$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: LRGzM4MKCKHozQSBKUBYmT0zeuHcCVAsmrCLvctbfDc= Subject key identifier: 16:D5:58:67:92:71:7E:B5:BC:75:02:74:20:F7:5B:61:AD:D4:84:DB Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: A8 Signing time: Fri 17 May 2024 06:57:47 +0000 Manifest this update: Fri 17 May 2024 06:57:46 +0000 Manifest next update: Fri 24 May 2024 06:57:46 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: LQerTvme5bPIM+hBJVDtXsd/cSyMsf5ROPWs1HxozYA=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: Aa0S8NhZ6avRIqzViExX6WxTYLzcutfhF3IU+SlYafs=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: /Vh/4JY8xCIY7gjrvacdvkrn99MfimK7KiFPU0rc0TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: May 17 06:57:46 2024 GMT Not After : May 24 06:57:46 2024 GMT Subject: CN=6646ffea-800f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:c0:ce:9e:f1:0b:26:8d:57:56:ab:d6:b7: 90:99:0d:f0:5d:d6:85:7e:e7:54:08:c8:51:e8:e9: 29:b6:ef:7b:5a:0d:49:05:f6:47:1a:7c:27:c7:c7: 11:03:e9:db:33:7d:69:73:0c:43:f7:35:ec:86:af: b4:28:b8:4e:01:7b:e5:df:6f:a6:5c:61:48:fb:7d: 2f:79:41:73:bc:ed:6b:0b:85:80:b2:af:21:24:11: 47:5a:42:a6:94:76:45:55:66:37:5c:94:2d:56:f4: 45:b8:c8:7e:17:68:69:4d:53:74:48:92:a5:3f:67: 7e:92:26:21:c3:60:ac:61:8f:da:0b:9a:2c:13:fc: 5b:ba:b9:7d:da:39:7c:a6:cb:0b:21:18:15:78:d7: 2d:cc:4b:f3:a4:c9:66:0b:d2:fb:85:1e:9a:b6:ed: 0a:04:ad:5b:e9:c5:95:c4:ff:ff:0f:d0:61:d4:0c: 09:90:09:f8:7f:8c:c6:94:a8:b5:8c:29:ec:a1:4b: 79:c2:17:c2:e4:2f:48:87:33:54:3b:1a:d5:79:26: 36:e6:77:15:ce:9b:47:cf:57:6c:0a:a3:23:a5:32: 9d:01:42:89:ee:26:b6:e7:84:c7:57:e3:23:e3:85: 2f:07:3e:64:6f:9a:f9:14:03:c2:e1:5b:02:2e:14: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D5:58:67:92:71:7E:B5:BC:75:02:74:20:F7:5B:61:AD:D4:84:DB X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7f:c9:66:11:2e:fe:6e:e6:34:7e:e0:21:05:f0:d8:51:7d: ea:22:bb:55:e0:e1:df:8e:bd:01:36:ad:0c:82:ba:47:f3:ea: 2d:b3:90:1e:38:aa:b7:11:77:2e:2c:27:c6:3c:e0:b0:51:c4: 48:c1:41:a1:5e:a0:61:2f:0e:3e:bd:41:9d:ae:10:d4:2f:72: b3:b4:b5:83:23:69:c2:72:d3:b0:58:5f:35:f9:86:6b:cd:64: 1c:ea:e0:18:9c:95:0d:ae:2d:97:99:fe:1a:42:aa:3f:17:44: 12:bc:68:f5:0c:75:1a:63:a7:b1:3f:1a:b7:fe:d3:d6:0b:3a: 10:3c:9b:c2:54:6a:9d:c0:48:8d:d2:91:be:85:11:e7:b2:1b: 09:53:f8:2d:9e:06:84:c2:6e:90:bc:76:a1:ef:68:d0:06:1c: 1b:f6:48:31:4c:f9:80:c9:d6:44:56:28:6f:d6:08:48:f9:98: f8:74:33:aa:e1:1d:fe:e1:2f:44:c6:b5:59:4a:9c:26:6f:73: f6:d3:5b:1e:d9:9d:de:72:4f:20:87:63:d4:1d:9c:20:36:2f: 4e:c2:d4:43:f0:87:48:09:fb:07:72:01:bf:bc:3d:2d:21:45: 70:8c:47:42:7c:3e:2b:fe:eb:82:a7:be:0b:3b:69:92:39:f3: 1b:27:8f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjQwNTE3MDY1NzQ2WhcNMjQwNTI0MDY1NzQ2WjAYMRYwFAYD VQQDEw02NjQ2ZmZlYS04MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL3Azp7xCyaNV1ar1reQmQ3wXdaFfudUCMhR6Okptu97Wg1JBfZHGnwnx8cR A+nbM31pcwxD9zXshq+0KLhOAXvl32+mXGFI+30veUFzvO1rC4WAsq8hJBFHWkKm lHZFVWY3XJQtVvRFuMh+F2hpTVN0SJKlP2d+kiYhw2CsYY/aC5osE/xburl92jl8 pssLIRgVeNctzEvzpMlmC9L7hR6atu0KBK1b6cWVxP//D9Bh1AwJkAn4f4zGlKi1 jCnsoUt5whfC5C9IhzNUOxrVeSY25ncVzptHz1dsCqMjpTKdAUKJ7ia254THV+Mj 44UvBz5kb5r5FAPC4VsCLhQXBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbVWGeS cX61vHUCdCD3W2Gt1ITbMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0f8lmES7+buY0fuAhBfDYUX3qIrtV4OHfjr0BNq0MgrpH8+ots5Ae OKq3EXcuLCfGPOCwUcRIwUGhXqBhLw4+vUGdrhDUL3KztLWDI2nCctOwWF81+YZr zWQc6uAYnJUNri2Xmf4aQqo/F0QSvGj1DHUaY6exPxq3/tPWCzoQPJvCVGqdwEiN 0pG+hRHnshsJU/gtngaEwm6QvHah72jQBhwb9kgxTPmAydZEVihv1ghI+Zj4dDOq 4R3+4S9ExrVZSpwmb3P201se2Z3eck8gh2PUHZwgNi9OwtRD8IdICfsHcgG/vD0t IUVwjEdCfD4r/uuCp74LO2mSOfMbJ4+L -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org