$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: fUAUxVI/Q7Ut4rKu+0hmcjbHWn/qb7ptXNO7jQyKE7o= Subject key identifier: 41:8D:75:13:C9:84:91:48:96:6A:E5:52:AF:8F:E2:D6:A3:2B:9C:8B Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 153C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 1535 Signing time: Sat 04 May 2024 17:25:16 +0000 Manifest this update: Sat 04 May 2024 17:25:15 +0000 Manifest next update: Sat 11 May 2024 17:25:15 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: oNFq4IQ7f1vCK4szEiABukHBc2SLx1uEt71Rk6+P3i4=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: BF2VGBgoPnm6Z1fnJTCT+uDo2m/5w1bUZm8gMPEWeSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5436 (0x153c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: May 4 17:25:15 2024 GMT Not After : May 11 17:25:15 2024 GMT Subject: CN=66366f7c-a08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:d8:e1:a7:ad:38:78:e5:56:d5:91:02:47: 2f:fc:50:b8:14:d0:5d:b3:78:38:77:d0:b1:16:9a: 64:0f:e1:f9:17:3e:68:3b:b9:f0:48:7a:f7:3d:12: 2d:cc:13:71:09:a2:73:03:a6:c0:92:ad:e2:70:92: 0b:4a:ba:7b:27:39:46:29:c3:e9:5f:97:05:e8:cb: aa:93:7f:e7:77:91:66:74:29:3f:46:e0:e5:dc:58: c9:1b:b9:f1:4d:3b:41:a0:52:b9:a5:92:9b:29:93: 4b:28:c8:df:e6:dc:27:4a:b2:cf:28:e6:2b:27:4c: d2:14:ae:44:0a:ca:05:c0:dd:2c:5f:13:ea:05:fe: 3c:0b:6d:08:bf:96:0c:f7:66:b2:04:fb:1c:3a:9f: 92:72:b0:2a:3f:62:ea:66:44:80:a1:97:40:dd:bb: 71:e4:d3:2a:7a:65:74:b6:bf:8d:60:46:ce:e8:bb: 02:d1:cd:7a:b3:5b:54:8f:58:88:81:2e:03:4a:58: 72:1e:7f:53:21:94:cc:92:5c:1a:97:71:01:48:28: 53:e1:b0:65:d5:99:14:60:46:6a:d1:2d:31:52:f6: 0e:3d:d5:fa:7b:5a:f0:01:ad:c3:3f:f6:63:56:ad: d9:9c:d5:50:5d:a4:a9:1f:99:84:37:a0:f6:d0:21: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:75:13:C9:84:91:48:96:6A:E5:52:AF:8F:E2:D6:A3:2B:9C:8B X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fe:23:59:d5:f8:c8:69:7c:5a:33:ff:c9:d1:17:1b:3d:1a: 41:23:eb:36:43:f5:e3:88:fa:62:af:b7:6e:92:e2:29:37:db: a1:08:14:38:e0:a7:f5:c6:28:5c:06:38:dd:e9:95:ee:9b:b0: a6:f9:87:c3:24:3c:a2:23:5c:db:f9:90:e7:39:57:00:fb:04: 9e:0e:7a:b0:9b:8e:be:1f:74:32:7a:04:ed:8c:52:61:51:da: e6:50:63:c7:92:37:48:8b:5b:83:28:73:f0:55:6a:4b:3e:fa: db:af:09:13:d4:b2:62:ba:84:5e:af:be:1e:19:f7:a6:26:79: 85:84:e4:fb:0a:1e:69:3d:dc:9f:f8:3a:a1:08:97:29:d9:e5: 41:6a:aa:fd:aa:f5:c3:52:58:56:40:1e:d0:1c:72:e6:8b:a8: 65:ea:4b:8b:af:8f:9f:a6:81:89:86:b5:85:44:51:25:ed:08: df:0e:f0:3b:b2:57:35:c6:02:58:99:91:27:68:56:f1:7a:3e: e4:2a:7f:8c:39:a8:69:f0:d9:82:2d:c7:ab:0e:c0:ef:62:98: 24:c5:c0:a8:a8:4b:1b:5f:5a:91:b9:e4:ad:8c:4c:a0:3f:d7: 57:e8:a9:d2:0b:95:22:ab:95:53:28:9b:a9:bd:6a:c9:6a:cb: 66:e9:5c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjQwNTA0MTcyNTE1WhcNMjQwNTExMTcyNTE1WjAYMRYwFAYD VQQDEw02NjM2NmY3Yy1hMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3XY4aetOHjlVtWRAkcv/FC4FNBds3g4d9CxFppkD+H5Fz5oO7nwSHr3PRIt zBNxCaJzA6bAkq3icJILSrp7JzlGKcPpX5cF6Muqk3/nd5FmdCk/RuDl3FjJG7nx TTtBoFK5pZKbKZNLKMjf5twnSrLPKOYrJ0zSFK5ECsoFwN0sXxPqBf48C20Iv5YM 92ayBPscOp+ScrAqP2LqZkSAoZdA3btx5NMqemV0tr+NYEbO6LsC0c16s1tUj1iI gS4DSlhyHn9TIZTMklwal3EBSChT4bBl1ZkUYEZq0S0xUvYOPdX6e1rwAa3DP/Zj Vq3ZnNVQXaSpH5mEN6D20CF58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGNdRPJ hJFIlmrlUq+P4tajK5yLMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS/iNZ1fjIaXxaM//J0RcbPRpBI+s2Q/XjiPpir7dukuIpN9uhCBQ4 4Kf1xihcBjjd6ZXum7Cm+YfDJDyiI1zb+ZDnOVcA+wSeDnqwm46+H3QyegTtjFJh UdrmUGPHkjdIi1uDKHPwVWpLPvrbrwkT1LJiuoRer74eGfemJnmFhOT7Ch5pPdyf +DqhCJcp2eVBaqr9qvXDUlhWQB7QHHLmi6hl6kuLr4+fpoGJhrWFRFEl7QjfDvA7 slc1xgJYmZEnaFbxej7kKn+MOahp8NmCLcerDsDvYpgkxcCoqEsbX1qRueStjEyg P9dX6KnSC5Uiq5VTKJupvWrJastm6VyG -----END CERTIFICATE-----Generated at Sat May 4 19:58:39 2024 by rpki-client on console-ams.rpki-client.org