$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft File: aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft (raw, json) Hash identifier: DD1tGjQqQQFkWkQgsIrC69RDTyMgWlbFVmQDzyZkAjA= Subject key identifier: 63:9F:E6:0E:20:6D:A2:86:10:00:8F:E4:B3:76:EF:84:B5:D0:F0:3E Authority key identifier: 69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 Certificate issuer: /CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft Manifest number: 64 Signing time: Fri 31 May 2024 08:34:54 +0000 Manifest this update: Fri 31 May 2024 08:34:54 +0000 Manifest next update: Fri 07 Jun 2024 08:34:54 +0000 Files and hashes: 1: aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl (hash: F/tkFRNxD3tbkIXuTEV2RWW+BHG8I8y8eMiR4X4zwQY=) 2: 0287BD068A3D11EEADFABF09C4F9AE02.roa (hash: o9pgO9VPuean6UIJk3YC9eT1HQWv3GJJ4bqIdECSOeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85/serialNumber=69EA62E3F03E47C03719BEDB16B4CA273B8B3103 Validity Not Before: May 31 08:34:54 2024 GMT Not After : Jun 7 08:34:54 2024 GMT Subject: CN=66598bae-62a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dc:d9:99:b9:3a:1c:ca:f0:f6:8d:10:01:ba: e0:bc:3c:f6:9f:11:e8:27:67:04:9d:5e:dc:8f:f5: a8:6b:75:ad:3a:de:8e:57:1f:93:4c:14:97:06:30: 10:b5:fb:74:71:6a:e0:7a:40:74:b4:8d:dd:d6:df: 46:dc:db:2b:03:ae:58:1e:fd:7e:d6:1a:5a:7a:e6: 82:48:ab:e8:02:10:28:3e:0a:38:e9:ec:7e:c2:54: ac:84:a9:ed:c2:72:f8:55:3e:26:f2:12:d0:5f:4b: a8:87:73:1d:ae:50:8b:9f:70:5f:5b:e3:9f:4f:4c: 7b:a9:5c:f7:72:4e:f4:98:2c:93:2e:a5:6b:9a:99: f3:27:e0:62:61:e9:a7:1f:6b:7e:07:76:0c:fa:f0: 26:aa:35:39:ea:ab:eb:54:ce:d0:dd:e0:d6:d1:29: 12:f4:50:67:90:34:39:01:a8:ad:43:76:60:75:cc: 81:f4:83:7e:3b:56:72:ad:8e:de:82:cf:f6:ac:80: 63:79:4c:42:31:d5:b7:8f:d5:43:76:e7:c5:ae:6d: 0b:98:c5:94:61:f1:ca:03:61:d5:03:c1:54:bf:05: 11:71:a7:4f:64:0d:7f:28:3c:18:de:e9:08:4e:47: 24:db:c9:c2:86:57:30:54:cf:5e:5e:83:38:e6:f7: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:E6:0E:20:6D:A2:86:10:00:8F:E4:B3:76:EF:84:B5:D0:F0:3E X509v3 Authority Key Identifier: keyid:69:EA:62:E3:F0:3E:47:C0:37:19:BE:DB:16:B4:CA:27:3B:8B:31:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aepi4_A-R8A3Gb7bFrTKJzuLMQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/90E97D7089BE11EEBCF29A55C4F9AE02/aepi4_A-R8A3Gb7bFrTKJzuLMQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:02:4d:ff:f2:c8:6c:0a:18:65:1d:17:94:2a:c0:b3:f1:5f: c2:45:2b:26:d6:a0:6e:a0:b3:05:65:88:42:25:e8:c5:61:00: ec:55:d5:6e:51:41:63:10:34:7b:36:bb:ba:3a:c2:b9:d3:9d: 00:81:a7:26:98:14:b4:c5:dc:70:4c:ef:7c:5d:e5:f8:e7:42: 45:a4:12:92:ea:de:20:a8:c2:3f:95:c7:d4:3c:83:ab:8a:2c: 5b:87:80:f8:d0:d0:dc:18:c3:8e:73:4d:c6:27:43:51:40:fb: dc:3a:a7:84:12:2a:df:76:16:29:48:2c:c4:06:ae:c2:3e:19: 1c:1e:6f:ac:6f:f3:1a:39:e1:0c:60:6d:ba:19:2a:74:a7:4e: 6a:5e:99:1b:5c:0d:05:8b:e5:12:ed:0d:24:32:e1:45:c1:5b: 07:a0:dd:74:e8:95:63:60:2d:d2:d8:fe:44:71:a9:ae:4e:32: fc:b6:8a:17:b6:03:d6:ea:d0:b6:e1:33:dc:57:0e:64:17:f2: 7c:14:8e:30:50:91:7d:ba:25:92:06:9f:d0:20:47:c1:31:24: 00:b4:62:0d:38:3f:5e:89:de:39:13:e6:bb:8a:93:7c:d8:8e: 4a:6e:30:dd:a8:ff:87:64:da:a9:77:91:86:a3:88:02:76:cd: fd:23:8b:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkI4NTExMC8GA1UEBRMoNjlFQTYyRTNGMDNFNDdDMDM3MTlCRURCMTZCNENBMjcz QjhCMzEwMzAeFw0yNDA1MzEwODM0NTRaFw0yNDA2MDcwODM0NTRaMBgxFjAUBgNV BAMTDTY2NTk4YmFlLTYyYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDx3NmZuTocyvD2jRABuuC8PPafEegnZwSdXtyP9ahrda063o5XH5NMFJcGMBC1 +3RxauB6QHS0jd3W30bc2ysDrlge/X7WGlp65oJIq+gCECg+Cjjp7H7CVKyEqe3C cvhVPibyEtBfS6iHcx2uUIufcF9b459PTHupXPdyTvSYLJMupWuamfMn4GJh6acf a34Hdgz68CaqNTnqq+tUztDd4NbRKRL0UGeQNDkBqK1DdmB1zIH0g347VnKtjt6C z/asgGN5TEIx1beP1UN258WubQuYxZRh8coDYdUDwVS/BRFxp09kDX8oPBje6QhO RyTbycKGVzBUz15egzjm90KdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY5/mDiBt ooYQAI/ks3bvhLXQ8D4wHwYDVR0jBBgwFoAUaepi4/A+R8A3Gb7bFrTKJzuLMQMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQjg1LzkwRTk3RDcwODlC RTExRUVCQ0YyOUE1NUM0RjlBRTAyL2FlcGk0X0EtUjhBM0diN2JGclRLSnp1TE1R TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWVwaTRfQS1SOEEzR2I3YkZyVEtKenVMTVFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Qjg1LzkwRTk3RDcwODlCRTExRUVCQ0YyOUE1NUM0RjlBRTAyL2FlcGk0X0EtUjhB M0diN2JGclRLSnp1TE1RTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAoCTf/yyGwKGGUdF5QqwLPxX8JFKybWoG6gswVliEIl6MVhAOxV1W5R QWMQNHs2u7o6wrnTnQCBpyaYFLTF3HBM73xd5fjnQkWkEpLq3iCowj+Vx9Q8g6uK LFuHgPjQ0NwYw45zTcYnQ1FA+9w6p4QSKt92FilILMQGrsI+GRweb6xv8xo54Qxg bboZKnSnTmpemRtcDQWL5RLtDSQy4UXBWweg3XTolWNgLdLY/kRxqa5OMvy2ihe2 A9bq0LbhM9xXDmQX8nwUjjBQkX26JZIGn9AgR8ExJAC0Yg04P16J3jkT5ruKk3zY jkpuMN2o/4dk2ql3kYajiAJ2zf0ji3Q= -----END CERTIFICATE-----Generated at Fri May 31 10:01:37 2024 by rpki-client on console-ams.rpki-client.org