$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: U0Tp1X+ynGYvIRD+77pgELb7yggQUklO2z2iIkD9AC0= Subject key identifier: AE:05:87:19:16:1F:A1:12:AF:D9:6C:7B:57:E1:6F:F9:DE:90:3F:0B Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 0243 Signing time: Sun 19 May 2024 03:58:36 +0000 Manifest this update: Sun 19 May 2024 03:58:36 +0000 Manifest next update: Sun 26 May 2024 03:58:36 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: y81aJ7LshyXWZjMFtbpesHMDu9VJjnlYk4TpU8OLa4o=) 2: 20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa (hash: N8YygsOn3kFXU/B1B9F0kEH72Tl5G3KMygZ1IcPUzvs=) 3: 956EBE24CDBA11EEB814A32FC4F9AE02.roa (hash: bp3gKm4De/qclQ5aA9cQhwihjGxOyYV5X5TBmwow1q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: May 19 03:58:36 2024 GMT Not After : May 26 03:58:36 2024 GMT Subject: CN=664978ec-07a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:4a:d3:f9:6d:ac:3d:60:06:d9:7f:af:f4: e5:25:31:51:43:bd:9c:78:8b:97:ba:dc:f5:c6:d5: 9c:7d:53:84:38:77:71:9b:c2:e3:4c:75:9a:93:0a: 6e:68:49:52:48:cd:02:46:5e:c8:e0:e6:e4:52:99: 96:b4:6f:ee:4c:42:b7:98:fa:cb:e9:2a:80:f0:56: 72:b8:d2:c8:39:52:72:c7:79:63:33:96:d4:9d:6e: d6:7e:31:ad:13:fb:de:86:95:75:99:79:b3:bb:ab: d0:ba:09:7f:eb:e4:79:2f:26:cb:e9:1b:d4:53:18: 15:ef:72:4f:7d:02:30:30:bd:81:63:2a:e6:c7:5a: cb:75:c5:1f:e6:3c:4c:fd:71:6f:74:9d:e2:49:ce: 8e:80:30:82:95:bb:99:a6:77:af:7a:6f:ba:21:85: 32:ff:00:5f:a1:f6:af:23:94:10:43:d9:95:40:63: 7f:d2:53:d8:64:1a:77:33:44:13:2f:ef:de:0e:fe: 9f:c7:8e:ca:49:b3:6c:17:fd:0b:30:ed:59:9b:88: 66:98:23:64:45:66:45:4a:6c:34:7b:83:67:cd:52: 70:e1:83:30:c3:b1:ec:fb:9c:99:1e:11:2d:60:07: f5:a5:c6:25:cb:98:86:ee:14:ac:4f:59:64:11:0d: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:05:87:19:16:1F:A1:12:AF:D9:6C:7B:57:E1:6F:F9:DE:90:3F:0B X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6e:15:99:b6:79:a5:6d:47:b4:3e:d4:6a:3f:a2:bb:a1:a7: f0:44:71:db:93:ab:18:f3:af:c1:8c:25:4f:50:09:d5:0f:d2: c1:77:f2:db:c4:7a:16:56:8a:1a:57:a1:28:16:54:f5:79:39: 85:df:c4:a7:79:c1:0a:8f:d3:fb:2f:a0:2d:b3:bc:75:da:5f: 6f:ef:ca:12:76:b5:60:bf:79:93:12:c4:46:5c:df:f0:f7:4a: 95:5e:7e:f4:a7:44:50:89:8e:e8:07:1d:5d:b9:1f:ab:0c:65: ec:cc:13:08:97:df:4a:43:b5:6c:bc:c1:fa:6e:67:53:a3:f2: 98:b9:51:94:6d:37:45:35:75:a7:f2:8c:da:ca:55:d2:ca:5c: aa:0b:e8:e0:8f:f9:54:15:22:de:1a:6a:b3:a4:13:b1:b1:a1: 7c:e0:a2:76:6f:9d:eb:31:9a:e0:8f:c5:46:80:17:d2:99:ea: a9:58:16:75:fa:55:57:95:bb:98:74:17:83:ed:f4:4a:53:0b: 50:59:03:19:40:b1:92:d7:02:fa:20:52:19:9b:7c:ff:10:2b: 64:79:95:65:f6:a4:4b:48:3c:41:ca:85:bd:2a:1d:4c:47:e9: ca:e6:df:a1:58:39:ab:53:21:59:5b:27:e3:1f:1f:42:5d:18: 06:db:dc:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjQwNTE5MDM1ODM2WhcNMjQwNTI2MDM1ODM2WjAYMRYwFAYD VQQDEw02NjQ5NzhlYy0wN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzodK0/ltrD1gBtl/r/TlJTFRQ72ceIuXutz1xtWcfVOEOHdxm8LjTHWakwpu aElSSM0CRl7I4ObkUpmWtG/uTEK3mPrL6SqA8FZyuNLIOVJyx3ljM5bUnW7WfjGt E/vehpV1mXmzu6vQugl/6+R5LybL6RvUUxgV73JPfQIwML2BYyrmx1rLdcUf5jxM /XFvdJ3iSc6OgDCClbuZpnevem+6IYUy/wBfofavI5QQQ9mVQGN/0lPYZBp3M0QT L+/eDv6fx47KSbNsF/0LMO1Zm4hmmCNkRWZFSmw0e4NnzVJw4YMww7Hs+5yZHhEt YAf1pcYly5iG7hSsT1lkEQ1ARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4FhxkW H6ESr9lse1fhb/nekD8LMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqbhWZtnmlbUe0PtRqP6K7oafwRHHbk6sY86/BjCVPUAnVD9LBd/Lb xHoWVooaV6EoFlT1eTmF38SnecEKj9P7L6Ats7x12l9v78oSdrVgv3mTEsRGXN/w 90qVXn70p0RQiY7oBx1duR+rDGXszBMIl99KQ7VsvMH6bmdTo/KYuVGUbTdFNXWn 8ozaylXSylyqC+jgj/lUFSLeGmqzpBOxsaF84KJ2b53rMZrgj8VGgBfSmeqpWBZ1 +lVXlbuYdBeD7fRKUwtQWQMZQLGS1wL6IFIZm3z/ECtkeZVl9qRLSDxByoW9Kh1M R+nK5t+hWDmrUyFZWyfjHx9CXRgG29zu -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org