$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: B1El8WR0DYVEpb09GnQTr5eGYBqXcw92cPbFfdSz1fs= Subject key identifier: B6:57:6F:14:93:6E:EF:CE:40:40:5E:4E:CA:B5:16:4B:7E:AE:6D:2B Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 114D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1127 Signing time: Tue 30 Apr 2024 18:04:37 +0000 Manifest this update: Tue 30 Apr 2024 18:04:36 +0000 Manifest next update: Tue 07 May 2024 18:04:36 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: teApsgsodwCSjDcsVUkdbmAr5mRXUrXJ9QiOiFKOULk=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: wr5ztPmvZN7s4D2CvOqMN8VnTh99RrNwK0w18m5apNc=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: ESw9duBCReL8Wp+ONcz10sCJO+y/cVuwZOBDVu1HWH8=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: 5BaIXlUklJBlXKeiwr0r+qNSQwgyfF8ibFZCw3svB+U=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: pSOeVRU8/a8GqfVRku1xH+URO8tttyKC8jeMWDGPElQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: kt3Yk+E/EE3f1S73Kn5W6atQhH5e6Q2wDMxAcInFDQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4429 (0x114d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Apr 30 18:04:36 2024 GMT Not After : May 7 18:04:36 2024 GMT Subject: CN=663132b4-c57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:65:59:3e:3b:04:8e:ef:82:f2:82:55:f2: ad:3f:4a:89:2e:d0:52:7b:bb:03:17:5b:4d:ab:55: ac:e9:f3:45:6a:e3:55:7a:a9:d5:84:7f:87:cc:cd: 77:f8:95:a2:cf:d5:54:86:e7:4a:56:17:7f:47:7a: c7:51:c7:f6:9e:59:1d:9d:fe:fb:c6:72:66:58:54: 5a:dc:13:7a:04:5f:be:b0:32:5c:c4:a3:d9:f3:de: 44:e4:f4:d9:4e:11:ed:c1:48:40:aa:c5:89:03:75: e9:f9:63:b2:21:b3:8a:7b:34:1c:9c:10:18:90:03: 8d:04:6c:78:9e:7c:3c:fd:8d:79:f5:a1:7b:a0:90: 93:04:87:bb:cb:1b:db:f2:2a:83:ef:ac:df:ef:f6: 66:8b:ff:74:33:1b:11:82:9d:8b:eb:14:c9:8c:12: 6d:8f:b4:52:f6:a3:29:94:c8:4f:bf:5f:3f:1f:39: 28:a0:dc:b8:25:69:17:91:ae:c7:cd:7b:c7:5a:6f: f8:8f:88:df:ec:b6:4f:68:c0:d6:71:28:4b:36:f1: 51:6e:44:6b:cb:ce:5b:20:c2:b8:9e:89:fb:12:a4: fe:bf:26:18:1d:0f:ee:03:66:ae:89:4b:a8:e7:08: 82:32:ea:51:3e:e0:c8:f7:14:16:c3:23:e1:3f:59: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:6F:14:93:6E:EF:CE:40:40:5E:4E:CA:B5:16:4B:7E:AE:6D:2B X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:36:c5:19:ef:72:d8:57:e0:07:a4:f3:31:61:b2:ac:7a: 56:c9:78:76:77:18:86:1e:f5:5f:84:fd:92:2a:e6:ff:92:21: 4a:aa:f7:7e:41:7b:b5:0f:24:1b:da:99:b4:be:ee:37:c4:21: 11:a0:32:23:92:ce:6b:ee:1d:53:32:6a:cd:ae:db:e2:dc:cc: 8e:c2:2a:72:c2:49:e0:1e:a9:c2:3e:e9:ac:8c:25:d7:13:f1: 1d:f2:06:16:1b:bd:2e:53:ad:17:3a:38:80:f2:4a:4d:03:03: d2:a9:f3:8f:65:90:54:ba:f7:a6:e5:04:53:4a:f0:e7:2f:9e: a6:a0:67:46:38:e4:6d:6d:dc:31:e1:b3:e6:ab:9b:f6:9e:70: 32:6a:2a:db:e1:11:77:44:8e:d3:f7:4c:fd:e0:ec:f1:c1:93: 37:00:31:aa:07:b9:33:89:58:5c:42:c3:c3:67:ae:07:4c:4a: 0b:e0:d1:06:e6:38:b9:6e:3e:fa:1e:43:f7:d9:ac:27:23:ea: d5:e5:f9:2c:58:fa:7e:eb:5c:7f:c4:aa:51:2c:5f:fc:b1:22: 1a:d7:9e:9c:8c:92:b0:91:61:11:18:a8:3c:f5:eb:9f:cd:9f: 93:4d:f2:bd:dc:f7:84:b3:ce:99:80:33:4b:ff:51:f9:87:a9: 22:44:93:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjQwNDMwMTgwNDM2WhcNMjQwNTA3MTgwNDM2WjAYMRYwFAYD VQQDEw02NjMxMzJiNC1jNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SplWT47BI7vgvKCVfKtP0qJLtBSe7sDF1tNq1Ws6fNFauNVeqnVhH+HzM13 +JWiz9VUhudKVhd/R3rHUcf2nlkdnf77xnJmWFRa3BN6BF++sDJcxKPZ895E5PTZ ThHtwUhAqsWJA3Xp+WOyIbOKezQcnBAYkAONBGx4nnw8/Y159aF7oJCTBIe7yxvb 8iqD76zf7/Zmi/90MxsRgp2L6xTJjBJtj7RS9qMplMhPv18/HzkooNy4JWkXka7H zXvHWm/4j4jf7LZPaMDWcShLNvFRbkRry85bIMK4non7EqT+vyYYHQ/uA2auiUuo 5wiCMupRPuDI9xQWwyPhP1numQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZXbxST bu/OQEBeTsq1Fkt+rm0rMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FzbFGe9y2FfgB6TzMWGyrHpWyXh2dxiGHvVfhP2SKub/kiFKqvd+ QXu1DyQb2pm0vu43xCERoDIjks5r7h1TMmrNrtvi3MyOwipywkngHqnCPumsjCXX E/Ed8gYWG70uU60XOjiA8kpNAwPSqfOPZZBUuvem5QRTSvDnL56moGdGOORtbdwx 4bPmq5v2nnAyairb4RF3RI7T90z94OzxwZM3ADGqB7kziVhcQsPDZ64HTEoL4NEG 5ji5bj76HkP32awnI+rV5fksWPp+61x/xKpRLF/8sSIa156cjJKwkWERGKg89euf zZ+TTfK93PeEs86ZgDNL/1H5h6kiRJPf -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:31 2024 by rpki-client on console-ams.rpki-client.org