$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json) Hash identifier: x2f7rdozCMOT+Ayh06rrGqFLlJ7sMoz6n18hZ51QMng= Subject key identifier: 17:82:C1:6E:C8:A8:2C:F2:05:C7:FA:A3:3E:F4:58:85:6C:30:B9:8E Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft Manifest number: 02AB Signing time: Sun 05 May 2024 03:41:20 +0000 Manifest this update: Sun 05 May 2024 03:41:20 +0000 Manifest next update: Sun 12 May 2024 03:41:20 +0000 Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: lv61ZAlkn12RhshhUUJ558TAqN1kUKU0xVm8+2viHAU=) 2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: deXf14KsHTj6pfBYqF9cBs+V+3eFMnPwxxjR8ucX3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: May 5 03:41:20 2024 GMT Not After : May 12 03:41:20 2024 GMT Subject: CN=6636ffe0-f370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:30:2e:64:41:41:bb:bc:83:07:36:d4:1b: 24:6c:47:da:9e:00:99:7a:b6:c5:f8:43:bd:e7:65: 31:91:7f:7c:a4:92:99:0b:b8:52:d3:21:4c:0f:5b: 41:24:ea:c2:9c:f5:0c:92:81:4c:17:26:23:08:43: 91:52:2b:50:2f:a6:f7:02:e2:f8:ef:fd:72:e1:55: 89:08:7b:d4:4c:e4:e4:04:0d:48:21:02:cc:43:a9: 92:63:6d:5f:15:6a:02:1e:94:5d:5b:07:d6:83:dd: 46:ff:c1:ca:90:65:9d:46:65:2e:d2:1b:1a:20:47: 5b:93:0b:59:00:4e:a0:6a:ca:13:33:5f:54:fd:55: be:7f:d6:2a:c0:9a:00:30:05:9e:9b:63:cb:b4:3c: 95:d9:32:d5:e3:14:2b:60:1e:75:a8:08:27:cf:f8: 7e:60:25:45:13:b8:04:ca:90:f0:25:3d:bb:b2:6d: 97:f1:2a:2e:b4:d3:37:8f:2e:d8:c3:2e:44:73:ce: 93:10:65:69:32:2a:80:2a:f3:9e:93:ee:5e:41:e4: e7:11:b6:a1:ee:d8:16:ba:0c:2c:98:cd:b2:3f:a9: 68:19:40:ba:33:42:c7:16:6d:f9:a9:4b:be:d5:86: ec:29:de:ca:bf:bf:31:69:2c:16:a8:e7:8a:c6:c3: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:C1:6E:C8:A8:2C:F2:05:C7:FA:A3:3E:F4:58:85:6C:30:B9:8E X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8e:4e:c2:e1:eb:f5:ee:db:04:fb:c5:25:36:77:d6:64:a9: 6a:6a:f8:d5:26:da:b3:94:94:ac:68:69:5d:f2:ef:32:e8:9f: d8:6e:2b:56:94:1d:e4:a8:ba:ef:c5:01:79:45:00:77:be:7e: 64:97:34:f3:a3:b2:7d:b8:16:df:1c:fc:7b:57:15:fe:49:c3: d3:7a:cc:20:f2:bc:80:0f:38:5d:87:48:66:83:7d:eb:7e:2c: b7:0b:15:f2:62:ab:d5:d2:ed:59:fb:20:23:6b:88:09:2a:62: f8:0a:62:d1:93:6c:d3:16:43:e3:49:48:36:8c:0d:f4:85:bb: b1:69:5c:59:7d:17:2f:84:09:a6:3d:bc:68:f0:d4:61:f3:7b: 61:a4:4b:2b:2c:80:9e:2d:96:c8:7b:a6:51:86:72:84:cc:3c: 8f:c8:16:c6:54:4f:b7:8e:43:a8:91:a3:d3:04:4c:b7:8a:ab: d8:75:cd:4c:ba:60:da:0a:f5:89:ae:02:ad:1b:99:db:2a:13: 58:ac:5d:b3:c6:6f:e4:71:f4:25:10:3c:2e:20:a3:f2:45:c8: a5:aa:c4:19:3a:05:a5:03:32:62:d1:f1:b5:95:61:0f:fc:03: 74:a7:00:34:9c:34:24:2a:c5:74:52:00:31:4a:dc:ba:4f:c5: b5:7c:63:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjQwNTA1MDM0MTIwWhcNMjQwNTEyMDM0MTIwWjAYMRYwFAYD VQQDEw02NjM2ZmZlMC1mMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymwwLmRBQbu8gwc21BskbEfangCZerbF+EO952UxkX98pJKZC7hS0yFMD1tB JOrCnPUMkoFMFyYjCEORUitQL6b3AuL47/1y4VWJCHvUTOTkBA1IIQLMQ6mSY21f FWoCHpRdWwfWg91G/8HKkGWdRmUu0hsaIEdbkwtZAE6gasoTM19U/VW+f9YqwJoA MAWem2PLtDyV2TLV4xQrYB51qAgnz/h+YCVFE7gEypDwJT27sm2X8SoutNM3jy7Y wy5Ec86TEGVpMiqAKvOek+5eQeTnEbah7tgWugwsmM2yP6loGUC6M0LHFm35qUu+ 1YbsKd7Kv78xaSwWqOeKxsNzRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeCwW7I qCzyBcf6oz70WIVsMLmOMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO VmwwejhDclRodWIxYzQtUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvjk7C4ev17tsE+8UlNnfWZKlqavjVJtqzlJSsaGld8u8y6J/YbitW lB3kqLrvxQF5RQB3vn5klzTzo7J9uBbfHPx7VxX+ScPTeswg8ryADzhdh0hmg33r fiy3CxXyYqvV0u1Z+yAja4gJKmL4CmLRk2zTFkPjSUg2jA30hbuxaVxZfRcvhAmm Pbxo8NRh83thpEsrLICeLZbIe6ZRhnKEzDyPyBbGVE+3jkOokaPTBEy3iqvYdc1M umDaCvWJrgKtG5nbKhNYrF2zxm/kcfQlEDwuIKPyRcilqsQZOgWlAzJi0fG1lWEP /AN0pwA0nDQkKsV0UgAxSty6T8W1fGOn -----END CERTIFICATE-----Generated at Sun May 5 04:39:59 2024 by rpki-client on console-ams.rpki-client.org