$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json) Hash identifier: 5dRkyfj9Ngiet7BUgCOnh5bcej56/eF0o7JtECQ/kS8= Subject key identifier: 60:66:17:1F:19:DD:70:47:B9:E0:2E:1E:46:72:CE:29:15:52:FD:08 Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft Manifest number: 0163 Signing time: Sun 05 May 2024 04:58:09 +0000 Manifest this update: Sun 05 May 2024 04:58:08 +0000 Manifest next update: Sun 12 May 2024 04:58:08 +0000 Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: kUHHZ5p2BKfN6Z51LZ9Wn1kgOt3GIROLmaycyvdoSdA=) 2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: G2dWBNxI+TwAzB7Q925KO0EBuCO5Q3vn2232Y9oRj5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Validity Not Before: May 5 04:58:08 2024 GMT Not After : May 12 04:58:08 2024 GMT Subject: CN=663711e0-fd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dc:73:9c:cc:3b:0d:c7:47:fe:6d:71:ec:5f: 5e:66:b5:8c:fa:de:67:c8:45:5f:5a:74:b2:a6:20: 9f:96:c4:d6:0d:e6:33:e2:a7:31:eb:fb:d8:17:5e: f2:59:24:3a:e7:4f:21:bc:33:61:31:96:65:93:a2: bc:fc:1d:15:7a:5a:92:52:1d:14:83:a8:4c:30:89: e1:2b:e9:70:fb:74:bd:cd:d0:91:b0:d9:1b:3f:40: e9:6b:e4:4f:b9:fb:15:c5:a2:9a:03:2a:4f:5f:9c: d2:d7:85:38:62:d1:3f:12:70:b8:6d:72:d5:9a:7b: 46:77:68:06:f5:24:e4:81:d6:f8:71:7f:df:c3:7d: fb:1b:09:80:bd:b8:8d:56:63:42:ae:f2:b3:49:55: be:02:c8:71:ae:13:d2:e9:3e:26:fa:ea:84:c8:83: 6e:ad:ca:89:5d:3a:9d:e9:13:5d:36:c1:c8:ea:bb: c7:ca:3c:df:0b:4d:be:5b:a0:b2:89:9a:78:1a:44: 44:f3:c8:ba:f9:2d:18:e3:5d:8a:bd:7a:e5:28:8e: b8:ba:ef:5b:d1:64:9c:75:a1:cd:d6:cc:1b:ed:7a: 99:c7:fe:c0:79:35:e5:b3:2d:a9:b6:e5:f3:5e:94: de:58:7b:14:a2:e7:17:9b:d7:d9:b9:48:74:4b:23: 75:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:17:1F:19:DD:70:47:B9:E0:2E:1E:46:72:CE:29:15:52:FD:08 X509v3 Authority Key Identifier: keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:24:c8:0d:39:14:a0:d3:1a:ec:d1:89:88:8e:5a:1c:aa: 1e:2f:b0:5f:55:5a:ea:0b:57:93:8c:ff:11:31:1e:4c:e4:5c: c3:12:81:4c:38:19:a4:91:bd:21:03:2d:f0:5e:31:a2:cb:20: d4:43:d2:24:01:05:2c:99:8e:62:2c:ae:b4:8f:af:45:81:33: 80:54:85:29:d7:2a:c3:b9:46:10:b3:cc:58:2c:3d:60:0d:7f: 65:59:a9:cf:78:e1:63:d7:5c:3a:25:69:c3:a4:a3:f0:08:02: 3d:22:62:c7:06:21:6c:3a:f2:1b:b2:03:27:29:2e:11:17:d4: 24:64:b7:8b:3f:3e:69:58:c5:3a:0d:ee:c2:3f:4a:22:d8:e7: 28:f9:fd:02:b6:e4:1c:56:e0:43:30:d7:8b:82:6d:74:11:fd: ba:78:b8:e6:a9:85:71:f7:61:24:31:90:dc:01:4d:5d:1a:f9: 94:96:68:a3:c7:a5:69:e0:a3:24:75:20:00:6a:e7:e8:25:22: be:b0:5f:90:96:7a:a4:b7:71:73:20:b1:17:70:47:c0:b2:d4: e2:b3:b7:86:e8:11:2d:d3:c7:91:67:30:1b:88:79:18:7e:39: 0f:95:aa:ff:15:13:e2:49:45:31:bd:44:57:bc:0e:53:2d:bc: a4:26:62:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE N0IyNDY2RTUwHhcNMjQwNTA1MDQ1ODA4WhcNMjQwNTEyMDQ1ODA4WjAYMRYwFAYD VQQDEw02NjM3MTFlMC1mZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7txznMw7DcdH/m1x7F9eZrWM+t5nyEVfWnSypiCflsTWDeYz4qcx6/vYF17y WSQ6508hvDNhMZZlk6K8/B0VelqSUh0Ug6hMMInhK+lw+3S9zdCRsNkbP0Dpa+RP ufsVxaKaAypPX5zS14U4YtE/EnC4bXLVmntGd2gG9STkgdb4cX/fw337GwmAvbiN VmNCrvKzSVW+AshxrhPS6T4m+uqEyINurcqJXTqd6RNdNsHI6rvHyjzfC02+W6Cy iZp4GkRE88i6+S0Y412KvXrlKI64uu9b0WScdaHN1swb7XqZx/7AeTXlsy2ptuXz XpTeWHsUoucXm9fZuUh0SyN1wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBmFx8Z 3XBHueAuHkZyzikVUv0IMB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1 SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfnSTIDTkUoNMa7NGJiI5aHKoeL7BfVVrqC1eTjP8RMR5M5FzDEoFM OBmkkb0hAy3wXjGiyyDUQ9IkAQUsmY5iLK60j69FgTOAVIUp1yrDuUYQs8xYLD1g DX9lWanPeOFj11w6JWnDpKPwCAI9ImLHBiFsOvIbsgMnKS4RF9QkZLeLPz5pWMU6 De7CP0oi2Oco+f0CtuQcVuBDMNeLgm10Ef26eLjmqYVx92EkMZDcAU1dGvmUlmij x6Vp4KMkdSAAaufoJSK+sF+Qlnqkt3FzILEXcEfAstTis7eG6BEt08eRZzAbiHkY fjkPlar/FRPiSUUxvURXvA5TLbykJmLZ -----END CERTIFICATE-----Generated at Sun May 5 05:30:48 2024 by rpki-client on console-ams.rpki-client.org