$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: 6aVknk+ES+DscSubTzEPpoWLrHlTg6UIxkO0kTujvzE= Subject key identifier: B5:51:FA:B1:A7:F9:A1:2E:58:10:37:AC:6A:3B:9A:47:E4:AA:F9:30 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 06DD Signing time: Thu 02 May 2024 23:00:46 +0000 Manifest this update: Thu 02 May 2024 23:00:46 +0000 Manifest next update: Thu 09 May 2024 23:00:46 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: wbijAKdvCICjgpLxklbUbZtpA9AcHjYdVcFT5ivqIp8=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: IJIqvuaNwhrm7cd6mqT3kr2G5lukf3imyP1z+aoqCD0=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: bTe36H87paM4gMzl+HYUuMJ499eE4eP8i0YbmoF8HP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: May 2 23:00:46 2024 GMT Not After : May 9 23:00:46 2024 GMT Subject: CN=66341b1e-c242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:f2:3b:dc:aa:0f:a6:fb:a0:ee:0a:1f:3b: 1f:f7:a7:0a:6a:69:00:f0:22:24:4e:01:43:d8:3a: 24:2c:b7:73:7f:36:76:40:44:bc:67:b2:ae:64:8e: 27:e9:f0:5d:ad:7e:b5:4f:a3:b4:22:e2:46:4f:b3: f8:7c:24:a7:47:a3:54:f1:1a:ec:45:02:0d:96:04: 61:ae:dd:31:b1:72:0e:5c:dd:65:f0:b2:32:09:a3: 12:92:fb:aa:8f:15:53:82:f1:f5:c9:b0:a6:a9:1c: 0d:2d:d3:ea:c8:f1:07:cb:50:4f:c2:50:45:34:f2: 86:3c:43:ba:68:37:30:66:14:7c:e0:e5:31:66:de: 58:8d:cd:8e:c8:6a:0c:43:f1:97:c3:8a:39:2b:44: 04:7c:df:9f:e7:24:db:8a:20:78:45:24:b0:ca:58: 55:f9:c4:d4:19:75:6c:e1:c4:c3:19:ee:3d:46:1c: 61:b5:42:8f:40:b3:23:b8:0c:04:f0:bc:58:1f:62: 64:90:6e:bb:d4:de:1e:82:1c:5b:ca:6f:86:80:1d: cb:dc:a7:95:ce:28:9d:09:ee:66:88:15:f0:79:7b: a7:aa:2e:1e:dc:ab:5a:b6:f9:03:2d:a8:07:38:ad: 90:22:55:a9:cb:61:f3:95:b8:07:2a:ad:da:2e:98: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:51:FA:B1:A7:F9:A1:2E:58:10:37:AC:6A:3B:9A:47:E4:AA:F9:30 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0b:7b:d4:8e:b1:67:b3:b1:b7:5d:c4:6b:44:df:53:17:71: 51:58:78:5e:14:21:b0:78:c4:f7:a6:41:67:f1:61:0d:cb:bc: 24:2f:86:8a:59:82:96:60:f9:69:3a:f6:f3:ab:32:1e:e4:59: 58:54:1a:f1:2b:69:80:96:7b:4d:5d:c2:b0:42:bc:7c:77:a8: f7:5c:9d:1a:02:5d:49:b5:eb:f5:c6:50:93:82:e2:44:e6:e1: 6e:7e:fc:18:d3:10:5c:5b:bc:26:41:6f:57:74:dd:d6:45:c0: dc:15:20:29:cd:87:41:44:08:f4:05:12:40:d3:ca:aa:d4:99: 5b:da:3b:cb:90:62:36:34:50:96:76:32:e0:83:52:3f:bc:0e: 05:98:91:10:79:e7:27:c5:42:d2:ae:ce:c3:b6:57:71:e5:7c: 04:76:a1:b9:53:a6:af:ab:a3:00:a5:e0:73:ba:ad:10:48:7b: 19:43:f6:87:fb:d6:96:0e:a5:6b:f2:4b:67:ed:b1:58:17:64: 5c:74:bf:64:64:83:2e:27:39:ab:24:49:89:bd:a8:cd:0a:a4: dc:8e:06:e2:c3:44:6c:96:97:db:bb:74:4a:13:1c:56:e7:13: d6:3e:dd:f1:08:4e:43:38:98:af:b6:17:5a:b5:1f:17:66:3b: c9:a4:4d:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjQwNTAyMjMwMDQ2WhcNMjQwNTA5MjMwMDQ2WjAYMRYwFAYD VQQDEw02NjM0MWIxZS1jMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0XyO9yqD6b7oO4KHzsf96cKamkA8CIkTgFD2DokLLdzfzZ2QES8Z7KuZI4n 6fBdrX61T6O0IuJGT7P4fCSnR6NU8RrsRQINlgRhrt0xsXIOXN1l8LIyCaMSkvuq jxVTgvH1ybCmqRwNLdPqyPEHy1BPwlBFNPKGPEO6aDcwZhR84OUxZt5Yjc2OyGoM Q/GXw4o5K0QEfN+f5yTbiiB4RSSwylhV+cTUGXVs4cTDGe49RhxhtUKPQLMjuAwE 8LxYH2JkkG671N4eghxbym+GgB3L3KeVziidCe5miBXweXunqi4e3KtatvkDLagH OK2QIlWpy2HzlbgHKq3aLpggCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVR+rGn +aEuWBA3rGo7mkfkqvkwMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvC3vUjrFns7G3XcRrRN9TF3FRWHheFCGweMT3pkFn8WENy7wkL4aK WYKWYPlpOvbzqzIe5FlYVBrxK2mAlntNXcKwQrx8d6j3XJ0aAl1Jtev1xlCTguJE 5uFufvwY0xBcW7wmQW9XdN3WRcDcFSApzYdBRAj0BRJA08qq1Jlb2jvLkGI2NFCW djLgg1I/vA4FmJEQeecnxULSrs7Dtldx5XwEdqG5U6avq6MApeBzuq0QSHsZQ/aH +9aWDqVr8ktn7bFYF2RcdL9kZIMuJzmrJEmJvajNCqTcjgbiw0Rslpfbu3RKExxW 5xPWPt3xCE5DOJivthdatR8XZjvJpE2i -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org