$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft File: N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json) Hash identifier: jpq6Gg+ueX4KMyCH7RUT7eVuLylgOdSksggl9QtscXY= Subject key identifier: A4:13:81:6E:8D:CE:8D:B0:E9:18:D2:17:AD:CA:96:EC:91:A4:5C:9F Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft Manifest number: 02D7 Signing time: Sun 19 May 2024 03:21:26 +0000 Manifest this update: Sun 19 May 2024 03:21:26 +0000 Manifest next update: Sun 26 May 2024 03:21:26 +0000 Files and hashes: 1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: 7iq8XeWjKfzs7zTvGWDD6kD4wq/aeGI6j8a/VZVwAIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: May 19 03:21:26 2024 GMT Not After : May 26 03:21:26 2024 GMT Subject: CN=66497036-7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:b0:4f:60:a5:0e:ea:b8:b8:d0:ff:49:e5: 6d:b8:80:a4:e1:53:34:dc:3f:ca:82:3e:ee:16:44: 50:a9:bb:95:31:03:a8:a6:6f:f0:50:8f:66:10:01: be:6a:9f:f9:68:4d:45:dd:d0:1f:44:18:cf:b1:bc: e7:60:e2:20:0b:f1:e5:17:1e:e5:6b:63:b2:31:bf: 81:ae:65:6c:52:df:97:d3:0e:cf:51:1a:58:6a:d8: f3:64:b7:09:2c:23:c7:d5:43:f5:9b:71:f8:19:de: f0:e9:22:97:8d:a9:b6:f0:b1:cc:75:ce:5e:e9:5f: 9d:24:5b:98:b8:d8:bc:e6:4f:36:01:c9:0c:93:60: 4d:64:10:60:b3:d2:bc:7a:83:29:15:39:27:22:d3: 79:04:4c:61:d5:65:33:94:3a:af:ad:bb:ce:09:4b: f0:12:b0:34:aa:a8:bf:52:fb:25:e2:c9:01:f4:bb: 0d:78:c0:2a:98:43:18:dc:c5:cc:0d:5c:fa:ed:6e: be:79:2a:3d:bd:47:ea:df:91:a2:57:db:a8:b7:80: 37:79:b0:c5:24:32:71:06:53:70:02:16:04:f5:85: 6f:ad:0f:88:f3:1c:f6:d6:20:ba:b3:78:17:94:a8: bd:f3:09:ae:4c:8b:e2:c5:f6:3d:01:0e:2c:43:c3: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:81:6E:8D:CE:8D:B0:E9:18:D2:17:AD:CA:96:EC:91:A4:5C:9F X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9e:21:b8:9e:d0:5a:9c:00:25:1e:83:73:c9:34:7b:e5:b4: d8:bc:0b:1e:12:08:c5:b4:c5:42:ca:2a:d9:46:17:33:bd:d0: 66:89:1f:00:8e:b3:43:7f:8a:8f:ee:37:85:78:d9:e5:36:b3: b0:17:99:98:51:20:97:9d:14:69:91:89:e7:cb:82:cb:4d:a4: b4:1b:7d:dc:78:ec:f9:3a:58:97:8b:04:46:f3:31:01:42:65: fb:ea:f7:0d:33:74:0d:17:b2:59:85:cd:07:dd:88:53:6e:ce: 64:85:d3:67:4d:c5:fa:3e:68:67:ea:a7:d5:c1:d2:52:40:ef: 47:0b:d8:b3:8c:e6:f7:60:48:2a:29:e5:99:41:f9:f5:90:5f: a6:e2:05:12:0d:d7:17:ec:19:f2:22:35:56:2e:69:bd:ae:a8: 42:90:24:ce:7f:32:b7:46:e7:cf:50:44:ba:7b:53:89:e7:84: a0:16:9f:a3:98:db:1c:db:e3:2b:ff:7b:5d:85:46:44:4a:c4: 26:11:1a:7d:29:32:23:da:de:e2:07:9f:1a:cb:31:a6:ca:60: 30:d1:af:1e:dc:5a:1c:43:1a:b6:9f:6d:19:90:0d:89:91:e2: db:98:a6:74:15:bb:4a:3f:b7:3c:96:a0:82:38:6f:a1:e5:83: 1e:b8:b0:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjQwNTE5MDMyMTI2WhcNMjQwNTI2MDMyMTI2WjAYMRYwFAYD VQQDEw02NjQ5NzAzNi03OTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09WwT2ClDuq4uND/SeVtuICk4VM03D/Kgj7uFkRQqbuVMQOopm/wUI9mEAG+ ap/5aE1F3dAfRBjPsbznYOIgC/HlFx7la2OyMb+BrmVsUt+X0w7PURpYatjzZLcJ LCPH1UP1m3H4Gd7w6SKXjam28LHMdc5e6V+dJFuYuNi85k82AckMk2BNZBBgs9K8 eoMpFTknItN5BExh1WUzlDqvrbvOCUvwErA0qqi/Uvsl4skB9LsNeMAqmEMY3MXM DVz67W6+eSo9vUfq35GiV9uot4A3ebDFJDJxBlNwAhYE9YVvrQ+I8xz21iC6s3gX lKi98wmuTIvixfY9AQ4sQ8NqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQTgW6N zo2w6RjSF63KluyRpFyfMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTlBMC80MEVEQTExRTlBRTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZi NnRBUDQzakVhcjBNcHdSZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLniG4ntBanAAlHoNzyTR75bTYvAseEgjFtMVCyirZRhczvdBmiR8A jrNDf4qP7jeFeNnlNrOwF5mYUSCXnRRpkYnny4LLTaS0G33ceOz5OliXiwRG8zEB QmX76vcNM3QNF7JZhc0H3YhTbs5khdNnTcX6Pmhn6qfVwdJSQO9HC9izjOb3YEgq KeWZQfn1kF+m4gUSDdcX7BnyIjVWLmm9rqhCkCTOfzK3RufPUES6e1OJ54SgFp+j mNsc2+Mr/3tdhUZESsQmERp9KTIj2t7iB58ayzGmymAw0a8e3FocQxq2n20ZkA2J keLbmKZ0FbtKP7c8lqCCOG+h5YMeuLDW -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org