$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: kj/fOnFz5WO+dHV9Ap5i/1Hcd4SMKTmHHHf50sXot2Q= Subject key identifier: 82:23:AF:79:23:10:D0:78:6E:F6:3D:0F:D3:38:31:EF:8F:07:D0:45 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1563 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 155C Signing time: Sat 18 May 2024 17:17:50 +0000 Manifest this update: Sat 18 May 2024 17:17:50 +0000 Manifest next update: Sat 25 May 2024 17:17:50 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: 6MjdvSz8FmgzFd8SqbqupiQXDmbdYPtYeaiTodJl7D4=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: lIHsFfSb4do9Pbeacgj8wJgBwwid8CHai2Y4Mrf8vqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5475 (0x1563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: May 18 17:17:50 2024 GMT Not After : May 25 17:17:50 2024 GMT Subject: CN=6648e2be-ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:74:24:da:bb:fe:91:59:38:46:e0:79:a8: 5c:21:fc:7a:ea:5b:31:b4:24:18:46:db:1c:7c:84: cf:89:08:24:a7:59:70:3f:d1:04:88:c0:90:54:24: 28:ae:54:ab:e3:0f:30:fd:bf:aa:20:ad:b5:69:4c: 7d:0c:1f:41:cd:cd:ae:91:5d:d2:38:0b:df:4f:cb: 50:88:ee:68:f8:20:c0:81:a1:31:00:4b:09:44:e7: 05:c5:f4:6f:e3:69:fd:f5:15:52:73:7c:da:b9:a4: 99:da:c9:af:01:61:43:93:fd:d0:c4:14:89:73:d6: 73:16:1a:b7:5c:40:36:13:b2:dd:bb:4b:b3:80:59: 64:fd:1d:77:da:30:73:45:71:b1:ba:d3:74:08:0b: 96:d3:3c:73:f7:df:92:74:4b:ce:3d:46:c1:e5:c8: dd:b9:8f:3c:8b:5e:a3:25:dd:5e:88:1d:c3:b2:05: 76:e1:69:52:92:9d:d0:cd:23:22:b5:c8:e2:bd:97: b5:5b:dc:02:00:0f:69:a2:e6:39:9d:9d:8a:0f:63: 71:65:5a:94:ab:b1:ec:d0:7b:1a:b7:c4:46:c9:4e: 60:ac:25:4b:bc:6f:22:b0:b2:94:73:29:ea:63:9a: 90:74:37:0f:ac:5c:45:23:2c:f3:86:4c:75:49:ac: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:AF:79:23:10:D0:78:6E:F6:3D:0F:D3:38:31:EF:8F:07:D0:45 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:44:bf:90:86:22:2a:32:82:3c:03:8e:3c:6f:4a:cb:ee: 02:78:86:bb:6e:8d:11:32:4c:87:c5:2a:a5:61:d8:c6:a4:6d: 74:4c:e2:66:3a:87:89:d8:58:48:6c:0a:99:ae:73:c0:74:98: a1:04:6b:23:f1:01:e7:42:fc:eb:84:a2:a8:91:dd:6e:51:7c: 2a:78:07:c0:17:a7:78:1e:a9:d4:aa:8f:02:fa:4d:68:b7:5e: 3a:e7:1e:d6:b1:7d:9c:eb:94:3d:4c:52:59:40:0d:eb:0b:b6: ff:b9:9a:49:c5:7f:b3:f4:41:2e:1f:ba:b0:41:c1:fd:e7:f5: cd:12:95:a0:59:25:36:cc:a3:1b:a6:2d:59:e8:55:55:56:c9: be:8b:01:eb:e3:e6:c7:56:f0:50:f9:e0:62:57:e7:f6:4a:22: 6d:2e:2f:58:5d:0a:c9:2a:d7:24:03:0a:bb:a9:b9:41:31:78: 31:75:75:6e:e8:9f:55:ce:42:ac:e9:20:51:0c:ce:d3:c3:6a: 4d:60:5a:30:7d:fe:c9:54:14:04:75:69:df:20:85:25:23:82: c0:a7:89:d0:b3:7d:af:90:dc:4a:cd:14:23:4b:b8:9f:c9:24: 5c:45:52:b9:d4:1a:f3:5d:a5:4f:71:de:bf:36:f7:d2:23:63: 62:95:59:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjQwNTE4MTcxNzUwWhcNMjQwNTI1MTcxNzUwWjAYMRYwFAYD VQQDEw02NjQ4ZTJiZS1lYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+x0JNq7/pFZOEbgeahcIfx66lsxtCQYRtscfITPiQgkp1lwP9EEiMCQVCQo rlSr4w8w/b+qIK21aUx9DB9Bzc2ukV3SOAvfT8tQiO5o+CDAgaExAEsJROcFxfRv 42n99RVSc3zauaSZ2smvAWFDk/3QxBSJc9ZzFhq3XEA2E7Ldu0uzgFlk/R132jBz RXGxutN0CAuW0zxz99+SdEvOPUbB5cjduY88i16jJd1eiB3DsgV24WlSkp3QzSMi tcjivZe1W9wCAA9pouY5nZ2KD2NxZVqUq7Hs0Hsat8RGyU5grCVLvG8isLKUcynq Y5qQdDcPrFxFIyzzhkx1SayXkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIjr3kj ENB4bvY9D9M4Me+PB9BFMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMi0S/kIYiKjKCPAOOPG9Ky+4CeIa7bo0RMkyHxSqlYdjGpG10TOJm OoeJ2FhIbAqZrnPAdJihBGsj8QHnQvzrhKKokd1uUXwqeAfAF6d4HqnUqo8C+k1o t1465x7WsX2c65Q9TFJZQA3rC7b/uZpJxX+z9EEuH7qwQcH95/XNEpWgWSU2zKMb pi1Z6FVVVsm+iwHr4+bHVvBQ+eBiV+f2SiJtLi9YXQrJKtckAwq7qblBMXgxdXVu 6J9VzkKs6SBRDM7Tw2pNYFowff7JVBQEdWnfIIUlI4LAp4nQs32vkNxKzRQjS7if ySRcRVK51BrzXaVPcd6/NvfSI2NilVlo -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org