$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: UshJOTSZuL6X+TwcxbOCihbxF9DHbPsw4NJ1kXzSbXQ= Subject key identifier: 73:39:03:97:0A:A4:95:B9:F5:9F:D4:6A:A1:A6:75:13:E8:EE:9F:03 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 04D7 Signing time: Fri 03 May 2024 01:28:44 +0000 Manifest this update: Fri 03 May 2024 01:28:44 +0000 Manifest next update: Fri 10 May 2024 01:28:44 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: s2RAaG0jO+utbesmJEsLnAFFV8zZJ9HoJRDm9hdVFkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: May 3 01:28:44 2024 GMT Not After : May 10 01:28:44 2024 GMT Subject: CN=66343dcc-9ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:fa:e0:d1:45:73:04:2d:20:04:54:e9:c7: 60:ab:06:c2:92:56:73:a1:2a:35:d8:c1:e9:7e:12: 5f:03:e4:df:d4:ba:38:36:a9:bf:e5:c0:7c:b5:09: 2f:d3:e8:43:82:e7:1f:7c:b7:8a:09:2c:db:42:f2: cb:07:87:06:40:9f:a3:86:95:89:42:59:97:e2:d4: e7:96:fd:43:5a:41:10:88:c6:31:05:c3:82:c8:f2: 0e:f9:d0:96:aa:07:59:7b:ea:29:e4:35:e4:e5:a8: a0:fa:a1:73:7a:e4:a3:75:da:1a:ed:fe:49:46:bc: ec:ca:24:df:69:f6:11:43:78:e4:1e:ee:11:f6:9c: 3f:5b:a8:cc:80:bd:0d:43:b2:85:9d:6a:46:9b:5d: 84:73:e1:6c:42:cb:0f:ec:a3:7e:d7:32:2e:71:6b: 43:8e:3b:fc:a8:38:04:b6:12:f7:80:74:72:db:b2: 3f:0c:4a:42:6c:b2:df:15:e8:d4:df:0f:23:2b:d7: 98:33:78:82:ed:aa:9e:8d:86:2d:8e:55:05:e8:89: 66:5e:7f:b7:0b:53:9a:33:e7:e9:95:e4:8b:41:a1: 83:22:47:8a:fc:4d:28:cd:e3:72:51:82:59:88:d6: 58:d9:0b:4f:7e:78:cd:58:b4:f4:18:09:3b:24:8d: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:03:97:0A:A4:95:B9:F5:9F:D4:6A:A1:A6:75:13:E8:EE:9F:03 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a8:65:71:ac:3b:da:39:a2:d9:5a:f7:25:0f:35:8e:49:fc: bb:76:cb:c8:77:d6:86:26:b0:55:84:2e:1a:e6:41:94:b8:26: 91:b5:5c:1c:51:4a:5b:e1:d8:d1:48:87:bb:61:d6:43:8f:d0: b1:14:90:c9:95:12:9a:32:25:e8:e9:4a:9b:42:4a:2d:f1:71: 4b:f2:73:6f:ca:cc:2d:e9:86:6a:ff:0d:4b:9d:c9:24:1c:17: a3:0c:ba:e0:19:5d:0d:ab:b7:eb:58:d1:d1:1e:05:3f:6f:81: e3:b5:9a:11:b9:af:70:ae:ef:a3:7e:98:86:b4:b6:d7:81:93: 1d:85:1c:2d:18:75:fe:ed:e7:0d:c8:41:77:ac:e2:3d:12:e0: 65:1a:db:c1:22:0e:77:63:82:45:97:31:fa:b8:a9:65:50:a0: d7:6b:e9:1d:32:b6:dd:b9:07:08:b0:90:63:de:fe:49:9c:84: 76:53:0e:82:a3:15:00:11:c5:43:c9:a0:18:56:36:c3:81:fc: ce:25:9f:3c:c5:9f:e5:77:1d:14:bc:44:28:64:3f:5a:c7:dd: 16:41:55:3a:7d:1c:61:4a:05:0a:fd:1a:4b:b8:0a:cb:27:b0: 59:3d:fc:02:58:10:c9:78:a3:05:7e:bb:3d:95:c8:a3:51:8f: d9:6c:18:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjQwNTAzMDEyODQ0WhcNMjQwNTEwMDEyODQ0WjAYMRYwFAYD VQQDEw02NjM0M2RjYy05Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfD64NFFcwQtIARU6cdgqwbCklZzoSo12MHpfhJfA+Tf1Lo4Nqm/5cB8tQkv 0+hDgucffLeKCSzbQvLLB4cGQJ+jhpWJQlmX4tTnlv1DWkEQiMYxBcOCyPIO+dCW qgdZe+op5DXk5aig+qFzeuSjddoa7f5JRrzsyiTfafYRQ3jkHu4R9pw/W6jMgL0N Q7KFnWpGm12Ec+FsQssP7KN+1zIucWtDjjv8qDgEthL3gHRy27I/DEpCbLLfFejU 3w8jK9eYM3iC7aqejYYtjlUF6IlmXn+3C1OaM+fpleSLQaGDIkeK/E0ozeNyUYJZ iNZY2QtPfnjNWLT0GAk7JI2i3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM5A5cK pJW59Z/UaqGmdRPo7p8DMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANqGVxrDvaOaLZWvclDzWOSfy7dsvId9aGJrBVhC4a5kGUuCaRtVwc UUpb4djRSIe7YdZDj9CxFJDJlRKaMiXo6UqbQkot8XFL8nNvyswt6YZq/w1Lnckk HBejDLrgGV0Nq7frWNHRHgU/b4HjtZoRua9wru+jfpiGtLbXgZMdhRwtGHX+7ecN yEF3rOI9EuBlGtvBIg53Y4JFlzH6uKllUKDXa+kdMrbduQcIsJBj3v5JnIR2Uw6C oxUAEcVDyaAYVjbDgfzOJZ88xZ/ldx0UvEQoZD9ax90WQVU6fRxhSgUK/RpLuArL J7BZPfwCWBDJeKMFfrs9lcijUY/ZbBje -----END CERTIFICATE-----Generated at Fri May 3 03:10:46 2024 by rpki-client on console-ams.rpki-client.org