$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: X8RkYog7UvAoCvMtcpH4f46pwfvFUoLh0qtzOiqN+pk= Subject key identifier: 84:F2:85:D2:FC:F1:E6:A0:AE:85:98:A9:6C:E3:F9:62:4C:2C:61:7A Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: D3 Signing time: Fri 03 May 2024 06:16:41 +0000 Manifest this update: Fri 03 May 2024 06:16:40 +0000 Manifest next update: Fri 10 May 2024 06:16:40 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: 4YZWS0AIVHRYF+byaz0zSbDhhls2nCfOVoC71XKjxog=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: mfSqfjA2ppzRUnLj8Yldp3Gan4uXukuUfrVgrxeeLjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: May 3 06:16:40 2024 GMT Not After : May 10 06:16:40 2024 GMT Subject: CN=66348148-ae22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:dc:f6:6c:98:9d:c0:db:27:de:82:84:76: 75:12:cc:a4:60:d4:3e:30:91:70:a4:e1:5f:1e:76: b7:56:1b:a7:ae:1f:e1:d2:cb:9a:fa:74:23:ca:3d: 90:88:4b:10:7e:f0:8c:4e:e1:6f:98:7c:b3:3f:7d: 42:b2:1d:0c:d4:ed:14:7f:92:fe:39:07:64:84:d6: 9a:02:ac:a2:70:df:85:f2:68:a7:94:46:a6:a6:8d: e8:e2:fd:b2:3b:ab:8a:28:45:01:e4:01:7d:6b:52: 00:c8:3a:0d:03:0f:e6:f1:22:0f:ac:f8:8e:15:7d: 3c:b5:8a:2f:3f:99:0f:0a:44:f3:f5:a1:07:03:24: 8d:3b:79:bd:6d:79:79:52:7e:8b:05:8e:be:87:93: b3:31:3c:ad:0c:bf:c5:20:f6:f4:f1:66:15:e9:1a: 13:37:ca:1d:4e:8f:05:c4:39:99:1d:d6:6c:cc:b3: d9:84:3d:ce:92:47:34:1f:35:9b:e2:04:67:a1:e7: e5:73:51:61:50:c3:74:d7:08:e7:7d:a8:ca:ed:fa: 48:0e:d7:91:ee:74:a0:65:8d:78:65:82:77:bf:b6: 44:bb:79:1b:16:18:82:8a:0f:50:28:45:9e:d2:30: b9:3e:3c:5e:1c:7a:bc:d7:4f:c2:90:8c:b2:42:6f: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F2:85:D2:FC:F1:E6:A0:AE:85:98:A9:6C:E3:F9:62:4C:2C:61:7A X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:79:19:0c:16:32:f8:23:14:ee:8a:9b:28:0c:08:a6:92:86: cd:5c:74:7c:c3:b4:7b:06:5f:e5:c7:a2:06:2b:5b:f1:47:5a: cf:93:52:38:e5:a2:e4:f3:93:38:1a:37:f3:be:87:f4:9e:8a: e2:6c:af:68:e7:6d:eb:cc:55:2b:5f:4e:e0:23:2f:22:42:db: 74:05:e2:28:39:1a:e4:b8:c5:25:c7:7a:b8:3d:f3:b2:3a:33: 75:e5:3d:db:02:94:dc:14:73:f0:68:f7:11:d5:eb:b2:f6:87: 7d:1c:81:22:2f:7e:31:3d:94:d5:14:af:e4:14:ba:b0:31:00: 21:06:7f:87:2a:4b:bf:d2:e5:87:90:e7:51:e7:13:2b:47:1c: a8:85:ab:8c:c4:ea:b6:1a:53:94:b5:05:64:64:06:5b:88:fa: 86:70:ff:f6:1c:bd:47:84:53:ce:56:b9:33:93:ea:61:d1:e8: e7:4e:d9:23:50:9e:ac:cb:b2:48:a1:15:df:89:71:f0:61:37: 1b:76:a4:01:1f:14:54:b3:56:6a:38:6a:a1:fe:29:a2:60:b8: c4:2d:35:1f:2c:8e:7c:c2:ab:53:28:31:dd:ac:57:84:5c:1c: 59:d9:88:da:aa:18:93:b8:23:38:57:36:a6:be:9a:ca:f0:6f: 60:ce:51:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjQwNTAzMDYxNjQwWhcNMjQwNTEwMDYxNjQwWjAYMRYwFAYD VQQDEw02NjM0ODE0OC1hZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRvc9myYncDbJ96ChHZ1EsykYNQ+MJFwpOFfHna3Vhunrh/h0sua+nQjyj2Q iEsQfvCMTuFvmHyzP31Csh0M1O0Uf5L+OQdkhNaaAqyicN+F8minlEampo3o4v2y O6uKKEUB5AF9a1IAyDoNAw/m8SIPrPiOFX08tYovP5kPCkTz9aEHAySNO3m9bXl5 Un6LBY6+h5OzMTytDL/FIPb08WYV6RoTN8odTo8FxDmZHdZszLPZhD3Okkc0HzWb 4gRnoeflc1FhUMN01wjnfajK7fpIDteR7nSgZY14ZYJ3v7ZEu3kbFhiCig9QKEWe 0jC5PjxeHHq810/CkIyyQm+bvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITyhdL8 8eagroWYqWzj+WJMLGF6MB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTeRkMFjL4IxTuipsoDAimkobNXHR8w7R7Bl/lx6IGK1vxR1rPk1I4 5aLk85M4Gjfzvof0noribK9o523rzFUrX07gIy8iQtt0BeIoORrkuMUlx3q4PfOy OjN15T3bApTcFHPwaPcR1euy9od9HIEiL34xPZTVFK/kFLqwMQAhBn+HKku/0uWH kOdR5xMrRxyohauMxOq2GlOUtQVkZAZbiPqGcP/2HL1HhFPOVrkzk+ph0ejnTtkj UJ6sy7JIoRXfiXHwYTcbdqQBHxRUs1ZqOGqh/imiYLjELTUfLI58wqtTKDHdrFeE XBxZ2YjaqhiTuCM4VzamvprK8G9gzlE3 -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org