$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: CsNWjLbSBVVJu0VmQnQDe12kqCoUKVFKD6Q03zt7FBo= Subject key identifier: 9B:97:9D:1A:DC:7F:60:84:AD:3D:0D:25:DE:61:A2:8B:9B:59:94:A0 Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 0532 Signing time: Sun 19 May 2024 00:58:37 +0000 Manifest this update: Sun 19 May 2024 00:58:36 +0000 Manifest next update: Sun 26 May 2024 00:58:36 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: g3GXtTYoHLZuLM1BrKqSL2cIwDAmJBqIaZX+TmaPP90=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: WJyfu5rloud4g1tWUexr17hivm8d1zYiub4ff246Cbo=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: Xhfz37O5A0Ri5EAkcYwFw6SvIHvNcQCKgk+Fc14BheQ=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: 0kX7U249SIUh/HJN7c/AiJHZs64Z43yJ5lc7dVnigu4=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: Eextjyq4m4XrBQbc9sqdVIrIRNghOanKtGAN2eFXxR4=) 6: 0D55A972AF0311EB96FC344BC4F9AE02.roa (hash: CBbqvgRwYWSYme4+k1ebNPFhjVrrqfMJPTXhxjCxtjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: May 19 00:58:36 2024 GMT Not After : May 26 00:58:36 2024 GMT Subject: CN=66494ebd-47b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:f6:b6:e0:fe:49:4e:78:42:b6:ac:65:65: 62:6e:41:6f:c5:39:0f:5d:fc:2c:08:6a:75:28:d7: 8a:dd:8c:77:f9:75:2b:f6:d2:9e:71:17:ed:09:00: d1:29:b6:74:6f:8d:a4:b2:70:10:1b:f4:c0:9b:02: cf:48:13:1c:35:48:85:a7:5f:ba:fb:bc:b1:a5:53: 6f:9a:8e:84:cf:c2:c2:af:f7:bf:7b:78:69:3c:41: 35:9a:0b:0d:50:2a:14:99:ff:46:a4:a3:68:dd:6e: af:cd:c4:b4:dc:72:24:6a:ee:d0:02:6d:0c:80:12: 7f:01:8c:fd:01:4d:43:70:1a:ce:f2:05:ff:90:e2: e7:f9:5f:2d:10:f3:6a:69:9c:01:63:2d:97:7d:b5: 99:f6:57:0f:54:8d:09:43:18:59:07:66:d3:8b:f7: 32:f8:4f:ce:9b:9c:0a:ed:0d:13:6f:88:79:35:6d: d9:eb:88:45:31:4e:86:cb:68:bb:c1:b2:1c:46:9e: 5c:4d:8c:b2:45:1c:3b:e9:52:8b:34:56:f9:b3:ba: db:7b:1f:3a:49:84:69:5a:44:a2:40:d1:02:bd:fe: 4f:b0:ff:04:89:c5:73:ed:1e:0d:25:4c:92:c2:bf: 71:37:06:e6:86:0f:59:fa:ab:a7:8a:02:42:90:c7: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:9D:1A:DC:7F:60:84:AD:3D:0D:25:DE:61:A2:8B:9B:59:94:A0 X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:6a:d0:55:31:1c:21:29:e0:75:ca:9b:f7:96:e2:74:1b: c9:0a:a9:7c:c8:f7:4f:64:e3:06:64:bc:91:00:27:94:aa:ce: ec:b3:0d:00:6d:f2:e3:0f:47:1a:2c:bf:24:c9:de:dc:03:89: 1a:f5:64:3e:ec:70:a7:cb:f1:9a:92:2d:9a:59:e1:81:80:63: d6:6c:e0:fd:ba:8a:e2:16:9b:93:e5:80:9f:4e:45:64:c7:2b: 1a:dd:c4:1f:67:40:13:5c:89:30:7b:1e:b0:e9:1b:ad:bf:40: b8:4a:03:fb:5b:5f:fc:ad:f8:bd:f9:9e:20:46:21:f3:85:36: c8:6e:82:83:14:e0:42:5d:7a:dc:3e:85:68:2e:d0:05:14:bd: 56:f1:5b:e1:88:ca:54:52:3a:25:fc:36:51:13:a8:3c:94:2b: 57:19:66:d6:1a:47:d8:5b:e7:a3:33:d9:93:3f:99:37:03:05: 7a:b4:d9:ff:a7:e5:9c:9a:44:52:8f:59:41:7e:19:28:95:60: f6:cf:c0:3c:42:ab:f5:89:85:96:4b:23:fc:8a:e7:77:29:73: 31:e3:54:ab:fa:da:af:1e:f6:91:c9:1c:90:53:de:f5:ef:8a: 43:cb:1d:86:76:26:a3:8d:a8:68:97:a4:e6:2c:8a:4c:b6:d6: 1e:1f:cb:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjQwNTE5MDA1ODM2WhcNMjQwNTI2MDA1ODM2WjAYMRYwFAYD VQQDEw02NjQ5NGViZC00N2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9f2tuD+SU54QrasZWVibkFvxTkPXfwsCGp1KNeK3Yx3+XUr9tKecRftCQDR KbZ0b42ksnAQG/TAmwLPSBMcNUiFp1+6+7yxpVNvmo6Ez8LCr/e/e3hpPEE1mgsN UCoUmf9GpKNo3W6vzcS03HIkau7QAm0MgBJ/AYz9AU1DcBrO8gX/kOLn+V8tEPNq aZwBYy2XfbWZ9lcPVI0JQxhZB2bTi/cy+E/Om5wK7Q0Tb4h5NW3Z64hFMU6Gy2i7 wbIcRp5cTYyyRRw76VKLNFb5s7rbex86SYRpWkSiQNECvf5PsP8EicVz7R4NJUyS wr9xNwbmhg9Z+qunigJCkMcqswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuXnRrc f2CErT0NJd5hooubWZSgMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAde2rQVTEcISngdcqb95bidBvJCql8yPdPZOMGZLyRACeUqs7ssw0A bfLjD0caLL8kyd7cA4ka9WQ+7HCny/Gaki2aWeGBgGPWbOD9uoriFpuT5YCfTkVk xysa3cQfZ0ATXIkwex6w6Rutv0C4SgP7W1/8rfi9+Z4gRiHzhTbIboKDFOBCXXrc PoVoLtAFFL1W8VvhiMpUUjol/DZRE6g8lCtXGWbWGkfYW+ejM9mTP5k3AwV6tNn/ p+WcmkRSj1lBfhkolWD2z8A8Qqv1iYWWSyP8iud3KXMx41Sr+tqvHvaRyRyQU971 74pDyx2Gdiajjahol6TmLIpMttYeH8uz -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org