$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: khy/NSStCJ26JggUuyFFGp/bX4/NiV89/z3e5wIeoSA= Subject key identifier: 08:F6:03:CC:8C:FA:E8:48:5F:56:DA:3F:D6:83:D4:3C:8F:54:A8:A7 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0B8A Signing time: Mon 06 May 2024 19:23:37 +0000 Manifest this update: Mon 06 May 2024 19:23:36 +0000 Manifest next update: Mon 13 May 2024 19:23:36 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: P/n0P+GDTaeyGW2Ptgx3UPSJCSgQxVTizCNCHmwB03Q=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: v9azMDMl/yRYmoLHg8R81AQm2XRIdcogmkiu0bE+WLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: May 6 19:23:36 2024 GMT Not After : May 13 19:23:36 2024 GMT Subject: CN=66392e39-1e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:63:32:1f:ae:86:ec:cf:64:32:f5:b7:b7: 34:60:c0:a5:a9:45:df:fa:30:bf:df:17:3a:86:b5: f9:f0:eb:0f:32:85:82:c8:36:25:1c:85:7d:3e:07: 1c:40:c6:3a:14:90:c0:57:9b:44:5e:a7:b2:8a:8b: 63:d9:85:da:0b:a7:2f:01:99:97:91:bf:90:5a:5c: 16:d0:4a:b6:c4:a3:e3:56:33:6a:01:68:4e:48:fd: 86:35:9b:95:b3:84:04:fc:f1:35:f1:9c:68:a1:6f: 98:96:06:3f:ad:58:cb:ad:60:e5:ab:08:9b:5f:f3: 81:fc:a4:99:56:1e:00:8b:fa:bc:88:f7:99:b7:56: 86:a6:f4:e4:41:4a:2b:3f:11:5f:05:1f:a5:b4:cc: bf:2f:51:af:d4:3d:3b:07:d9:57:e7:f5:7f:55:d9: 9a:23:08:41:6a:f1:c8:c1:c3:65:b9:56:24:70:6f: d3:c0:c1:da:ee:84:5b:29:34:2f:bd:d2:d9:e5:40: 22:69:68:d3:f8:de:11:34:55:72:ac:bc:bb:78:f7: fc:70:6b:0e:65:15:68:0e:9e:c8:82:3c:b1:72:38: 98:b7:1c:2b:6a:4c:0e:6a:a5:5d:44:e0:0b:14:dc: 7a:64:a7:8f:8f:c4:99:e6:db:80:de:73:6e:86:46: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F6:03:CC:8C:FA:E8:48:5F:56:DA:3F:D6:83:D4:3C:8F:54:A8:A7 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:97:03:91:b8:15:5f:f3:a0:cb:7f:be:e9:9c:13:72:c7:3d: 7d:ba:a6:f4:56:4b:b5:8e:dd:af:ed:c9:db:11:ac:15:40:11: 3b:6a:03:4b:27:e4:74:86:bb:02:7e:9a:83:fc:18:f6:c8:f4: 8d:81:f3:10:0b:20:8f:10:fd:37:f5:23:d9:4f:5b:fd:fa:d8: 9b:fb:59:a2:29:15:fc:81:0f:f4:21:ce:91:a6:4c:97:96:06: 48:7c:38:68:d7:11:45:7b:09:a8:28:d7:4b:26:16:a3:f5:b5: 90:62:d4:25:85:19:87:fa:b8:7a:79:28:5f:97:b2:3c:7e:41: 44:66:45:be:5e:bc:ec:60:77:b8:ca:f4:4f:9b:ab:28:65:98: be:e3:77:f2:c9:e2:f7:c7:63:1b:11:d2:d6:84:f7:25:99:c4: 02:5d:c6:10:66:21:4d:37:7a:4b:e9:91:0b:41:a7:69:22:e8: 66:ec:06:de:0a:99:74:0b:9b:85:03:1e:a5:8b:15:79:9d:99: 68:4c:7a:17:7d:72:9b:48:c0:0a:fe:e5:4e:1e:6a:7c:3c:75: d4:dd:4d:8c:76:1b:37:d6:af:1b:b6:54:2e:57:04:47:fa:b5: a2:5f:a3:7d:e3:66:76:6c:32:73:aa:44:17:89:b5:93:48:52: 60:7d:f2:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjQwNTA2MTkyMzM2WhcNMjQwNTEzMTkyMzM2WjAYMRYwFAYD VQQDEw02NjM5MmUzOS0xZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw9jMh+uhuzPZDL1t7c0YMClqUXf+jC/3xc6hrX58OsPMoWCyDYlHIV9Pgcc QMY6FJDAV5tEXqeyiotj2YXaC6cvAZmXkb+QWlwW0Eq2xKPjVjNqAWhOSP2GNZuV s4QE/PE18ZxooW+YlgY/rVjLrWDlqwibX/OB/KSZVh4Ai/q8iPeZt1aGpvTkQUor PxFfBR+ltMy/L1Gv1D07B9lX5/V/VdmaIwhBavHIwcNluVYkcG/TwMHa7oRbKTQv vdLZ5UAiaWjT+N4RNFVyrLy7ePf8cGsOZRVoDp7IgjyxcjiYtxwrakwOaqVdROAL FNx6ZKePj8SZ5tuA3nNuhkaTFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj2A8yM +uhIX1baP9aD1DyPVKinMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCflwORuBVf86DLf77pnBNyxz19uqb0Vku1jt2v7cnbEawVQBE7agNL J+R0hrsCfpqD/Bj2yPSNgfMQCyCPEP039SPZT1v9+tib+1miKRX8gQ/0Ic6RpkyX lgZIfDho1xFFewmoKNdLJhaj9bWQYtQlhRmH+rh6eShfl7I8fkFEZkW+XrzsYHe4 yvRPm6soZZi+43fyyeL3x2MbEdLWhPclmcQCXcYQZiFNN3pL6ZELQadpIuhm7Abe Cpl0C5uFAx6lixV5nZloTHoXfXKbSMAK/uVOHmp8PHXU3U2Mdhs31q8btlQuVwRH +rWiX6N942Z2bDJzqkQXibWTSFJgffKD -----END CERTIFICATE-----Generated at Mon May 6 20:19:32 2024 by rpki-client on console-ams.rpki-client.org