$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: ORLD0NzuOBthg1/k1OvPUCC9ZUH13Bsi1inCMqopB58= Subject key identifier: AD:92:51:24:17:AD:A5:24:E5:86:9B:F9:8A:79:52:20:0F:EE:CA:7B Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 01D0 Signing time: Sun 19 May 2024 04:23:19 +0000 Manifest this update: Sun 19 May 2024 04:23:18 +0000 Manifest next update: Sun 26 May 2024 04:23:18 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: 9Z5z9+8NltCjilw4OxuXAaTRcM7tL+giWsKfGuXAOk8=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: CWQRhDcsRk+PrAPNNvmnTDq9CpqjytNv9S7aPPwX5Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Validity Not Before: May 19 04:23:18 2024 GMT Not After : May 26 04:23:18 2024 GMT Subject: CN=66497eb7-f2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:52:fe:a6:f3:48:ba:ad:a5:56:31:d8:5d: 12:db:d8:5d:ef:6e:b5:ba:92:29:12:1f:d4:bb:c2: 68:87:0c:ea:1a:cd:59:be:a3:71:ab:a9:ba:fb:d9: 5f:6d:2f:2d:96:ef:8f:21:f0:a2:72:98:b0:ec:21: 23:5a:4f:d3:75:89:3f:5f:b3:ea:7f:69:78:55:26: 1f:a9:c7:f1:e9:50:bf:e0:f3:d5:99:15:03:46:59: 6b:78:e9:df:33:3b:87:67:c8:1f:7e:51:d2:69:58: f6:6a:01:41:4d:8d:08:e5:a5:3b:e7:94:41:7a:2a: 1f:3b:91:f2:1f:dc:dc:5f:2d:b5:88:aa:80:da:9c: 8f:ac:8b:da:bc:67:77:20:f7:4f:7d:ce:6e:76:76: 08:4f:54:e5:0c:5f:77:b9:01:b9:00:22:29:b5:c9: 18:c5:77:15:01:39:49:c4:30:a7:e0:68:be:2a:c0: 98:43:ec:ed:48:a4:3c:a7:fb:5e:27:4f:2f:aa:a5: ab:dd:36:4a:77:53:00:39:e4:f9:41:3e:06:9e:52: 45:e2:00:24:c8:ce:30:32:71:eb:19:25:7e:b3:36: 5f:97:46:1c:74:32:6d:48:10:b3:b9:d2:55:65:6c: 68:b0:b9:c0:52:2a:88:73:40:da:a6:75:cb:e2:57: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:92:51:24:17:AD:A5:24:E5:86:9B:F9:8A:79:52:20:0F:EE:CA:7B X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:58:24:79:05:68:28:c0:d8:05:14:56:0e:44:a2:10:8b:ec: 9c:bd:eb:7d:b6:aa:16:5e:01:be:6a:de:0a:6e:af:39:bc:62: e1:8b:78:70:5f:58:67:98:14:73:d1:75:53:88:1c:67:db:12: ff:17:04:b7:2b:fd:f4:1b:43:cc:26:f4:ea:8c:10:6d:65:d7: 41:4c:99:6f:88:b3:d9:e1:e2:e2:58:89:d7:db:fa:e0:8a:e5: ea:de:24:55:73:eb:df:76:e8:69:b3:54:4a:0f:c6:b4:25:04: 29:14:81:32:5e:8b:08:2c:17:0a:4a:2d:e1:45:f2:a0:48:1e: 20:61:11:ea:19:b8:92:8f:b5:ef:1f:c9:b1:49:e8:79:38:3f: 4e:0a:29:c9:57:b2:e0:f2:6d:93:b9:ce:f5:d9:8d:fe:ad:aa: 10:a1:34:09:a6:9a:f2:63:66:7a:36:b9:75:e5:0b:15:05:4f: ac:10:ef:50:64:c9:e6:e0:0f:ff:e2:b6:65:8c:2a:50:1d:7c: 85:80:37:fb:e5:52:e2:6d:18:c1:ed:11:8b:3d:d6:37:9c:33: 0f:2a:48:f3:d9:7a:b3:91:d8:5c:f3:2d:06:fe:23:d9:cb:55: a0:04:fa:83:0d:b3:96:6e:70:d5:1e:f3:9a:07:9f:76:8c:a4: c4:53:10:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjQwNTE5MDQyMzE4WhcNMjQwNTI2MDQyMzE4WjAYMRYwFAYD VQQDEw02NjQ5N2ViNy1mMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBVS/qbzSLqtpVYx2F0S29hd7261upIpEh/Uu8JohwzqGs1ZvqNxq6m6+9lf bS8tlu+PIfCicpiw7CEjWk/TdYk/X7Pqf2l4VSYfqcfx6VC/4PPVmRUDRllreOnf MzuHZ8gfflHSaVj2agFBTY0I5aU755RBeiofO5HyH9zcXy21iKqA2pyPrIvavGd3 IPdPfc5udnYIT1TlDF93uQG5ACIptckYxXcVATlJxDCn4Gi+KsCYQ+ztSKQ8p/te J08vqqWr3TZKd1MAOeT5QT4GnlJF4gAkyM4wMnHrGSV+szZfl0YcdDJtSBCzudJV ZWxosLnAUiqIc0DapnXL4lf2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2SUSQX raUk5Yab+Yp5UiAP7sp7MB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWCR5BWgowNgFFFYORKIQi+ycvet9tqoWXgG+at4Kbq85vGLhi3hw X1hnmBRz0XVTiBxn2xL/FwS3K/30G0PMJvTqjBBtZddBTJlviLPZ4eLiWInX2/rg iuXq3iRVc+vfduhps1RKD8a0JQQpFIEyXosILBcKSi3hRfKgSB4gYRHqGbiSj7Xv H8mxSeh5OD9OCinJV7Lg8m2Tuc712Y3+raoQoTQJppryY2Z6Nrl15QsVBU+sEO9Q ZMnm4A//4rZljCpQHXyFgDf75VLibRjB7RGLPdY3nDMPKkjz2Xqzkdhc8y0G/iPZ y1WgBPqDDbOWbnDVHvOaB592jKTEUxCp -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org