$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: sod8FzWZWAzt35a8mT+VNMY3ZidoNaMyrLP6srZUAz0= Subject key identifier: D7:C4:6E:F6:13:4B:4F:55:A0:E0:55:BB:C7:EB:EF:84:C3:4F:96:86 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0469 Signing time: Wed 29 May 2024 02:08:14 +0000 Manifest this update: Wed 29 May 2024 02:08:14 +0000 Manifest next update: Wed 05 Jun 2024 02:08:14 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: 2B7RmAvqTVdGF0tS6BAOXEpTUXuzePhGMJSDeC0EwYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: May 29 02:08:14 2024 GMT Not After : Jun 5 02:08:14 2024 GMT Subject: CN=66568e0e-79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:1a:77:39:11:5e:89:35:8f:2a:84:d9:20: bb:9e:99:7a:35:16:58:f8:10:b9:78:b2:19:83:e9: 1f:a5:6e:f9:2c:1a:d0:61:ed:36:bc:c1:c6:d8:28: f2:4c:aa:72:7a:6a:7e:a5:6c:0d:fa:f1:2c:ce:32: 8d:60:de:8b:e7:eb:a1:33:14:b0:17:28:0a:84:c9: c4:28:96:ba:4c:98:17:fd:cb:c1:ed:3c:c6:14:04: d9:ab:55:4c:b4:36:9f:60:07:29:6e:1d:42:b7:74: dd:b7:ec:90:1c:21:6a:1e:30:ec:46:a0:2e:93:b4: 72:ec:d2:1e:d1:a4:ef:fb:6d:5f:c6:eb:58:bb:7f: ac:ce:f5:e4:6a:6a:d7:a5:35:d5:62:cd:96:56:24: ac:e9:2c:ce:da:d9:1c:43:19:f0:6a:49:07:23:b0: 4d:e8:69:11:6a:0f:28:90:20:1f:97:2e:6d:05:11: 10:7f:cc:01:05:26:d5:d1:d5:0e:3b:93:33:bd:a6: d5:57:00:10:f4:bf:5b:28:c8:25:79:01:bc:35:6f: 26:e3:55:e1:10:08:aa:29:64:54:d6:44:5e:5c:2d: fa:19:5c:2a:fc:3f:20:cb:c2:fb:8d:b6:06:88:fa: f0:78:76:fa:d7:5a:46:86:72:e3:2b:07:6f:09:79: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:6E:F6:13:4B:4F:55:A0:E0:55:BB:C7:EB:EF:84:C3:4F:96:86 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:f4:1f:55:39:e4:e4:79:45:07:76:8a:f7:3a:4b:b6:cc:b8: b1:03:66:71:2c:46:45:f0:74:26:5e:25:15:dd:a3:7d:2b:d9: 6e:a1:c3:ca:44:4b:68:88:95:fc:0b:85:49:22:f3:e6:0a:31: 02:df:29:2f:b3:9a:99:c9:77:d9:46:71:d7:e8:78:c4:25:e4: 51:0b:c0:59:06:44:ca:88:2d:1d:72:96:d1:ea:d8:4c:13:fe: b8:31:28:21:a2:d2:cf:d0:ce:90:4a:a1:37:3e:ad:21:0b:ae: 38:25:47:ee:1a:80:7c:be:34:c6:fa:73:0d:56:57:90:34:15: 5c:a2:f0:3c:51:02:03:4a:8c:aa:03:60:76:fb:d5:d4:88:ca: 1c:43:99:af:19:f4:c8:73:24:4e:55:19:13:25:68:3b:19:7d: a3:2a:59:85:f6:b4:26:99:54:46:8d:d5:a7:d0:5a:8b:00:ae: af:75:40:2d:02:ab:c1:d6:62:86:1b:75:3a:e9:1e:1e:73:15: f0:40:68:5f:b2:3c:84:8e:5c:bd:09:26:a1:b6:2f:b5:5f:ef: a6:7a:fc:5a:16:25:0a:5e:b4:66:0a:0f:fe:ff:8b:62:65:a5: 74:f8:bf:0f:60:16:30:c1:2b:a0:0f:02:a1:aa:34:24:17:47: c0:39:93:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjQwNTI5MDIwODE0WhcNMjQwNjA1MDIwODE0WjAYMRYwFAYD VQQDEw02NjU2OGUwZS03OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2IadzkRXok1jyqE2SC7npl6NRZY+BC5eLIZg+kfpW75LBrQYe02vMHG2Cjy TKpyemp+pWwN+vEszjKNYN6L5+uhMxSwFygKhMnEKJa6TJgX/cvB7TzGFATZq1VM tDafYAcpbh1Ct3Tdt+yQHCFqHjDsRqAuk7Ry7NIe0aTv+21fxutYu3+szvXkamrX pTXVYs2WViSs6SzO2tkcQxnwakkHI7BN6GkRag8okCAfly5tBREQf8wBBSbV0dUO O5MzvabVVwAQ9L9bKMgleQG8NW8m41XhEAiqKWRU1kReXC36GVwq/D8gy8L7jbYG iPrweHb611pGhnLjKwdvCXk9mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfEbvYT S09VoOBVu8fr74TDT5aGMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY9B9VOeTkeUUHdor3Oku2zLixA2ZxLEZF8HQmXiUV3aN9K9luocPK REtoiJX8C4VJIvPmCjEC3ykvs5qZyXfZRnHX6HjEJeRRC8BZBkTKiC0dcpbR6thM E/64MSghotLP0M6QSqE3Pq0hC644JUfuGoB8vjTG+nMNVleQNBVcovA8UQIDSoyq A2B2+9XUiMocQ5mvGfTIcyROVRkTJWg7GX2jKlmF9rQmmVRGjdWn0FqLAK6vdUAt AqvB1mKGG3U66R4ecxXwQGhfsjyEjly9CSahti+1X++mevxaFiUKXrRmCg/+/4ti ZaV0+L8PYBYwwSugDwKhqjQkF0fAOZOF -----END CERTIFICATE-----Generated at Wed May 29 02:49:53 2024 by rpki-client on console-fra.rpki-client.org