$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 54Z00tvShp+vTMf9bZhUkcIV2ftXQQ3sGcQc4uIWGFU= Subject key identifier: 8E:25:47:F7:D9:DE:9A:9E:77:61:17:F5:38:3A:FA:AE:FB:65:DF:61 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 11FD Signing time: Thu 02 May 2024 17:49:33 +0000 Manifest this update: Thu 02 May 2024 17:49:32 +0000 Manifest next update: Thu 09 May 2024 17:49:32 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: Pr7qHzNfRGFDI2PbGO0eG41ejf6lgyZzwR606jz4jiI=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: foG7S9x2Lq/7eZ9xV7xJGXKyMflF74zzA50bLsZMJc0=) 3: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: 4LEPmQqJ/bhe0/QWWis2Uf3VhnJ/oX1Gw/a6rKhwX7I=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: DNIdF7VzSINBf9x4ARLGjb9ZVv+GA8bZRaH6cySDnAY=) 5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: Gc/xs0dKSRVGBSBb/kk4roxhd9wMFyrdDuu1YKZPJwI=) 6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: Ns5sd5/Crwu0uWH0PoezbbF4MQ9YSFYMGJbzNlBuwgU=) 7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: LaDqbGaPXWK+VJYdbDtzyVpCCEVXkTxkFjG3EBObXnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4681 (0x1249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: May 2 17:49:32 2024 GMT Not After : May 9 17:49:32 2024 GMT Subject: CN=6633d22d-5972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:ca:20:42:58:3b:1c:c0:ed:b2:d7:51:f7: f0:37:cb:9a:96:e8:1f:9e:a0:ab:34:21:20:80:f3: db:7c:68:66:61:c4:ee:bc:34:99:cd:a4:8e:19:d4: c3:77:58:1f:03:6b:c4:a8:17:66:c8:80:fe:fc:74: fc:87:0f:72:29:be:54:ae:30:17:3c:00:30:53:7b: ab:1a:8c:07:3c:64:79:fe:04:06:6f:69:b0:01:de: 99:a3:21:ae:54:ae:b7:37:5e:4d:b9:9d:39:08:1b: c3:ef:64:23:bd:2f:00:8d:63:66:1a:f3:eb:34:64: 57:e2:a6:65:83:99:61:a1:c4:e4:eb:83:94:3d:b1: 4c:2a:e1:51:b8:63:bf:f5:89:39:7a:2b:93:b4:76: 74:74:97:6d:20:7f:3d:54:7a:a3:7c:09:7a:a8:4e: b5:97:c5:46:19:de:be:b9:29:d3:cf:1b:a6:82:2f: ea:71:63:05:0f:dd:7e:67:1a:72:37:08:4e:d9:aa: 72:48:01:53:2d:76:d9:bd:9e:5a:f0:f7:40:cb:05: fb:01:1b:a8:cd:74:e4:75:e7:f7:e4:4f:51:99:11: 52:1b:aa:da:39:74:7f:11:5a:77:bb:d6:88:e0:b4: 56:6b:53:78:e5:aa:f3:b8:e6:0a:5f:ca:f6:2d:e4: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:25:47:F7:D9:DE:9A:9E:77:61:17:F5:38:3A:FA:AE:FB:65:DF:61 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d5:95:63:d8:1b:03:c3:62:c4:22:31:56:26:d6:02:8e:42: 88:cc:56:13:7d:b1:6a:41:69:d3:cc:62:f2:23:1f:e4:79:af: 03:6d:d5:96:0b:20:89:d5:19:2e:50:46:81:04:09:47:cc:e1: 58:cb:48:44:aa:90:7c:b8:49:ec:f8:6c:22:86:ab:c2:e3:be: 7e:6a:c4:3c:9f:0b:ba:a2:27:26:18:27:a8:96:79:ac:9c:ed: 69:57:3a:86:fd:a9:4c:a4:70:49:a4:34:87:32:df:52:41:57: 9e:c4:78:cb:4f:5e:0c:81:a3:1a:98:c1:fc:d0:de:87:90:36: a9:d9:e8:3c:db:3f:ae:28:72:db:3f:af:e4:5a:c9:52:be:7d: 61:e5:7c:f6:c3:94:23:92:02:a8:00:7f:6e:41:7f:5a:30:ed: 92:2c:41:6a:b4:57:63:25:c9:9d:32:ca:82:2b:0c:79:0b:c2: 7f:79:8b:4a:17:2c:b7:50:23:85:7e:3d:55:b7:bc:56:db:99: 42:74:17:7f:c4:76:d6:ff:19:72:aa:77:1b:d6:4f:0a:70:cd: 76:48:07:71:cd:06:6e:9c:ff:a5:eb:12:78:1e:45:92:cf:84: 27:0d:1f:ad:98:5b:8a:19:fc:3a:8e:0d:58:0c:26:e1:56:a0: 11:42:30:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjQwNTAyMTc0OTMyWhcNMjQwNTA5MTc0OTMyWjAYMRYwFAYD VQQDEw02NjMzZDIyZC01OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm7KIEJYOxzA7bLXUffwN8ualugfnqCrNCEggPPbfGhmYcTuvDSZzaSOGdTD d1gfA2vEqBdmyID+/HT8hw9yKb5UrjAXPAAwU3urGowHPGR5/gQGb2mwAd6ZoyGu VK63N15NuZ05CBvD72QjvS8AjWNmGvPrNGRX4qZlg5lhocTk64OUPbFMKuFRuGO/ 9Yk5eiuTtHZ0dJdtIH89VHqjfAl6qE61l8VGGd6+uSnTzxumgi/qcWMFD91+Zxpy NwhO2apySAFTLXbZvZ5a8PdAywX7ARuozXTkdef35E9RmRFSG6raOXR/EVp3u9aI 4LRWa1N45arzuOYKX8r2LeSiQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4lR/fZ 3pqed2EX9Tg6+q77Zd9hMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO1ZVj2BsDw2LEIjFWJtYCjkKIzFYTfbFqQWnTzGLyIx/kea8DbdWW CyCJ1RkuUEaBBAlHzOFYy0hEqpB8uEns+GwihqvC475+asQ8nwu6oicmGCeolnms nO1pVzqG/alMpHBJpDSHMt9SQVeexHjLT14MgaMamMH80N6HkDap2eg82z+uKHLb P6/kWslSvn1h5Xz2w5QjkgKoAH9uQX9aMO2SLEFqtFdjJcmdMsqCKwx5C8J/eYtK Fyy3UCOFfj1Vt7xW25lCdBd/xHbW/xlyqncb1k8KcM12SAdxzQZunP+l6xJ4HkWS z4QnDR+tmFuKGfw6jg1YDCbhVqARQjAU -----END CERTIFICATE-----Generated at Thu May 2 20:04:38 2024 by rpki-client on console-ams.rpki-client.org