$ rpki-client -vvf rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft File: a4h-elixD-3igEteKeziwpnCf6E.mft (raw, json) Hash identifier: EUQNi8MSgcLMN+rj/2/LG09p1SCG1tkiP9fiv7YxHrE= Subject key identifier: 9F:48:FB:4A:F6:E1:AB:E6:1F:F0:92:A6:79:7F:63:FF:31:F2:34:F7 Authority key identifier: 6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 Certificate issuer: /CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft Manifest number: 8F Signing time: Wed 15 May 2024 07:06:03 +0000 Manifest this update: Wed 15 May 2024 07:06:02 +0000 Manifest next update: Wed 22 May 2024 07:06:02 +0000 Files and hashes: 1: a4h-elixD-3igEteKeziwpnCf6E.crl (hash: 71zMNGse6ex1dKybeBZfmQpgH5/HdATr3YMcvCPjTm4=) 2: 26D3EB963B1211EE8ED76E25C4F9AE02.roa (hash: Xk86JC/TIOXh7eolRANHkxWlL4gpwSeniXUvp3kb+9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CBB2/serialNumber=6B887E7A58B10FEDE2804B5E29ECE2C299C27FA1 Validity Not Before: May 15 07:06:02 2024 GMT Not After : May 22 07:06:02 2024 GMT Subject: CN=66445edb-4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:aa:0e:2c:41:2d:d1:a3:57:5f:bf:73:82: a5:a5:01:16:4b:7a:5d:ca:34:85:26:86:68:76:d4: 17:e2:d1:18:bf:f7:6f:b7:ae:58:e2:d3:38:cd:6b: 99:fb:cb:d7:d4:e8:66:9d:fe:38:25:7b:64:67:62: 61:0f:74:cb:10:67:05:a2:92:02:6b:cc:3b:a6:b3: c5:4b:aa:a7:dd:15:bf:c0:7f:50:e8:16:fb:dd:35: 37:4a:94:58:bc:8c:28:4e:e7:7a:7d:36:85:98:e4: 79:55:28:60:a4:1e:b3:5c:52:85:66:83:e9:6f:3e: 97:aa:2e:56:e7:93:0a:a8:96:ab:3e:8a:73:28:60: 92:b5:56:2d:24:66:d6:98:da:ad:28:0f:1b:6d:67: a2:7e:e6:e7:65:f8:f6:42:42:83:66:3d:8d:71:e5: 3c:82:b3:ce:c3:76:18:bd:08:a0:40:5a:6e:f3:c0: 69:76:cf:7b:af:0b:48:45:f1:cd:2b:56:89:4c:d5: cc:f1:bd:95:3f:c7:bd:de:d0:16:c1:35:57:c0:a1: 67:31:db:da:98:7f:9e:5e:85:ce:88:e9:5d:4f:96: ec:fa:ac:67:e5:29:74:60:b5:4c:b6:61:c6:63:fa: 26:7a:79:fa:e6:64:8a:d8:89:a8:46:87:d0:b5:57: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:48:FB:4A:F6:E1:AB:E6:1F:F0:92:A6:79:7F:63:FF:31:F2:34:F7 X509v3 Authority Key Identifier: keyid:6B:88:7E:7A:58:B1:0F:ED:E2:80:4B:5E:29:EC:E2:C2:99:C2:7F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4h-elixD-3igEteKeziwpnCf6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CBB2/B40322303B1111EE9619BB80C4F9AE02/a4h-elixD-3igEteKeziwpnCf6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:20:4e:66:ca:46:aa:c4:c9:dc:1a:9b:b9:3b:ac:b4:c2:78: 2f:52:f8:68:8a:9d:93:e0:f4:a1:38:7b:66:97:a5:b7:96:d2: 68:ab:53:b6:05:24:a0:24:14:36:17:a7:40:8d:35:6f:1a:86: 2d:c2:5b:9d:27:f5:b8:09:a8:be:60:92:49:4f:0a:c2:74:82: 75:f8:18:d7:ba:c9:d8:58:4f:7d:a2:8f:e3:e1:44:80:63:27: 59:27:f7:6c:96:0e:35:9e:9f:3f:7b:81:4b:6b:d8:61:8a:87: e8:d8:e3:e1:5b:d5:bb:56:02:a7:b8:89:39:eb:d8:ad:31:7d: c7:97:fa:28:ef:11:36:27:60:c8:fc:18:54:64:99:eb:79:ae: 5b:9a:e3:e1:c0:e9:d9:d7:7c:02:25:9d:10:0b:fe:3b:76:db: ce:02:5a:52:d1:ee:8c:c3:4b:9d:32:16:fe:30:1d:ed:57:19: 96:c1:2f:a6:04:ef:f5:22:3e:2c:39:20:e3:c6:d9:fe:de:ae: 0f:8c:0a:44:18:ca:43:13:5d:3b:81:ee:e3:3e:0b:98:9a:39: 3e:1c:09:29:a6:6d:2b:d3:9d:ed:5d:b9:a9:f7:bd:07:b2:fb: dc:c1:ba:dd:84:74:70:ca:c5:63:9f:46:06:8b:cd:47:16:9c: 1b:a4:e4:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCQjIxMTAvBgNVBAUTKDZCODg3RTdBNThCMTBGRURFMjgwNEI1RTI5RUNFMkMy OTlDMjdGQTEwHhcNMjQwNTE1MDcwNjAyWhcNMjQwNTIyMDcwNjAyWjAYMRYwFAYD VQQDEw02NjQ0NWVkYi00ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8OqDixBLdGjV1+/c4KlpQEWS3pdyjSFJoZodtQX4tEYv/dvt65Y4tM4zWuZ +8vX1Ohmnf44JXtkZ2JhD3TLEGcFopICa8w7prPFS6qn3RW/wH9Q6Bb73TU3SpRY vIwoTud6fTaFmOR5VShgpB6zXFKFZoPpbz6Xqi5W55MKqJarPopzKGCStVYtJGbW mNqtKA8bbWeifubnZfj2QkKDZj2NceU8grPOw3YYvQigQFpu88Bpds97rwtIRfHN K1aJTNXM8b2VP8e93tAWwTVXwKFnMdvamH+eXoXOiOldT5bs+qxn5Sl0YLVMtmHG Y/omenn65mSK2ImoRofQtVcEZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9I+0r2 4avmH/CSpnl/Y/8x8jT3MB8GA1UdIwQYMBaAFGuIfnpYsQ/t4oBLXins4sKZwn+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0JCMi9CNDAzMjIzMDNC MTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQtM2lnRXRlS2V6aXdwbkNm NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0aC1lbGl4RC0zaWdFdGVLZXppd3BuQ2Y2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0JCMi9CNDAzMjIzMDNCMTExMUVFOTYxOUJCODBDNEY5QUUwMi9hNGgtZWxpeEQt M2lnRXRlS2V6aXdwbkNmNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkIE5mykaqxMncGpu5O6y0wngvUvhoip2T4PShOHtml6W3ltJoq1O2 BSSgJBQ2F6dAjTVvGoYtwludJ/W4Cai+YJJJTwrCdIJ1+BjXusnYWE99oo/j4USA YydZJ/dslg41np8/e4FLa9hhiofo2OPhW9W7VgKnuIk569itMX3Hl/oo7xE2J2DI /BhUZJnrea5bmuPhwOnZ13wCJZ0QC/47dtvOAlpS0e6Mw0udMhb+MB3tVxmWwS+m BO/1Ij4sOSDjxtn+3q4PjApEGMpDE107ge7jPguYmjk+HAkppm0r053tXbmp970H svvcwbrdhHRwysVjn0YGi81HFpwbpOT8 -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org