$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft File: V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json) Hash identifier: /mdY2vTr5LtedUDqvODZNoe5qrfPc2c9idNaDCyupaE= Subject key identifier: 12:16:90:10:87:B4:F7:68:BA:27:B8:EC:5F:42:4C:F1:C3:D2:50:EE Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D Certificate serial: 0F77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft Manifest number: 0F5D Signing time: Sat 18 May 2024 18:10:33 +0000 Manifest this update: Sat 18 May 2024 18:10:32 +0000 Manifest next update: Sat 25 May 2024 18:10:32 +0000 Files and hashes: 1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: mBBRklxEvbznXHPMNDjUcAHyFx0p7O0tE5n3e5YOaMA=) 2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: VmCCO9rKxQqxPlrHeWq9U7q+LKdaSQL34qbQkvZoV8g=) 3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: NdBHmG+jT3mlpfAnpJWEoNWyBuLoxpMWZ5qP5JUGkiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3959 (0xf77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D Validity Not Before: May 18 18:10:32 2024 GMT Not After : May 25 18:10:32 2024 GMT Subject: CN=6648ef19-9f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:e1:e6:f9:7d:0b:68:b4:5b:76:c3:9e:c9: 72:7f:5b:30:b2:16:9e:eb:15:a3:18:0d:87:b6:61: c6:68:d7:07:20:af:bf:a4:28:dd:64:6c:2e:fe:75: 58:08:aa:0b:39:1f:43:29:79:03:60:58:35:dc:7c: c2:fa:19:42:ba:9b:6b:45:99:07:df:da:28:ed:82: 10:bd:4e:01:5b:22:b0:56:33:12:1c:d9:21:af:57: c1:84:d6:15:12:5a:32:3e:c2:25:84:21:df:2d:75: 42:69:eb:20:4d:2f:70:c1:0b:e8:71:53:96:b5:a3: 26:9c:95:55:8a:30:99:54:cc:5a:7b:45:ec:55:66: b3:bf:74:42:b5:83:1e:21:c7:0d:7e:a5:26:c6:e6: 6a:5d:ea:5f:cc:16:69:45:ec:f4:4f:04:ea:c3:b2: 2d:94:a8:b8:a5:dd:07:ca:bb:84:f2:72:c1:60:0e: 76:15:2a:63:e2:92:1a:90:af:e9:23:7e:22:92:d3: 19:6c:b0:4f:8c:e0:d2:e7:18:c7:58:4f:c5:92:98: 44:8e:9e:c4:51:d5:b5:f3:7c:81:8f:ad:b9:23:0c: ff:dc:63:ea:41:b1:97:ce:bb:9d:f0:39:07:c7:e6: 55:ee:e2:0d:97:2c:de:1c:3a:6a:58:f1:1c:cf:3a: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:16:90:10:87:B4:F7:68:BA:27:B8:EC:5F:42:4C:F1:C3:D2:50:EE X509v3 Authority Key Identifier: keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a2:30:8d:04:7e:dd:84:06:ec:83:fb:da:41:7e:29:2f:08: 1e:2f:f6:ad:e6:3e:b7:0c:1a:cd:99:05:f3:bf:53:fe:5b:93: 43:8e:a8:da:23:6e:24:35:dc:22:1c:3e:15:98:61:89:df:c9: d4:38:0b:20:93:92:b0:b8:09:75:81:5b:44:d9:81:9d:85:e6: cb:7d:3a:5a:20:ea:6d:a8:94:95:ab:e8:5c:91:5d:3e:d0:df: d7:54:75:1d:5d:36:0f:eb:d1:49:7d:8b:1e:b6:c4:6d:cf:27: 92:b9:2c:92:d7:64:60:8f:39:df:39:7b:48:31:b7:26:61:31: 5e:f6:78:52:fd:1d:22:6d:1c:6b:c4:fd:dd:7e:68:bc:9d:c7: 96:61:ee:f7:2f:89:fe:48:78:44:73:ef:cc:c0:aa:84:85:1d: ff:75:30:fe:d0:d9:f6:d9:2e:a9:a0:aa:4f:e0:03:a7:a4:23: 73:e9:b6:89:00:de:b7:1c:fd:f2:a6:15:3a:04:45:1c:06:eb: d6:b3:cd:70:0c:0e:19:78:d7:ab:d1:47:79:78:16:a1:ff:8d: f0:9b:59:e4:f7:b2:9b:35:1e:c6:bc:0e:f8:a2:32:a3:99:a0: fd:4e:b2:7f:2d:96:e6:57:64:89:5d:b0:05:57:34:f0:4c:f9: 54:f3:a8:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzNkExMTAvBgNVBAUTKDU3ODQwRkI0NDFEMkIzNEM4RUU2OTlEMjY0NzEyQjRB NUUwRkVEOEQwHhcNMjQwNTE4MTgxMDMyWhcNMjQwNTI1MTgxMDMyWjAYMRYwFAYD VQQDEw02NjQ4ZWYxOS05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUTh5vl9C2i0W3bDnslyf1swshae6xWjGA2HtmHGaNcHIK+/pCjdZGwu/nVY CKoLOR9DKXkDYFg13HzC+hlCuptrRZkH39oo7YIQvU4BWyKwVjMSHNkhr1fBhNYV EloyPsIlhCHfLXVCaesgTS9wwQvocVOWtaMmnJVVijCZVMxae0XsVWazv3RCtYMe IccNfqUmxuZqXepfzBZpRez0TwTqw7ItlKi4pd0HyruE8nLBYA52FSpj4pIakK/p I34iktMZbLBPjODS5xjHWE/FkphEjp7EUdW183yBj625Iwz/3GPqQbGXzrud8DkH x+ZV7uINlyzeHDpqWPEczzrMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIWkBCH tPdouie47F9CTPHD0lDuMB8GA1UdIwQYMBaAFFeED7RB0rNMjuaZ0mRxK0peD+2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM2QS80MzNBRjc4QzQ2 QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3MweU81cG5TWkhFclNsNFA3 WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0UVB0RUhTczB5TzVwblNaSEVyU2w0UDdZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM2QS80MzNBRjc4QzQ2QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3Mw eU81cG5TWkhFclNsNFA3WTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwojCNBH7dhAbsg/vaQX4pLwgeL/at5j63DBrNmQXzv1P+W5NDjqja I24kNdwiHD4VmGGJ38nUOAsgk5KwuAl1gVtE2YGdhebLfTpaIOptqJSVq+hckV0+ 0N/XVHUdXTYP69FJfYsetsRtzyeSuSyS12RgjznfOXtIMbcmYTFe9nhS/R0ibRxr xP3dfmi8nceWYe73L4n+SHhEc+/MwKqEhR3/dTD+0Nn22S6poKpP4AOnpCNz6baJ AN63HP3yphU6BEUcBuvWs81wDA4ZeNer0Ud5eBah/43wm1nk97KbNR7GvA74ojKj maD9TrJ/LZbmV2SJXbAFVzTwTPlU86is -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org