$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: slDHVVGSZRIjSTtFNZ6gPMyi4DPQybQwf6nMvcZPy4Q= Subject key identifier: 66:57:BF:6C:F9:1D:2A:35:CC:7C:2A:E4:D6:C9:59:2E:B0:28:72:25 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0433 Signing time: Sun 19 May 2024 02:00:38 +0000 Manifest this update: Sun 19 May 2024 02:00:37 +0000 Manifest next update: Sun 26 May 2024 02:00:37 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: NwhaFOiGZeHe3Hxd1JLvZizpxnvieX5ZEXj+nfzVqLM=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: RUb4fveS6KNpdqQZ3iK34TgQh1XppIjAE8PLiJx+i58=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: oV2v23VyIR5s0kEFyHz3FmFpgbo4gZtQ6jb48hoRfTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: May 19 02:00:37 2024 GMT Not After : May 26 02:00:37 2024 GMT Subject: CN=66495d45-05c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:51:e2:12:22:f8:9a:8b:1b:80:4e:4f:f4: 88:44:53:6b:e6:b8:b0:8f:4d:52:e2:29:d6:81:fd: 08:ea:3c:75:1d:7d:70:0a:e7:26:08:16:45:e8:ba: 78:9f:da:7c:bc:de:04:20:a9:22:ce:82:91:5c:8d: 44:bb:59:d2:61:ed:82:9e:00:0c:77:f2:2d:b9:1b: 08:8e:ac:88:3e:c3:61:e4:a3:22:f8:39:ff:c0:3a: af:72:ae:76:bd:aa:d1:d8:d8:6d:39:0c:0b:56:2d: a7:25:42:30:70:d0:f7:08:d1:70:67:93:f5:c0:ed: ac:93:a9:e3:62:18:d8:a8:76:57:d1:74:aa:a0:41: 71:58:f3:f8:66:c4:32:21:c8:94:7d:c7:f9:c7:ba: b8:90:40:6e:11:46:cd:2d:bc:e8:d5:31:6e:9a:67: ad:3a:12:6c:32:02:ed:85:2d:37:53:54:31:04:b8: bd:52:72:de:8c:21:e7:bb:14:e9:8a:80:a7:4c:a9: 18:86:93:af:5d:d3:03:5f:18:c5:1c:cc:3c:90:2f: 01:12:6a:2d:a3:65:05:f5:9a:50:cb:ab:67:b7:ec: 83:ec:4d:4c:18:11:7e:2c:d8:f1:a1:76:fc:14:92: 38:5c:c2:47:01:55:06:12:da:74:4b:28:b1:12:83: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:BF:6C:F9:1D:2A:35:CC:7C:2A:E4:D6:C9:59:2E:B0:28:72:25 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5d:71:26:62:01:29:0b:5c:d7:7f:ec:84:a9:08:7e:d9:0b: a3:c1:94:42:c1:16:81:1f:dd:4d:47:50:63:13:b1:a7:e6:44: f4:0c:76:32:0e:35:6f:61:17:36:e1:9f:d3:bc:ab:62:c5:74: e3:a5:8b:9a:a8:62:20:b0:3a:99:85:70:8b:e1:56:e4:43:25: 16:29:93:df:d5:54:04:cf:8e:a6:79:72:98:3b:09:45:d7:bf: 14:f1:ef:0e:72:33:18:a1:56:e6:ee:aa:e2:c4:de:0c:3b:5c: 35:20:f7:6c:0d:df:64:a9:2b:7d:9d:00:71:11:b6:d3:d5:29: 83:fa:e1:71:0f:40:51:b6:6b:e7:87:de:1f:06:f9:9c:af:98: 76:a9:88:fb:15:58:5e:d3:fa:8c:8b:a2:73:23:83:44:05:5c: 97:bd:ae:5f:81:da:2d:84:ad:37:c3:6d:56:13:a9:0e:ee:e9: 49:be:4c:48:71:91:04:c5:69:e5:61:3d:32:d5:a1:e6:55:33: bc:1b:7c:e9:ed:cc:54:54:d5:24:1d:cd:2f:18:aa:a9:1c:f4: 1b:28:ce:85:a9:8f:39:c0:30:01:84:2b:8c:8e:e5:2f:54:0a: a6:35:46:4e:da:df:ca:3d:f1:e9:d9:f6:2e:10:07:c9:73:af: 1b:90:71:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjQwNTE5MDIwMDM3WhcNMjQwNTI2MDIwMDM3WjAYMRYwFAYD VQQDEw02NjQ5NWQ0NS0wNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRBR4hIi+JqLG4BOT/SIRFNr5riwj01S4inWgf0I6jx1HX1wCucmCBZF6Lp4 n9p8vN4EIKkizoKRXI1Eu1nSYe2CngAMd/ItuRsIjqyIPsNh5KMi+Dn/wDqvcq52 varR2NhtOQwLVi2nJUIwcND3CNFwZ5P1wO2sk6njYhjYqHZX0XSqoEFxWPP4ZsQy IciUfcf5x7q4kEBuEUbNLbzo1TFummetOhJsMgLthS03U1QxBLi9UnLejCHnuxTp ioCnTKkYhpOvXdMDXxjFHMw8kC8BEmoto2UF9ZpQy6tnt+yD7E1MGBF+LNjxoXb8 FJI4XMJHAVUGEtp0SyixEoNWwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZXv2z5 HSo1zHwq5NbJWS6wKHIlMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/XXEmYgEpC1zXf+yEqQh+2QujwZRCwRaBH91NR1BjE7Gn5kT0DHYy DjVvYRc24Z/TvKtixXTjpYuaqGIgsDqZhXCL4VbkQyUWKZPf1VQEz46meXKYOwlF 178U8e8OcjMYoVbm7qrixN4MO1w1IPdsDd9kqSt9nQBxEbbT1SmD+uFxD0BRtmvn h94fBvmcr5h2qYj7FVhe0/qMi6JzI4NEBVyXva5fgdothK03w21WE6kO7ulJvkxI cZEExWnlYT0y1aHmVTO8G3zp7cxUVNUkHc0vGKqpHPQbKM6FqY85wDABhCuMjuUv VAqmNUZO2t/KPfHp2fYuEAfJc68bkHFa -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org