$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: nx0vhBnIeg5HdMz3rULXzAFBvwWhxNGr2qWZltq1pvE= Subject key identifier: A4:92:28:DC:45:35:B4:31:67:E9:AE:EC:67:2F:1E:D7:CE:1D:FD:37 Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 064B Signing time: Sat 18 May 2024 23:39:07 +0000 Manifest this update: Sat 18 May 2024 23:39:06 +0000 Manifest next update: Sat 25 May 2024 23:39:06 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: uByfHkkw5Uv0bURfBobCgbg8fQZzFhi4izrE0QXqPSc=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: 6ikPRivM9dyX+oWH7lTRKsL9Xko5L5LgnDcsklfd0Jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: May 18 23:39:06 2024 GMT Not After : May 25 23:39:06 2024 GMT Subject: CN=66493c1b-bc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:de:b9:9c:43:5a:d2:ec:1e:de:3b:67:55: 62:7d:dd:df:c1:2b:48:0b:4e:b0:69:c1:f8:84:ef: cb:54:83:b3:30:5c:97:10:2c:04:49:17:a8:3f:d7: 37:59:d6:bb:5c:87:30:f8:8d:0e:fa:75:8a:9c:73: c4:12:44:40:79:55:7b:bd:bc:89:31:b2:ea:89:c2: 7e:09:bb:06:86:64:ed:83:90:a5:44:63:42:88:b7: 8d:2d:72:d8:11:f7:29:ac:82:02:3d:15:5f:91:84: 34:9a:13:be:ac:a3:76:72:5f:19:30:02:fb:d4:20: 5d:4d:34:ca:c3:74:b8:fb:8d:38:cc:87:6b:40:44: 43:64:e2:4f:0c:9a:d1:bf:4f:ee:94:08:a8:e5:17: 4e:f7:24:61:b9:b9:05:0b:e5:f5:ac:e6:27:99:72: ce:b9:86:7c:22:04:c7:58:c4:6c:9c:cf:19:04:19: 09:6a:40:4d:2f:99:69:24:7f:41:b5:ef:15:a4:9e: df:ce:d6:f4:cc:06:1d:95:8d:8d:87:68:0f:db:fc: b3:09:19:c7:12:1c:d6:76:d2:a0:d6:77:b3:28:53: de:2d:c4:38:fc:04:49:82:a7:6a:06:6f:c9:09:dc: d6:90:d7:39:72:be:24:36:54:06:b6:62:e4:ff:fb: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:92:28:DC:45:35:B4:31:67:E9:AE:EC:67:2F:1E:D7:CE:1D:FD:37 X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:43:8f:09:6c:1e:00:4c:43:b1:a5:79:86:29:80:c7:1e:90: 6d:1c:7e:c5:54:82:fa:1c:73:e1:67:28:db:92:e1:38:e0:80: bf:85:64:ec:4b:d0:61:3f:fb:18:fd:0a:78:51:e4:4e:b2:5c: 07:22:b2:ed:f9:f5:d6:db:d1:e9:b1:99:9e:5c:f1:b7:d5:b6: 62:70:fd:4b:93:65:91:0b:c5:0d:e6:66:8f:e7:50:0a:aa:fc: b5:59:3c:1a:40:b3:b5:44:ce:22:08:38:25:1e:84:b1:d3:c9: f0:8a:40:06:3b:c0:97:40:5d:df:31:69:4b:ec:f5:79:26:16: 5e:fc:ea:e0:28:a1:ce:24:a4:18:c2:1e:36:68:4e:41:38:4b: cd:c5:a1:86:ac:a1:c4:41:dd:25:c9:34:62:52:53:e0:60:4e: cc:0d:65:8c:4b:06:66:80:29:1c:2f:1f:30:d6:1d:c8:fa:f3: 1c:52:14:7a:34:53:12:67:c7:65:bd:0e:05:cc:43:f1:e3:c7: 75:e7:e3:19:58:c7:a5:4d:e0:fd:a1:d8:24:bd:8d:74:20:39: b9:86:12:62:57:11:32:a1:6e:1e:dc:c4:07:09:84:b1:b2:fd: 99:ce:bf:d6:a9:8b:fc:50:a3:75:74:5b:e2:7a:81:ec:ad:79: cc:1e:e5:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjQwNTE4MjMzOTA2WhcNMjQwNTI1MjMzOTA2WjAYMRYwFAYD VQQDEw02NjQ5M2MxYi1iYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrDeuZxDWtLsHt47Z1Vifd3fwStIC06wacH4hO/LVIOzMFyXECwESReoP9c3 Wda7XIcw+I0O+nWKnHPEEkRAeVV7vbyJMbLqicJ+CbsGhmTtg5ClRGNCiLeNLXLY EfcprIICPRVfkYQ0mhO+rKN2cl8ZMAL71CBdTTTKw3S4+404zIdrQERDZOJPDJrR v0/ulAio5RdO9yRhubkFC+X1rOYnmXLOuYZ8IgTHWMRsnM8ZBBkJakBNL5lpJH9B te8VpJ7fztb0zAYdlY2Nh2gP2/yzCRnHEhzWdtKg1nezKFPeLcQ4/ARJgqdqBm/J CdzWkNc5cr4kNlQGtmLk//t0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSSKNxF NbQxZ+mu7GcvHtfOHf03MB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWQ48JbB4ATEOxpXmGKYDHHpBtHH7FVIL6HHPhZyjbkuE44IC/hWTs S9BhP/sY/Qp4UeROslwHIrLt+fXW29HpsZmeXPG31bZicP1Lk2WRC8UN5maP51AK qvy1WTwaQLO1RM4iCDglHoSx08nwikAGO8CXQF3fMWlL7PV5JhZe/OrgKKHOJKQY wh42aE5BOEvNxaGGrKHEQd0lyTRiUlPgYE7MDWWMSwZmgCkcLx8w1h3I+vMcUhR6 NFMSZ8dlvQ4FzEPx48d15+MZWMelTeD9odgkvY10IDm5hhJiVxEyoW4e3MQHCYSx sv2Zzr/WqYv8UKN1dFvieoHsrXnMHuWf -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org