$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft File: k8Etg9u4jyF3q1jjn66KyjEjnZE.mft (raw, json) Hash identifier: f4tJQIuz9tBwRucBWUrcDHDvwjmsYj8D5zNP8J1VhAU= Subject key identifier: 7D:AE:75:2A:FA:26:BB:1E:62:E5:1B:DC:B0:8A:B0:51:2D:B3:A4:32 Authority key identifier: 93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91 Certificate issuer: /CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft Manifest number: 01F4 Signing time: Wed 01 May 2024 04:32:16 +0000 Manifest this update: Wed 01 May 2024 04:32:15 +0000 Manifest next update: Wed 08 May 2024 04:32:15 +0000 Files and hashes: 1: k8Etg9u4jyF3q1jjn66KyjEjnZE.crl (hash: mYJuQxZT2h/Yku7X9lVcVa+ohK09ZBIzyf6tLxVJ3+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.crl rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91 Validity Not Before: May 1 04:32:15 2024 GMT Not After : May 8 04:32:15 2024 GMT Subject: CN=6631c5d0-e10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:98:1d:d4:30:1b:08:f8:11:69:63:cc:8f: bd:4f:65:8c:46:bb:7a:c2:cf:9e:fb:20:7a:e3:b7: d2:81:f9:d0:1c:5c:0e:e2:0d:f9:44:57:07:7c:7a: 74:c3:5f:2e:ba:c2:b5:43:c5:ad:e3:7c:86:d8:35: 58:fc:d8:e3:a8:d8:00:e6:fc:00:f1:14:9a:ab:bb: 7d:cc:b1:1c:83:16:cb:1b:d8:d4:cb:9b:45:61:46: c6:96:4b:73:2b:65:07:5b:2f:88:78:45:e1:a2:f2: c6:16:e1:98:d6:23:50:ce:67:dd:68:82:80:01:a0: 7f:18:ee:67:f3:d4:0d:e2:38:62:4a:9f:db:4f:36: 79:a3:2b:76:c6:e3:cf:45:2f:37:0b:55:9f:03:80: f0:32:83:c6:2f:a5:60:93:81:6e:e0:58:55:f5:08: cd:c2:e5:5c:82:c8:13:36:50:10:f4:8b:83:4b:35: 59:0c:be:a3:23:63:14:fe:00:a5:b8:d6:56:c6:b8: aa:e4:6d:6e:7d:79:61:a2:c7:45:79:cb:88:3f:ef: 64:ea:1b:df:b9:ec:90:f8:83:26:7d:05:e4:ac:d0: 8a:9b:9c:c4:3c:0a:f9:da:4b:44:a3:0a:bf:99:07: 6d:7f:ed:4c:08:55:b3:03:23:72:99:f6:52:91:4b: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:75:2A:FA:26:BB:1E:62:E5:1B:DC:B0:8A:B0:51:2D:B3:A4:32 X509v3 Authority Key Identifier: keyid:93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:4f:7b:70:4a:ac:ef:3d:85:6e:55:94:cd:6d:07:7f:58: 71:bc:d1:6b:83:08:2c:77:66:dc:96:09:46:e9:ac:a7:bb:f3: cd:de:13:90:e0:14:b7:88:df:b8:a0:fb:9f:d6:2d:0b:ff:a6: 11:a1:88:ff:6a:86:12:ca:41:94:70:f4:30:7d:4e:d7:79:07: b8:4f:9b:4a:86:a4:1e:3f:47:15:f5:d1:21:92:4c:79:e6:c0: ea:01:20:96:68:4d:00:59:db:6a:3c:73:58:ca:a8:ce:3b:7a: 4c:50:4d:29:6c:ce:74:57:15:cc:69:9c:b7:68:4b:77:82:38: f2:21:dd:f5:49:17:21:ab:e3:9a:46:aa:df:a6:1f:aa:a7:7f: 80:26:45:b3:17:a2:d1:d4:6e:f1:3a:a0:9b:d5:45:68:2b:b1: 78:46:55:d4:8b:bb:0c:e1:bc:07:64:35:75:c2:d7:c3:f9:9e: e3:ea:3e:23:d0:5b:b9:a3:c2:b2:b3:0d:7a:58:0e:80:93:c9: 08:6a:56:1c:c9:27:f1:32:9d:38:cd:cf:7c:e7:49:66:4c:18: 3f:d3:27:ff:e4:0c:f5:ef:ce:3c:f4:76:ef:5c:69:ce:dd:9c: 0b:f2:ed:c4:d3:48:ad:12:d4:79:a3:ca:4f:df:82:bb:72:36: 17:2b:96:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMDAxMTAvBgNVBAUTKDkzQzEyRDgzREJCODhGMjE3N0FCNThFMzlGQUU4QUNB MzEyMzlEOTEwHhcNMjQwNTAxMDQzMjE1WhcNMjQwNTA4MDQzMjE1WjAYMRYwFAYD VQQDEw02NjMxYzVkMC1lMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmWYHdQwGwj4EWljzI+9T2WMRrt6ws+e+yB647fSgfnQHFwO4g35RFcHfHp0 w18uusK1Q8Wt43yG2DVY/NjjqNgA5vwA8RSaq7t9zLEcgxbLG9jUy5tFYUbGlktz K2UHWy+IeEXhovLGFuGY1iNQzmfdaIKAAaB/GO5n89QN4jhiSp/bTzZ5oyt2xuPP RS83C1WfA4DwMoPGL6Vgk4Fu4FhV9QjNwuVcgsgTNlAQ9IuDSzVZDL6jI2MU/gCl uNZWxriq5G1ufXlhosdFecuIP+9k6hvfueyQ+IMmfQXkrNCKm5zEPAr52ktEowq/ mQdtf+1MCFWzAyNymfZSkUv60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2udSr6 JrseYuUb3LCKsFEts6QyMB8GA1UdIwQYMBaAFJPBLYPbuI8hd6tY45+uisoxI52R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwMC8xNEMyODA4MkYx QUExMUVDQkYzNTVDMjlDNEY5QUUwMi9rOEV0Zzl1NGp5RjNxMWpqbjY2S3lqRWpu WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4RXRnOXU0anlGM3ExampuNjZLeWpFam5aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwMC8xNEMyODA4MkYxQUExMUVDQkYzNTVDMjlDNEY5QUUwMi9rOEV0Zzl1NGp5 RjNxMWpqbjY2S3lqRWpuWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVF097cEqs7z2FblWUzW0Hf1hxvNFrgwgsd2bclglG6aynu/PN3hOQ 4BS3iN+4oPuf1i0L/6YRoYj/aoYSykGUcPQwfU7XeQe4T5tKhqQeP0cV9dEhkkx5 5sDqASCWaE0AWdtqPHNYyqjOO3pMUE0pbM50VxXMaZy3aEt3gjjyId31SRchq+Oa Rqrfph+qp3+AJkWzF6LR1G7xOqCb1UVoK7F4RlXUi7sM4bwHZDV1wtfD+Z7j6j4j 0Fu5o8Kysw16WA6Ak8kIalYcySfxMp04zc9850lmTBg/0yf/5Az178489HbvXGnO 3ZwL8u3E00itEtR5o8pP34K7cjYXK5bs -----END CERTIFICATE-----Generated at Wed May 1 05:55:38 2024 by rpki-client on console-ams.rpki-client.org