$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: p0lGgXUBrnWsAAd3oB/GFv7tao12c/xHH1vZYEpsQWs= Subject key identifier: 80:1C:75:19:30:A1:B4:79:D7:A6:3B:2E:07:C3:48:78:52:ED:E6:92 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 01A7 Signing time: Sun 05 May 2024 04:42:48 +0000 Manifest this update: Sun 05 May 2024 04:42:48 +0000 Manifest next update: Sun 12 May 2024 04:42:48 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: x2R5LOJUlFtFycGZUn4ur9qaW5pq10eBBQq1qM9Aee0=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: LwtfQF0i9SqPJXAXHSl0roBiUjKwNAecuv7X9EnvxfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: May 5 04:42:48 2024 GMT Not After : May 12 04:42:48 2024 GMT Subject: CN=66370e48-d63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:4f:1d:65:a0:fd:01:32:cc:75:2e:21:07: 7f:54:55:85:13:16:40:d8:58:38:42:a7:3e:4a:5d: 70:c1:28:86:e0:d7:e7:64:bd:9e:86:a4:66:77:1d: cf:38:56:0b:31:c1:c0:87:5a:fd:cf:7e:ea:7c:26: de:6f:97:a3:72:c4:58:b8:37:12:1e:69:21:52:53: 62:a7:1c:f3:68:63:54:6e:a2:fa:d9:48:ee:cc:69: c9:9b:ca:5d:b8:8b:b8:f6:59:8a:06:25:94:c1:09: f2:08:0e:0b:6f:ef:01:9b:3e:2c:49:b7:c3:5a:67: 2c:96:f6:3d:ff:f2:25:6f:d8:0c:a1:ec:99:b6:ff: f7:3a:dc:ea:14:81:07:d9:e1:0f:ba:c3:2a:eb:4a: 63:9b:c0:02:e2:ff:97:8f:ce:18:51:57:d0:03:2b: 99:88:69:5e:27:64:74:93:9c:21:21:3c:4a:74:87: 99:a3:06:96:70:6f:81:45:e9:e4:df:f4:f3:49:49: 40:d8:80:e1:67:96:52:f5:80:2e:ec:4f:69:ee:55: 90:80:b9:77:37:08:64:84:60:cf:39:09:ec:cb:27: a3:0d:0f:27:c0:c0:5b:5a:70:47:0b:bc:96:ec:82: d0:c4:45:0f:d1:85:60:1b:93:87:03:a7:51:9d:bf: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:75:19:30:A1:B4:79:D7:A6:3B:2E:07:C3:48:78:52:ED:E6:92 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:ab:69:f5:45:cc:65:76:4c:d1:d3:0a:af:e5:9a:4d:9c:2c: ad:17:9d:85:af:83:d4:71:68:29:b6:24:1f:be:cd:34:5b:7b: b8:0f:b2:05:21:9c:55:ce:8a:99:dd:55:d5:0c:31:7a:2d:62: 0a:d5:53:d7:82:48:d5:be:bb:ef:7b:b7:17:6a:ef:57:c1:a8: 27:6c:e0:f9:a8:b8:0a:fb:9d:7a:0d:89:1f:ba:21:60:bf:01: 4b:69:0f:a7:1c:ac:43:d1:52:8b:48:63:4e:bb:34:14:e9:e0: c3:68:13:bf:19:d5:3b:07:cc:e5:b7:22:09:d9:12:58:9d:fb: a9:8c:25:e3:10:bf:01:d7:73:5e:f2:a3:8b:93:b5:a9:68:22: 6d:57:39:5e:62:35:7a:15:40:2a:b9:7f:55:dc:db:f9:c4:24: 60:8f:3b:4a:90:7d:85:59:e2:dd:79:7b:0b:23:3d:c6:2f:b8: 9f:9f:b9:ed:14:02:66:18:d9:48:cc:af:5d:62:e9:e8:cb:0d: a3:9f:5d:eb:ee:cd:4d:9f:47:df:ce:3e:9b:e3:07:16:da:db: 5b:73:a5:47:51:1c:04:8e:0e:d4:a8:38:1c:55:dd:6c:cd:17: 69:2f:d2:ed:ab:e5:e9:61:9d:34:76:48:68:9f:a0:fe:0b:ce: 11:02:02:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjQwNTA1MDQ0MjQ4WhcNMjQwNTEyMDQ0MjQ4WjAYMRYwFAYD VQQDEw02NjM3MGU0OC1kNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZVPHWWg/QEyzHUuIQd/VFWFExZA2Fg4Qqc+Sl1wwSiG4NfnZL2ehqRmdx3P OFYLMcHAh1r9z37qfCbeb5ejcsRYuDcSHmkhUlNipxzzaGNUbqL62UjuzGnJm8pd uIu49lmKBiWUwQnyCA4Lb+8Bmz4sSbfDWmcslvY9//Ilb9gMoeyZtv/3OtzqFIEH 2eEPusMq60pjm8AC4v+Xj84YUVfQAyuZiGleJ2R0k5whITxKdIeZowaWcG+BRenk 3/TzSUlA2IDhZ5ZS9YAu7E9p7lWQgLl3NwhkhGDPOQnsyyejDQ8nwMBbWnBHC7yW 7ILQxEUP0YVgG5OHA6dRnb+rKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAcdRkw obR516Y7LgfDSHhS7eaSMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4q2n1RcxldkzR0wqv5ZpNnCytF52Fr4PUcWgptiQfvs00W3u4D7IF IZxVzoqZ3VXVDDF6LWIK1VPXgkjVvrvve7cXau9XwagnbOD5qLgK+516DYkfuiFg vwFLaQ+nHKxD0VKLSGNOuzQU6eDDaBO/GdU7B8zltyIJ2RJYnfupjCXjEL8B13Ne 8qOLk7WpaCJtVzleYjV6FUAquX9V3Nv5xCRgjztKkH2FWeLdeXsLIz3GL7ifn7nt FAJmGNlIzK9dYunoyw2jn13r7s1Nn0ffzj6b4wcW2ttbc6VHURwEjg7UqDgcVd1s zRdpL9Ltq+XpYZ00dkhon6D+C84RAgIA -----END CERTIFICATE-----Generated at Sun May 5 05:30:48 2024 by rpki-client on console-ams.rpki-client.org