$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: eZsDhOb2EUm56zlDZKu7QIUbnllij0iIrso6ZTJJxnA= Subject key identifier: DB:E3:A3:FF:15:15:5F:E7:60:A2:86:19:87:90:9F:CA:59:7C:EE:C3 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 54 Signing time: Fri 17 May 2024 07:57:15 +0000 Manifest this update: Fri 17 May 2024 07:57:15 +0000 Manifest next update: Fri 24 May 2024 07:57:15 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: U5KM7ijtguFvBAfAG9Ckgh/Ic0hJlV5bjbqx5UHr00g=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: NSX7uy6kvdyVzGTyrP4PPaT7WlKhSTJwrok/K4pBKV0=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: bfNhwGImovVkJ2nMHJxM6MVKJiq0HIzj8jV7cX6C1l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: May 17 07:57:15 2024 GMT Not After : May 24 07:57:15 2024 GMT Subject: CN=66470ddb-a5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:bb:b9:e2:7f:86:f8:12:b4:fa:c4:4c:f6: 2c:d8:77:b1:0a:b7:63:79:06:fa:3f:e9:d2:13:1c: 9d:fe:c6:4f:cb:76:04:f1:99:c2:3c:ec:55:b5:bc: 3b:c8:bc:a5:5a:f0:ea:e1:f2:15:3c:4d:a0:85:57: 16:39:34:8c:85:99:17:ea:13:1b:0a:02:72:a4:93: d5:3d:65:9c:1a:32:b8:55:37:70:2d:6d:01:e6:82: 63:80:a1:4f:8f:c2:61:52:e9:22:0b:f3:ff:22:d0: e7:a4:8d:bc:bd:16:6a:47:c0:22:9a:80:0f:91:97: c1:39:e1:99:9d:53:c4:44:a5:52:85:64:0d:39:05: 2c:5b:1e:82:42:74:d7:7b:63:28:90:3c:8e:f1:f2: d7:87:d0:96:e8:7c:95:4e:3e:2f:fe:73:2c:49:d3: 77:25:6b:c9:8c:3c:e0:3a:4a:14:cf:9f:2b:f5:50: bf:ca:b6:da:d7:1b:88:ba:bf:95:03:39:7f:6a:9d: 47:33:f1:36:f3:d3:3e:57:92:e4:42:6c:74:49:9b: ca:66:5d:d9:71:fa:f8:37:8f:af:69:46:d1:15:e0: 98:22:76:c0:29:68:ba:39:86:a6:a4:b1:70:91:21: d5:3c:18:2d:00:47:63:37:6f:9c:36:25:b7:a3:1c: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:A3:FF:15:15:5F:E7:60:A2:86:19:87:90:9F:CA:59:7C:EE:C3 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:42:41:db:47:f9:8d:85:2f:90:79:6a:cf:65:9e:b1:11:18: 45:bc:ed:a0:35:cf:ea:06:6d:60:f8:de:a3:7c:ab:73:a7:6b: 07:24:98:b9:c2:e9:80:8f:82:77:ea:75:31:61:e7:d9:2b:28: b1:79:97:44:cc:dc:09:bc:51:e2:b2:d4:bc:16:8f:35:d6:0c: c3:5e:da:0a:41:0b:d3:cf:d6:fb:c9:a5:30:b1:4c:51:b9:9d: 76:de:8a:ba:41:6f:b1:61:00:11:02:b7:89:a9:5f:ed:72:20: 46:45:66:65:00:6b:8a:bc:5d:b4:d8:46:a3:15:0a:45:a0:0b: 25:83:43:c5:db:70:55:c2:39:6a:f9:ff:23:33:8c:3e:ce:81: 5d:e8:bc:ee:74:00:25:35:a3:97:c6:3e:81:39:ee:f2:30:a9: cd:1d:56:72:4d:13:97:88:83:4d:f0:ca:07:af:49:f9:10:6d: 36:e8:bc:1f:7f:1e:86:a3:d3:eb:fe:e0:b1:7e:b5:4f:ff:6e: 15:12:48:93:21:92:8d:a2:e0:46:fd:74:24:37:07:58:c4:d3: db:45:9c:9a:0e:45:30:fa:3c:3b:5a:eb:a8:e2:f9:cd:5e:d3: 53:f2:28:04:67:98:b2:4c:d1:dd:8b:34:8c:ce:e1:f6:4f:2b: 8e:ca:d6:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyOTExMC8GA1UEBRMoMkM4RDFBNTgwNTZFRDE4OEZFODU4MEU3MEQxREU1MEY0 QzNEQTI3MDAeFw0yNDA1MTcwNzU3MTVaFw0yNDA1MjQwNzU3MTVaMBgxFjAUBgNV BAMTDTY2NDcwZGRiLWE1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChTbu54n+G+BK0+sRM9izYd7EKt2N5Bvo/6dITHJ3+xk/LdgTxmcI87FW1vDvI vKVa8Orh8hU8TaCFVxY5NIyFmRfqExsKAnKkk9U9ZZwaMrhVN3AtbQHmgmOAoU+P wmFS6SIL8/8i0Oekjby9FmpHwCKagA+Rl8E54ZmdU8REpVKFZA05BSxbHoJCdNd7 YyiQPI7x8teH0JbofJVOPi/+cyxJ03cla8mMPOA6ShTPnyv1UL/KttrXG4i6v5UD OX9qnUcz8Tbz0z5XkuRCbHRJm8pmXdlx+vg3j69pRtEV4JgidsApaLo5hqaksXCR IdU8GC0AR2M3b5w2JbejHK27AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2+Oj/xUV X+dgooYZh5Cfyll87sMwHwYDVR0jBBgwFoAULI0aWAVu0Yj+hYDnDR3lD0w9onAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTI5LzRCM0NFRUI0OTMz RDExRUU4QTk1MDI1M0M0RjlBRTAyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9u QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEkwYVdBVnUwWWotaFlEbkRSM2xEMHc5b25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTI5LzRCM0NFRUI0OTMzRDExRUU4QTk1MDI1M0M0RjlBRTAyL0xJMGFXQVZ1MFlq LWhZRG5EUjNsRDB3OW9uQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAtCQdtH+Y2FL5B5as9lnrERGEW87aA1z+oGbWD43qN8q3OnawckmLnC 6YCPgnfqdTFh59krKLF5l0TM3Am8UeKy1LwWjzXWDMNe2gpBC9PP1vvJpTCxTFG5 nXbeirpBb7FhABECt4mpX+1yIEZFZmUAa4q8XbTYRqMVCkWgCyWDQ8XbcFXCOWr5 /yMzjD7OgV3ovO50ACU1o5fGPoE57vIwqc0dVnJNE5eIg03wygevSfkQbTbovB9/ Hoaj0+v+4LF+tU//bhUSSJMhko2i4Eb9dCQ3B1jE09tFnJoORTD6PDta66ji+c1e 01PyKARnmLJM0d2LNIzO4fZPK47K1rA= -----END CERTIFICATE-----Generated at Fri May 17 08:52:46 2024 by rpki-client on console-ams.rpki-client.org