$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft File: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft (raw, json) Hash identifier: 4H9jAQOis4QhBR4RX3kqzw5uQCrV1EzkBfq8YCc6RRk= Subject key identifier: 69:5E:70:43:C6:80:36:50:A6:66:1E:DE:23:6D:9A:EB:CA:18:69:6A Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft Manifest number: 0195 Signing time: Wed 01 May 2024 05:01:15 +0000 Manifest this update: Wed 01 May 2024 05:01:15 +0000 Manifest next update: Wed 08 May 2024 05:01:15 +0000 Files and hashes: 1: lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl (hash: ih5b8G07VOUIRIulWpPeA229sl7C1uS4l140QW7kyCM=) 2: BDA9DE001C5E11ED94861F7CC4F9AE02.roa (hash: wNkDXswoIsfNaXhGA/YZud+t9elugH4UWLxwSpJ5NY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Validity Not Before: May 1 05:01:15 2024 GMT Not After : May 8 05:01:15 2024 GMT Subject: CN=6631cc9b-1f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:c9:4a:0b:fe:f9:63:90:68:33:c2:d4:79: 4a:66:e6:b8:d4:ed:27:b6:cd:12:fb:fe:2c:9c:4c: 7f:4a:8c:3c:72:2a:6c:ed:e2:9f:b8:62:24:fd:cc: 6e:18:3d:2f:e9:cd:0d:a8:85:a1:59:45:57:41:03: 3f:b8:88:c3:32:83:b9:5a:a8:07:5e:bc:17:2e:a1: 3c:c9:35:31:93:97:e7:fb:73:46:60:b6:d8:31:94: 4f:0b:b9:71:a3:a9:56:45:08:fa:54:7d:d5:7c:80: df:83:7e:3c:a2:b5:6d:7b:14:c6:11:b5:8c:6b:2f: 04:be:6b:ca:82:98:3d:4e:03:e8:3a:0a:5d:f1:09: c9:49:61:3c:66:c4:fd:29:53:12:31:79:87:4b:5c: 23:9a:98:de:33:6c:5f:a4:68:ae:60:81:da:2e:f4: 71:b2:14:75:13:27:5e:1a:ea:25:e5:dc:13:45:c9: 60:3e:f0:52:06:89:6f:0c:0f:9e:dc:02:96:20:66: 6d:dd:b4:0a:f1:1c:d4:e2:c1:73:59:38:e7:3c:f8: 79:da:b5:d6:f7:4e:24:ff:b5:dd:28:8c:17:4e:18: be:da:1d:79:ce:c2:2b:0c:d6:f9:0d:8f:07:45:91: fd:51:38:c7:8e:b2:af:bb:7a:04:18:f5:7a:81:ec: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5E:70:43:C6:80:36:50:A6:66:1E:DE:23:6D:9A:EB:CA:18:69:6A X509v3 Authority Key Identifier: keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b7:7c:15:0d:80:45:c0:f3:4c:29:32:f1:74:0e:2c:8b:b8: 8f:93:16:a6:38:91:13:c9:21:1c:77:d5:60:92:d4:4c:51:8b: 7f:6e:3b:fe:7f:a5:70:b0:74:8c:8f:a0:65:94:e1:b4:89:ad: 3f:36:55:12:3d:ce:7c:11:d5:46:0e:22:70:a2:e0:f2:06:86: ba:82:3c:7f:bc:9c:9d:85:fc:50:79:e1:eb:4b:83:1c:10:ee: da:f3:27:7f:08:c2:fd:6f:da:ed:0c:57:c5:55:03:86:be:db: 14:70:e0:97:10:2b:f4:d4:d4:82:7d:70:bc:28:e9:56:8e:36: 22:53:dc:6c:54:f5:93:50:56:76:ce:5b:c9:88:a7:2d:7f:5b: da:35:23:bc:c1:71:e9:6e:51:19:7e:5a:d2:c1:37:a6:b1:6a: a0:93:ef:c3:56:48:5b:79:1d:33:09:d1:68:bf:8d:a8:5f:46: 3e:33:f5:73:1c:31:6c:1c:d9:5f:78:9c:f2:b5:24:e7:f2:c7: 9c:d0:7b:a3:11:99:e2:7b:da:d0:5b:f7:6b:b7:8e:f9:74:31: a1:55:f6:b0:75:fe:2b:0e:a6:d2:be:b6:ac:5d:87:d7:65:10: 43:15:a8:bb:45:f8:fc:b4:d3:fa:24:ee:ff:28:c4:56:e4:f0: 14:18:6c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRBNTAxMTAvBgNVBAUTKDk0ODMwRjk0MEQ4RERDN0Y5ODlCN0NBQjEzNjI4M0NG NDMyOTYwQkQwHhcNMjQwNTAxMDUwMTE1WhcNMjQwNTA4MDUwMTE1WjAYMRYwFAYD VQQDEw02NjMxY2M5Yi0xZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAns/JSgv++WOQaDPC1HlKZua41O0nts0S+/4snEx/Sow8cips7eKfuGIk/cxu GD0v6c0NqIWhWUVXQQM/uIjDMoO5WqgHXrwXLqE8yTUxk5fn+3NGYLbYMZRPC7lx o6lWRQj6VH3VfIDfg348orVtexTGEbWMay8EvmvKgpg9TgPoOgpd8QnJSWE8ZsT9 KVMSMXmHS1wjmpjeM2xfpGiuYIHaLvRxshR1EydeGuol5dwTRclgPvBSBolvDA+e 3AKWIGZt3bQK8RzU4sFzWTjnPPh52rXW904k/7XdKIwXThi+2h15zsIrDNb5DY8H RZH9UTjHjrKvu3oEGPV6geyQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlecEPG gDZQpmYe3iNtmuvKGGlqMB8GA1UdIwQYMBaAFJSDD5QNjdx/mJt8qxNig89DKWC9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEE1MC9GN0E2NEIwQTE4 NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNILVltM3lyRTJLRHowTXBZ TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJTVBsQTJOM0gtWW0zeXJFMktEejBNcFlMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEE1MC9GN0E2NEIwQTE4NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNI LVltM3lyRTJLRHowTXBZTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzt3wVDYBFwPNMKTLxdA4si7iPkxamOJETySEcd9VgktRMUYt/bjv+ f6VwsHSMj6BllOG0ia0/NlUSPc58EdVGDiJwouDyBoa6gjx/vJydhfxQeeHrS4Mc EO7a8yd/CML9b9rtDFfFVQOGvtsUcOCXECv01NSCfXC8KOlWjjYiU9xsVPWTUFZ2 zlvJiKctf1vaNSO8wXHpblEZflrSwTemsWqgk+/DVkhbeR0zCdFov42oX0Y+M/Vz HDFsHNlfeJzytSTn8sec0HujEZnie9rQW/drt475dDGhVfawdf4rDqbSvrasXYfX ZRBDFai7Rfj8tNP6JO7/KMRW5PAUGGwK -----END CERTIFICATE-----Generated at Wed May 1 05:59:04 2024 by rpki-client on console-fra.rpki-client.org