$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json) Hash identifier: /Imqcm1KjL2CaDdBq3zSLWDLnT4UGbRzlCpJ4Qx9blI= Subject key identifier: 0E:CF:DB:D2:71:2B:A3:4C:C6:D0:99:7A:FC:8F:8F:B7:48:75:FB:3C Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft Manifest number: 0457 Signing time: Sun 05 May 2024 02:00:08 +0000 Manifest this update: Sun 05 May 2024 02:00:08 +0000 Manifest next update: Sun 12 May 2024 02:00:08 +0000 Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: qDknGF0nIyAx+XqKYtcDYvhVlFMte98hWpQzfIStvWY=) 2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: WFXX4UmF86zpOxHqIS+f0NCV866umMyT/tuApJ3cViE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Validity Not Before: May 5 02:00:08 2024 GMT Not After : May 12 02:00:08 2024 GMT Subject: CN=6636e828-083f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:cf:c3:49:3a:c7:de:70:c1:a2:eb:ac:92: a7:a5:61:a7:38:9d:32:4d:0f:a0:ef:e1:09:b2:68: 58:40:c3:55:3a:87:7a:75:73:ed:92:c6:ac:13:e1: b7:f6:c4:d5:2a:f1:fe:b7:5b:b1:9b:66:25:eb:36: a3:9d:a6:d2:22:16:90:29:57:8b:a9:d8:b7:ce:f7: d1:b2:7c:11:15:fc:f1:97:89:bd:b1:59:6d:90:94: f1:13:e6:e8:32:85:86:1f:d6:b2:72:b5:54:aa:90: f0:0e:f3:c0:f3:75:d2:7a:8c:f5:fb:9d:31:4c:bd: fc:db:ab:a4:1c:5c:4e:14:64:dc:89:15:43:10:c0: 19:51:95:f2:d9:45:cf:eb:5b:1c:84:ee:1e:4b:44: d7:5e:39:0b:46:0e:85:e7:4a:c9:2c:8e:9d:87:77: e8:ea:97:24:da:4a:4a:d7:c4:d6:3b:0e:5f:e8:b5: d7:c8:82:e8:5c:d0:52:72:c4:b4:2f:19:5b:3c:11: fb:23:f2:ea:c4:1c:f0:c7:5b:62:35:d0:62:89:fb: bb:37:2c:5f:c8:81:91:30:b1:a7:e7:e7:8e:30:38: cc:55:92:fa:80:34:f9:29:c5:46:1c:7c:ac:78:75: 3d:09:10:bb:52:d2:4f:df:20:c0:59:a5:ae:bd:52: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:DB:D2:71:2B:A3:4C:C6:D0:99:7A:FC:8F:8F:B7:48:75:FB:3C X509v3 Authority Key Identifier: keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:40:db:bc:24:ab:b0:40:23:11:7e:66:5c:eb:90:9a:65:05: 3b:50:b6:79:c1:d5:73:76:52:3f:81:28:43:6e:d8:d3:cc:53: f3:2e:f1:db:74:52:00:4b:1f:b4:17:7e:f0:0a:86:80:9d:8f: c0:f2:2f:3e:e6:75:7f:bd:e2:88:e8:56:a9:ae:5c:22:4d:f3: a9:16:63:a8:6a:81:34:66:b9:49:2e:ba:02:91:a0:9a:5b:7b: 42:e2:61:63:4c:c2:48:9e:7d:ff:60:43:ff:b0:e8:f6:d7:36: 99:b4:43:9f:0a:4d:29:93:dc:1a:df:73:28:6a:5c:5d:7c:2d: 79:d3:bb:b7:2d:bb:2e:3e:d2:63:34:f1:2d:a7:a6:2e:27:6f: 78:79:c7:62:2c:8e:6d:ad:8c:a9:75:33:91:e8:89:51:c5:1d: 4c:72:ff:b6:41:02:ac:45:76:48:76:1f:2c:bd:78:6a:a2:79: 6f:16:39:9d:a8:a8:ec:6f:55:4f:2f:d5:4d:26:0c:9f:43:0d: 5c:fe:9f:84:5c:06:ff:40:68:48:24:0a:45:9c:eb:b0:a1:45: 6f:cb:ab:ff:e4:4c:e8:14:62:cb:42:98:95:13:35:16:b7:7b: 5f:cb:6f:5a:9f:13:06:20:29:6d:26:01:3f:bc:3c:07:ff:f1: a9:aa:95:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0 RTA2MDQ4RDEwHhcNMjQwNTA1MDIwMDA4WhcNMjQwNTEyMDIwMDA4WjAYMRYwFAYD VQQDEw02NjM2ZTgyOC0wODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApejPw0k6x95wwaLrrJKnpWGnOJ0yTQ+g7+EJsmhYQMNVOod6dXPtksasE+G3 9sTVKvH+t1uxm2Yl6zajnabSIhaQKVeLqdi3zvfRsnwRFfzxl4m9sVltkJTxE+bo MoWGH9aycrVUqpDwDvPA83XSeoz1+50xTL3826ukHFxOFGTciRVDEMAZUZXy2UXP 61schO4eS0TXXjkLRg6F50rJLI6dh3fo6pck2kpK18TWOw5f6LXXyILoXNBScsS0 LxlbPBH7I/LqxBzwx1tiNdBiifu7NyxfyIGRMLGn5+eOMDjMVZL6gDT5KcVGHHys eHU9CRC7UtJP3yDAWaWuvVLS6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7P29Jx K6NMxtCZevyPj7dIdfs8MB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTFFNy8xMEZBQkVEMjAyNTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1 aE1KeFRoYW9lRUJPQmdTTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpQNu8JKuwQCMRfmZc65CaZQU7ULZ5wdVzdlI/gShDbtjTzFPzLvHb dFIASx+0F37wCoaAnY/A8i8+5nV/veKI6FaprlwiTfOpFmOoaoE0ZrlJLroCkaCa W3tC4mFjTMJInn3/YEP/sOj21zaZtEOfCk0pk9wa33MoalxdfC1507u3LbsuPtJj NPEtp6YuJ294ecdiLI5trYypdTOR6IlRxR1Mcv+2QQKsRXZIdh8svXhqonlvFjmd qKjsb1VPL9VNJgyfQw1c/p+EXAb/QGhIJApFnOuwoUVvy6v/5EzoFGLLQpiVEzUW t3tfy29anxMGICltJgE/vDwH//GpqpVH -----END CERTIFICATE-----Generated at Sun May 5 03:09:53 2024 by rpki-client on console-ams.rpki-client.org