$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: gK/1R/KA56RNzl8cRX9EqgnGPnES9d4aQnffOdKoPgs= Subject key identifier: DB:1A:BE:6B:48:3F:3A:A9:1D:24:95:41:FB:5A:C9:D9:EA:22:11:E2 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 038F Signing time: Fri 03 May 2024 02:44:47 +0000 Manifest this update: Fri 03 May 2024 02:44:46 +0000 Manifest next update: Fri 10 May 2024 02:44:46 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: LLmPTJe6jroPVLGCaKFkP4x6/BmBOkQPHae0L9QCe0Q=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: hlCTKg4Zix5z0OwaiI9AlaxDrKpzUIAdq7aE9CMR9vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: May 3 02:44:46 2024 GMT Not After : May 10 02:44:46 2024 GMT Subject: CN=66344f9e-57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f7:f9:ab:25:5d:fe:8e:26:2e:d0:cb:dd:9c: a3:47:90:6a:f2:88:3f:9c:14:75:a7:78:48:47:cf: 68:f3:be:9d:e7:37:45:7b:b3:78:62:97:f7:8c:a7: 8d:d7:90:a7:ba:f6:b1:69:ab:0c:a5:b2:76:ac:ef: 4e:4c:af:ce:a5:18:60:9d:a6:62:34:d4:09:e0:96: 27:dc:f6:33:7f:40:9b:56:7e:50:91:83:68:98:17: a5:53:cb:88:67:71:9d:42:2b:79:8c:af:76:44:f4: 63:02:f0:33:70:00:a1:ea:1a:c1:0a:ac:1c:ea:cf: 10:c9:db:d8:89:24:a6:34:45:2f:2b:94:93:c9:25: c7:e2:37:a2:eb:5b:64:ee:65:1a:5d:10:96:a8:a7: 24:dc:c6:be:01:a0:f3:4b:d7:70:60:e1:d6:e3:98: 5c:96:95:be:86:fa:8e:6d:74:cd:76:72:ba:82:6e: bb:0f:cc:ed:43:67:b7:47:7e:d5:57:71:b3:f1:9d: 6f:a7:18:02:b6:20:6a:c8:52:54:8a:50:1e:4a:e9: 01:cf:e0:cc:45:88:52:a6:f6:13:95:22:e3:11:36: a2:fd:f9:ad:9d:10:b2:7a:8a:fa:09:f0:26:a5:67: ef:8a:27:c4:28:c8:db:ed:19:3e:42:d5:c2:e5:d7: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:BE:6B:48:3F:3A:A9:1D:24:95:41:FB:5A:C9:D9:EA:22:11:E2 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6e:0b:e8:bd:96:d7:69:c9:12:dc:23:0c:de:a1:a7:8b:5f: 56:f0:cd:12:1c:9f:e8:92:1f:1d:3e:6f:4d:25:06:9b:d7:70: 06:47:a3:36:0a:01:79:ed:8f:54:d1:b0:21:3c:7a:b9:a4:2a: e8:a2:49:dd:e8:15:59:c9:c7:04:6a:61:05:fb:da:95:9e:b0: ce:48:0c:20:cc:4d:65:0b:cd:61:06:9b:82:d9:e4:d5:03:d8: a3:67:36:16:09:07:8e:e0:fd:e2:fd:fd:30:4f:f0:d4:d9:78: a7:17:f2:9f:f7:fd:ff:35:e2:02:0b:ed:e1:fa:5e:be:3f:0c: 88:92:8e:b2:ce:34:81:59:85:01:a7:89:81:3e:2b:b5:ee:10: e5:fd:be:74:25:88:e0:2a:41:8a:01:2e:dc:4f:e0:fd:08:9a: a6:9d:e5:ae:d5:40:ce:19:43:46:a7:41:d9:2b:f7:35:4e:b2: 36:25:55:1c:bc:ba:ff:97:f6:bb:1e:cd:53:d8:75:b0:00:93: 1e:36:95:99:92:d8:66:56:52:31:9a:56:cc:26:b6:e4:65:1f: 3d:25:46:6e:be:93:26:72:03:10:c0:dc:83:85:10:60:da:4d: 45:4e:41:8c:6d:1d:e8:14:a6:3f:a0:a4:0b:8e:8b:27:18:94: 3e:c9:85:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjQwNTAzMDI0NDQ2WhcNMjQwNTEwMDI0NDQ2WjAYMRYwFAYD VQQDEw02NjM0NGY5ZS01N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/f5qyVd/o4mLtDL3ZyjR5Bq8og/nBR1p3hIR89o876d5zdFe7N4Ypf3jKeN 15CnuvaxaasMpbJ2rO9OTK/OpRhgnaZiNNQJ4JYn3PYzf0CbVn5QkYNomBelU8uI Z3GdQit5jK92RPRjAvAzcACh6hrBCqwc6s8QydvYiSSmNEUvK5STySXH4jei61tk 7mUaXRCWqKck3Ma+AaDzS9dwYOHW45hclpW+hvqObXTNdnK6gm67D8ztQ2e3R37V V3Gz8Z1vpxgCtiBqyFJUilAeSukBz+DMRYhSpvYTlSLjETai/fmtnRCyeor6CfAm pWfviifEKMjb7Rk+QtXC5dfpbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsavmtI PzqpHSSVQftaydnqIhHiMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMbgvovZbXackS3CMM3qGni19W8M0SHJ/okh8dPm9NJQab13AGR6M2 CgF57Y9U0bAhPHq5pCrooknd6BVZyccEamEF+9qVnrDOSAwgzE1lC81hBpuC2eTV A9ijZzYWCQeO4P3i/f0wT/DU2XinF/Kf9/3/NeICC+3h+l6+PwyIko6yzjSBWYUB p4mBPiu17hDl/b50JYjgKkGKAS7cT+D9CJqmneWu1UDOGUNGp0HZK/c1TrI2JVUc vLr/l/a7Hs1T2HWwAJMeNpWZkthmVlIxmlbMJrbkZR89JUZuvpMmcgMQwNyDhRBg 2k1FTkGMbR3oFKY/oKQLjosnGJQ+yYXM -----END CERTIFICATE-----Generated at Fri May 3 04:36:46 2024 by rpki-client on console-ams.rpki-client.org