$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: P6VaMfZxTjPfG717BNcl9YR26O2o41JngSIjfKxEM+Q= Subject key identifier: 98:2E:02:79:F6:EA:00:75:74:F8:65:B5:78:B4:72:5D:90:09:E5:38 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 01B2 Signing time: Wed 01 May 2024 04:52:15 +0000 Manifest this update: Wed 01 May 2024 04:52:15 +0000 Manifest next update: Wed 08 May 2024 04:52:15 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: fCO6nxRnNcoJxBK2f+/Ok+BtZapXDLRs+1SdlxEWPnE=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: Vn1njwEVgxNxywbNC8/q+2jE+mTxDV5g+ZsmY7VoKIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: May 1 04:52:15 2024 GMT Not After : May 8 04:52:15 2024 GMT Subject: CN=6631ca7f-41a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:cd:e8:8a:a2:87:fa:f0:35:ca:21:65:ca: 15:2d:29:ff:d4:94:db:b0:d2:db:04:eb:c4:71:e0: 29:92:fe:0b:4f:5d:f7:c4:1e:26:97:2d:67:f1:11: 2d:14:09:8b:23:eb:02:70:3c:dd:0a:fe:2e:b2:b4: f2:7e:28:dc:02:06:48:a5:3f:d3:9f:0d:8f:02:eb: 0b:07:9d:b6:8b:f5:06:f6:35:c8:d0:57:e5:93:69: 73:32:dc:c0:37:5f:08:58:36:b6:c7:be:a6:bd:7a: 81:9d:e2:53:62:59:88:bc:c6:de:ce:dd:79:e8:b7: 94:c3:6a:f2:47:e5:17:cc:15:38:bd:7b:b3:d3:81: c9:ae:54:1e:20:eb:c5:da:ef:f5:3f:ef:b3:61:2d: 6e:42:5f:6e:18:04:49:ee:8a:71:72:02:89:f5:b5: c1:78:27:7e:44:05:36:e8:76:c3:c4:e5:63:44:ca: f9:b0:f7:ec:76:bb:49:0a:bc:25:3b:8e:ba:eb:11: 50:e8:10:d5:20:e1:9a:0f:c7:da:35:f0:c9:58:53: 5b:17:41:d7:b5:b6:1e:51:9b:b6:84:04:ee:9f:a4: d0:14:f9:3e:46:17:e2:e1:f0:eb:2c:f7:c9:a3:54: 44:50:11:9b:d9:35:26:8a:65:b5:79:f3:17:86:3b: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2E:02:79:F6:EA:00:75:74:F8:65:B5:78:B4:72:5D:90:09:E5:38 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8d:87:a1:d0:5f:76:c6:cd:5a:bc:af:e9:f5:cb:22:b0:15: 4d:0c:7c:8a:6b:39:63:0c:6b:6a:b1:9c:c4:77:90:e8:33:46: fd:6f:aa:e0:a3:fb:7b:99:4c:82:86:d6:cb:4d:e6:df:90:bd: bc:5e:74:ad:60:f3:51:ed:b0:b6:1b:c4:69:0d:8e:56:fd:b7: 95:58:b1:81:c2:37:f5:98:73:2b:05:4e:72:bd:5e:c9:14:1d: fd:cb:c7:84:2b:61:83:9a:15:b0:13:d1:26:e1:fc:fc:db:ab: 1d:3a:47:9b:6b:b5:14:1c:a5:60:5b:48:9a:19:d0:42:62:b2: 6b:fc:03:1c:8f:37:62:20:9a:c3:34:6f:da:2f:c0:c5:ec:a6: f7:0f:c9:3c:57:6c:ec:48:ea:de:61:e6:e7:72:20:26:08:db: 3c:40:21:c1:d0:4c:37:e2:ff:50:bc:94:08:92:09:f4:5b:39: 6e:23:05:82:5b:ad:19:78:10:f1:cd:e7:41:32:5f:47:fd:81: 92:b0:ad:95:14:d9:b8:33:d9:bf:3f:52:55:87:2a:5b:a9:f2: 36:5b:cc:dd:59:77:3a:dd:f2:65:90:78:5e:99:cc:1e:28:4b: 1b:db:bc:da:0c:21:22:7e:fb:64:29:3d:e3:c6:0d:ec:01:d8: 3e:da:9d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjQwNTAxMDQ1MjE1WhcNMjQwNTA4MDQ1MjE1WjAYMRYwFAYD VQQDEw02NjMxY2E3Zi00MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBjN6Iqih/rwNcohZcoVLSn/1JTbsNLbBOvEceApkv4LT133xB4mly1n8REt FAmLI+sCcDzdCv4usrTyfijcAgZIpT/Tnw2PAusLB522i/UG9jXI0Fflk2lzMtzA N18IWDa2x76mvXqBneJTYlmIvMbezt156LeUw2ryR+UXzBU4vXuz04HJrlQeIOvF 2u/1P++zYS1uQl9uGARJ7opxcgKJ9bXBeCd+RAU26HbDxOVjRMr5sPfsdrtJCrwl O4666xFQ6BDVIOGaD8faNfDJWFNbF0HXtbYeUZu2hATun6TQFPk+Rhfi4fDrLPfJ o1REUBGb2TUmimW1efMXhjunPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJguAnn2 6gB1dPhltXi0cl2QCeU4MB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrjYeh0F92xs1avK/p9csisBVNDHyKazljDGtqsZzEd5DoM0b9b6rg o/t7mUyChtbLTebfkL28XnStYPNR7bC2G8RpDY5W/beVWLGBwjf1mHMrBU5yvV7J FB39y8eEK2GDmhWwE9Em4fz826sdOkeba7UUHKVgW0iaGdBCYrJr/AMcjzdiIJrD NG/aL8DF7Kb3D8k8V2zsSOreYebnciAmCNs8QCHB0Ew34v9QvJQIkgn0WzluIwWC W60ZeBDxzedBMl9H/YGSsK2VFNm4M9m/P1JVhypbqfI2W8zdWXc63fJlkHhemcwe KEsb27zaDCEifvtkKT3jxg3sAdg+2p0t -----END CERTIFICATE-----Generated at Wed May 1 05:55:39 2024 by rpki-client on console-ams.rpki-client.org