$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: 7+YkgKB+56H0QCDXoS8B7FnhMsdv4oTGfMJoTA2elR4= Subject key identifier: 34:94:05:FA:A8:C9:32:FD:60:C3:A8:09:72:62:C5:87:BA:D2:5C:70 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 050C Signing time: Wed 01 May 2024 01:24:31 +0000 Manifest this update: Wed 01 May 2024 01:24:30 +0000 Manifest next update: Wed 08 May 2024 01:24:30 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: rIQiiekX+AlugYtU+JYF7ZsSEioIxocKObn8IYZQn10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: May 1 01:24:30 2024 GMT Not After : May 8 01:24:30 2024 GMT Subject: CN=663199cf-7e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:39:a6:b6:15:2a:ef:12:3e:25:03:83:3b: cb:0f:78:dd:f2:93:5c:ed:30:f7:3c:57:9c:b9:41: 99:3d:6a:86:13:64:1f:12:65:94:48:7d:3d:af:75: 97:41:b1:1e:96:fd:f3:f4:a3:e9:4b:80:7a:3c:59: 02:ca:ab:d1:ae:8d:b4:3b:73:15:5d:70:08:65:b3: ec:84:42:d6:d5:8a:ad:b5:69:01:b6:18:a4:09:c2: 36:1f:75:ef:58:2b:37:87:46:b5:1a:24:86:99:1b: 46:3f:aa:9a:21:8c:e6:d7:b4:88:a8:b0:40:29:f1: 98:68:45:90:ef:b3:4b:db:af:44:99:cf:97:1e:22: cb:8e:d1:c0:c7:ac:dd:07:b9:1b:bf:13:71:6c:25: 38:e4:36:90:5e:16:08:79:4e:c6:25:1e:8a:ea:a7: 56:97:90:69:24:9d:63:aa:3a:57:d9:80:ef:93:f2: ed:d9:3f:1e:c7:70:8c:85:3a:9c:41:93:6c:0a:d1: e9:9b:5d:da:b0:d0:0d:d5:98:8e:66:69:58:82:f0: 17:4d:cf:c3:95:01:c0:e4:73:0b:4c:40:73:bc:bf: b0:7b:5a:12:8f:a5:0d:8e:a9:8b:06:bd:42:1a:56: 61:40:76:d2:68:0b:51:17:78:bb:44:53:dd:de:1c: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:94:05:FA:A8:C9:32:FD:60:C3:A8:09:72:62:C5:87:BA:D2:5C:70 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:cb:bc:8b:db:62:b0:ae:15:ce:9c:78:7d:3f:17:99:c2: a9:7d:e5:fb:2f:3a:af:dc:10:0b:9d:ed:8c:a7:43:a6:5f:a5: e3:92:1d:0a:40:07:f9:c7:44:e5:e0:f4:32:17:da:a9:da:00: 85:aa:d9:ce:96:28:eb:8e:de:5e:36:0f:29:ad:b1:84:f3:6a: 68:89:f3:bd:fb:29:09:2f:f3:31:50:f9:5c:1d:42:dd:fd:6a: 63:f0:d6:53:91:41:de:7a:0e:78:ba:c5:30:b9:4b:3b:8e:4f: 80:35:c0:9f:cd:f5:20:e8:89:9f:c1:b1:51:d3:58:36:65:e0: 40:6e:6e:c5:d9:05:86:0b:0f:4d:9e:2b:53:f7:01:1f:11:87: 9b:f8:94:95:75:2b:b1:aa:fc:4b:78:42:4a:d1:86:7d:e7:b4: 6e:29:a7:f8:6c:70:74:0f:c2:51:d0:7f:af:6f:a5:ed:0f:d0: 78:3b:ea:b1:92:20:83:d8:3e:2f:b5:e6:55:00:af:f6:2b:38: ea:b5:bf:48:3f:79:d4:72:88:7e:81:44:eb:e4:a5:df:13:e9: 0a:e5:c7:2d:93:20:3a:2b:83:21:13:e9:0c:7b:8b:34:f3:58: aa:12:bd:a4:ef:b1:1a:80:a1:91:60:e8:0f:55:ee:4f:ab:13: 19:cd:ef:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjQwNTAxMDEyNDMwWhcNMjQwNTA4MDEyNDMwWjAYMRYwFAYD VQQDEw02NjMxOTljZi03ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRc5prYVKu8SPiUDgzvLD3jd8pNc7TD3PFecuUGZPWqGE2QfEmWUSH09r3WX QbEelv3z9KPpS4B6PFkCyqvRro20O3MVXXAIZbPshELW1YqttWkBthikCcI2H3Xv WCs3h0a1GiSGmRtGP6qaIYzm17SIqLBAKfGYaEWQ77NL269Emc+XHiLLjtHAx6zd B7kbvxNxbCU45DaQXhYIeU7GJR6K6qdWl5BpJJ1jqjpX2YDvk/Lt2T8ex3CMhTqc QZNsCtHpm13asNAN1ZiOZmlYgvAXTc/DlQHA5HMLTEBzvL+we1oSj6UNjqmLBr1C GlZhQHbSaAtRF3i7RFPd3hyMWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSUBfqo yTL9YMOoCXJixYe60lxwMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/c8u8i9tisK4Vzpx4fT8XmcKpfeX7Lzqv3BALne2Mp0OmX6Xjkh0K QAf5x0Tl4PQyF9qp2gCFqtnOlijrjt5eNg8prbGE82poifO9+ykJL/MxUPlcHULd /Wpj8NZTkUHeeg54usUwuUs7jk+ANcCfzfUg6ImfwbFR01g2ZeBAbm7F2QWGCw9N nitT9wEfEYeb+JSVdSuxqvxLeEJK0YZ957RuKaf4bHB0D8JR0H+vb6XtD9B4O+qx kiCD2D4vteZVAK/2Kzjqtb9IP3nUcoh+gUTr5KXfE+kK5cctkyA6K4MhE+kMe4s0 81iqEr2k77EagKGRYOgPVe5PqxMZze/m -----END CERTIFICATE-----Generated at Wed May 1 02:46:18 2024 by rpki-client on console-ams.rpki-client.org