$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: ccYymyrwykGsyUfLfaOnQ3yetWIZ8OiEVQfNpxsDEWU= Subject key identifier: C1:50:39:39:B3:1C:33:E7:88:68:55:60:B4:7F:6C:F5:76:16:53:3C Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 055F Signing time: Sun 19 May 2024 00:48:13 +0000 Manifest this update: Sun 19 May 2024 00:48:13 +0000 Manifest next update: Sun 26 May 2024 00:48:13 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: 9T8+ZGzvN3XIePJCto4fudoYZxTM88S/J1+o2IUvVhw=) 2: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: 3hRCIGv8J6ZPD7eqCFcSdXHz6UnDLueLvhKMUoFXKZg=) 3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: VUfYYGUfVgXIhkgz5s5HyLNUsWHidDwIj7X1Pl5aTe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: May 19 00:48:13 2024 GMT Not After : May 26 00:48:13 2024 GMT Subject: CN=66494c4d-953d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:8e:88:6d:29:ae:a1:e9:6d:e1:02:84:8d: e9:2b:e6:e5:a5:65:85:03:f8:e7:ec:f3:d9:d4:24: 18:a3:e6:97:f3:f4:3b:41:be:b9:c6:11:86:76:35: 6a:4f:f4:4c:f2:37:5d:b5:cd:6f:dc:b9:e2:2c:b6: 5a:fa:d7:37:b3:f4:23:07:82:e9:7c:6f:51:17:9e: 81:db:9d:56:52:10:e4:b7:3c:a8:b5:94:ae:b4:8a: a0:cc:b3:09:32:ba:b3:30:d6:49:31:7a:f7:bb:60: 07:53:c9:9d:a1:f9:07:7c:1e:13:48:78:65:54:dc: 1a:2c:2b:0c:a3:4f:58:21:c4:c7:f5:a5:34:99:5e: 30:5b:46:14:ea:b9:41:94:8b:13:8a:bd:20:dd:67: 0d:bd:66:ba:55:34:06:d3:f3:5c:7b:fe:11:a9:e8: 1e:b2:ca:ad:ff:5b:ea:8a:b8:4f:f1:ff:5b:11:ba: 3f:38:c7:8a:09:96:bb:e3:c7:fa:25:27:6d:ef:c5: 3d:7d:1d:dc:f7:11:30:e1:c0:ea:dd:d6:12:33:a4: 26:d7:35:5f:29:b7:ca:a8:51:8c:4e:36:2c:0a:0e: e9:19:38:96:2a:69:ec:39:80:67:f5:38:cf:71:b5: 28:3f:4d:a3:69:96:a6:8b:9b:19:49:9b:b2:8f:e2: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:50:39:39:B3:1C:33:E7:88:68:55:60:B4:7F:6C:F5:76:16:53:3C X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:6a:1e:07:e7:47:15:1d:7a:cc:4d:54:f0:10:ed:58:05: f3:17:c7:de:72:d6:64:e9:e9:9d:e9:c0:62:3c:b6:5e:b5:c6: 31:da:f6:40:55:24:04:95:5d:74:17:d8:06:24:b9:6e:5b:a2: 8a:9f:60:f4:d0:0b:de:b2:0c:36:f1:52:9b:8f:a7:fe:0b:59: 33:46:e9:0d:00:b0:57:56:16:7b:8a:2a:44:1e:f0:71:79:1d: 17:b9:ca:53:4a:03:a8:06:e4:90:00:dc:3c:b3:66:06:1b:f5: c2:f2:35:a6:0b:bb:e7:77:c1:19:4e:c5:f6:bd:75:11:49:6c: 11:e3:4d:d3:a2:39:0e:03:f6:bf:51:23:72:b6:72:0b:ce:c0: 69:73:c5:49:5a:75:73:3d:a8:0a:5e:c5:53:29:8c:f8:c6:35: 46:17:a3:0b:8f:ef:43:e6:31:5f:72:df:db:28:0c:31:9a:94: fe:1a:0c:f5:81:46:ef:36:1a:a5:2b:0f:b9:d7:6e:c5:65:10: ba:f8:cf:b0:a0:bd:a2:c6:ab:d9:c0:20:fa:06:f8:9a:d8:47: a2:83:76:08:c4:48:1c:dc:b7:4a:00:22:a7:56:71:be:23:af: 66:ab:7e:94:f6:42:8c:6d:09:00:67:ba:3e:3c:d9:5e:b4:3c: 3a:be:f2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjQwNTE5MDA0ODEzWhcNMjQwNTI2MDA0ODEzWjAYMRYwFAYD VQQDEw02NjQ5NGM0ZC05NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9eOiG0prqHpbeEChI3pK+blpWWFA/jn7PPZ1CQYo+aX8/Q7Qb65xhGGdjVq T/RM8jddtc1v3LniLLZa+tc3s/QjB4LpfG9RF56B251WUhDktzyotZSutIqgzLMJ MrqzMNZJMXr3u2AHU8mdofkHfB4TSHhlVNwaLCsMo09YIcTH9aU0mV4wW0YU6rlB lIsTir0g3WcNvWa6VTQG0/Nce/4Rqegessqt/1vqirhP8f9bEbo/OMeKCZa748f6 JSdt78U9fR3c9xEw4cDq3dYSM6Qm1zVfKbfKqFGMTjYsCg7pGTiWKmnsOYBn9TjP cbUoP02jaZami5sZSZuyj+I5JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFQOTmz HDPniGhVYLR/bPV2FlM8MB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAySmoeB+dHFR16zE1U8BDtWAXzF8fectZk6emd6cBiPLZetcYx2vZA VSQElV10F9gGJLluW6KKn2D00Avesgw28VKbj6f+C1kzRukNALBXVhZ7iipEHvBx eR0XucpTSgOoBuSQANw8s2YGG/XC8jWmC7vnd8EZTsX2vXURSWwR403TojkOA/a/ USNytnILzsBpc8VJWnVzPagKXsVTKYz4xjVGF6MLj+9D5jFfct/bKAwxmpT+Ggz1 gUbvNhqlKw+5127FZRC6+M+woL2ixqvZwCD6Bvia2Eeig3YIxEgc3LdKACKnVnG+ I69mq36U9kKMbQkAZ7o+PNletDw6vvLR -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org