWKxblZlZfXh9KPSK52PN2KtVTFsov -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org