$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: 4tKDX+j7R+4lYNhMMSdAh58MsY1kmeKw5WjBgaT5mEw= Subject key identifier: DF:7E:F7:D5:A0:97:A2:5B:E3:F1:51:E5:75:9D:67:20:7D:62:B0:CA Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 0464 Signing time: Wed 01 May 2024 02:04:38 +0000 Manifest this update: Wed 01 May 2024 02:04:37 +0000 Manifest next update: Wed 08 May 2024 02:04:37 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: OdRKJV6xanFnIU3KQiBx8B/5vGB5v0tphmpasfCH/nY=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: GCOYhXOIiDh7tK27bYOwMZTbPpznjaDInwGEyTr4OB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: May 1 02:04:37 2024 GMT Not After : May 8 02:04:37 2024 GMT Subject: CN=6631a335-9c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:40:e0:ce:b0:ac:f6:ae:a1:b7:2b:89:07: 75:f6:8a:98:a8:b7:94:fb:19:ed:cd:2b:14:7b:c2: a6:7d:91:f6:99:54:ea:03:52:18:95:1f:0f:14:04: 86:28:45:b9:07:0c:b5:10:8c:43:86:9f:2d:5d:08: 63:f8:3b:1f:c5:d4:f5:1c:f3:bb:12:bd:cf:43:92: b7:e3:f2:41:31:84:da:e2:74:99:f6:ac:b8:3d:38: 3f:63:35:c4:84:d1:54:a1:31:fc:24:a4:45:cf:c0: ba:b1:f2:96:06:12:6d:be:61:bd:76:2f:22:3f:5d: ea:c8:37:2e:47:29:b9:33:a4:ae:d8:72:7d:e2:95: 37:91:ce:6d:14:fd:4a:88:30:dc:61:5c:d2:1f:27: fa:91:d3:78:0d:7d:7b:f4:0d:f0:eb:fd:65:89:89: da:d4:9d:8d:90:29:a5:64:80:46:e2:3e:0b:a4:25: 06:35:0c:52:1e:fc:6d:79:63:ac:db:f5:64:3d:a8: 0e:df:0e:f1:a8:04:16:b5:12:c4:21:b2:8c:e7:20: df:e0:be:27:ec:85:ba:ce:2d:09:2c:28:42:1a:fc: 67:54:8f:4d:cf:b5:56:9c:d1:73:08:c6:b9:00:6e: 9c:27:d3:65:47:7f:7a:0a:b4:8c:56:bf:e1:5b:bb: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:F7:D5:A0:97:A2:5B:E3:F1:51:E5:75:9D:67:20:7D:62:B0:CA X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4a:50:15:03:23:3e:54:6f:0c:7d:ad:4a:2c:d6:8f:65:21: b5:cf:e6:d3:25:8b:ff:5c:17:91:b3:94:55:19:ab:02:7b:81: d7:e0:d1:b4:10:2d:ee:02:55:fb:99:cb:40:e5:ad:26:0f:52: 97:48:58:1a:a4:f1:10:29:72:e8:8c:f8:c9:fe:a1:03:97:4d: 5d:1b:f8:a1:eb:21:80:9f:7d:89:78:49:7a:60:84:4b:6e:d5: 29:32:4e:59:5c:c8:9d:57:70:46:eb:68:b5:17:b3:65:fb:33: 1c:4a:fc:7f:07:93:ad:47:df:05:e2:56:44:d0:02:49:25:f4: 09:7b:e0:1e:e0:ef:62:3e:a1:14:63:64:cd:ff:a5:9c:29:68: 0e:c7:c4:c1:95:fa:ac:d1:a1:d2:17:62:a2:6c:b0:79:64:c2: 4a:1d:cf:dd:2c:e2:a9:75:86:89:7b:d4:1c:ab:5f:c4:f4:fa: 2b:a6:e4:34:ef:2b:48:8c:fb:16:d1:e3:f8:63:52:00:3d:57: af:f5:2d:eb:59:01:a1:f2:e8:63:7c:21:9e:59:61:ee:b0:ed: 10:60:c3:24:28:55:7a:65:87:dc:6d:f1:45:56:82:35:e2:72: 82:e8:bc:a5:2d:b5:a7:71:a6:c5:e9:f4:28:f7:2f:67:ef:f3: dd:c8:10:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjQwNTAxMDIwNDM3WhcNMjQwNTA4MDIwNDM3WjAYMRYwFAYD VQQDEw02NjMxYTMzNS05YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ypA4M6wrPauobcriQd19oqYqLeU+xntzSsUe8KmfZH2mVTqA1IYlR8PFASG KEW5Bwy1EIxDhp8tXQhj+DsfxdT1HPO7Er3PQ5K34/JBMYTa4nSZ9qy4PTg/YzXE hNFUoTH8JKRFz8C6sfKWBhJtvmG9di8iP13qyDcuRym5M6Su2HJ94pU3kc5tFP1K iDDcYVzSHyf6kdN4DX179A3w6/1liYna1J2NkCmlZIBG4j4LpCUGNQxSHvxteWOs 2/VkPagO3w7xqAQWtRLEIbKM5yDf4L4n7IW6zi0JLChCGvxnVI9Nz7VWnNFzCMa5 AG6cJ9NlR396CrSMVr/hW7scmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9+99Wg l6Jb4/FR5XWdZyB9YrDKMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSlAVAyM+VG8Mfa1KLNaPZSG1z+bTJYv/XBeRs5RVGasCe4HX4NG0 EC3uAlX7mctA5a0mD1KXSFgapPEQKXLojPjJ/qEDl01dG/ih6yGAn32JeEl6YIRL btUpMk5ZXMidV3BG62i1F7Nl+zMcSvx/B5OtR98F4lZE0AJJJfQJe+Ae4O9iPqEU Y2TN/6WcKWgOx8TBlfqs0aHSF2KibLB5ZMJKHc/dLOKpdYaJe9Qcq1/E9PorpuQ0 7ytIjPsW0eP4Y1IAPVev9S3rWQGh8uhjfCGeWWHusO0QYMMkKFV6ZYfcbfFFVoI1 4nKC6LylLbWncabF6fQo9y9n7/PdyBDk -----END CERTIFICATE-----Generated at Wed May 1 02:46:17 2024 by rpki-client on console-ams.rpki-client.org