$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: /c5h8qAjf2HWh2PS6PWtPSdwoJeSrTLaszDWwB6FA2w= Subject key identifier: 10:1C:A4:8E:21:52:FF:66:30:2D:0C:4C:1E:6B:FA:1E:24:44:3F:AB Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: E3 Signing time: Thu 25 Apr 2024 05:47:41 +0000 Manifest this update: Thu 25 Apr 2024 05:47:41 +0000 Manifest next update: Thu 02 May 2024 05:47:41 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: Z29y9g32ozcRr+82z7I7XnVcwdL80IyX7CHLO0HvJlo=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: L5m4/4SXjjvS2j8nqBvUj87azUPAUA8e/WmFUHppLLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 05:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: Apr 25 05:47:41 2024 GMT Not After : May 2 05:47:41 2024 GMT Subject: CN=6629ee7d-f229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:68:e9:8c:29:23:cc:05:98:74:7b:3b:cd: 58:70:2a:c8:c8:06:a2:9b:96:76:a6:e8:ca:3d:f7: 59:7f:78:fb:e6:74:a2:cd:c5:53:6c:98:9b:c9:9f: 5b:3e:8b:b7:12:da:49:9b:2a:e3:c1:30:72:62:29: 5b:f3:47:a5:c7:ef:b9:1a:17:b3:8d:80:22:3c:ec: f3:ee:fb:d7:08:85:b1:61:27:e7:09:e0:3e:65:8b: d9:0f:0f:f3:01:23:71:ea:af:cf:d8:38:63:77:49: 86:dc:db:21:25:5c:5e:d9:b2:9e:ed:5a:45:58:6b: 44:3b:7d:7d:1c:0c:6f:84:42:74:8c:f3:30:4c:b9: ac:2f:2a:05:54:71:11:b0:4c:a2:70:96:63:6b:01: 92:95:86:2b:7a:ed:e8:76:43:fc:9e:d8:9c:af:1a: d1:87:88:b0:04:c1:ca:86:f9:a6:35:65:6b:5e:d3: b3:00:47:dd:13:3c:67:dd:81:4a:4d:10:be:92:95: 10:a0:06:e3:3d:b5:be:37:65:11:fb:c5:30:d6:4d: c7:9c:53:6b:3b:2d:9f:2c:a9:df:c9:d3:cd:2a:ca: 97:e3:2c:12:ba:9a:51:d7:8d:ee:28:be:cc:f9:b2: 7d:8a:45:2a:06:97:c7:1d:a2:65:ee:8b:42:88:76: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:A4:8E:21:52:FF:66:30:2D:0C:4C:1E:6B:FA:1E:24:44:3F:AB X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d1:01:1e:de:11:06:8e:13:9a:a2:28:79:ee:ab:15:3e:b5: b5:f4:e4:ab:82:18:e7:a7:77:8b:57:89:54:cd:a6:d6:f3:66: 72:f6:b5:d9:fe:1e:80:f5:e7:4a:f6:0e:1a:56:4f:2e:72:58: 83:3e:02:c9:b8:33:a1:cc:22:92:3b:fd:8c:d3:f4:ae:27:72: c9:e9:f5:b0:2e:af:46:8e:4e:68:4f:05:52:a1:e1:8a:a7:02: 64:8d:b3:06:28:dd:ac:9a:79:ad:c2:85:e4:ae:b2:60:d3:27: fc:ee:dd:2f:0d:3c:24:33:f0:4e:86:34:03:99:88:81:6b:a8: 8f:1e:8b:b1:de:86:9f:6c:ee:29:6c:07:88:23:a5:df:e3:e5: a4:50:65:ea:75:53:d9:67:36:78:a9:9a:25:9a:df:7f:bf:3a: 6c:4a:e6:4c:df:15:76:94:ed:9e:91:08:78:e2:5b:42:28:07: ae:24:da:d4:2e:bb:2a:80:0f:2b:9b:d3:83:3c:dd:df:c1:e7: 4b:51:3a:83:00:0c:70:81:5f:89:cd:58:6f:0a:02:c2:d4:a0: d6:03:6c:d8:02:f8:79:f4:be:24:d9:2d:a5:12:9b:e4:f0:61: 4a:a2:ba:b2:8f:c7:e9:4f:a1:54:c7:22:66:5f:1c:ae:72:52: f6:98:6c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjQwNDI1MDU0NzQxWhcNMjQwNTAyMDU0NzQxWjAYMRYwFAYD VQQDEw02NjI5ZWU3ZC1mMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSpo6YwpI8wFmHR7O81YcCrIyAaim5Z2pujKPfdZf3j75nSizcVTbJibyZ9b Pou3EtpJmyrjwTByYilb80elx++5GhezjYAiPOzz7vvXCIWxYSfnCeA+ZYvZDw/z ASNx6q/P2Dhjd0mG3NshJVxe2bKe7VpFWGtEO319HAxvhEJ0jPMwTLmsLyoFVHER sEyicJZjawGSlYYreu3odkP8nticrxrRh4iwBMHKhvmmNWVrXtOzAEfdEzxn3YFK TRC+kpUQoAbjPbW+N2UR+8Uw1k3HnFNrOy2fLKnfydPNKsqX4ywSuppR143uKL7M +bJ9ikUqBpfHHaJl7otCiHawYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAcpI4h Uv9mMC0MTB5r+h4kRD+rMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC80QEe3hEGjhOaoih57qsVPrW19OSrghjnp3eLV4lUzabW82Zy9rXZ /h6A9edK9g4aVk8ucliDPgLJuDOhzCKSO/2M0/SuJ3LJ6fWwLq9Gjk5oTwVSoeGK pwJkjbMGKN2smnmtwoXkrrJg0yf87t0vDTwkM/BOhjQDmYiBa6iPHoux3oafbO4p bAeII6Xf4+WkUGXqdVPZZzZ4qZolmt9/vzpsSuZM3xV2lO2ekQh44ltCKAeuJNrU LrsqgA8rm9ODPN3fwedLUTqDAAxwgV+JzVhvCgLC1KDWA2zYAvh59L4k2S2lEpvk 8GFKorqyj8fpT6FUxyJmXxyuclL2mGzR -----END CERTIFICATE-----Generated at Thu Apr 25 07:20:59 2024 by rpki-client on console-ams.rpki-client.org