$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json) Hash identifier: AG/No5CEQH0LFYfBUdbKjeDxTlh5Gri6uhqbLMg8kwg= Subject key identifier: 78:30:DB:FD:5A:3E:18:66:3A:A1:DD:D8:A9:4E:12:42:52:5A:48:F8 Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft Manifest number: 0411 Signing time: Mon 29 Apr 2024 02:02:13 +0000 Manifest this update: Mon 29 Apr 2024 02:02:12 +0000 Manifest next update: Mon 06 May 2024 02:02:12 +0000 Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: fROMlyyd6cqO6eEJPc2O6/7lqstNrwO2HLml2z8n1/M=) 2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: 4pCEg43C3YXhwnTLmmwZT0tjSLlfqno83qPsCxPv2wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: Apr 29 02:02:12 2024 GMT Not After : May 6 02:02:12 2024 GMT Subject: CN=662effa5-6845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e3:c7:e8:4a:04:64:50:ba:95:52:c6:40:9d: b5:db:cb:f9:f2:7c:f4:69:c1:32:af:11:7b:25:08: 34:a6:7b:29:f6:c4:dc:e6:17:d0:98:ac:39:5f:21: f3:88:62:21:43:c3:f9:39:bf:9c:af:31:00:39:55: b5:ec:9d:26:54:99:8d:69:db:b1:f2:56:aa:c5:5c: ef:84:fa:b2:bb:28:6e:56:5d:9d:eb:62:b1:54:b9: 72:68:42:f6:c2:c4:da:24:f0:d4:93:02:45:0f:95: 0f:a2:a0:3b:88:3f:d3:f7:f7:5d:0a:93:1d:c8:4c: 5d:42:33:4b:37:dd:df:e5:24:8b:5c:b6:c3:30:7f: 21:be:7b:52:f2:42:8c:28:3b:45:08:86:43:1a:94: 2f:a5:08:c6:12:d0:9e:17:2b:a8:d5:38:79:d4:3c: 8f:6e:8b:9c:d7:44:02:25:49:85:cf:1c:d7:4a:c4: d4:fc:8d:70:a3:93:e9:37:3c:84:bc:b4:d5:7e:a7: 70:d1:ec:15:a3:64:0d:e0:ab:af:0b:d0:01:b2:3f: bb:98:7e:60:f2:ad:be:99:cd:57:79:f8:de:ce:a0: e0:dd:9a:6b:5d:ac:ce:a5:e4:f2:dd:1b:4b:65:be: 35:f6:21:01:ff:e0:e0:ff:37:95:43:10:42:72:f2: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:DB:FD:5A:3E:18:66:3A:A1:DD:D8:A9:4E:12:42:52:5A:48:F8 X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:70:ec:21:58:34:37:ef:22:25:7f:e5:da:28:80:bc:b0:98: b6:30:c3:20:89:62:2e:3d:a3:9e:60:2c:10:e0:be:69:06:5a: 08:a1:32:3a:5b:bc:8e:76:f4:79:97:23:85:5c:c2:02:01:a1: e0:f8:dd:b8:83:30:f3:30:7c:f9:5f:85:07:80:b7:e1:54:66: 88:c1:72:07:30:85:15:e1:54:4c:5a:61:65:eb:89:0c:bd:e8: 7f:7e:1d:5e:f2:df:65:0e:8f:b5:1a:5c:a1:f7:b2:32:74:c6: 06:f8:a3:a1:63:8b:34:d9:31:7e:0d:5a:56:48:0e:08:db:a2: 72:6f:d7:a1:db:3d:8c:fb:6f:17:e9:7c:2b:83:da:05:f8:08: 54:50:a2:07:ed:42:91:f3:65:82:ed:e8:fc:0d:40:78:81:e1: e2:5d:f0:0d:38:0a:3b:46:0b:91:6c:50:e7:da:f0:47:91:cd: 9d:75:86:84:a6:5a:ba:25:bf:76:e6:76:b1:e4:ef:42:31:f8: 72:d7:88:b1:11:38:22:b9:e3:d1:bf:4d:db:48:25:89:d6:bd: 27:28:29:b7:1f:32:91:8e:43:fc:d2:00:42:7b:f6:cc:61:57: 34:81:41:c0:c9:a0:1f:c4:4c:fa:21:5f:d2:13:a8:ec:ed:8d: 9e:fb:ef:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjQwNDI5MDIwMjEyWhcNMjQwNTA2MDIwMjEyWjAYMRYwFAYD VQQDEw02NjJlZmZhNS02ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+PH6EoEZFC6lVLGQJ2128v58nz0acEyrxF7JQg0pnsp9sTc5hfQmKw5XyHz iGIhQ8P5Ob+crzEAOVW17J0mVJmNadux8laqxVzvhPqyuyhuVl2d62KxVLlyaEL2 wsTaJPDUkwJFD5UPoqA7iD/T9/ddCpMdyExdQjNLN93f5SSLXLbDMH8hvntS8kKM KDtFCIZDGpQvpQjGEtCeFyuo1Th51DyPbouc10QCJUmFzxzXSsTU/I1wo5PpNzyE vLTVfqdw0ewVo2QN4KuvC9ABsj+7mH5g8q2+mc1XefjezqDg3ZprXazOpeTy3RtL Zb419iEB/+Dg/zeVQxBCcvLQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgw2/1a PhhmOqHd2KlOEkJSWkj4MB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODI3MS84MUY5RTJEMDFDNDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1y ZmdqWElQVEFsbVFiU2h5TVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzcOwhWDQ37yIlf+XaKIC8sJi2MMMgiWIuPaOeYCwQ4L5pBloIoTI6 W7yOdvR5lyOFXMICAaHg+N24gzDzMHz5X4UHgLfhVGaIwXIHMIUV4VRMWmFl64kM veh/fh1e8t9lDo+1Glyh97IydMYG+KOhY4s02TF+DVpWSA4I26Jyb9eh2z2M+28X 6Xwrg9oF+AhUUKIH7UKR82WC7ej8DUB4geHiXfANOAo7RguRbFDn2vBHkc2ddYaE plq6Jb925nax5O9CMfhy14ixETgiuePRv03bSCWJ1r0nKCm3HzKRjkP80gBCe/bM YVc0gUHAyaAfxEz6IV/SE6js7Y2e+++g -----END CERTIFICATE-----Generated at Mon Apr 29 03:34:54 2024 by rpki-client on console-fra.rpki-client.org