$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: T1OrbChUb/cpYxSM2HMOZE7PLJwRrIk3lJddJtPpDiU= Subject key identifier: C7:CF:03:85:BC:B0:69:C6:97:6A:74:B3:B0:BE:BF:8B:3F:12:45:CA Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 3F Signing time: Wed 15 May 2024 08:21:12 +0000 Manifest this update: Wed 15 May 2024 08:21:11 +0000 Manifest next update: Wed 22 May 2024 08:21:11 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: C6cO/48l/pcqxeYwP2fgKbQCuX2OuVJZrMkYT8lt9T4=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: kIKE4PiWDLu72KJWjxN7ko60yw2GrqSNLFSheBlWS3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: May 15 08:21:11 2024 GMT Not After : May 22 08:21:11 2024 GMT Subject: CN=66447077-0a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:99:c7:b5:64:59:5a:4c:80:f7:b9:48:28: c5:75:a7:8a:eb:6c:0e:f7:95:a0:13:9d:c8:2e:f8: 1f:ef:58:a9:b2:c0:84:3a:e1:a2:88:25:0f:b2:42: a2:28:c3:c0:71:5a:66:6f:00:ea:11:f8:29:79:8e: 8f:e9:3d:1a:73:fe:4c:bb:bd:99:d3:9b:f3:1a:56: e3:66:a5:6b:5f:96:33:d4:2d:0b:47:1c:2f:4d:4f: 56:36:cf:eb:36:cf:4a:18:e7:f1:59:f9:19:fd:0f: 38:d0:6d:7e:40:a5:6b:c3:18:03:94:0c:d6:1e:cd: a4:5a:02:5a:74:d1:06:78:d5:62:1f:47:53:31:80: 92:49:fd:d4:c7:40:fa:b5:88:af:18:8d:46:0b:05: d1:62:d0:3d:b7:1c:e8:ed:34:f8:07:aa:97:02:cb: d1:1f:c8:11:26:9f:db:1a:3e:f7:d5:89:df:65:90: 45:4b:da:73:95:c8:a5:f2:12:f6:b0:9a:8a:b9:7f: c5:71:7c:95:3d:c7:88:a7:c5:94:8e:07:7e:55:14: 39:ca:cb:5d:bb:48:94:f5:83:df:8f:b2:60:a6:f4: 0a:18:ff:b0:27:78:0f:d0:69:56:9b:70:4e:f4:46: df:20:39:b2:d6:e5:48:3c:9f:55:38:0f:6e:69:be: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CF:03:85:BC:B0:69:C6:97:6A:74:B3:B0:BE:BF:8B:3F:12:45:CA X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:d3:74:1a:4d:68:c0:c1:64:ed:a1:69:49:c4:7f:b8:0b: a6:37:2a:93:fb:17:da:8f:06:87:99:04:cb:46:6d:69:8e:ac: 24:b1:85:80:84:09:ac:2a:8b:b2:60:94:0d:f3:b0:8f:83:ff: 23:e0:e0:72:8b:53:c1:17:4c:96:9e:5e:db:83:50:00:c3:aa: 6e:13:90:a4:e9:79:ef:ac:4e:22:a5:7d:18:02:9a:f9:24:e7: 4a:e7:ec:7a:9b:80:5b:cf:4d:05:98:38:9a:5d:3c:3e:b8:98: ea:11:71:70:a4:44:25:a7:99:b5:aa:bf:0d:5c:6d:03:f5:42: 67:8a:92:16:06:da:74:f5:e0:bd:ee:44:28:26:55:5e:ea:84: 7a:52:51:ff:99:c2:f7:35:f8:3f:ae:2c:a4:64:86:1e:59:4e: 31:6a:e8:ca:89:a9:90:80:4d:f0:96:c9:27:fb:62:bb:0d:01: 73:32:1a:75:a6:3e:4d:d2:0c:38:3f:6f:16:88:b0:7b:23:d6: fb:1e:cd:70:35:5c:a0:d9:ad:ac:29:ee:21:91:ca:7b:b2:8b: f2:8f:30:e1:2d:14:12:f4:da:cf:c6:9e:16:a5:2f:80:0f:c1: 48:c3:a3:a8:05:ee:bc:40:bd:dc:2f:37:b9:7b:4c:2d:e8:c4: 19:0d:68:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkQ1QTExMC8GA1UEBRMoNEE4QTM5NUU1NTZDQzdGMTlBQUU2QUIwNkFGRjA2Nzk0 NDk1NkI0NjAeFw0yNDA1MTUwODIxMTFaFw0yNDA1MjIwODIxMTFaMBgxFjAUBgNV BAMTDTY2NDQ3MDc3LTBhODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHPpnHtWRZWkyA97lIKMV1p4rrbA73laATncgu+B/vWKmywIQ64aKIJQ+yQqIo w8BxWmZvAOoR+Cl5jo/pPRpz/ky7vZnTm/MaVuNmpWtfljPULQtHHC9NT1Y2z+s2 z0oY5/FZ+Rn9DzjQbX5ApWvDGAOUDNYezaRaAlp00QZ41WIfR1MxgJJJ/dTHQPq1 iK8YjUYLBdFi0D23HOjtNPgHqpcCy9EfyBEmn9saPvfVid9lkEVL2nOVyKXyEvaw moq5f8VxfJU9x4inxZSOB35VFDnKy127SJT1g9+PsmCm9AoY/7AneA/QaVabcE70 Rt8gObLW5Ug8n1U4D25pvlNLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx88Dhbyw acaXanSzsL6/iz8SRcowHwYDVR0jBBgwFoAUSoo5XlVsx/Garmqwav8GeUSVa0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRDVBLzIzNzVCMzA2Qjk0 NTExRUVCQjgxODgzNEM0RjlBRTAyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU29vNVhsVnN4X0dhcm1xd2F2OEdlVVNWYTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG RDVBLzIzNzVCMzA2Qjk0NTExRUVCQjgxODgzNEM0RjlBRTAyL1NvbzVYbFZzeF9H YXJtcXdhdjhHZVVTVmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALEc03QaTWjAwWTtoWlJxH+4C6Y3KpP7F9qPBoeZBMtGbWmOrCSxhYCE Cawqi7JglA3zsI+D/yPg4HKLU8EXTJaeXtuDUADDqm4TkKTpee+sTiKlfRgCmvkk 50rn7HqbgFvPTQWYOJpdPD64mOoRcXCkRCWnmbWqvw1cbQP1QmeKkhYG2nT14L3u RCgmVV7qhHpSUf+Zwvc1+D+uLKRkhh5ZTjFq6MqJqZCATfCWySf7YrsNAXMyGnWm Pk3SDDg/bxaIsHsj1vsezXA1XKDZrawp7iGRynuyi/KPMOEtFBL02s/GnhalL4AP wUjDo6gF7rxAvdwvN7l7TC3oxBkNaP8= -----END CERTIFICATE-----Generated at Wed May 15 09:04:45 2024 by rpki-client on console-ams.rpki-client.org