$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft File: ADiahleuCYgERy-OaNcF4u_b18A.mft (raw, json) Hash identifier: Jff2JbtmfOM9RW0MzLZg8btVLV6Hx/mLsHBIsE2nI8I= Subject key identifier: D9:43:F2:27:4B:0C:B2:57:21:A2:89:A3:3D:D4:E0:7B:FA:E8:39:3B Authority key identifier: 00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 Certificate issuer: /CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft Manifest number: 0B89 Signing time: Tue 14 May 2024 20:03:22 +0000 Manifest this update: Tue 14 May 2024 20:03:22 +0000 Manifest next update: Tue 21 May 2024 20:03:22 +0000 Files and hashes: 1: ADiahleuCYgERy-OaNcF4u_b18A.crl (hash: fpFFFORIq/WemZ9wVBOcWgAQUZeO3swLbCffHYY65dM=) 2: 8811415A689011EEA00A095DC4F9AE02.roa (hash: 48IxGJOKYf3ZnCDbFIJG9Nq2PPMVrHXpX9958CHjNPk=) 3: 053B88AA81ED11EEABC08274C4F9AE02.roa (hash: mfHNkl5nVUvbcaaUK0YKT8MQxMa6m2sz1Z5tbp2JIhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=00389A8657AE098804472F8E68D705E2EFDBD7C0 Validity Not Before: May 14 20:03:22 2024 GMT Not After : May 21 20:03:22 2024 GMT Subject: CN=6643c38a-c21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:7f:da:ad:f7:f1:f5:3e:a0:7d:ac:09:77: a2:e1:06:27:dc:e4:07:1c:c5:a0:bb:c8:54:35:ec: 29:00:3f:85:9d:6d:2c:0c:c0:cd:38:6b:cf:bc:ae: 4c:ff:30:3f:0b:3a:aa:67:fa:32:59:58:74:06:2c: 2a:5e:b8:3a:f1:04:48:04:52:7b:eb:d5:5f:4b:2e: 6b:20:e7:fc:22:f3:18:98:fd:79:5c:84:d5:1c:79: 05:09:68:91:19:be:f6:ed:14:6e:1e:96:c0:95:e0: 81:a1:90:be:b0:f7:04:51:9a:9f:be:41:11:01:05: e8:3e:8f:be:6c:db:b8:77:c5:66:a7:22:c3:3d:10: 77:fd:1c:dd:11:d0:be:81:07:e0:b4:61:46:05:bf: 0a:9b:1c:be:73:88:83:45:a2:69:a6:f1:48:02:64: 79:3f:89:b9:69:6f:56:48:59:49:73:26:77:fe:3e: c0:2c:0b:fa:ee:05:8a:14:a1:f0:76:63:f4:65:51: d0:eb:1a:32:e5:99:e7:f5:de:e7:4f:36:fd:e7:ca: 7f:be:4d:b0:16:c3:04:18:db:a2:1f:ae:f0:9f:7d: 3c:8f:fd:6c:86:8a:36:ae:8f:3d:95:b1:39:72:d3: bb:f0:54:1f:b9:67:16:67:f7:2c:c2:1d:ef:29:f0: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:F2:27:4B:0C:B2:57:21:A2:89:A3:3D:D4:E0:7B:FA:E8:39:3B X509v3 Authority Key Identifier: keyid:00:38:9A:86:57:AE:09:88:04:47:2F:8E:68:D7:05:E2:EF:DB:D7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADiahleuCYgERy-OaNcF4u_b18A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ADiahleuCYgERy-OaNcF4u_b18A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:93:35:9f:f2:7c:92:c3:29:41:1b:2d:2d:b4:d9:02:7e:dd: 23:b7:e9:43:ec:38:5c:9e:ea:88:bc:f3:d0:a1:99:77:bd:37: 2d:1f:1e:be:9c:f9:aa:e4:4c:a0:2e:05:4d:c6:18:93:88:c6: 8c:7e:99:62:c5:ab:0b:e1:47:5a:84:df:29:d2:2b:36:f2:f3: 6d:7d:9c:7e:ce:ef:9e:bd:65:de:c1:b1:f4:dc:0c:78:b4:33: 61:2d:19:fb:6f:34:bc:c4:3d:ff:e2:4f:9f:d1:4c:34:82:66: 52:85:da:18:84:c4:8a:3d:52:ea:d5:98:1c:28:69:6e:7c:ba: 3d:c7:27:99:e5:5c:85:4e:de:d8:ba:73:aa:c7:68:59:f4:a3: 9d:cc:bf:ef:77:1f:20:2a:86:aa:a5:45:00:de:73:85:70:65: b5:05:5f:79:da:6e:be:26:c5:2c:b8:2e:80:bb:9d:af:9e:c4: 8f:f9:72:1b:0f:11:33:35:dc:29:55:1b:8a:90:01:14:fc:72: 55:5f:fe:f9:e5:66:74:d5:3e:c6:44:16:e0:31:77:34:bb:61: fe:b3:6d:b1:bc:b3:c1:be:5c:b5:27:dd:4f:fd:8e:e4:98:83: 19:31:96:4b:5b:30:50:6e:09:ea:1a:b2:f9:7e:d8:39:01:5b: b0:17:07:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkEyNTExMC8GA1UEBRMoMDAzODlBODY1N0FFMDk4ODA0NDcyRjhFNjhENzA1RTJF RkRCRDdDMDAeFw0yNDA1MTQyMDAzMjJaFw0yNDA1MjEyMDAzMjJaMBgxFjAUBgNV BAMTDTY2NDNjMzhhLWMyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6g3/arffx9T6gfawJd6LhBifc5AccxaC7yFQ17CkAP4WdbSwMwM04a8+8rkz/ MD8LOqpn+jJZWHQGLCpeuDrxBEgEUnvr1V9LLmsg5/wi8xiY/XlchNUceQUJaJEZ vvbtFG4elsCV4IGhkL6w9wRRmp++QREBBeg+j75s27h3xWanIsM9EHf9HN0R0L6B B+C0YUYFvwqbHL5ziINFommm8UgCZHk/iblpb1ZIWUlzJnf+PsAsC/ruBYoUofB2 Y/RlUdDrGjLlmef13udPNv3nyn++TbAWwwQY26IfrvCffTyP/WyGijaujz2VsTly 07vwVB+5ZxZn9yzCHe8p8PptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2UPyJ0sM slchoomjPdTge/roOTswHwYDVR0jBBgwFoAUADiahleuCYgERy+OaNcF4u/b18Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGQTI1LzJCQkNCQ0FBMURB QzExRUFBRjRBMzc2M0M0RjlBRTAyL0FEaWFobGV1Q1lnRVJ5LU9hTmNGNHVfYjE4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQURpYWhsZXVDWWdFUnktT2FOY0Y0dV9iMThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG QTI1LzJCQkNCQ0FBMURBQzExRUFBRjRBMzc2M0M0RjlBRTAyL0FEaWFobGV1Q1ln RVJ5LU9hTmNGNHVfYjE4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyTNZ/yfJLDKUEbLS202QJ+3SO36UPsOFye6oi889ChmXe9Ny0fHr6c +arkTKAuBU3GGJOIxox+mWLFqwvhR1qE3ynSKzby8219nH7O7569Zd7BsfTcDHi0 M2EtGftvNLzEPf/iT5/RTDSCZlKF2hiExIo9UurVmBwoaW58uj3HJ5nlXIVO3ti6 c6rHaFn0o53Mv+93HyAqhqqlRQDec4VwZbUFX3nabr4mxSy4LoC7na+exI/5chsP ETM13ClVG4qQART8clVf/vnlZnTVPsZEFuAxdzS7Yf6zbbG8s8G+XLUn3U/9juSY gxkxlktbMFBuCeoasvl+2DkBW7AXBxs= -----END CERTIFICATE-----Generated at Tue May 14 21:48:30 2024 by rpki-client on console-ams.rpki-client.org