$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: ifv+o2WES/yueMWF/xJQ6vE8ePnpzjqEUzTzdbwBJ10= Subject key identifier: D9:98:63:81:36:38:16:E4:FD:C6:3C:3A:70:75:21:D2:D9:6B:A5:CB Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2A15 Signing time: Tue 30 Apr 2024 15:52:40 +0000 Manifest this update: Tue 30 Apr 2024 15:52:40 +0000 Manifest next update: Tue 07 May 2024 15:52:40 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: JnARUGpW19FZf78JrAXOw1hthAoPRDCKFmrIx1bxgr4=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: WW8r5VWu3s7zLjRc2MaNw5HuLFwohLxgkcBYESSXNcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10787 (0x2a23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Apr 30 15:52:40 2024 GMT Not After : May 7 15:52:40 2024 GMT Subject: CN=663113c8-f46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:3c:1c:fb:05:be:37:48:78:b7:15:86:c8: 07:36:53:01:d2:4d:4f:f6:77:a3:52:a8:e1:3c:19: e0:1e:36:e3:e1:7a:bf:56:16:4d:91:c7:ee:fa:16: b1:3c:7f:a4:03:6a:35:1f:38:be:cb:2a:9d:cc:d7: de:3a:30:e0:1f:a6:de:7a:25:3d:74:ea:bc:e5:78: 53:d9:cd:d2:92:cf:6a:0b:cc:fd:0e:5f:08:b0:87: 44:40:2a:1b:48:af:20:84:d7:98:aa:ff:17:d9:4b: 99:4d:3f:0b:ba:18:7b:00:de:94:8e:aa:3c:ca:d6: 9c:ed:e2:40:f5:22:f1:c3:a7:00:93:89:34:3a:2b: 5b:18:c4:b4:1c:5f:b2:67:41:0e:f5:e1:4d:7c:7f: 49:d6:83:4a:28:c2:49:57:57:5a:b4:ee:4c:e7:53: 7e:d7:16:48:8f:6f:b0:f2:be:8d:28:d4:9f:56:05: 57:30:72:49:0b:af:16:de:8f:80:68:9b:9a:9a:25: 24:ac:48:19:92:c4:c4:de:22:32:57:74:cd:be:fe: 6e:5f:9c:ae:26:55:26:68:59:56:2e:ac:da:46:0e: 46:fb:db:52:5e:39:de:18:dd:81:f8:42:c2:8e:43: fa:a8:bd:b8:dc:7c:62:04:6f:d1:17:4a:75:ea:f9: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:98:63:81:36:38:16:E4:FD:C6:3C:3A:70:75:21:D2:D9:6B:A5:CB X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:7d:f2:54:4f:0c:eb:3d:cc:79:01:42:2e:35:54:84:4d:65: 3a:7e:cd:4c:a1:c2:fd:f9:8a:0f:20:0e:5c:58:26:65:6f:50: 3c:90:91:c3:89:65:66:d0:6d:0f:45:de:50:5a:1d:89:5a:3e: 9a:8f:9b:2a:9a:d0:96:1b:5d:bd:d5:67:42:47:7a:8d:68:00: d9:50:e2:68:26:22:07:5a:ca:b6:e2:b4:26:08:70:36:db:2e: d3:16:cb:62:cc:3b:44:27:df:78:60:00:21:ed:06:35:fe:3b: 18:54:1d:f5:56:6b:3c:4b:65:2c:f1:23:9d:0b:4c:0e:c8:53: db:86:95:37:cb:02:2f:d7:d5:df:bb:d1:59:ba:3a:cc:d3:eb: 37:6e:9a:8e:37:36:0f:28:30:22:2e:e3:8b:91:43:06:68:1a: c8:7c:2e:b0:a5:92:9b:fb:3d:15:d8:7d:c2:b8:70:e0:55:98: 01:94:0e:20:75:8e:b4:65:e6:29:d7:f9:be:76:49:15:e9:54: c0:28:04:31:33:7b:1a:ab:13:02:47:c2:b6:cd:67:00:d0:ce: 4f:a1:fa:a3:08:53:a1:95:0a:57:33:a4:63:3e:ce:0d:e7:02: c1:b0:48:b6:16:82:d3:96:f7:f4:ea:09:b2:d5:f9:c5:9b:fe: db:44:d2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjQwNDMwMTU1MjQwWhcNMjQwNTA3MTU1MjQwWjAYMRYwFAYD VQQDEw02NjMxMTNjOC1mNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoU8HPsFvjdIeLcVhsgHNlMB0k1P9nejUqjhPBngHjbj4Xq/VhZNkcfu+hax PH+kA2o1Hzi+yyqdzNfeOjDgH6beeiU9dOq85XhT2c3Sks9qC8z9Dl8IsIdEQCob SK8ghNeYqv8X2UuZTT8Luhh7AN6Ujqo8ytac7eJA9SLxw6cAk4k0OitbGMS0HF+y Z0EO9eFNfH9J1oNKKMJJV1datO5M51N+1xZIj2+w8r6NKNSfVgVXMHJJC68W3o+A aJuamiUkrEgZksTE3iIyV3TNvv5uX5yuJlUmaFlWLqzaRg5G+9tSXjneGN2B+ELC jkP6qL243HxiBG/RF0p16vn4MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmYY4E2 OBbk/cY8OnB1IdLZa6XLMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYffJUTwzrPcx5AUIuNVSETWU6fs1MocL9+YoPIA5cWCZlb1A8kJHD iWVm0G0PRd5QWh2JWj6aj5sqmtCWG1291WdCR3qNaADZUOJoJiIHWsq24rQmCHA2 2y7TFstizDtEJ994YAAh7QY1/jsYVB31Vms8S2Us8SOdC0wOyFPbhpU3ywIv19Xf u9FZujrM0+s3bpqONzYPKDAiLuOLkUMGaBrIfC6wpZKb+z0V2H3CuHDgVZgBlA4g dY60ZeYp1/m+dkkV6VTAKAQxM3saqxMCR8K2zWcA0M5PofqjCFOhlQpXM6RjPs4N 5wLBsEi2FoLTlvf06gmy1fnFm/7bRNKD -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:06 2024 by rpki-client on console-ams.rpki-client.org