$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft File: c5PammDgEK2QIFHzC9pJc3T4UaQ.mft (raw, json) Hash identifier: 97cDQvp7diM9kpDAsLKOpK0h29nMFwwSyiVtDdfzqxE= Subject key identifier: 64:9A:DB:89:EC:5C:EE:08:67:A3:5B:23:3E:8E:B4:80:83:16:91:C8 Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft Manifest number: 0477 Signing time: Sun 05 May 2024 02:00:18 +0000 Manifest this update: Sun 05 May 2024 02:00:17 +0000 Manifest next update: Sun 12 May 2024 02:00:17 +0000 Files and hashes: 1: c5PammDgEK2QIFHzC9pJc3T4UaQ.crl (hash: xImsRh5GxIF9zgz2a6/bqyyZAYpK4PFy5lrGZb1AvY0=) 2: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (hash: Dfik7weaRltk+9v6DRaeyNu1eaQE/HPMf1oNTOjvmY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4 Validity Not Before: May 5 02:00:17 2024 GMT Not After : May 12 02:00:17 2024 GMT Subject: CN=6636e832-77f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:75:9f:8b:f1:aa:c5:dd:40:d0:cb:0f:14:0a: a7:41:1e:fd:0c:c2:2f:06:cf:fa:21:fb:37:fb:74: d9:2f:fc:c2:6e:85:d3:df:38:c0:e0:ea:95:39:6b: d9:15:06:29:8c:0f:57:50:2a:d8:2b:8d:3b:50:9f: 4f:c2:ed:c8:5e:d7:b9:6a:58:7f:dc:95:84:72:a9: 1c:1b:8c:5c:43:fe:a9:95:6c:f3:c0:9a:6c:e8:c6: a1:85:6e:93:64:79:0d:8e:87:f4:96:e2:f5:7a:be: f5:66:18:f4:39:8d:f9:9c:90:68:f9:f3:9d:3e:bb: 30:5a:8a:b7:ab:76:54:40:7e:27:65:54:17:1b:cc: 18:e3:44:b3:cb:0c:87:39:cc:03:82:ac:c8:1b:c4: 97:c7:a4:00:cc:aa:ee:17:ab:be:ae:8e:7b:cd:78: 26:61:2e:f7:1e:23:b6:fc:ea:fb:cd:df:08:c7:50: f8:9e:83:dc:8c:94:46:8a:b8:2b:76:80:f7:64:ca: a8:60:74:18:fb:af:7d:81:80:85:f3:a3:50:72:d4: 23:ba:79:bc:de:c2:84:df:98:ea:0d:af:16:d8:37: d6:a3:c3:d6:f4:f1:ce:67:b4:20:f7:57:23:85:e1: e1:e6:ea:d1:07:8d:50:25:f1:bb:d3:d9:ab:7f:de: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:DB:89:EC:5C:EE:08:67:A3:5B:23:3E:8E:B4:80:83:16:91:C8 X509v3 Authority Key Identifier: keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:16:4a:a6:35:bb:30:ec:9c:b7:14:2e:d6:48:97:43:d8:8c: e7:d0:69:2e:b2:cf:57:05:0c:d5:24:21:d5:d1:13:db:08:c0: ed:27:0b:2a:6f:75:96:bc:bc:b3:b7:2f:46:f3:ee:e1:e4:cf: 09:7d:3f:79:c0:bf:2d:33:d7:dc:7c:e5:d4:db:fb:78:71:8b: e7:00:16:ab:54:df:17:44:b3:f8:69:79:b8:b2:12:a2:8e:93: cd:e1:ac:c7:c2:88:77:ff:47:7f:4b:74:76:18:95:cf:9a:3f: c4:aa:dd:e6:89:e9:e6:cb:c7:76:69:68:de:3c:6a:9b:16:cb: f8:35:35:f4:5c:cd:d0:02:93:57:a0:92:80:19:7a:fb:70:ae: 20:4f:57:b2:90:2a:27:b1:64:f8:a9:34:f6:72:f8:27:ac:e6: e6:4b:27:b4:9e:2f:3d:90:c8:3f:80:11:be:45:46:47:04:22: f1:56:b4:f7:49:63:08:82:49:29:ec:da:76:9a:0e:54:58:93: 3c:03:13:52:6c:a8:ad:9c:77:31:7a:61:5b:70:44:f2:ba:7f: bc:12:51:8c:05:c8:04:40:65:7f:73:d9:5f:4e:b0:d0:54:89: f2:15:f5:68:d9:5e:ad:d8:ab:ca:c1:69:9b:cb:76:7e:f2:5b: 43:a4:9d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1NDUxMTAvBgNVBAUTKDczOTNEQTlBNjBFMDEwQUQ5MDIwNTFGMzBCREE0OTcz NzRGODUxQTQwHhcNMjQwNTA1MDIwMDE3WhcNMjQwNTEyMDIwMDE3WjAYMRYwFAYD VQQDEw02NjM2ZTgzMi03N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XWfi/Gqxd1A0MsPFAqnQR79DMIvBs/6Ifs3+3TZL/zCboXT3zjA4OqVOWvZ FQYpjA9XUCrYK407UJ9Pwu3IXte5alh/3JWEcqkcG4xcQ/6plWzzwJps6MahhW6T ZHkNjof0luL1er71Zhj0OY35nJBo+fOdPrswWoq3q3ZUQH4nZVQXG8wY40SzywyH OcwDgqzIG8SXx6QAzKruF6u+ro57zXgmYS73HiO2/Or7zd8Ix1D4noPcjJRGirgr doD3ZMqoYHQY+699gYCF86NQctQjunm83sKE35jqDa8W2DfWo8PW9PHOZ7Qg91cj heHh5urRB41QJfG709mrf96daQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSa24ns XO4IZ6NbIz6OtICDFpHIMB8GA1UdIwQYMBaAFHOT2ppg4BCtkCBR8wvaSXN0+FGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU0NS9COTBCQTE5MjAz MkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VLMlFJRkh6QzlwSmMzVDRV YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1UGFtbURnRUsyUUlGSHpDOXBKYzNUNFVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU0NS9COTBCQTE5MjAzMkExMUVDOEI0RkM4NEZDNEY5QUUwMi9jNVBhbW1EZ0VL MlFJRkh6QzlwSmMzVDRVYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGFkqmNbsw7Jy3FC7WSJdD2Izn0Gkuss9XBQzVJCHV0RPbCMDtJwsq b3WWvLyzty9G8+7h5M8JfT95wL8tM9fcfOXU2/t4cYvnABarVN8XRLP4aXm4shKi jpPN4azHwoh3/0d/S3R2GJXPmj/Eqt3mienmy8d2aWjePGqbFsv4NTX0XM3QApNX oJKAGXr7cK4gT1eykConsWT4qTT2cvgnrObmSye0ni89kMg/gBG+RUZHBCLxVrT3 SWMIgkkp7Np2mg5UWJM8AxNSbKitnHcxemFbcETyun+8ElGMBcgEQGV/c9lfTrDQ VInyFfVo2V6t2KvKwWmby3Z+8ltDpJ3G -----END CERTIFICATE-----Generated at Sun May 5 03:09:55 2024 by rpki-client on console-ams.rpki-client.org