$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: 2b3f3fSbiZ7TsG3v6Nc2pcsTXk4nYgaiBmsfWEPRXfo= Subject key identifier: 14:83:11:2A:7F:7E:A5:72:E4:06:B1:8C:ED:73:31:18:71:5A:70:83 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0B80 Signing time: Fri 26 Apr 2024 19:19:30 +0000 Manifest this update: Fri 26 Apr 2024 19:19:30 +0000 Manifest next update: Fri 03 May 2024 19:19:30 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: X9Z1GVhp2RURoZizvtwRfuzJ8xQnSEHHq9hqEgn7uac=) 2: 719728B803EF11EAB301F66FC4F9AE02.roa (hash: QQchtcaBfC+kz2+McpDy2OREMEhK1dzWE54pdghGR84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Apr 26 19:19:30 2024 GMT Not After : May 3 19:19:30 2024 GMT Subject: CN=662bfe42-64fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:93:1f:8a:54:86:47:05:97:63:81:15:a6: a2:6c:57:f6:ba:ca:26:f6:cd:f4:78:09:28:ad:06: 06:f7:26:25:d2:78:e4:2a:f3:2c:a7:8e:6e:97:31: 93:80:c8:6a:91:da:0a:38:0b:ee:e5:dd:78:24:0e: 53:b8:3a:ee:99:74:90:66:db:2f:f3:28:20:cd:14: 54:e6:4e:c9:81:db:64:44:54:8a:d8:45:dd:db:39: e3:ff:04:93:fb:e1:a2:4c:15:c5:d7:bf:fb:ee:07: 3d:ef:f1:91:77:5d:35:84:55:8d:db:9b:37:03:73: 64:6c:6a:68:36:f9:93:af:ac:27:9b:ea:84:96:8f: 08:79:b9:0f:90:af:a8:d1:61:9e:df:0b:b7:d4:55: 1a:87:5d:25:59:08:05:38:d6:08:67:7f:64:5d:8b: 6c:9d:93:db:05:21:f0:c2:32:34:be:0f:fb:64:5b: b1:62:69:6a:51:87:ef:cc:d3:4f:cd:37:37:06:24: 5c:ab:a7:e6:99:e3:b2:64:8a:28:66:02:d3:ca:f6: 70:b5:cf:4c:0d:6d:36:f0:67:c5:8d:03:71:92:e1: c3:21:44:81:3f:6b:33:28:06:74:94:3d:7c:3c:e5: 42:94:3a:c2:53:44:f4:36:aa:4a:d3:7b:51:7f:52: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:83:11:2A:7F:7E:A5:72:E4:06:B1:8C:ED:73:31:18:71:5A:70:83 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6d:0b:4d:8f:9e:d1:3b:fc:60:0f:80:64:ef:c9:b2:38:15: 48:5f:c2:14:7e:a0:cf:c3:3c:05:e8:d3:dd:d3:f4:d8:da:e5: 68:cd:32:94:23:19:c6:53:0e:32:61:28:04:de:74:1f:fb:98: b1:35:1e:ee:a0:69:20:8a:01:82:32:4f:0e:28:13:4d:04:ff: 09:6a:38:4d:01:f4:46:23:fa:52:00:ac:ab:39:b6:be:04:e4: 69:b1:ce:ef:57:10:13:48:64:bd:e4:21:ae:9c:8a:9f:9b:30: ab:0c:06:a6:5e:4a:0c:c0:1d:d6:7b:90:59:12:05:89:2f:61: a2:63:21:94:7a:22:db:7b:8b:4c:65:15:97:0a:96:0b:b0:5f: 1b:97:f3:af:5a:82:f6:68:82:57:74:5f:7d:60:54:25:ed:31: 4a:09:5d:3e:84:ae:af:f4:e3:4a:b4:7c:b2:c2:51:49:b3:70: 6d:12:45:e5:d9:2c:35:2b:e4:aa:94:e1:5c:6e:d1:86:60:d2: ba:24:22:2c:ed:cc:2f:61:de:bd:d1:2b:a1:0c:7d:44:f9:60: 96:77:ab:c8:46:cd:26:d5:dc:98:1f:44:8f:1e:db:af:70:47: 2d:47:c9:d5:4e:4e:c0:15:17:ab:8f:be:9a:4c:77:c3:ad:b8: 76:06:c6:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjQwNDI2MTkxOTMwWhcNMjQwNTAzMTkxOTMwWjAYMRYwFAYD VQQDEw02NjJiZmU0Mi02NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbiTH4pUhkcFl2OBFaaibFf2usom9s30eAkorQYG9yYl0njkKvMsp45ulzGT gMhqkdoKOAvu5d14JA5TuDrumXSQZtsv8yggzRRU5k7JgdtkRFSK2EXd2znj/wST ++GiTBXF17/77gc97/GRd101hFWN25s3A3NkbGpoNvmTr6wnm+qElo8IebkPkK+o 0WGe3wu31FUah10lWQgFONYIZ39kXYtsnZPbBSHwwjI0vg/7ZFuxYmlqUYfvzNNP zTc3BiRcq6fmmeOyZIooZgLTyvZwtc9MDW028GfFjQNxkuHDIUSBP2szKAZ0lD18 POVClDrCU0T0NqpK03tRf1JE6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSDESp/ fqVy5AaxjO1zMRhxWnCDMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkbQtNj57RO/xgD4Bk78myOBVIX8IUfqDPwzwF6NPd0/TY2uVozTKU IxnGUw4yYSgE3nQf+5ixNR7uoGkgigGCMk8OKBNNBP8JajhNAfRGI/pSAKyrOba+ BORpsc7vVxATSGS95CGunIqfmzCrDAamXkoMwB3We5BZEgWJL2GiYyGUeiLbe4tM ZRWXCpYLsF8bl/OvWoL2aIJXdF99YFQl7TFKCV0+hK6v9ONKtHyywlFJs3BtEkXl 2Sw1K+SqlOFcbtGGYNK6JCIs7cwvYd690SuhDH1E+WCWd6vIRs0m1dyYH0SPHtuv cEctR8nVTk7AFRerj76aTHfDrbh2Bsay -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:00 2024 by rpki-client on console-ams.rpki-client.org