$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: VtIIPtZ3YNks8D8RYeIQ9k+RdlIp8CrI7wBWs5BF4kc= Subject key identifier: A5:61:3C:A3:6C:F9:CB:F3:EC:E9:42:35:F0:65:10:77:A5:4A:12:F1 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 16FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 16A5 Signing time: Thu 16 May 2024 17:16:39 +0000 Manifest this update: Thu 16 May 2024 17:16:39 +0000 Manifest next update: Thu 23 May 2024 17:16:39 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: af4NlZfJUYIznlwvB+iiVM/KRMR2Xdh/jwnE4TrqU1c=) 2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: YkW2C0tq4qKVde9/4N5bxGP0pDZz01I75G21ay6TYlU=) 3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: BoXjQJRx/O+7hijzhyq4GZqCO/KuVueQwGPQqppoYPY=) 4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: xwCBEG4dayYu6U5aXKVY3WDJYRX+wIXhaYQGO0c0eok=) 5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: yDQjOUjGcunB6duVn3zydfP1G2ygbd94HiU5YEy6a48=) 6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: hQAAdUrLdQChVkkQeP4ltYAaknVzXk9TFAgmcS5lSJE=) 7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6H6iQ2a0q2uFv3rwik51KNgAtYVoSYBzJeT92zMfBWA=) 8: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: 2kBYgdZl3hVxu8zPpH1HxwexzmAAANsCHNQJmD009aM=) 9: 696975861A3611EEA597E872C4F9AE02.roa (hash: GpSSxSJzrS21U4X4d38mvGrGHiChvhNURl/j8idbC5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5887 (0x16ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 16 17:16:39 2024 GMT Not After : May 23 17:16:39 2024 GMT Subject: CN=66463f77-0fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:9e:d4:98:11:a1:94:43:34:e3:8f:69:12: 0b:1b:a0:59:89:15:54:11:36:65:c2:e7:39:9e:fc: 4b:56:6a:4d:18:c4:7b:75:96:a5:48:af:c6:c9:78: e4:6c:7b:01:51:a1:4f:ee:3a:e3:0b:56:10:aa:74: 24:eb:af:d2:ea:90:22:7b:0a:eb:c5:f9:58:44:18: a6:aa:42:4d:a0:d6:30:04:4b:16:76:a7:25:c7:d1: c4:32:b7:60:fb:51:6c:98:c2:fb:5d:87:87:b9:41: db:cd:ba:dc:cf:20:10:a1:14:a9:88:8c:2b:a3:2d: e7:6f:44:f1:46:e8:9b:cc:3f:2a:57:64:3c:1f:f5: a9:8a:ad:ce:45:04:52:eb:c2:5a:e5:8e:c0:34:db: eb:ef:e2:be:4d:bc:e1:1e:da:e0:d7:73:05:1b:ed: 6d:98:69:39:0a:01:5f:96:0b:8d:45:35:d2:03:0a: c6:f4:f5:d6:b6:48:9b:6d:3b:19:43:c6:55:8d:ef: 7f:fe:4c:f0:5d:d2:36:8b:b4:fb:fa:fe:9f:1f:8f: 6d:3b:5a:eb:ad:46:cb:66:12:f9:0f:ea:a3:7e:4f: bf:5d:3b:8c:42:31:ee:fa:a2:68:1e:59:ec:4f:49: 01:f0:34:21:99:7c:25:5a:87:18:7f:61:9d:c4:11: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:3C:A3:6C:F9:CB:F3:EC:E9:42:35:F0:65:10:77:A5:4A:12:F1 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b0:cb:28:21:b5:da:1d:f5:bd:76:17:bb:10:5f:ff:ba:18: 22:b5:12:f2:f0:70:7b:84:9f:8c:5c:af:ed:84:a1:56:11:01: 5d:08:05:04:0b:32:a8:69:a3:06:59:7f:5f:9b:d6:29:5a:bf: fc:79:50:ee:76:7e:95:d2:9c:67:f6:66:68:95:d8:fd:1d:6c: 1d:09:38:ac:1f:1d:57:b7:da:0e:65:74:c2:07:0a:f1:bb:4a: 8f:47:68:9c:e6:93:d2:ab:95:1f:f8:75:a7:d1:85:c7:fd:81: 2d:7d:f8:5c:2b:2e:6a:cc:ab:4a:11:ca:40:81:15:4f:66:ac: e3:ac:18:69:f1:a6:c6:8d:0a:76:a8:01:76:6e:3c:b7:87:2a: 0f:26:25:7c:cb:fc:01:91:01:ba:14:3f:36:46:0d:9f:1f:99: df:fb:0a:e6:df:96:d2:d4:5a:fb:e5:cc:f4:e0:8a:7c:6e:00: 6b:b3:e6:5d:9e:a7:fd:98:05:33:89:41:d0:db:e4:af:a7:a8: f0:1d:16:21:cf:d4:63:39:86:7f:7f:ee:9e:53:a7:e9:a7:6a: 65:45:f1:81:04:a1:38:75:b1:80:4e:8b:81:7f:dc:42:0e:47: c7:4e:59:c6:1f:88:60:88:84:51:04:10:ac:6b:26:3e:5f:76: f4:27:4f:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjQwNTE2MTcxNjM5WhcNMjQwNTIzMTcxNjM5WjAYMRYwFAYD VQQDEw02NjQ2M2Y3Ny0wZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M6e1JgRoZRDNOOPaRILG6BZiRVUETZlwuc5nvxLVmpNGMR7dZalSK/GyXjk bHsBUaFP7jrjC1YQqnQk66/S6pAiewrrxflYRBimqkJNoNYwBEsWdqclx9HEMrdg +1FsmML7XYeHuUHbzbrczyAQoRSpiIwroy3nb0TxRuibzD8qV2Q8H/Wpiq3ORQRS 68Ja5Y7ANNvr7+K+TbzhHtrg13MFG+1tmGk5CgFflguNRTXSAwrG9PXWtkibbTsZ Q8ZVje9//kzwXdI2i7T7+v6fH49tO1rrrUbLZhL5D+qjfk+/XTuMQjHu+qJoHlns T0kB8DQhmXwlWocYf2GdxBG9ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVhPKNs +cvz7OlCNfBlEHelShLxMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjsMsoIbXaHfW9dhe7EF//uhgitRLy8HB7hJ+MXK/thKFWEQFdCAUE CzKoaaMGWX9fm9YpWr/8eVDudn6V0pxn9mZoldj9HWwdCTisHx1Xt9oOZXTCBwrx u0qPR2ic5pPSq5Uf+HWn0YXH/YEtffhcKy5qzKtKEcpAgRVPZqzjrBhp8abGjQp2 qAF2bjy3hyoPJiV8y/wBkQG6FD82Rg2fH5nf+wrm35bS1Fr75cz04Ip8bgBrs+Zd nqf9mAUziUHQ2+Svp6jwHRYhz9RjOYZ/f+6eU6fpp2plRfGBBKE4dbGATouBf9xC DkfHTlnGH4hgiIRRBBCsayY+X3b0J09J -----END CERTIFICATE-----Generated at Thu May 16 17:51:23 2024 by rpki-client on console-ams.rpki-client.org