$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: xjGE9CTHItvDuL30DciAABgJZ2I+gD3u+grWZJP8u6Q= Subject key identifier: 54:F2:8A:E7:7D:04:AF:6D:11:A5:BB:45:C7:A3:0F:68:C2:D2:41:E1 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 047D Signing time: Sun 19 May 2024 01:50:51 +0000 Manifest this update: Sun 19 May 2024 01:50:50 +0000 Manifest next update: Sun 26 May 2024 01:50:50 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: k+RbxgfOcqekJsB3zkpcKcofmKZysLPc1nCmGhUfhkY=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: Dfik7weaRltk+9v6DRaeyNu1eaQE/HPMf1oNTOjvmY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: May 19 01:50:50 2024 GMT Not After : May 26 01:50:50 2024 GMT Subject: CN=66495afb-c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:21:30:85:05:d3:2c:4a:1d:c8:53:66:d8: 8c:fe:6e:a9:e9:6d:17:80:86:62:46:dc:dd:da:57: d3:9a:31:fc:c0:41:49:db:e0:c7:6a:b4:1a:30:91: d7:cb:ff:23:8b:9a:ca:73:d6:4b:77:6f:b0:23:7e: d2:c0:d7:2e:db:4c:6b:36:c1:94:11:58:17:a7:18: af:47:42:d9:00:f6:af:ea:54:c6:b0:a9:2e:6f:d4: 92:5c:76:8b:a9:fa:35:fe:4d:8f:29:d4:d9:57:13: 91:49:a8:df:07:2e:65:8a:ec:9e:b5:b1:ec:bb:be: 53:ea:cc:9b:68:c9:04:21:66:4a:73:01:e2:89:8b: 20:e1:70:f4:cb:3d:b0:b7:05:6b:e9:7e:42:54:93: 33:99:02:90:d8:75:7d:b9:a7:ac:a5:77:e2:eb:a3: c7:97:39:80:59:da:ab:78:5b:ab:de:c3:7b:8c:b7: 17:3f:d2:75:da:56:be:b9:65:ff:2b:d0:12:42:69: a4:6e:9f:3b:7f:ce:d3:89:ba:88:e7:6d:20:6c:ef: a8:a9:3a:7f:cf:b9:f3:eb:e1:b2:b3:4c:5f:e1:9d: 44:fb:89:01:47:1c:8f:a2:14:dc:78:40:49:bb:75: df:e0:f5:35:e8:65:19:48:88:24:7a:95:41:00:b5: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F2:8A:E7:7D:04:AF:6D:11:A5:BB:45:C7:A3:0F:68:C2:D2:41:E1 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ee:e2:a3:0e:33:33:2e:71:5a:77:2b:4d:8c:c6:13:d2:24: 69:a0:f6:0f:cc:f9:78:4c:4d:75:a0:5e:f9:8b:92:b8:50:bf: bc:50:e1:5f:04:dc:8b:64:17:31:f3:9b:c5:25:e4:e3:f2:79: cd:92:6c:f7:56:33:69:81:de:3d:98:5e:43:45:4d:36:42:1b: 0c:bd:45:bc:a7:38:3a:be:b3:5d:6a:ea:4c:f8:48:43:ad:f8: 99:63:3e:17:bf:d5:52:10:a9:3f:72:31:75:91:50:57:5d:c0: 32:e3:17:df:6d:e1:97:60:b6:20:b9:53:a6:f3:23:89:90:2d: 26:9b:1f:0a:e1:08:db:0b:b6:21:a5:a4:79:4c:52:f7:06:b8: 8f:8d:a1:f8:45:de:b1:08:6a:75:f9:2d:bf:09:24:45:42:d8: 0c:67:32:6a:f0:f8:1b:76:58:b8:44:79:58:4e:5b:91:f7:a6: a4:43:c5:2d:92:33:31:f3:1b:68:26:bd:79:2c:f7:16:81:d7: e0:b1:8e:4d:99:c5:d7:0f:63:4b:98:cd:8d:9c:63:49:c0:ff: e0:0f:16:fa:af:96:ea:4f:5f:2a:b4:f2:34:52:31:2d:1d:d3: a3:3b:30:a0:44:3f:bb:b0:d3:ae:ed:59:32:82:e6:35:d6:55: a2:b1:0f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjQwNTE5MDE1MDUwWhcNMjQwNTI2MDE1MDUwWjAYMRYwFAYD VQQDEw02NjQ5NWFmYi1jMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFwhMIUF0yxKHchTZtiM/m6p6W0XgIZiRtzd2lfTmjH8wEFJ2+DHarQaMJHX y/8ji5rKc9ZLd2+wI37SwNcu20xrNsGUEVgXpxivR0LZAPav6lTGsKkub9SSXHaL qfo1/k2PKdTZVxORSajfBy5liuyetbHsu75T6sybaMkEIWZKcwHiiYsg4XD0yz2w twVr6X5CVJMzmQKQ2HV9uaespXfi66PHlzmAWdqreFur3sN7jLcXP9J12la+uWX/ K9ASQmmkbp87f87TibqI520gbO+oqTp/z7nz6+Gys0xf4Z1E+4kBRxyPohTceEBJ u3Xf4PU16GUZSIgkepVBALWKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTyiud9 BK9tEaW7RcejD2jC0kHhMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS7uKjDjMzLnFadytNjMYT0iRpoPYPzPl4TE11oF75i5K4UL+8UOFf BNyLZBcx85vFJeTj8nnNkmz3VjNpgd49mF5DRU02QhsMvUW8pzg6vrNdaupM+EhD rfiZYz4Xv9VSEKk/cjF1kVBXXcAy4xffbeGXYLYguVOm8yOJkC0mmx8K4QjbC7Yh paR5TFL3BriPjaH4Rd6xCGp1+S2/CSRFQtgMZzJq8Pgbdli4RHlYTluR96akQ8Ut kjMx8xtoJr15LPcWgdfgsY5NmcXXD2NLmM2NnGNJwP/gDxb6r5bqT18qtPI0UjEt HdOjOzCgRD+7sNOu7VkyguY11lWisQ9z -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org