$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft File: Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json) Hash identifier: 7gZK7Ao1qjFH8/ipRamAIuVuusP1qj0/1dNgPYgtZFY= Subject key identifier: 08:64:5D:12:B6:B5:6B:C2:E3:A1:6E:B7:36:11:8C:CA:C7:4F:7B:F5 Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 Certificate issuer: /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft Manifest number: 0113 Signing time: Wed 01 May 2024 05:40:50 +0000 Manifest this update: Wed 01 May 2024 05:40:50 +0000 Manifest next update: Wed 08 May 2024 05:40:50 +0000 Files and hashes: 1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: 4xiRneS93kITLTvwZLWm/hGGeKueb/hkkZ4EDnIqbzg=) 2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: ziWLWBvpn29tk5TkdJOT57wBTTzTwUrFTHzZ3w/DxZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Validity Not Before: May 1 05:40:50 2024 GMT Not After : May 8 05:40:50 2024 GMT Subject: CN=6631d5e2-7753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:4e:cb:4f:3a:05:c7:91:fd:11:31:39:ce: 95:32:cb:35:1a:28:01:ca:a0:29:e7:0a:0c:b1:b9: de:14:14:74:69:35:94:4b:11:1f:0a:1c:8b:eb:e9: 22:00:7a:11:c4:79:f8:72:b9:15:53:17:6c:c7:ca: 29:0b:c6:b8:9b:d5:56:d0:13:1d:e4:a7:b4:2a:97: fc:bd:71:a4:25:2e:a1:34:0a:4d:b3:3c:58:f1:e8: 2f:fe:d7:6d:86:4b:d0:bf:8a:30:b4:02:1d:5d:a4: 79:c0:b2:e9:b0:54:46:56:a5:23:d4:8d:28:47:c6: 18:4c:6e:f3:25:f5:88:90:a4:8a:4b:ea:08:2b:04: 49:26:b2:5f:3d:c8:83:2d:b1:bb:a7:70:8d:4e:41: 7d:e2:b8:52:5a:0d:72:2f:45:1b:a5:df:88:b9:25: e4:68:53:90:24:26:17:b8:73:b0:8a:8a:4f:fc:83: 8d:0e:c0:4f:32:13:d1:12:07:df:99:ad:6e:f8:1b: 75:8b:43:70:b6:e2:5a:fb:0a:c2:1c:84:a6:85:a1: f7:90:50:e2:9b:6f:0b:c3:b5:5a:83:36:25:79:4b: 0e:ad:d5:bc:c9:c5:76:f4:5d:50:23:ee:a6:91:c5: e1:e4:1b:33:fc:ed:fb:2d:9a:eb:af:42:71:8d:b4: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:64:5D:12:B6:B5:6B:C2:E3:A1:6E:B7:36:11:8C:CA:C7:4F:7B:F5 X509v3 Authority Key Identifier: keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:3a:bb:42:81:05:ca:4a:22:3a:bf:7b:b5:c6:a6:86:0b: 40:9a:3d:35:3d:68:7d:1f:c8:34:70:df:a6:69:99:65:25:34: 93:64:12:6a:ae:e9:3b:38:25:97:be:88:4a:55:c2:b3:64:e6: a9:df:b7:39:39:6f:42:03:fa:87:a4:ca:90:ac:5e:0e:34:c0: c9:2a:39:22:63:4b:8f:6f:d6:d3:c1:24:01:80:e7:8b:61:f5: 84:ab:2d:ad:01:a1:ea:17:74:aa:67:73:38:f4:10:32:73:68: 33:3a:ac:e4:16:f5:bf:e2:21:82:90:1d:5d:d9:4b:d7:8f:64: 26:c5:42:de:d3:33:82:8a:29:8d:e1:c6:ba:dc:9d:c5:53:46: cd:8f:12:ff:78:dc:93:bb:f2:6d:6f:dc:52:1c:f3:54:e5:34: ce:49:e6:84:8f:59:69:10:91:66:53:9d:74:8d:56:30:e7:7f: b6:66:1e:f8:cd:9a:2e:fe:f0:96:10:5f:e5:b0:f7:00:42:05: 15:38:b1:08:3d:07:e9:16:9c:ac:0d:cd:51:3e:f1:99:26:a4: a5:98:bc:1b:6c:b9:37:8e:78:47:b4:43:34:67:5b:30:06:4d: ff:96:1b:f7:f4:75:ff:91:a4:e4:8f:20:de:cd:ed:5c:0c:c7: d9:e7:df:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0NzgxMTAvBgNVBAUTKDU2OEY3NjVDQ0FCNDJDNTIzMDc5OEU2OEZCQzM3QzhB QTQ5RjVGNDQwHhcNMjQwNTAxMDU0MDUwWhcNMjQwNTA4MDU0MDUwWjAYMRYwFAYD VQQDEw02NjMxZDVlMi03NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJpOy086BceR/RExOc6VMss1GigByqAp5woMsbneFBR0aTWUSxEfChyL6+ki AHoRxHn4crkVUxdsx8opC8a4m9VW0BMd5Ke0Kpf8vXGkJS6hNApNszxY8egv/tdt hkvQv4owtAIdXaR5wLLpsFRGVqUj1I0oR8YYTG7zJfWIkKSKS+oIKwRJJrJfPciD LbG7p3CNTkF94rhSWg1yL0Ubpd+IuSXkaFOQJCYXuHOwiopP/IONDsBPMhPREgff ma1u+Bt1i0NwtuJa+wrCHISmhaH3kFDim28Lw7VagzYleUsOrdW8ycV29F1QI+6m kcXh5Bsz/O37LZrrr0JxjbRw9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhkXRK2 tWvC46FutzYRjMrHT3v1MB8GA1UdIwQYMBaAFFaPdlzKtCxSMHmOaPvDfIqkn19E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3OC80OTlBOTE1RTZE MTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExGSXdlWTVvLThOOGlxU2ZY MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvOTJYTXEwTEZJd2VZNW8tOE44aXFTZlgwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjQ3OC80OTlBOTE1RTZEMTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExG SXdlWTVvLThOOGlxU2ZYMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1+jq7QoEFykoiOr97tcamhgtAmj01PWh9H8g0cN+maZllJTSTZBJq ruk7OCWXvohKVcKzZOap37c5OW9CA/qHpMqQrF4ONMDJKjkiY0uPb9bTwSQBgOeL YfWEqy2tAaHqF3SqZ3M49BAyc2gzOqzkFvW/4iGCkB1d2UvXj2QmxULe0zOCiimN 4ca63J3FU0bNjxL/eNyTu/Jtb9xSHPNU5TTOSeaEj1lpEJFmU510jVYw53+2Zh74 zZou/vCWEF/lsPcAQgUVOLEIPQfpFpysDc1RPvGZJqSlmLwbbLk3jnhHtEM0Z1sw Bk3/lhv39HX/kaTkjyDeze1cDMfZ59+1 -----END CERTIFICATE-----Generated at Wed May 1 06:34:04 2024 by rpki-client on console-ams.rpki-client.org