$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: 9xZdp1KUEz8C8DN0m3QGi22VJQsAqmnvxngQrI7LjEs= Subject key identifier: 45:68:BE:D4:09:75:71:83:8F:2E:2E:27:55:B8:D8:0F:0A:1C:AA:2C Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 51 Signing time: Sun 19 May 2024 08:00:04 +0000 Manifest this update: Sun 19 May 2024 08:00:04 +0000 Manifest next update: Sun 26 May 2024 08:00:04 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: r2edSrlb9dXo21P6cJMMlxZVET7OwskYXm1qhm3vZwA=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: Z6eIAw4+ZVpS3+rIFAXPpDa3a9OAI6I61Uyg5h9l7g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: May 19 08:00:04 2024 GMT Not After : May 26 08:00:04 2024 GMT Subject: CN=6649b184-9113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:50:cd:17:49:03:60:30:92:a2:4e:04:a0: 65:a8:76:85:65:63:8f:5a:3e:94:9f:0f:0c:69:6a: 49:8a:93:6a:37:1b:53:51:24:e3:4e:31:cb:16:af: c1:fb:8d:dc:f8:17:e7:79:fa:e2:ee:4a:05:94:9f: 06:b7:64:0b:71:e2:e4:c8:4b:44:37:56:1a:ab:0f: a3:47:88:fb:fa:f2:4f:50:c1:e7:a1:ee:33:ae:3e: 1b:0e:ba:db:cf:04:a5:0b:47:39:30:da:25:aa:f1: 86:14:76:12:45:02:89:34:75:1e:51:07:43:8b:40: 85:a3:e2:0c:11:17:f4:98:42:c3:3c:ce:5b:12:46: f0:c1:3b:46:85:ed:f3:9d:ba:3d:38:5f:9a:6e:d0: ae:fe:b8:58:46:76:f6:bf:60:39:11:1a:5b:4e:b7: 65:1e:6c:50:f1:76:f2:96:fe:ec:ab:15:a0:0b:1c: fb:ef:28:37:14:9d:ef:9a:78:4b:fa:ee:39:59:47: ed:17:6f:df:e0:b9:14:68:be:42:5d:50:00:05:87: 1c:0d:b7:36:67:f8:05:5a:d8:f7:b5:f4:12:04:16: fa:cf:36:e4:6e:5c:b5:2e:b0:0f:17:00:99:fe:33: ae:3e:6e:00:72:0b:80:3e:b6:ee:31:46:dd:4f:a1: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:BE:D4:09:75:71:83:8F:2E:2E:27:55:B8:D8:0F:0A:1C:AA:2C X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:6e:fb:61:82:1a:e7:ac:59:68:cb:db:55:74:42:20:b8: dd:09:7d:f4:38:22:0d:91:29:74:e9:c7:4a:1a:52:e1:f7:f1: 08:aa:8e:09:1d:92:1b:cb:43:fe:23:39:05:0d:75:ef:88:f9: 9a:5d:53:0a:63:b3:cb:21:96:ac:e8:3a:8a:47:e6:c3:23:26: ae:6a:ce:fa:ca:2a:a2:3c:6c:20:9e:c0:d2:19:70:b7:37:cb: d9:d9:84:b4:d5:a6:8e:54:17:82:cb:36:2a:f2:22:18:58:7b: 98:ee:24:e4:8f:98:2b:16:02:7b:b7:d7:30:40:2d:02:61:3e: be:bf:de:67:b9:2e:4a:8d:8e:56:32:99:d1:1a:db:d4:6e:19: 7b:6c:0f:84:fd:68:94:09:da:04:3c:20:6b:97:0e:8a:04:72: bb:37:3a:c5:be:91:9f:c7:3e:56:cb:19:bf:bf:60:98:42:63: af:d6:8d:80:d2:11:ca:5e:37:e9:6c:f9:d9:16:ab:b0:c7:92: 67:46:c0:ad:39:20:9e:4d:f8:00:76:8d:8b:6e:46:ff:83:87: ca:8f:e0:26:32:bd:47:a9:b9:6e:65:29:6e:e7:e2:02:99:37: 90:7a:27:99:73:70:3c:5e:60:bf:5f:69:b0:24:29:49:0d:6a: 28:47:10:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjFFRTExMC8GA1UEBRMoNkIzQkU4RjM0Q0VBNjk0QjBENjRCQ0Y4NTc4NUQ5MTc0 NDM2OTVENDAeFw0yNDA1MTkwODAwMDRaFw0yNDA1MjYwODAwMDRaMBgxFjAUBgNV BAMTDTY2NDliMTg0LTkxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4L1DNF0kDYDCSok4EoGWodoVlY49aPpSfDwxpakmKk2o3G1NRJONOMcsWr8H7 jdz4F+d5+uLuSgWUnwa3ZAtx4uTIS0Q3VhqrD6NHiPv68k9Qweeh7jOuPhsOutvP BKULRzkw2iWq8YYUdhJFAok0dR5RB0OLQIWj4gwRF/SYQsM8zlsSRvDBO0aF7fOd uj04X5pu0K7+uFhGdva/YDkRGltOt2UebFDxdvKW/uyrFaALHPvvKDcUne+aeEv6 7jlZR+0Xb9/guRRovkJdUAAFhxwNtzZn+AVa2Pe19BIEFvrPNuRuXLUusA8XAJn+ M64+bgByC4A+tu4xRt1PoRLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURWi+1Al1 cYOPLi4nVbjYDwocqiwwHwYDVR0jBBgwFoAUazvo80zqaUsNZLz4V4XZF0Q2ldQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMUVFL0RFNkE2MTMwQTU1 RDExRUVCOEU5Q0UxMEM0RjlBRTAyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXp2bzgwenFhVXNOWkx6NFY0WFpGMFEybGRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MUVFL0RFNkE2MTMwQTU1RDExRUVCOEU5Q0UxMEM0RjlBRTAyL2F6dm84MHpxYVVz TlpMejRWNFhaRjBRMmxkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJsbvthghrnrFloy9tVdEIguN0JffQ4Ig2RKXTpx0oaUuH38Qiqjgkd khvLQ/4jOQUNde+I+ZpdUwpjs8shlqzoOopH5sMjJq5qzvrKKqI8bCCewNIZcLc3 y9nZhLTVpo5UF4LLNiryIhhYe5juJOSPmCsWAnu31zBALQJhPr6/3me5LkqNjlYy mdEa29RuGXtsD4T9aJQJ2gQ8IGuXDooEcrs3OsW+kZ/HPlbLGb+/YJhCY6/WjYDS EcpeN+ls+dkWq7DHkmdGwK05IJ5N+AB2jYtuRv+Dh8qP4CYyvUepuW5lKW7n4gKZ N5B6J5lzcDxeYL9fabAkKUkNaihHEBY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org