$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft File: p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft (raw, json) Hash identifier: JGnh4N5/HuvzwyMIQ/lVU4F0HffI4D93Bza//UfdhV4= Subject key identifier: C3:9D:70:29:6D:A8:3F:ED:FC:B1:37:6B:B1:BE:E1:92:72:D2:ED:E7 Authority key identifier: A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 Certificate issuer: /CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Certificate serial: 06F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft Manifest number: 14C1 Signing time: Sat 18 May 2024 18:28:20 +0000 Manifest this update: Sat 18 May 2024 18:28:20 +0000 Manifest next update: Sat 25 May 2024 18:28:20 +0000 Files and hashes: 1: p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl (hash: s457O2tZAXDlJQ5cMxVsF+x2yueMfojIOOpqpy39TBY=) 2: 8336727A0ECC11EBB12DD732C4F9AE02.roa (hash: 5i89i/PjnmDJEuqnD5s7NtKAUr7TOwXV7drWzGsb988=) 3: 12D5B220296411EDB08A7E54C4F9AE02.roa (hash: V7J1sx87oZjTjzfaaAQlCo2MB1AMyApiMzAigQvY2sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF/serialNumber=A78902F4F0D824B40F496D5DFC3E9F0633B71299 Validity Not Before: May 18 18:28:20 2024 GMT Not After : May 25 18:28:20 2024 GMT Subject: CN=6648f344-ea7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:ea:b2:dd:ca:eb:89:69:dd:04:69:3f:05: 95:e0:b9:86:b8:e4:b3:70:5b:b9:45:a5:16:80:03: 24:be:11:88:4d:5c:21:fd:d3:1e:d8:b4:64:00:d1: c9:41:6b:34:ed:e0:96:e2:d2:11:5e:21:ec:f7:b5: c7:07:96:f0:40:5d:1a:6f:74:c6:eb:03:72:d7:4d: 40:64:c2:f3:80:55:f5:5d:20:22:39:7d:ff:9a:91: 39:2f:cf:61:4b:49:18:a1:89:00:ae:79:25:72:aa: 3b:fa:21:8a:5b:26:d1:e9:d8:a2:fb:28:c7:d0:61: c7:a7:eb:d0:c1:a8:f7:ea:f9:5e:2c:1b:fc:b6:d6: ce:4a:cd:55:57:0d:ee:3f:6b:55:36:14:7e:a2:3e: 14:db:fa:ed:84:53:29:19:ca:8b:b5:81:81:5e:6d: 95:2c:06:7e:ae:81:8f:d2:85:3c:a6:90:19:e4:2e: 07:24:95:da:ed:0e:23:b7:3b:af:2a:80:f0:c7:1e: de:42:63:19:54:e4:f8:ad:5e:81:20:7e:00:60:73: 51:ea:42:6d:e4:08:63:5b:e7:47:d9:04:5e:c6:ca: 1a:8a:3c:64:39:94:f3:48:7d:69:3b:db:f3:4c:51: 98:17:b0:03:2b:a9:f3:bf:72:5d:50:2c:6e:87:14: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:70:29:6D:A8:3F:ED:FC:B1:37:6B:B1:BE:E1:92:72:D2:ED:E7 X509v3 Authority Key Identifier: keyid:A7:89:02:F4:F0:D8:24:B4:0F:49:6D:5D:FC:3E:9F:06:33:B7:12:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4kC9PDYJLQPSW1d_D6fBjO3Epk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/p4kC9PDYJLQPSW1d_D6fBjO3Epk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:46:6e:af:84:92:06:44:c7:85:3c:e8:b9:88:aa:7d:8f:be: 3e:3b:62:17:e8:f3:21:e8:ef:66:c0:5e:1a:12:59:8f:07:98: e5:33:33:0d:55:2d:8c:98:53:11:fe:0c:f3:73:25:89:db:1d: 71:74:55:4b:c6:b3:04:44:6e:a2:67:e2:5b:97:67:9e:f0:81: 5a:60:10:47:48:5d:4a:09:c9:90:74:ca:f4:b8:2c:c6:d6:18: f6:82:99:fe:a2:4f:b0:62:d5:21:e6:10:32:14:75:bb:92:f1: 4c:6b:11:e2:bc:b6:6b:56:4c:5b:82:20:08:d1:21:1a:9a:93: 6d:e6:12:89:5f:89:4b:1d:0d:84:ca:ed:f1:af:77:11:98:45: 60:04:5a:a5:1b:fa:48:4c:e7:e9:c2:f2:f9:23:82:5b:c6:4c: 6d:b4:82:56:f9:36:83:2d:8e:97:20:e7:0c:c9:47:20:a1:34: 51:9f:cf:8f:bc:79:a1:67:44:9d:67:56:0b:76:be:80:31:e0: b2:7c:95:a0:cf:b1:fe:d9:30:fc:0f:0e:0b:95:09:95:13:32: 2b:10:3e:42:09:47:fb:85:af:6b:92:df:41:4d:8e:96:76:64: 62:fe:f7:91:fa:38:2e:13:6c:ad:da:f7:30:7e:5c:98:d5:f4: 38:ca:d4:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKEE3ODkwMkY0RjBEODI0QjQwRjQ5NkQ1REZDM0U5RjA2 MzNCNzEyOTkwHhcNMjQwNTE4MTgyODIwWhcNMjQwNTI1MTgyODIwWjAYMRYwFAYD VQQDEw02NjQ4ZjM0NC1lYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07jqst3K64lp3QRpPwWV4LmGuOSzcFu5RaUWgAMkvhGITVwh/dMe2LRkANHJ QWs07eCW4tIRXiHs97XHB5bwQF0ab3TG6wNy101AZMLzgFX1XSAiOX3/mpE5L89h S0kYoYkArnklcqo7+iGKWybR6dii+yjH0GHHp+vQwaj36vleLBv8ttbOSs1VVw3u P2tVNhR+oj4U2/rthFMpGcqLtYGBXm2VLAZ+roGP0oU8ppAZ5C4HJJXa7Q4jtzuv KoDwxx7eQmMZVOT4rV6BIH4AYHNR6kJt5AhjW+dH2QRexsoaijxkOZTzSH1pO9vz TFGYF7ADK6nzv3JdUCxuhxSg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOdcClt qD/t/LE3a7G+4ZJy0u3nMB8GA1UdIwQYMBaAFKeJAvTw2CS0D0ltXfw+nwYztxKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpMUVBTVzFkX0Q2ZkJqTzNF cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0a0M5UERZSkxRUFNXMWRfRDZmQmpPM0Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9wNGtDOVBEWUpM UVBTVzFkX0Q2ZkJqTzNFcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRRm6vhJIGRMeFPOi5iKp9j74+O2IX6PMh6O9mwF4aElmPB5jlMzMN VS2MmFMR/gzzcyWJ2x1xdFVLxrMERG6iZ+Jbl2ee8IFaYBBHSF1KCcmQdMr0uCzG 1hj2gpn+ok+wYtUh5hAyFHW7kvFMaxHivLZrVkxbgiAI0SEampNt5hKJX4lLHQ2E yu3xr3cRmEVgBFqlG/pITOfpwvL5I4JbxkxttIJW+TaDLY6XIOcMyUcgoTRRn8+P vHmhZ0SdZ1YLdr6AMeCyfJWgz7H+2TD8Dw4LlQmVEzIrED5CCUf7ha9rkt9BTY6W dmRi/veR+jguE2yt2vcwflyY1fQ4ytRC -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org