$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft File: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json) Hash identifier: owHGMQQR3DUjdDT6w/RbEQ11YwRNB5ZIkN2B52i0w+Y= Subject key identifier: 31:3E:99:10:72:9C:05:54:3A:C6:2D:D0:64:56:CA:29:AF:E0:41:F0 Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 Certificate issuer: /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft Manifest number: 0132 Signing time: Sun 19 May 2024 05:01:05 +0000 Manifest this update: Sun 19 May 2024 05:01:04 +0000 Manifest next update: Sun 26 May 2024 05:01:04 +0000 Files and hashes: 1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: bhpD1w+1/SKsQ/DDoNtPDIvlhTn+sYS08on/ArA/0e4=) 2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: TjnV5mFOYdxb90Wl7rBBpD16GWeK0cHfYitbTARm7mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1 Validity Not Before: May 19 05:01:04 2024 GMT Not After : May 26 05:01:04 2024 GMT Subject: CN=66498791-4aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:02:b5:d6:2b:56:33:ab:d7:ac:92:6c:b2: aa:50:7d:36:4c:0c:21:c2:bc:5b:28:90:0d:31:f6: f0:fe:e5:7e:f4:f4:48:1c:50:b8:fe:e3:94:98:08: 5a:e1:38:39:e2:d1:53:1b:91:80:f8:35:2f:89:2d: 02:aa:69:5b:b9:16:c2:11:11:3b:64:80:de:2e:0b: 80:05:a3:f7:6b:42:46:f6:1f:5e:7f:1a:90:ee:72: 17:e2:9c:79:8e:1f:12:67:b0:b8:ee:1f:38:59:34: 0d:e2:00:af:ef:75:c7:b0:0b:1d:a1:78:15:02:2f: dc:c7:da:a4:41:99:19:b3:d9:8e:e3:2d:69:7e:83: 9f:90:1c:ab:23:82:6a:b4:53:81:b5:38:bb:7c:8c: 09:3a:ea:3c:f8:cc:f1:ae:36:12:8b:9d:ac:d4:5e: 02:33:c2:bb:0b:fd:0b:9a:ad:bc:f1:12:c1:93:f7: 2d:69:ee:2d:6b:90:e8:a3:6d:ad:77:2b:72:2e:75: c5:82:9b:93:e0:f1:40:ec:4d:cc:fc:f1:99:cb:e1: eb:c9:88:bf:1d:4e:94:d3:38:75:13:cf:7e:93:ef: 03:99:97:0d:f1:9c:43:04:ed:be:46:08:a8:bf:45: a3:7c:b1:d2:09:be:20:06:33:0e:79:af:62:bd:a6: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3E:99:10:72:9C:05:54:3A:C6:2D:D0:64:56:CA:29:AF:E0:41:F0 X509v3 Authority Key Identifier: keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:71:b9:59:5d:32:12:c3:c0:3e:ab:e0:4d:b2:90:2a:5c: 80:8d:a8:51:60:8d:f4:ad:bf:c9:79:ac:08:4e:b1:4d:2a:69: 87:36:b0:f8:05:d4:b3:da:a0:62:98:4c:78:d5:b1:bc:f1:71: e7:e9:8b:bc:52:ab:62:e3:c4:fb:f5:53:f1:e0:d1:fc:ed:3f: c4:0d:26:ff:6a:f5:63:44:3e:31:6e:01:13:02:bb:90:ec:fb: f5:f3:df:3d:ec:6d:4b:09:c4:c9:63:c5:ce:0d:2b:09:08:7c: 80:e6:40:06:e7:2b:da:1b:55:4a:95:a7:0a:cd:e3:f4:1a:63: 0d:2f:06:10:14:a2:5f:1f:e5:ab:28:94:66:75:57:86:99:45: 30:9a:88:97:3a:b9:77:55:ae:fe:da:ba:b6:24:5d:b6:82:f6: 8a:0f:a3:2b:2f:7d:5a:bb:ab:75:96:b9:43:46:4f:15:01:5a: 2b:35:47:85:29:02:d0:3a:20:3f:be:6c:94:da:eb:8a:52:f8: 89:71:94:b3:65:19:c5:cd:3a:8d:32:80:b6:79:48:37:01:df: 1a:51:63:f9:51:e8:bd:16:7e:91:3f:33:98:ca:b0:a7:ec:22: 0d:c8:b7:21:cf:0f:88:10:4a:53:35:5f:b9:18:5f:88:34:48: e2:fa:cf:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxQTIxMTAvBgNVBAUTKDU3OTk3MkU2MEVBNkY0NjM4NDg5MUFEMEUzRjQxNzkw QzgwODA1RjEwHhcNMjQwNTE5MDUwMTA0WhcNMjQwNTI2MDUwMTA0WjAYMRYwFAYD VQQDEw02NjQ5ODc5MS00YWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MkCtdYrVjOr16ySbLKqUH02TAwhwrxbKJANMfbw/uV+9PRIHFC4/uOUmAha 4Tg54tFTG5GA+DUviS0CqmlbuRbCERE7ZIDeLguABaP3a0JG9h9efxqQ7nIX4px5 jh8SZ7C47h84WTQN4gCv73XHsAsdoXgVAi/cx9qkQZkZs9mO4y1pfoOfkByrI4Jq tFOBtTi7fIwJOuo8+MzxrjYSi52s1F4CM8K7C/0Lmq288RLBk/ctae4ta5Doo22t dytyLnXFgpuT4PFA7E3M/PGZy+HryYi/HU6U0zh1E89+k+8DmZcN8ZxDBO2+Rgio v0WjfLHSCb4gBjMOea9ivaZ5OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE+mRBy nAVUOsYt0GRWyimv4EHwMB8GA1UdIwQYMBaAFFeZcuYOpvRjhIka0OP0F5DICAXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzFBMi80NzRDRDg0NDQ2 REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlHT0VpUnJRNF9RWGtNZ0lC ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1bHk1ZzZtOUdPRWlSclE0X1FYa01nSUJmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzFBMi80NzRDRDg0NDQ2REQxMUVEOTI0MDIzMjBDNEY5QUUwMi9WNWx5NWc2bTlH T0VpUnJRNF9RWGtNZ0lCZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavXG5WV0yEsPAPqvgTbKQKlyAjahRYI30rb/JeawITrFNKmmHNrD4 BdSz2qBimEx41bG88XHn6Yu8Uqti48T79VPx4NH87T/EDSb/avVjRD4xbgETAruQ 7Pv189897G1LCcTJY8XODSsJCHyA5kAG5yvaG1VKlacKzeP0GmMNLwYQFKJfH+Wr KJRmdVeGmUUwmoiXOrl3Va7+2rq2JF22gvaKD6MrL31au6t1lrlDRk8VAVorNUeF KQLQOiA/vmyU2uuKUviJcZSzZRnFzTqNMoC2eUg3Ad8aUWP5Uei9Fn6RPzOYyrCn 7CINyLchzw+IEEpTNV+5GF+INEji+s+c -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org