$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: uJziV7OOD8APIHxzv7yUs6E9LMimlCCDQL2ai45rOWI= Subject key identifier: 6E:5D:21:D0:BA:2F:52:23:CF:4A:3E:92:2D:07:BE:66:FB:2C:44:C9 Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 13E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 13E6 Signing time: Sat 18 May 2024 17:27:10 +0000 Manifest this update: Sat 18 May 2024 17:27:09 +0000 Manifest next update: Sat 25 May 2024 17:27:09 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: B1n9hMKdNNZejMkqOSa25i8hqwf2lNUowRyLQWUApNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Validity Not Before: May 18 17:27:09 2024 GMT Not After : May 25 17:27:09 2024 GMT Subject: CN=6648e4ed-9cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:e3:07:6d:2d:3c:89:2a:5a:cd:63:77:64: a1:ac:7b:91:8a:18:49:9e:df:78:ee:7c:c3:87:f1: c1:5b:39:77:11:1d:f6:7f:41:63:e9:3e:02:0e:20: b1:d8:77:77:aa:18:eb:e0:30:b3:80:f1:73:73:c0: 97:b4:eb:70:79:07:6d:64:e9:0e:bb:19:2d:8f:e8: 20:b7:7c:b0:cd:a9:e6:c3:dd:4f:0e:1c:a1:5a:79: ea:19:ae:e6:f3:cb:86:32:b6:83:83:c2:f1:26:b4: e1:af:f7:ea:39:50:2a:05:16:d4:50:fc:90:24:27: cd:ca:bd:76:51:74:93:42:ba:88:9d:b3:ba:77:8f: 34:28:da:19:46:e5:76:3e:d7:6d:90:4e:e3:a5:f7: e3:be:96:59:09:b2:d4:4a:7d:4b:a4:4e:bd:e5:53: f6:7a:76:28:4d:36:c7:22:08:7e:02:32:c9:66:e3: 2c:c0:a5:37:4c:cd:f2:e6:8d:ae:88:fc:8a:a1:07: ca:e4:04:f4:f6:f7:c3:5a:2e:42:e2:ef:8d:0e:59: 5a:3e:ca:b8:c0:14:21:c6:06:25:62:cf:58:6f:41: 8c:a1:5b:93:c4:98:45:71:8b:40:24:73:2a:a4:e2: 27:b0:3a:e9:4b:c6:1c:55:14:be:23:2a:30:b7:9c: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5D:21:D0:BA:2F:52:23:CF:4A:3E:92:2D:07:BE:66:FB:2C:44:C9 X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:82:5b:78:c1:64:1c:1c:35:4e:4a:8c:10:d9:3b:de:89: 76:1a:ed:fc:6f:1a:61:03:18:ab:aa:7e:40:d6:ea:e8:83:c3: 24:1a:c7:3e:eb:8c:7f:9c:d8:49:25:1d:1f:35:cd:00:8d:ae: 96:43:ac:d2:1a:7e:fa:ab:52:72:c1:b1:ea:d9:f2:87:61:58: a1:0c:b2:92:37:6d:0b:7b:07:1b:77:3f:dc:97:3f:a5:12:9e: 16:0b:f9:f5:8e:66:ca:c5:bc:89:77:da:79:eb:77:10:e2:bb: 30:c4:1d:2d:33:d7:02:1a:b6:56:98:5d:72:ab:95:2c:96:3d: d5:27:ec:01:76:f4:cb:6e:8d:dd:a9:b0:cd:ee:3f:e6:1f:c7: ea:78:aa:41:d1:f5:97:1f:18:50:91:0b:87:17:cf:9c:81:ba: 1a:77:4a:69:98:36:40:81:2b:63:33:95:8f:7e:bd:85:20:b6: f7:73:0b:c0:15:0b:c4:97:26:c8:e1:40:a3:46:65:18:7f:41: d7:a1:af:f3:b0:62:46:91:ff:a2:f7:8e:35:fd:d0:8f:75:27: 95:c5:91:33:0f:2a:ea:a0:6d:69:db:e9:31:1c:f3:9e:a7:59: 7b:10:f4:8a:cc:fb:d7:3d:3f:d8:e1:14:ea:42:5d:74:9b:49: a7:55:a8:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjQwNTE4MTcyNzA5WhcNMjQwNTI1MTcyNzA5WjAYMRYwFAYD VQQDEw02NjQ4ZTRlZC05Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhvjB20tPIkqWs1jd2ShrHuRihhJnt947nzDh/HBWzl3ER32f0Fj6T4CDiCx 2Hd3qhjr4DCzgPFzc8CXtOtweQdtZOkOuxktj+ggt3ywzanmw91PDhyhWnnqGa7m 88uGMraDg8LxJrThr/fqOVAqBRbUUPyQJCfNyr12UXSTQrqInbO6d480KNoZRuV2 PtdtkE7jpffjvpZZCbLUSn1LpE695VP2enYoTTbHIgh+AjLJZuMswKU3TM3y5o2u iPyKoQfK5AT09vfDWi5C4u+NDllaPsq4wBQhxgYlYs9Yb0GMoVuTxJhFcYtAJHMq pOInsDrpS8YcVRS+Iyowt5wedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5dIdC6 L1Ijz0o+ki0Hvmb7LETJMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmIJbeMFkHBw1TkqMENk73ol2Gu38bxphAxirqn5A1urog8MkGsc+ 64x/nNhJJR0fNc0Aja6WQ6zSGn76q1JywbHq2fKHYVihDLKSN20Lewcbdz/clz+l Ep4WC/n1jmbKxbyJd9p563cQ4rswxB0tM9cCGrZWmF1yq5Uslj3VJ+wBdvTLbo3d qbDN7j/mH8fqeKpB0fWXHxhQkQuHF8+cgboad0ppmDZAgStjM5WPfr2FILb3cwvA FQvElybI4UCjRmUYf0HXoa/zsGJGkf+i9441/dCPdSeVxZEzDyrqoG1p2+kxHPOe p1l7EPSKzPvXPT/Y4RTqQl10m0mnVagz -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org