$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: r6xEPKoF3B59glEwXDYP8EeVxj7QzFiMmjUQ4LO1wNs= Subject key identifier: 82:E1:E5:C2:5A:51:5A:AE:1A:49:32:4F:07:5B:6E:0B:1B:E7:35:6F Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 015F Signing time: Sun 05 May 2024 04:58:59 +0000 Manifest this update: Sun 05 May 2024 04:58:58 +0000 Manifest next update: Sun 12 May 2024 04:58:58 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: u0QlZg1A+ILcWkdegq0NaqMPi3IxzLNwMwzNcZOhv9g=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: y1/TtbVYSXmGEO5sDTnBZKC6RkVKVkIdlw6FPJSrn2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: May 5 04:58:58 2024 GMT Not After : May 12 04:58:58 2024 GMT Subject: CN=66371213-4b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:04:43:73:e1:ad:c7:3c:f7:b8:b1:ea:6a: d9:ba:c2:95:74:1e:8c:3e:e9:42:38:f3:4c:05:3b: 7e:f7:f7:45:bd:00:d5:9c:dd:75:c5:b6:16:a8:ef: a5:c6:79:a1:d9:9e:97:7d:57:46:db:b6:01:86:4a: 19:84:e0:e2:1e:18:df:0f:a4:15:ca:9c:f8:f3:d9: e4:f2:77:63:44:b0:f9:8e:c7:bf:66:bd:2e:2a:f3: d5:4a:fb:8e:d7:cb:dd:c6:18:ee:cf:60:30:89:1e: e6:8f:f8:5f:21:f0:80:c4:aa:c3:29:3e:a3:c9:fa: 53:39:6a:95:02:3b:66:26:4e:29:ce:6d:08:7a:b0: fe:a2:e3:c3:9b:05:fc:f4:85:72:a9:99:a8:e3:0b: 4a:cb:b0:d1:46:39:ef:9b:18:9d:3f:a2:93:5b:5a: 0d:7f:08:09:cc:9b:7f:e3:1c:db:98:9b:19:71:bf: a7:39:8e:21:e0:af:9e:01:ea:50:bf:36:17:f2:47: 3b:29:12:e7:fd:22:bc:54:d3:ab:f3:6c:cd:85:c7: 68:d3:f8:ab:e0:1a:c6:90:7b:de:17:5e:f9:4c:e3: d9:8d:d8:4e:e6:d5:b0:38:e1:b2:ee:2b:bb:d6:42: b2:7b:af:31:d9:8a:18:08:6b:c5:1f:9c:95:f5:8a: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E1:E5:C2:5A:51:5A:AE:1A:49:32:4F:07:5B:6E:0B:1B:E7:35:6F X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b5:d3:5c:e6:cc:05:0b:35:35:0b:82:4a:6b:4d:58:6b:88: 79:37:6e:55:6b:1b:88:64:21:14:2e:b9:f6:24:4b:4b:8d:61: b4:cd:2a:3d:b8:59:22:78:0d:c5:98:af:a7:78:b0:9e:fd:c5: fb:80:6e:f4:10:6a:22:bd:67:ad:3e:35:1a:65:56:63:d1:87: e8:1e:bb:55:64:4b:97:15:fa:62:79:70:c0:bb:cb:71:2e:be: 59:ee:a1:d3:16:55:9c:7c:a5:ca:cd:44:ec:91:1a:7c:d1:85: 3d:aa:a9:d4:9b:1c:02:3e:d0:5f:66:d8:f7:89:02:a1:fd:b2: b3:ab:5c:70:a1:5b:ef:15:44:ef:a3:11:96:ae:ac:c4:8b:0b: 02:a3:92:51:61:76:4b:82:06:36:02:1b:29:ec:34:82:3b:41: b1:3d:05:c5:b1:be:ca:dc:77:6c:e0:ad:86:ac:33:74:9d:ed: be:b3:cf:04:cf:08:d2:5f:94:40:9a:20:57:c7:92:a1:13:60: 81:b0:eb:49:85:be:47:b2:47:28:7a:c8:f9:b3:39:a0:6f:68: da:38:92:9d:8b:99:4a:3f:13:1d:d3:f9:62:15:7d:42:f0:cd: f9:38:b5:56:35:62:4f:49:4c:09:61:c4:76:b9:cf:92:1b:0d: f5:12:c5:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjQwNTA1MDQ1ODU4WhcNMjQwNTEyMDQ1ODU4WjAYMRYwFAYD VQQDEw02NjM3MTIxMy00Yjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4B8EQ3Phrcc897ix6mrZusKVdB6MPulCOPNMBTt+9/dFvQDVnN11xbYWqO+l xnmh2Z6XfVdG27YBhkoZhODiHhjfD6QVypz489nk8ndjRLD5jse/Zr0uKvPVSvuO 18vdxhjuz2AwiR7mj/hfIfCAxKrDKT6jyfpTOWqVAjtmJk4pzm0IerD+ouPDmwX8 9IVyqZmo4wtKy7DRRjnvmxidP6KTW1oNfwgJzJt/4xzbmJsZcb+nOY4h4K+eAepQ vzYX8kc7KRLn/SK8VNOr82zNhcdo0/ir4BrGkHveF175TOPZjdhO5tWwOOGy7iu7 1kKye68x2YoYCGvFH5yV9YqeBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILh5cJa UVquGkkyTwdbbgsb5zVvMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAntdNc5swFCzU1C4JKa01Ya4h5N25VaxuIZCEULrn2JEtLjWG0zSo9 uFkieA3FmK+neLCe/cX7gG70EGoivWetPjUaZVZj0YfoHrtVZEuXFfpieXDAu8tx Lr5Z7qHTFlWcfKXKzUTskRp80YU9qqnUmxwCPtBfZtj3iQKh/bKzq1xwoVvvFUTv oxGWrqzEiwsCo5JRYXZLggY2Ahsp7DSCO0GxPQXFsb7K3Hds4K2GrDN0ne2+s88E zwjSX5RAmiBXx5KhE2CBsOtJhb5Hskcoesj5szmgb2jaOJKdi5lKPxMd0/liFX1C 8M35OLVWNWJPSUwJYcR2uc+SGw31EsUz -----END CERTIFICATE-----Generated at Sun May 5 05:30:49 2024 by rpki-client on console-ams.rpki-client.org