$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: 3lOVJi9NYvYL7mTZocl4asJBe1WECfleAq0N8mYWxHw= Subject key identifier: F2:26:D7:DC:E0:CD:FD:CD:A3:2F:95:AD:6F:27:03:14:67:31:6A:BE Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 33D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 33D1 Signing time: Fri 31 May 2024 15:30:11 +0000 Manifest this update: Fri 31 May 2024 15:30:10 +0000 Manifest next update: Fri 07 Jun 2024 15:30:10 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: 30Iyo4mcmx+vc4MIU31SOWYaPutiLyfH2kpEc//io1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13265 (0x33d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: May 31 15:30:10 2024 GMT Not After : Jun 7 15:30:10 2024 GMT Subject: CN=6659ed03-15c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:40:7b:bd:99:e5:79:3f:cc:dc:01:70:ed: d1:6f:e6:93:3a:c4:96:f0:44:93:d3:3d:e7:c5:23: 03:fd:f9:4e:8c:03:3a:18:d9:13:5d:ef:f4:fc:1d: 79:5f:1c:02:71:8b:ee:cb:e8:90:68:ee:14:ec:ba: 39:26:d4:1b:86:35:a0:3a:fa:52:bb:d4:2d:28:37: 19:ba:98:95:53:93:a9:ef:11:d5:4c:b4:a5:8c:6a: b6:d4:a6:33:11:7a:75:9d:03:dd:25:83:73:56:e3: 23:03:d6:21:75:10:2f:f1:3a:21:ee:bf:94:18:bc: 6f:77:e8:9b:6f:af:26:85:1e:74:07:0c:60:99:5e: ac:a0:1b:ce:84:1b:03:f3:a2:38:b8:b8:8f:8c:a2: 68:28:83:4f:3b:a6:de:89:ff:7c:f1:27:ef:35:d7: d3:77:63:ba:ee:99:f6:c7:d8:20:09:55:f1:71:b5: 8d:a3:75:70:e1:b8:6c:ef:b4:11:27:08:6e:48:be: 7d:81:d8:bc:c9:18:80:d4:0c:fe:52:a7:da:8b:8e: 69:2a:80:38:9e:c3:b3:14:b0:a3:a1:49:bc:0f:43: d8:20:ec:49:b3:38:f7:cf:45:41:d0:88:5b:d4:a5: 9e:72:01:8f:83:50:95:21:c9:c9:37:81:ae:f1:b3: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:26:D7:DC:E0:CD:FD:CD:A3:2F:95:AD:6F:27:03:14:67:31:6A:BE X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:61:93:c8:62:c5:c3:0d:d4:e9:b7:89:57:14:bf:eb:87: d6:81:7e:5a:f3:ce:fa:39:4d:c7:3f:2c:71:bb:a9:95:ed:de: eb:1e:48:c1:af:5f:4b:66:19:37:e2:62:a1:c9:43:56:6c:58: e8:cc:7a:4a:8b:ec:3a:50:72:b2:b4:e5:26:c6:2b:06:eb:8e: 8b:9a:5d:83:f4:ae:af:5b:0e:74:d8:c5:84:05:17:55:be:b8: 3d:e6:b6:97:ba:1f:a4:15:07:d1:08:31:44:bc:d6:5a:f0:87: 85:d0:d2:fc:4f:38:8c:49:43:96:0f:3e:91:59:da:28:93:ce: 2b:e7:4d:bc:e1:f4:32:7a:c5:ea:9d:98:59:b4:59:2e:59:0d: 50:df:f5:09:43:0c:4f:e6:97:d2:71:e3:c7:8c:8d:f9:2f:1c: 38:f1:92:c5:82:01:81:4a:33:98:a0:0b:a3:01:10:93:b5:e5: e9:64:52:70:63:ae:b9:d5:c1:e7:47:69:42:85:1d:ee:88:cd: 7c:2a:86:a8:51:c2:1e:04:cf:e0:42:be:e1:53:31:d4:09:9a: e5:68:88:78:ea:56:be:1d:19:3f:aa:aa:7a:65:2d:4e:52:06: ee:29:d9:c2:ba:cf:0e:ae:05:76:f1:47:18:05:8f:ce:0c:6f: 95:d9:1a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjQwNTMxMTUzMDEwWhcNMjQwNjA3MTUzMDEwWjAYMRYwFAYD VQQDEw02NjU5ZWQwMy0xNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5pAe72Z5Xk/zNwBcO3Rb+aTOsSW8EST0z3nxSMD/flOjAM6GNkTXe/0/B15 XxwCcYvuy+iQaO4U7Lo5JtQbhjWgOvpSu9QtKDcZupiVU5Op7xHVTLSljGq21KYz EXp1nQPdJYNzVuMjA9YhdRAv8Toh7r+UGLxvd+ibb68mhR50BwxgmV6soBvOhBsD 86I4uLiPjKJoKINPO6beif988SfvNdfTd2O67pn2x9ggCVXxcbWNo3Vw4bhs77QR JwhuSL59gdi8yRiA1Az+Uqfai45pKoA4nsOzFLCjoUm8D0PYIOxJszj3z0VB0Ihb 1KWecgGPg1CVIcnJN4Gu8bO+4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIm19zg zf3Noy+VrW8nAxRnMWq+MB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBasmGTyGLFww3U6beJVxS/64fWgX5a8876OU3HPyxxu6mV7d7rHkjB r19LZhk34mKhyUNWbFjozHpKi+w6UHKytOUmxisG646Lml2D9K6vWw502MWEBRdV vrg95raXuh+kFQfRCDFEvNZa8IeF0NL8TziMSUOWDz6RWdook84r50284fQyesXq nZhZtFkuWQ1Q3/UJQwxP5pfScePHjI35Lxw48ZLFggGBSjOYoAujARCTteXpZFJw Y6651cHnR2lChR3uiM18KoaoUcIeBM/gQr7hUzHUCZrlaIh46la+HRk/qqp6ZS1O UgbuKdnCus8OrgV28UcYBY/ODG+V2Rr4 -----END CERTIFICATE-----Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org