$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json) Hash identifier: PR7Q2PHaJ9vnrochU8YWQd8Xnwqg7+l3u3QhTwNSmKg= Subject key identifier: 16:8C:67:75:1F:DB:74:DD:3B:7E:CA:E9:2B:A8:8A:51:30:D8:70:82 Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft Manifest number: 5B Signing time: Wed 15 May 2024 07:50:54 +0000 Manifest this update: Wed 15 May 2024 07:50:53 +0000 Manifest next update: Wed 22 May 2024 07:50:53 +0000 Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: g40RuWBTNy7LnhwVHykwgQM7u24Ay+d1gaKkvvljDEs=) 2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: jzFXArRMwn4nTWMlZ/sRFauoJ4H0465twxMcQQPfjHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Validity Not Before: May 15 07:50:53 2024 GMT Not After : May 22 07:50:53 2024 GMT Subject: CN=6644695e-0554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:20:d6:7a:f0:dc:0d:86:e9:d3:85:c8:56: 3b:8b:91:21:fa:45:f0:8c:81:1a:52:ab:14:d4:6b: ad:a6:d4:b2:07:89:83:f0:f4:21:1e:7d:f9:7f:b9: ad:e0:62:bb:82:63:61:00:47:46:ba:86:5d:7f:d3: 2e:93:67:79:ad:28:b8:6a:56:f2:79:ea:ed:ad:86: c9:93:8c:21:42:45:33:69:a4:76:ff:47:40:dd:28: 0b:ae:cf:06:9b:93:a3:e1:6e:a4:0c:75:09:a1:b3: f2:0e:9f:27:93:ee:bf:e0:4e:48:31:44:39:3c:3c: 1f:42:10:d3:c5:05:29:19:fa:d2:6c:4a:65:38:c9: 36:96:d4:01:4d:66:ba:7c:91:43:1b:c5:62:ad:98: fb:b5:1b:81:e7:9f:72:4d:a8:bb:19:ad:bb:17:30: 36:2c:08:c9:4c:9e:8f:4b:e8:ab:51:8d:ff:7b:4b: 38:22:d5:e2:40:f8:cd:8a:71:c2:a6:89:a8:06:73: 26:e7:3a:dc:d6:c5:5d:33:dc:8a:40:04:ef:2b:fd: 97:08:f5:4a:6d:e2:9f:15:a2:9c:e1:2a:15:92:ac: 79:c9:85:02:ec:0d:e8:72:93:41:2b:cf:06:56:8e: b0:fe:c6:ac:18:e9:e0:03:e0:11:4a:09:e6:5b:53: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:67:75:1F:DB:74:DD:3B:7E:CA:E9:2B:A8:8A:51:30:D8:70:82 X509v3 Authority Key Identifier: keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:01:92:d7:7e:fa:42:70:c7:0b:3d:90:e7:e9:2b:71:98:62: 35:51:b2:7d:81:1d:bc:f3:45:f1:18:8c:39:02:35:1b:78:61: 16:e5:78:ec:5b:2b:dc:e7:d9:6f:98:49:65:7e:cb:c7:6c:20: 91:c3:d1:da:34:b2:ba:7f:c7:42:23:d1:ff:55:20:a2:92:20: 1d:f3:d7:33:2b:45:53:ec:6a:89:ae:0c:e4:51:4a:64:d5:3e: e5:ea:0e:c5:2e:de:3e:22:98:49:7e:a4:be:67:b8:f0:41:e8: 32:ff:80:7e:bf:eb:38:53:78:a5:58:70:18:db:f2:fa:45:6b: b0:c5:b8:4f:e4:97:48:f0:51:30:8e:01:e9:26:69:cd:ad:02: 67:1e:29:3c:ae:85:14:22:86:6a:db:0f:f7:ac:8f:cd:36:2d: 64:b9:b9:61:d5:b9:07:7d:44:c3:cb:04:bd:61:74:16:71:10: bc:d3:e7:a8:34:43:af:7f:22:c8:78:b5:16:f8:b4:c3:58:67: 4c:48:82:97:df:8d:16:bd:7d:1b:52:d9:b1:be:7e:0b:ef:b0: d9:15:b9:e9:51:08:ad:3c:d7:ce:5a:32:cd:95:fa:c0:d3:7a: aa:0f:4b:b7:fb:1b:be:99:4d:cb:af:04:0e:7b:e6:93:9e:a2: 16:b5:7f:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODIxRDExMC8GA1UEBRMoODhDMTU0NEQ3RTY3QkNEOTFENDhERjVEMTFGQ0QxMDIx Rjg1Mzk5MzAeFw0yNDA1MTUwNzUwNTNaFw0yNDA1MjIwNzUwNTNaMBgxFjAUBgNV BAMTDTY2NDQ2OTVlLTA1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT1yDWevDcDYbp04XIVjuLkSH6RfCMgRpSqxTUa62m1LIHiYPw9CEeffl/ua3g YruCY2EAR0a6hl1/0y6TZ3mtKLhqVvJ56u2thsmTjCFCRTNppHb/R0DdKAuuzwab k6PhbqQMdQmhs/IOnyeT7r/gTkgxRDk8PB9CENPFBSkZ+tJsSmU4yTaW1AFNZrp8 kUMbxWKtmPu1G4Hnn3JNqLsZrbsXMDYsCMlMno9L6KtRjf97Szgi1eJA+M2KccKm iagGcybnOtzWxV0z3IpABO8r/ZcI9Upt4p8VopzhKhWSrHnJhQLsDehyk0ErzwZW jrD+xqwY6eAD4BFKCeZbU4AfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFoxndR/b dN07fsrpK6iKUTDYcIIwHwYDVR0jBBgwFoAUiMFUTX5nvNkdSN9dEfzRAh+FOZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MjFEL0IyQTA3NEVFODlC MTExRUU5ODZDQTY1Q0M0RjlBRTAyL2lNRlVUWDVudk5rZFNOOWRFZnpSQWgtRk9a TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaU1GVVRYNW52TmtkU045ZEVmelJBaC1GT1pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MjFEL0IyQTA3NEVFODlCMTExRUU5ODZDQTY1Q0M0RjlBRTAyL2lNRlVUWDVudk5r ZFNOOWRFZnpSQWgtRk9aTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0Bktd++kJwxws9kOfpK3GYYjVRsn2BHbzzRfEYjDkCNRt4YRbleOxb K9zn2W+YSWV+y8dsIJHD0do0srp/x0Ij0f9VIKKSIB3z1zMrRVPsaomuDORRSmTV PuXqDsUu3j4imEl+pL5nuPBB6DL/gH6/6zhTeKVYcBjb8vpFa7DFuE/kl0jwUTCO Aekmac2tAmceKTyuhRQihmrbD/esj802LWS5uWHVuQd9RMPLBL1hdBZxELzT56g0 Q69/Ish4tRb4tMNYZ0xIgpffjRa9fRtS2bG+fgvvsNkVuelRCK08185aMs2V+sDT eqoPS7f7G76ZTcuvBA575pOeoha1f4Y= -----END CERTIFICATE-----Generated at Wed May 15 09:04:41 2024 by rpki-client on console-ams.rpki-client.org