$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: 2C2j5H3qknh8+dJLgU59TnPLy0/KP9K5Hk0xTt/c0KA= Subject key identifier: 51:28:3F:CE:6C:44:FA:6F:67:5B:D0:9F:CB:7F:3F:3F:18:E3:8B:50 Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 0597 Signing time: Wed 01 May 2024 00:43:34 +0000 Manifest this update: Wed 01 May 2024 00:43:34 +0000 Manifest next update: Wed 08 May 2024 00:43:34 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: RFoK1QzwHYMH3OK30vFbtJHMymGMrb48CuO/cZ3P0aI=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: eZsMbIYCNANfm1H6l8fPlIIihvMzp3IStvDQqRzqYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: May 1 00:43:34 2024 GMT Not After : May 8 00:43:34 2024 GMT Subject: CN=66319036-68e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2d:9d:9c:50:ea:9a:94:25:e0:d7:a3:78:22: b5:ab:2b:3c:39:81:70:47:c5:1f:ba:92:6d:61:c1: 62:6d:e2:32:38:16:2b:1d:78:8c:c7:06:33:55:c1: da:1c:61:e7:fc:f7:d6:52:d2:d3:35:0a:c1:ef:76: 00:69:41:9e:2d:68:ef:42:4f:5e:b4:f0:7d:57:31: 3b:97:9f:7f:6a:02:78:76:45:41:1c:9b:0d:5c:cf: 7e:fc:90:c1:9e:67:e8:06:c7:3b:3c:66:36:d9:06: 72:1e:f1:b3:61:40:ff:a9:11:5a:cd:fa:38:b6:6a: 3e:d4:a5:b2:01:c9:c9:e3:21:aa:ef:33:d7:ab:34: 06:b3:e9:49:ec:00:bc:2f:3a:72:41:65:a5:1c:64: 52:1c:e5:ef:0f:c3:d6:04:71:81:60:0e:f9:8f:96: 8a:1a:80:fd:32:86:dc:ad:61:e9:e8:4b:86:1e:cd: 2e:20:0e:e1:e5:0c:e6:de:aa:38:8f:37:c9:c1:41: fb:04:ea:cd:c0:04:18:6b:c9:c4:04:28:bd:15:9f: 7f:a7:38:b5:15:c3:0a:60:0c:97:59:c0:e4:34:90: 0d:d1:19:8e:bc:3c:1c:f3:cc:73:b1:aa:ef:d4:36: 6f:2e:6d:87:6a:a5:c9:4f:9a:ea:bd:9f:24:b8:05: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:28:3F:CE:6C:44:FA:6F:67:5B:D0:9F:CB:7F:3F:3F:18:E3:8B:50 X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9c:18:b8:d2:25:73:bf:41:9b:25:73:6b:a7:5e:43:c1:6f: c8:54:0c:93:4c:65:d9:5a:ff:66:e4:82:f8:02:93:fe:85:c4: e3:33:d5:5e:4c:87:38:f4:25:51:bc:a8:b2:97:df:a2:87:7f: 54:a7:6a:df:ad:b0:65:dd:7c:f8:44:d9:95:5b:b9:bd:e2:24: f0:11:20:ba:d9:34:ab:5a:09:5f:64:bf:ba:83:6e:42:06:94: 84:27:33:df:c9:15:63:a1:29:0a:69:53:37:6b:0e:ab:a1:88: 25:97:85:17:d6:bf:00:57:00:4f:97:66:d3:a4:99:8e:c0:d3: 77:ed:27:57:ca:57:40:6b:f6:02:38:a7:43:2d:0e:1e:f0:ef: 1e:b7:9f:4d:c2:3f:9c:ad:21:15:29:e6:43:3d:89:8c:11:9e: 49:16:d7:66:cc:58:f2:b9:b3:50:b8:eb:ab:bb:60:7c:ac:0d: c4:9d:e5:d2:75:fc:4a:2c:1d:d0:8b:a0:ec:64:b3:bf:9d:60: 78:57:a4:53:b9:cf:39:1a:8c:a0:ac:fb:aa:80:9f:d4:c4:15: 0a:ac:7b:8a:28:1e:9d:0c:0d:be:fa:83:c2:19:58:2e:9a:89: 4c:f3:b0:4a:58:5e:f4:b7:ee:6d:2a:50:ea:f6:fa:bb:a2:4e: b1:a6:4e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjQwNTAxMDA0MzM0WhcNMjQwNTA4MDA0MzM0WjAYMRYwFAYD VQQDEw02NjMxOTAzNi02OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmS2dnFDqmpQl4NejeCK1qys8OYFwR8UfupJtYcFibeIyOBYrHXiMxwYzVcHa HGHn/PfWUtLTNQrB73YAaUGeLWjvQk9etPB9VzE7l59/agJ4dkVBHJsNXM9+/JDB nmfoBsc7PGY22QZyHvGzYUD/qRFazfo4tmo+1KWyAcnJ4yGq7zPXqzQGs+lJ7AC8 LzpyQWWlHGRSHOXvD8PWBHGBYA75j5aKGoD9MobcrWHp6EuGHs0uIA7h5Qzm3qo4 jzfJwUH7BOrNwAQYa8nEBCi9FZ9/pzi1FcMKYAyXWcDkNJAN0RmOvDwc88xzsarv 1DZvLm2HaqXJT5rqvZ8kuAU+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEoP85s RPpvZ1vQn8t/Pz8Y44tQMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZnBi40iVzv0GbJXNrp15DwW/IVAyTTGXZWv9m5IL4ApP+hcTjM9Ve TIc49CVRvKiyl9+ih39Up2rfrbBl3Xz4RNmVW7m94iTwESC62TSrWglfZL+6g25C BpSEJzPfyRVjoSkKaVM3aw6roYgll4UX1r8AVwBPl2bTpJmOwNN37SdXyldAa/YC OKdDLQ4e8O8et59Nwj+crSEVKeZDPYmMEZ5JFtdmzFjyubNQuOuru2B8rA3EneXS dfxKLB3Qi6DsZLO/nWB4V6RTuc85GoygrPuqgJ/UxBUKrHuKKB6dDA2++oPCGVgu molM87BKWF70t+5tKlDq9vq7ok6xpk4D -----END CERTIFICATE-----Generated at Wed May 1 01:38:27 2024 by rpki-client on console-ams.rpki-client.org