$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: bnE4QqLDmgSm6VBUcBOE1RSYzKZoCbapS/aytpEkwDM= Subject key identifier: 13:B0:35:21:16:5C:BA:D0:0D:1B:E5:06:DC:81:17:09:2B:3B:05:F5 Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 0721 Signing time: Thu 30 May 2024 23:00:35 +0000 Manifest this update: Thu 30 May 2024 23:00:34 +0000 Manifest next update: Thu 06 Jun 2024 23:00:34 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: YKZVguTCUOSoWHksQoaPrQQdfC4GOHyYvJ6dkoL/h4E=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: 1BuomuYOjyAemcsoXwlPHOu6bk8zZy2uLp90VOf9/iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: May 30 23:00:34 2024 GMT Not After : Jun 6 23:00:34 2024 GMT Subject: CN=66590513-8b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:b6:0a:5c:8e:df:7c:fd:5b:aa:b9:7f:1c: 2f:d3:c1:3b:08:8d:38:12:bb:c0:6d:77:02:a5:22: 79:02:11:53:d5:c5:34:12:71:5e:e9:c6:9d:19:29: 32:a6:e6:7f:18:d5:2a:20:96:28:e2:d7:ae:3a:71: 45:87:13:c1:57:96:e4:5a:f5:b0:1b:fb:89:66:33: cd:96:14:bf:7a:18:af:09:8a:4d:cd:de:e3:72:d2: 13:a1:b6:e6:6c:d4:18:d0:38:c8:22:96:b6:3a:85: 50:d4:39:76:1a:d4:f7:67:b1:85:d7:f1:57:ce:d5: 34:23:7c:7b:f9:df:bd:ae:a5:8b:3e:d0:32:3c:98: 90:8b:8f:1b:4a:59:ae:4e:cf:31:e3:2e:b0:d6:31: 16:2b:82:93:f2:8f:bd:85:96:b8:b3:58:c9:ac:3b: 85:b5:41:16:b8:14:63:50:ca:10:54:bb:ce:cf:0a: aa:18:a5:f0:e5:f6:10:c9:c0:cf:ea:dd:5a:f3:3b: 45:1a:e3:00:5d:6c:62:fe:49:62:de:13:d8:dd:e1: d3:6d:5e:7c:26:76:e6:34:97:f8:6d:d6:ca:71:e7: 46:a4:6a:42:00:a4:44:04:9a:ec:3c:44:9b:0e:b9: ec:77:b9:92:3b:d5:f6:59:91:27:37:83:5e:5f:95: 69:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:35:21:16:5C:BA:D0:0D:1B:E5:06:DC:81:17:09:2B:3B:05:F5 X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d5:37:80:bd:b5:5f:49:45:d8:b7:2f:4a:dc:50:22:55:50: 58:ca:69:82:94:34:2a:d3:1b:aa:ac:cf:3a:b7:a5:77:5e:5d: 3c:2d:10:b8:09:fd:e4:ef:ff:fa:f5:fc:53:8e:ea:26:6b:b4: b5:93:c0:6e:3b:33:a2:6e:d4:c1:00:db:3c:a2:13:20:5a:35: 51:74:45:a4:17:6c:fd:d4:8f:bc:01:4a:85:b8:bd:c4:9e:89: 86:66:74:0e:b2:fd:03:e7:ad:1b:e7:6a:2c:1c:1b:2d:b7:53: e5:09:12:8a:9d:21:ed:a5:21:c8:ef:de:0d:40:ed:70:92:35: bb:34:88:66:c7:ae:cd:e3:3d:01:d8:dc:ce:bd:c2:64:11:72: f0:fe:ee:87:c3:05:8a:6a:57:1c:9b:23:28:8c:cc:c7:8c:5b: 8b:c0:0d:b4:25:87:3e:95:c5:c0:fd:51:5b:78:ef:74:61:27: c1:0d:69:e2:73:91:c6:51:7a:73:4d:e5:7c:31:dc:8c:b4:bb: 84:73:2f:d3:90:70:a8:83:d7:d2:b0:04:a0:d2:6d:f8:45:3a: 00:7f:c3:70:f1:54:92:09:e5:04:5e:5c:75:9a:4f:41:5c:6e: 22:bd:15:7b:3e:4a:a1:14:f0:30:c6:5f:88:44:79:2c:5e:b5: a0:5f:0d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjQwNTMwMjMwMDM0WhcNMjQwNjA2MjMwMDM0WjAYMRYwFAYD VQQDEw02NjU5MDUxMy04Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6O2ClyO33z9W6q5fxwv08E7CI04ErvAbXcCpSJ5AhFT1cU0EnFe6cadGSky puZ/GNUqIJYo4teuOnFFhxPBV5bkWvWwG/uJZjPNlhS/ehivCYpNzd7jctITobbm bNQY0DjIIpa2OoVQ1Dl2GtT3Z7GF1/FXztU0I3x7+d+9rqWLPtAyPJiQi48bSlmu Ts8x4y6w1jEWK4KT8o+9hZa4s1jJrDuFtUEWuBRjUMoQVLvOzwqqGKXw5fYQycDP 6t1a8ztFGuMAXWxi/kli3hPY3eHTbV58JnbmNJf4bdbKcedGpGpCAKREBJrsPESb Drnsd7mSO9X2WZEnN4NeX5Vp4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOwNSEW XLrQDRvlBtyBFwkrOwX1MB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1TeAvbVfSUXYty9K3FAiVVBYymmClDQq0xuqrM86t6V3Xl08LRC4 Cf3k7//69fxTjuoma7S1k8BuOzOibtTBANs8ohMgWjVRdEWkF2z91I+8AUqFuL3E nomGZnQOsv0D560b52osHBstt1PlCRKKnSHtpSHI794NQO1wkjW7NIhmx67N4z0B 2NzOvcJkEXLw/u6HwwWKalccmyMojMzHjFuLwA20JYc+lcXA/VFbeO90YSfBDWni c5HGUXpzTeV8MdyMtLuEcy/TkHCog9fSsASg0m34RToAf8Nw8VSSCeUEXlx1mk9B XG4ivRV7PkqhFPAwxl+IRHksXrWgXw3U -----END CERTIFICATE-----Generated at Fri May 31 00:28:32 2024 by rpki-client on console-ams.rpki-client.org