$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json) Hash identifier: OaY0Gdt0gwExree0/pFjRr2c/EktdCZw9U0/Fi21ciU= Subject key identifier: 3E:2D:3F:61:00:81:51:28:11:CB:CE:68:16:D9:4E:B2:FD:B1:67:93 Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft Manifest number: 44 Signing time: Sun 19 May 2024 08:03:23 +0000 Manifest this update: Sun 19 May 2024 08:03:22 +0000 Manifest next update: Sun 26 May 2024 08:03:22 +0000 Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: ogCK30CZ3FEjKNLEqww0GYraayQv0iDey7AtTr4TPVA=) 2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: OPf1O5F2znXgxow/SuyykvjROqP8J2goN42jw3ahWbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Validity Not Before: May 19 08:03:22 2024 GMT Not After : May 26 08:03:22 2024 GMT Subject: CN=6649b24b-9963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:f7:72:ef:e3:58:ad:5b:02:1a:78:67:89: be:a0:87:b1:7a:35:52:b6:23:1e:d2:a0:b6:bf:7f: da:71:ae:ca:ef:74:f4:ea:58:73:1c:ab:d6:c4:30: 07:79:e1:27:03:a6:f4:e9:7f:f7:a7:9b:88:96:44: d8:d9:b6:a2:82:ef:9d:4f:f0:8e:81:63:d7:76:f2: 00:85:03:69:ab:3f:44:f7:a9:2e:12:4d:7d:28:fb: 01:95:d6:73:0d:13:64:6d:28:76:f2:7b:47:00:36: 67:14:0a:77:a0:32:cb:cb:a9:71:0a:81:7f:6b:1c: 4e:ca:96:d9:0c:8f:f6:ee:ca:29:70:6b:d0:b6:e7: 77:1e:79:e9:95:a9:c2:3b:9f:fe:64:f8:f6:dc:74: c8:cf:a8:7c:73:82:df:d5:4a:95:80:24:b3:bf:2d: 59:ea:35:ab:ea:c2:cb:89:b2:ce:2c:c3:b0:43:80: b0:5a:02:c8:27:9a:e4:32:ee:0d:d4:a4:59:b0:0b: 6f:54:b4:e9:5e:16:bc:91:a1:d5:bb:76:4c:a5:9f: 4b:65:d2:78:5f:6f:8d:4a:e9:1e:d6:c2:0d:46:bd: 52:c6:b2:96:e9:ba:c1:a8:cd:93:79:f2:51:a0:e7: 93:a1:e2:f7:11:f8:bd:47:89:32:8f:6c:98:b3:80: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2D:3F:61:00:81:51:28:11:CB:CE:68:16:D9:4E:B2:FD:B1:67:93 X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:98:7b:b3:e6:76:1f:4e:45:ca:a7:88:ad:7f:d1:df:22:95: d7:7c:3f:f1:5b:82:56:21:da:d8:02:9f:b0:99:1f:b1:fd:b8: 72:79:40:c4:16:5f:66:8e:3e:0b:dd:2f:82:e4:59:b7:09:69: 06:a4:48:63:c6:7a:8b:62:5b:61:e8:32:52:b8:d7:e3:fc:0d: c5:b0:6a:8f:ce:3b:64:96:d9:1e:e0:24:88:66:dc:19:16:18: fe:e4:dd:17:9b:7a:1a:11:b2:61:6f:5c:9f:69:b7:94:b8:51: e5:d0:bd:25:f8:dc:34:31:85:12:47:8f:38:fc:2d:6e:b9:1a: 29:4f:60:e4:15:7b:c6:09:ff:0a:f1:2e:c0:91:99:67:49:44: f6:54:91:e3:d9:bf:3e:cf:ff:d2:8a:ca:0f:5c:0d:eb:4f:92: e7:ce:eb:22:6b:c2:47:5a:de:c8:87:eb:4f:41:c6:6a:1e:60: 2c:a3:66:a4:25:7a:f8:55:8c:27:6c:6e:fe:7c:9f:ab:ec:cc: b0:6a:83:3d:1e:cb:7a:4b:91:65:ef:a2:f4:21:7e:39:2b:46: 98:f0:c4:12:47:17:f4:ff:b0:0a:b1:e6:aa:3b:3e:34:0d:2f: 91:e2:8f:ac:93:51:7f:e0:1b:48:d9:90:35:a5:96:07:80:e9: 36:0a:c8:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUY2QTExMC8GA1UEBRMoNEY4NDFFMzgzM0UwQUM2RkUxQkVFRUJEMDAxMjM1RDE1 MjhFQ0U3QTAeFw0yNDA1MTkwODAzMjJaFw0yNDA1MjYwODAzMjJaMBgxFjAUBgNV BAMTDTY2NDliMjRiLTk5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyz/dy7+NYrVsCGnhnib6gh7F6NVK2Ix7SoLa/f9pxrsrvdPTqWHMcq9bEMAd5 4ScDpvTpf/enm4iWRNjZtqKC751P8I6BY9d28gCFA2mrP0T3qS4STX0o+wGV1nMN E2RtKHbye0cANmcUCnegMsvLqXEKgX9rHE7KltkMj/buyilwa9C253ceeemVqcI7 n/5k+PbcdMjPqHxzgt/VSpWAJLO/LVnqNavqwsuJss4sw7BDgLBaAsgnmuQy7g3U pFmwC29UtOleFryRodW7dkyln0tl0nhfb41K6R7Wwg1GvVLGspbpusGozZN58lGg 55Oh4vcR+L1HiTKPbJizgKnlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPi0/YQCB USgRy85oFtlOsv2xZ5MwHwYDVR0jBBgwFoAUT4QeODPgrG/hvu69ABI10VKOznow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBRjZBLzgzN0NEMzQ2QUU0 MjExRUVCRjY0REE2OUM0RjlBRTAyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3pu by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDRRZU9EUGdyR19odnU2OUFCSTEwVktPem5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB RjZBLzgzN0NEMzQ2QUU0MjExRUVCRjY0REE2OUM0RjlBRTAyL1Q0UWVPRFBnckdf aHZ1NjlBQkkxMFZLT3puby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAiYe7Pmdh9ORcqniK1/0d8ildd8P/FbglYh2tgCn7CZH7H9uHJ5QMQW X2aOPgvdL4LkWbcJaQakSGPGeotiW2HoMlK41+P8DcWwao/OO2SW2R7gJIhm3BkW GP7k3RebehoRsmFvXJ9pt5S4UeXQvSX43DQxhRJHjzj8LW65GilPYOQVe8YJ/wrx LsCRmWdJRPZUkePZvz7P/9KKyg9cDetPkufO6yJrwkda3siH609BxmoeYCyjZqQl evhVjCdsbv58n6vszLBqgz0ey3pLkWXvovQhfjkrRpjwxBJHF/T/sAqx5qo7PjQN L5Hij6yTUX/gG0jZkDWllgeA6TYKyHo= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org