$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json) Hash identifier: 28lJIPZ7ySOwmHRoTHxI2t4yHyRsZFa8dzuSHnnHmNE= Subject key identifier: 73:59:C0:C0:5A:E2:98:59:BE:FB:76:11:E4:53:5D:A6:73:82:D7:CB Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft Manifest number: 05A0 Signing time: Sat 27 Apr 2024 00:15:39 +0000 Manifest this update: Sat 27 Apr 2024 00:15:39 +0000 Manifest next update: Sat 04 May 2024 00:15:39 +0000 Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: xpZcIQShu9ctakBckNLxj9Vyk8enJ0/SXzjvBmc1T9c=) 2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: HpPML1igM6nukloEviOSwvtkO/Cgiu8ba1tFR5xUQ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Validity Not Before: Apr 27 00:15:39 2024 GMT Not After : May 4 00:15:39 2024 GMT Subject: CN=662c43ab-55ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:c1:2f:99:cd:fe:f9:b6:c4:65:71:fa:06: da:9d:ee:41:5e:71:77:a8:90:0e:e8:a6:05:64:6b: c7:c0:70:54:3b:c1:6c:0d:48:7c:da:2e:91:0a:5d: a4:df:ec:0f:ad:6d:1d:ae:e0:95:6c:e9:f7:21:73: e7:b7:23:7e:8c:c5:f1:06:78:6e:db:50:e1:3a:e3: a8:7b:da:81:ea:6d:0d:64:ee:cf:0f:85:6c:cb:0a: ea:06:2b:f4:61:4d:d6:aa:ea:d3:e3:aa:8d:c1:bd: 63:f7:c0:8c:00:32:5f:55:f7:f2:2a:59:6a:af:ba: 4e:bc:c6:23:77:d7:c9:9f:cb:eb:81:a6:80:1a:50: db:65:b5:9a:cf:50:dd:6e:0b:9e:05:a5:08:29:d7: bf:df:22:2b:ca:4c:a7:78:71:a0:ff:5f:4a:57:f7: 24:9e:75:4e:09:e5:f6:9d:cf:ed:35:79:f9:02:e1: 96:24:a5:b3:a1:23:d0:f6:fd:9f:a4:ba:e4:a9:20: 83:e2:ff:67:49:c9:94:05:18:c8:81:d6:4b:38:f3: 89:45:56:84:b9:9f:14:16:23:5d:b6:22:70:ee:9c: 86:e6:dd:ef:df:af:5b:1a:58:ad:ec:7a:d3:5e:4e: 43:88:33:0e:94:7c:db:75:1d:cf:4f:1b:8d:2c:10: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:59:C0:C0:5A:E2:98:59:BE:FB:76:11:E4:53:5D:A6:73:82:D7:CB X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d3:d3:da:6d:14:06:63:ba:0f:5a:e8:bd:3a:1d:c2:ad:f6: 96:60:ca:de:e3:38:29:20:e8:8d:77:2e:42:82:f8:a8:0e:e3: fe:22:8d:25:c1:57:67:d4:21:80:ca:19:01:59:34:a1:64:8f: b7:4e:fa:6b:9d:3d:df:a1:c4:38:53:0e:cf:8e:bc:1f:d1:45: 9b:8e:67:cc:de:30:52:65:d2:f2:43:e4:b3:80:1f:74:4e:4e: b3:a2:0e:a9:91:f0:e4:c9:fd:3b:a6:4e:3b:53:85:da:a7:21: 46:59:fb:e0:a1:c9:17:46:ab:e2:a5:9c:d7:d9:58:98:8b:b6: 80:94:fc:9a:54:e3:f8:bf:0a:bd:ee:88:31:39:f3:5f:f4:d0: be:92:ad:a9:1f:a3:4c:19:8c:35:93:0c:3d:38:44:63:40:fd: 66:c5:ba:aa:d2:e9:6c:27:c8:50:f3:37:05:9b:8c:bb:4f:e9: ab:ce:99:72:04:4b:0c:75:5a:2c:97:c2:9a:2e:62:40:9b:fa: 33:56:78:32:cb:0c:a0:07:ba:b1:95:b3:13:be:d6:01:39:1c: 13:6b:46:7b:a3:43:73:00:d7:1c:97:62:1a:d6:e6:96:01:ed: e8:48:a0:e5:f8:8b:07:5a:cb:58:18:30:9f:48:79:91:c3:ed: c8:b7:dc:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjQwNDI3MDAxNTM5WhcNMjQwNTA0MDAxNTM5WjAYMRYwFAYD VQQDEw02NjJjNDNhYi01NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspTBL5nN/vm2xGVx+gbane5BXnF3qJAO6KYFZGvHwHBUO8FsDUh82i6RCl2k 3+wPrW0druCVbOn3IXPntyN+jMXxBnhu21DhOuOoe9qB6m0NZO7PD4VsywrqBiv0 YU3WqurT46qNwb1j98CMADJfVffyKllqr7pOvMYjd9fJn8vrgaaAGlDbZbWaz1Dd bgueBaUIKde/3yIrykyneHGg/19KV/cknnVOCeX2nc/tNXn5AuGWJKWzoSPQ9v2f pLrkqSCD4v9nScmUBRjIgdZLOPOJRVaEuZ8UFiNdtiJw7pyG5t3v369bGlit7HrT Xk5DiDMOlHzbdR3PTxuNLBBgPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNZwMBa 4phZvvt2EeRTXaZzgtfLMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJEMi9FN0U5MDQwMDdENkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElN UFp5ZThtZDJnRjg0SkdPNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS09PabRQGY7oPWui9Oh3CrfaWYMre4zgpIOiNdy5CgvioDuP+Io0l wVdn1CGAyhkBWTShZI+3TvprnT3focQ4Uw7Pjrwf0UWbjmfM3jBSZdLyQ+SzgB90 Tk6zog6pkfDkyf07pk47U4XapyFGWfvgockXRqvipZzX2ViYi7aAlPyaVOP4vwq9 7ogxOfNf9NC+kq2pH6NMGYw1kww9OERjQP1mxbqq0ulsJ8hQ8zcFm4y7T+mrzply BEsMdVosl8KaLmJAm/ozVngyywygB7qxlbMTvtYBORwTa0Z7o0NzANccl2Ia1uaW Ae3oSKDl+IsHWstYGDCfSHmRw+3It9xp -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:01 2024 by rpki-client on console-ams.rpki-client.org