$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: ZaBO+0zt0Qp8TQ5irBJ97y2ypUvCTTWte+gIKwqO6lk= Subject key identifier: 72:83:4B:5A:76:76:74:97:D2:A9:4C:E3:C2:42:68:1C:88:21:2D:18 Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 051C Signing time: Sun 05 May 2024 01:12:45 +0000 Manifest this update: Sun 05 May 2024 01:12:44 +0000 Manifest next update: Sun 12 May 2024 01:12:44 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: ROa9WYYxQIc57m6Qq3+1DCsIBdKNvm5svDtXjUqQ+m8=) 2: 99BB0B14A16311EE85DF497CC4F9AE02.roa (hash: 5Xc9/jAyPbFuKwxDaojvdU6UZPRQGKoIWV+FcNcu1/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: May 5 01:12:44 2024 GMT Not After : May 12 01:12:44 2024 GMT Subject: CN=6636dd0c-8096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:0e:4b:52:bc:8d:a9:45:27:dc:80:63:7a: 1f:aa:66:ff:e6:e6:fa:17:1a:d0:b0:b8:0c:9d:72: 06:cb:76:05:25:59:a1:d0:c6:24:d5:fb:95:f7:82: 93:a2:fa:08:e8:36:34:26:c1:ee:14:eb:6d:32:9b: 8d:5a:4d:e2:b4:ed:02:52:31:78:4a:64:94:b0:59: 19:1e:15:58:7a:b4:f9:a0:b3:2e:8d:1c:e1:73:d6: 6e:f5:d5:be:3d:74:18:0e:5b:0a:5f:b1:68:59:95: 95:25:7d:6b:6f:ca:80:2f:45:28:1a:d8:41:47:bd: 52:d8:ed:2e:5b:eb:69:b7:00:ce:98:cc:52:12:ec: 08:5f:31:cb:7c:09:c4:b5:41:54:6a:b5:66:f3:39: f2:03:23:d7:3a:3a:23:da:f5:59:a3:fb:2a:df:5d: b2:ed:b9:14:fa:7c:06:90:d8:dc:63:d6:87:cb:9b: 05:4a:50:85:a3:4c:6e:03:01:c9:da:58:e5:cc:ca: f1:8e:00:01:15:d5:95:60:42:33:cc:d8:6c:e9:56: d7:65:f0:6f:43:be:84:aa:e0:93:74:c2:77:09:8c: 87:51:46:f9:88:5b:2e:7e:81:19:e2:f2:53:c9:84: 28:f9:7c:65:60:fc:61:1c:69:6a:7d:46:0b:53:34: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:4B:5A:76:76:74:97:D2:A9:4C:E3:C2:42:68:1C:88:21:2D:18 X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0e:e0:1e:ed:79:ed:00:23:c7:3d:88:d0:10:57:1b:8a:44: 9a:79:81:31:dc:ea:3c:88:25:1c:0f:3c:35:fb:dd:8e:09:3e: e8:07:6b:47:c4:dd:40:79:de:27:72:f1:28:f4:35:3a:32:13: d1:3a:ac:b9:ef:8b:0a:be:64:f6:44:ee:99:9f:8d:b0:22:89: 0d:65:b3:a8:fd:b7:35:38:7a:a7:2a:91:3c:41:fd:f5:34:c6: 9d:1d:85:c3:28:4a:28:fa:23:1e:07:c6:6a:d9:58:42:71:a9: 09:1a:f6:9d:bf:d2:66:6f:ab:a5:00:ac:b7:45:72:bf:ae:b3: 16:55:00:49:50:67:8a:94:59:8d:b7:66:38:d2:01:3e:ed:92: 20:99:76:70:90:0d:4f:dd:38:64:df:7a:60:f6:29:9b:c0:fa: 03:24:a0:c1:ae:d9:ed:d4:3b:31:1e:42:16:e1:93:de:91:b7: 21:98:b0:2f:10:fb:b0:4e:e7:73:43:95:b6:f1:af:e6:00:dd: 16:d2:7f:50:79:e6:4d:4b:e7:9f:d1:27:f5:7f:e3:24:a8:18: 71:e7:9f:b8:82:d8:c9:f3:fe:8c:77:8b:94:01:d0:0a:87:be: e3:b3:1f:88:f4:ec:ee:08:29:da:8f:00:7f:fd:0a:ff:63:03: a7:84:08:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjQwNTA1MDExMjQ0WhcNMjQwNTEyMDExMjQ0WjAYMRYwFAYD VQQDEw02NjM2ZGQwYy04MDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfcOS1K8jalFJ9yAY3ofqmb/5ub6FxrQsLgMnXIGy3YFJVmh0MYk1fuV94KT ovoI6DY0JsHuFOttMpuNWk3itO0CUjF4SmSUsFkZHhVYerT5oLMujRzhc9Zu9dW+ PXQYDlsKX7FoWZWVJX1rb8qAL0UoGthBR71S2O0uW+tptwDOmMxSEuwIXzHLfAnE tUFUarVm8znyAyPXOjoj2vVZo/sq312y7bkU+nwGkNjcY9aHy5sFSlCFo0xuAwHJ 2ljlzMrxjgABFdWVYEIzzNhs6VbXZfBvQ76EquCTdMJ3CYyHUUb5iFsufoEZ4vJT yYQo+XxlYPxhHGlqfUYLUzSDYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKDS1p2 dnSX0qlM48JCaByIIS0YMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6DuAe7XntACPHPYjQEFcbikSaeYEx3Oo8iCUcDzw1+92OCT7oB2tH xN1Aed4ncvEo9DU6MhPROqy574sKvmT2RO6Zn42wIokNZbOo/bc1OHqnKpE8Qf31 NMadHYXDKEoo+iMeB8Zq2VhCcakJGvadv9Jmb6ulAKy3RXK/rrMWVQBJUGeKlFmN t2Y40gE+7ZIgmXZwkA1P3Thk33pg9imbwPoDJKDBrtnt1DsxHkIW4ZPekbchmLAv EPuwTudzQ5W28a/mAN0W0n9QeeZNS+ef0Sf1f+MkqBhx55+4gtjJ8/6Md4uUAdAK h77jsx+I9OzuCCnajwB//Qr/YwOnhAju -----END CERTIFICATE-----Generated at Sun May 5 02:13:02 2024 by rpki-client on console-ams.rpki-client.org