$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: SvArhPwMEK9aUJxSJgxiF05Mqi48xhwQX23yOZ+8cA0= Subject key identifier: 43:2E:6F:1D:26:E8:8E:B7:96:83:7D:B2:65:F3:07:5D:A7:50:23:B9 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 123B Signing time: Sat 18 May 2024 19:42:06 +0000 Manifest this update: Sat 18 May 2024 19:42:05 +0000 Manifest next update: Sat 25 May 2024 19:42:05 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: ZG0In5l5d+LiHpXGeOTZeRZwsNygWx1jh4/b+8NebJo=) 2: 002F950CFF6611EABE77DA4FC4F9AE02.roa (hash: Y8TTzgFVv4EHYS2BwVL/fZQ4/l7G06gpV04OPhl7vrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: May 18 19:42:05 2024 GMT Not After : May 25 19:42:05 2024 GMT Subject: CN=6649048d-adff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:aa:18:a8:57:96:73:e2:84:8d:67:16:31: 0f:b6:3a:77:9c:48:80:60:6d:85:25:10:82:74:b8: ec:16:75:b4:3a:1c:e8:54:23:d1:0d:c9:20:da:4c: 29:db:bb:3f:c1:0a:7b:85:0f:3e:ea:df:44:70:c6: 5e:3a:ec:db:9e:76:9d:70:8e:77:3d:f7:31:ac:e9: d7:38:8e:98:6e:af:08:ec:f0:7d:44:f7:f7:e9:52: ec:bd:a3:53:26:78:8b:07:8a:69:f1:44:76:2c:73: 71:1b:8b:13:81:e6:00:58:bb:54:83:02:4b:9c:bb: 03:ed:af:52:60:ac:5b:f5:b0:15:62:db:7e:c3:30: ba:9b:b5:80:d2:d7:3d:96:c0:3d:96:03:90:8f:79: d1:80:66:15:93:a9:29:c9:bf:7c:b2:64:ac:d9:ea: b3:ca:f3:c9:32:6a:98:fb:a9:ab:f3:25:1c:35:ad: 74:6a:d8:ce:05:a8:aa:ae:0e:38:27:d4:ab:f4:76: 50:c4:83:43:02:e3:10:74:da:11:8d:c5:2a:55:4d: f1:14:20:e0:c5:a0:81:b3:fd:4b:a0:23:c5:1e:5c: 75:ca:48:8d:67:dc:e1:45:56:63:24:c8:36:d1:d1: b9:ae:62:3b:51:75:f0:45:97:1b:48:08:b3:b6:83: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:6F:1D:26:E8:8E:B7:96:83:7D:B2:65:F3:07:5D:A7:50:23:B9 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a4:59:18:f7:0b:72:1a:21:fb:1c:ca:57:6c:42:19:b9:2d: e0:bc:3f:c2:62:6c:d2:2c:29:ff:03:c8:8f:59:72:33:6a:a7: be:44:c7:49:34:71:aa:a8:7a:5a:b3:be:9e:9c:ca:6c:b2:95: 60:64:10:b4:a3:7e:c7:8f:4f:66:a3:7c:52:eb:54:da:fc:56: 20:a8:90:f2:25:80:99:87:c2:1e:fd:a9:86:8d:ef:9f:d9:08: f8:c3:c5:65:fe:a0:63:26:0a:35:bb:27:96:5c:fb:35:c3:84: 1e:6f:88:32:d5:e5:fa:06:a4:a7:f0:09:2e:03:a0:28:b7:24: da:17:3d:48:5c:90:02:47:b2:64:59:fd:c9:26:bc:87:ed:12: 64:36:c0:b6:a2:7c:38:5e:23:1b:8e:3c:68:ae:75:c6:d3:6d: 23:12:5d:9d:96:17:79:c3:60:3c:46:88:a0:35:2b:c7:82:a7: 0c:28:0c:b0:5b:67:d0:a4:2f:94:9a:80:6a:43:96:6c:60:68: 45:3b:aa:c8:38:f5:23:88:c8:7c:39:5d:80:8d:63:dd:98:12: 50:b5:f8:45:0e:7f:1b:a7:03:ed:99:c9:0c:3e:b4:79:80:ab: 2d:0c:c2:3b:c9:59:32:11:57:1d:f6:e7:20:50:db:9a:b2:28: 73:2f:24:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjQwNTE4MTk0MjA1WhcNMjQwNTI1MTk0MjA1WjAYMRYwFAYD VQQDEw02NjQ5MDQ4ZC1hZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqaqGKhXlnPihI1nFjEPtjp3nEiAYG2FJRCCdLjsFnW0OhzoVCPRDckg2kwp 27s/wQp7hQ8+6t9EcMZeOuzbnnadcI53PfcxrOnXOI6Ybq8I7PB9RPf36VLsvaNT JniLB4pp8UR2LHNxG4sTgeYAWLtUgwJLnLsD7a9SYKxb9bAVYtt+wzC6m7WA0tc9 lsA9lgOQj3nRgGYVk6kpyb98smSs2eqzyvPJMmqY+6mr8yUcNa10atjOBaiqrg44 J9Sr9HZQxINDAuMQdNoRjcUqVU3xFCDgxaCBs/1LoCPFHlx1ykiNZ9zhRVZjJMg2 0dG5rmI7UXXwRZcbSAiztoN8bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMubx0m 6I63loN9smXzB12nUCO5MB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXpFkY9wtyGiH7HMpXbEIZuS3gvD/CYmzSLCn/A8iPWXIzaqe+RMdJ NHGqqHpas76enMpsspVgZBC0o37Hj09mo3xS61Ta/FYgqJDyJYCZh8Ie/amGje+f 2Qj4w8Vl/qBjJgo1uyeWXPs1w4Qeb4gy1eX6BqSn8AkuA6AotyTaFz1IXJACR7Jk Wf3JJryH7RJkNsC2onw4XiMbjjxornXG020jEl2dlhd5w2A8RoigNSvHgqcMKAyw W2fQpC+UmoBqQ5ZsYGhFO6rIOPUjiMh8OV2AjWPdmBJQtfhFDn8bpwPtmckMPrR5 gKstDMI7yVkyEVcd9ucgUNuasihzLyQJ -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org