$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: c/ll63OEyLN984G0KWhtVjtHFWDJ/MX1LqQDYfeNskM= Subject key identifier: 0F:B3:FD:99:57:E7:06:3B:B4:C2:B0:13:66:25:A2:AD:DD:E1:F3:A4 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 04EB Signing time: Fri 17 May 2024 01:54:05 +0000 Manifest this update: Fri 17 May 2024 01:54:05 +0000 Manifest next update: Fri 24 May 2024 01:54:04 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: ERf5Dgbx2MBA2auEZ2Y4miHspnmYliHktpseA0e0DCw=) 2: A6CB4672ADF011EEB35AC80FC4F9AE02.roa (hash: uXnA9Pei6SgPijrZ1wYtqwss+0OS0D1AnCW0EPushxc=) 3: 1A40A6645DED11EE931C6684C4F9AE02.roa (hash: 9zTUmeWonacN4aNIcVpqM25WMamq3UP1yH/1NeK1lt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: May 17 01:54:05 2024 GMT Not After : May 24 01:54:04 2024 GMT Subject: CN=6646b8bd-4678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:a1:1b:d8:aa:17:4f:94:aa:3f:c9:62:f7: 57:b5:de:17:90:53:6b:5d:19:86:2e:01:9b:56:bc: 3a:ff:6f:ee:8d:fc:58:83:a1:1f:f8:12:70:71:bc: 36:db:3d:ef:6d:0b:be:cc:56:ec:98:18:2e:6b:3a: c1:eb:e7:87:14:11:e8:34:7b:91:1a:5c:2e:ba:a5: 6b:a5:9a:4d:fd:e1:3a:ae:8a:35:50:b8:bc:24:8b: da:1f:5c:4f:c9:5e:c5:74:c9:eb:ec:1b:f6:54:7c: 57:63:9d:42:69:9d:8e:4b:78:86:a2:b6:c5:f0:e5: e6:5c:b3:2e:7e:ce:05:b8:b7:35:68:aa:33:ad:e2: 10:1c:7b:2b:4a:af:8f:8e:99:9e:e8:98:fa:f6:84: 38:b5:07:12:03:dd:74:4a:e1:74:68:06:23:36:c7: 5d:4c:a3:10:c1:27:28:93:39:be:51:2d:42:ff:3e: 44:76:32:2b:7e:5a:7a:64:3c:1f:96:69:b3:88:79: 8b:5d:79:d7:01:bb:ca:d2:6b:f1:e2:f8:c2:77:9d: 30:2a:ff:df:1b:9d:32:d9:20:57:60:5f:19:24:2a: 3e:30:5d:e0:8b:65:54:28:b6:28:14:34:73:e6:e3: 07:30:fc:35:43:5f:05:08:d1:0c:44:88:20:14:ee: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B3:FD:99:57:E7:06:3B:B4:C2:B0:13:66:25:A2:AD:DD:E1:F3:A4 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c1:ff:3a:ff:ea:94:70:91:ba:3a:37:3c:bc:d3:27:3d:5c: ee:08:21:fd:44:58:19:f0:1f:1c:2a:78:b8:ba:ed:9e:95:57: b8:27:07:a7:28:1e:98:df:95:5c:a6:7f:a0:87:c3:72:f7:5b: 7e:88:e7:38:f0:46:de:f8:63:e5:46:04:4a:cb:3d:2d:0b:96: 01:c8:a5:a9:f4:4e:2b:0d:90:f4:53:59:6c:4e:1a:bb:4f:ca: 01:97:64:5c:3e:2e:df:27:dc:3c:34:9a:7a:f3:51:76:f3:d1: a0:1a:49:79:f5:eb:15:a1:14:7e:d6:a7:be:60:98:dd:98:44: a6:11:ec:6d:cf:a0:48:30:74:5b:d1:53:d3:78:18:6c:b7:78: 21:84:82:c5:45:23:53:d9:5d:a9:f0:5d:5f:cc:72:3a:d1:52: 12:72:6f:8c:06:82:02:dd:07:75:62:dc:e0:76:8b:1d:f8:25: 2f:fd:78:f7:dc:79:cd:c2:ed:db:64:d3:89:b7:36:31:c3:34: 6f:b9:9b:aa:da:c1:2f:22:4c:56:d6:bc:04:bd:e5:8b:0e:d7: e2:84:b2:a3:59:17:3b:13:d3:f3:da:d4:51:af:db:26:06:f4: a7:84:43:18:c1:ba:ef:0b:f6:40:78:6d:d0:b4:90:63:6d:25: e3:5f:74:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjQwNTE3MDE1NDA1WhcNMjQwNTI0MDE1NDA0WjAYMRYwFAYD VQQDEw02NjQ2YjhiZC00Njc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv56hG9iqF0+Uqj/JYvdXtd4XkFNrXRmGLgGbVrw6/2/ujfxYg6Ef+BJwcbw2 2z3vbQu+zFbsmBguazrB6+eHFBHoNHuRGlwuuqVrpZpN/eE6roo1ULi8JIvaH1xP yV7FdMnr7Bv2VHxXY51CaZ2OS3iGorbF8OXmXLMufs4FuLc1aKozreIQHHsrSq+P jpme6Jj69oQ4tQcSA910SuF0aAYjNsddTKMQwScokzm+US1C/z5EdjIrflp6ZDwf lmmziHmLXXnXAbvK0mvx4vjCd50wKv/fG50y2SBXYF8ZJCo+MF3gi2VUKLYoFDRz 5uMHMPw1Q18FCNEMRIggFO5fMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+z/ZlX 5wY7tMKwE2Yloq3d4fOkMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLwf86/+qUcJG6Ojc8vNMnPVzuCCH9RFgZ8B8cKni4uu2elVe4Jwen KB6Y35Vcpn+gh8Ny91t+iOc48Ebe+GPlRgRKyz0tC5YByKWp9E4rDZD0U1lsThq7 T8oBl2RcPi7fJ9w8NJp681F289GgGkl59esVoRR+1qe+YJjdmESmEextz6BIMHRb 0VPTeBhst3ghhILFRSNT2V2p8F1fzHI60VIScm+MBoIC3Qd1Ytzgdosd+CUv/Xj3 3HnNwu3bZNOJtzYxwzRvuZuq2sEvIkxW1rwEveWLDtfihLKjWRc7E9Pz2tRRr9sm BvSnhEMYwbrvC/ZAeG3QtJBjbSXjX3Tu -----END CERTIFICATE-----Generated at Fri May 17 03:06:29 2024 by rpki-client on console-ams.rpki-client.org