$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft File: amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json) Hash identifier: 0c72Bn4sDdlczxdhjwVSFkFKWrVlWEEAASr1sy+LyYg= Subject key identifier: 54:37:AD:19:BD:5D:6A:BE:3D:A3:AD:04:EC:05:EE:B4:C2:C3:F8:F4 Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA Certificate issuer: /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft Manifest number: 04B5 Signing time: Sat 01 Jun 2024 02:29:21 +0000 Manifest this update: Sat 01 Jun 2024 02:29:20 +0000 Manifest next update: Sat 08 Jun 2024 02:29:20 +0000 Files and hashes: 1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: +tYYoxwv4PCV982R4wh4sVfsm/7axrXKt/O6dgy6f68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA Validity Not Before: Jun 1 02:29:20 2024 GMT Not After : Jun 8 02:29:20 2024 GMT Subject: CN=665a8781-dbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:cc:2e:af:e8:ca:80:d6:75:e3:bc:ba:b9: 07:1a:59:2e:6c:aa:fa:4e:e4:67:d5:99:4f:28:75: cc:48:3b:bb:45:93:e7:e5:95:da:e9:c8:54:58:c5: b1:e7:1f:09:ad:10:a2:b5:1b:27:c9:f5:43:88:ea: 00:e8:14:0a:e1:b1:30:b4:69:7c:90:21:f5:97:5c: ed:f6:b8:e9:da:bf:01:0d:43:0b:73:70:03:9f:b2: 22:53:a5:aa:7f:af:13:fe:96:8b:07:80:0e:78:72: ef:b5:a8:5c:f8:b2:44:28:68:ea:a1:fb:a0:3b:83: 7f:64:0e:90:02:2b:c3:85:7c:07:aa:7b:a1:49:1e: 5d:b4:29:90:2c:83:72:5c:8a:74:68:3e:0a:35:26: e6:b6:dc:f5:df:c5:e1:18:ae:69:6f:0d:c7:9c:89: b8:7e:a2:26:35:69:1c:b7:da:58:50:88:8d:6a:91: be:bc:d3:7d:60:28:35:45:35:00:44:6b:a1:18:30: 75:2e:ba:3e:41:e7:32:ad:77:54:cd:95:3c:f7:9c: 17:bc:a4:35:5b:51:72:4c:0e:43:5d:69:7a:22:a7: 65:2d:29:bd:73:cd:67:51:f2:52:e5:4f:f5:f9:77: ef:19:ff:cf:d3:f5:46:8f:f9:c7:1c:c2:bd:fb:40: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:37:AD:19:BD:5D:6A:BE:3D:A3:AD:04:EC:05:EE:B4:C2:C3:F8:F4 X509v3 Authority Key Identifier: keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:fd:90:ef:42:8a:51:5d:93:50:f7:d1:c5:6f:9d:3b:9f: c1:d3:30:74:84:5b:6b:5f:66:88:be:51:a6:c0:ab:49:b4:e4: c6:17:15:7e:b5:f8:b0:d6:ed:27:7f:13:e1:4c:13:71:e9:7e: d0:3e:16:95:19:f4:71:7a:10:2a:3f:bf:f3:eb:62:fd:3c:4d: 81:13:60:43:1c:23:1d:31:db:9c:df:9b:3e:a7:65:a4:36:dd: 88:c8:37:54:b0:dc:8a:f8:8a:56:a8:1f:52:91:cc:cb:96:38: b0:b5:c4:37:77:d2:dd:e1:7a:8b:a8:8a:b2:09:f1:b7:60:04: 13:82:8f:8f:19:f2:00:b6:00:83:d2:87:a3:de:b5:b3:23:b8: b4:0e:77:c3:74:c3:63:84:5d:43:db:da:0c:d1:71:bb:db:e6: fc:fc:3e:b8:2b:ad:59:3c:52:ac:59:60:41:2e:13:ef:96:bd: 31:d1:cb:05:24:6f:14:44:3b:c5:ad:6c:ed:4d:2d:88:b7:4a: eb:a4:ec:0d:4f:4b:ad:35:f8:3e:c5:be:59:85:88:ea:32:eb: 68:75:46:4f:12:af:a2:1d:66:57:51:79:3e:8e:2e:69:84:ec: f2:67:8e:58:1b:ae:0f:35:fb:71:ab:80:76:db:69:e4:d2:30: 9d:f1:1d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDZBNjVFMjZEMzRBNTNCRjI3RUYyMTEzOTM2MzA3M0JB MjZCOURCRkEwHhcNMjQwNjAxMDIyOTIwWhcNMjQwNjA4MDIyOTIwWjAYMRYwFAYD VQQDEw02NjVhODc4MS1kYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJrMLq/oyoDWdeO8urkHGlkubKr6TuRn1ZlPKHXMSDu7RZPn5ZXa6chUWMWx 5x8JrRCitRsnyfVDiOoA6BQK4bEwtGl8kCH1l1zt9rjp2r8BDUMLc3ADn7IiU6Wq f68T/paLB4AOeHLvtahc+LJEKGjqofugO4N/ZA6QAivDhXwHqnuhSR5dtCmQLINy XIp0aD4KNSbmttz138XhGK5pbw3HnIm4fqImNWkct9pYUIiNapG+vNN9YCg1RTUA RGuhGDB1Lro+QecyrXdUzZU895wXvKQ1W1FyTA5DXWl6IqdlLSm9c81nUfJS5U/1 +XfvGf/P0/VGj/nHHMK9+0D2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ3rRm9 XWq+PaOtBOwF7rTCw/j0MB8GA1UdIwQYMBaAFGpl4m00pTvyfvIROTYwc7omudv6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS9GN0FBNTA5Q0Uw OTgxMUVCOTI3NjBCNERDNEY5QUUwMi9hbVhpYlRTbE9fSi04aEU1TmpCenVpYTUy X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2FtWGliVFNsT19KLThoRTVOakJ6dWlhNTJfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS9GN0FBNTA5Q0UwOTgxMUVCOTI3NjBCNERDNEY5QUUwMi9hbVhpYlRTbE9f Si04aEU1TmpCenVpYTUyX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcv2Q70KKUV2TUPfRxW+dO5/B0zB0hFtrX2aIvlGmwKtJtOTGFxV+ tfiw1u0nfxPhTBNx6X7QPhaVGfRxehAqP7/z62L9PE2BE2BDHCMdMduc35s+p2Wk Nt2IyDdUsNyK+IpWqB9SkczLljiwtcQ3d9Ld4XqLqIqyCfG3YAQTgo+PGfIAtgCD 0oej3rWzI7i0DnfDdMNjhF1D29oM0XG72+b8/D64K61ZPFKsWWBBLhPvlr0x0csF JG8URDvFrWztTS2It0rrpOwNT0utNfg+xb5ZhYjqMutodUZPEq+iHWZXUXk+ji5p hOzyZ45YG64PNftxq4B222nk0jCd8R36 -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org