$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: BcpPM+Ky69DzVoePW0z0PHQMkZg2iYEdbDMHVeH10Es= Subject key identifier: 0D:8E:12:5B:7D:76:FD:0A:96:6F:BC:EE:C7:2E:81:97:69:0B:85:E9 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0463 Signing time: Fri 17 May 2024 01:57:01 +0000 Manifest this update: Fri 17 May 2024 01:57:00 +0000 Manifest next update: Fri 24 May 2024 01:57:00 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: MKRp31+JHCEk03sWwdLy0RU+eCrV2QxO6kGjvaEpzlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: May 17 01:57:00 2024 GMT Not After : May 24 01:57:00 2024 GMT Subject: CN=6646b96c-8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:39:8f:53:7d:cb:14:db:ec:34:cd:a1:24: 50:88:23:55:2f:a9:1c:3e:65:0d:5e:39:c0:25:aa: b7:ba:99:3c:96:32:6c:b5:b3:8d:46:64:7d:1b:7e: 67:89:d7:cc:49:40:d0:1c:64:3f:ff:12:c4:94:05: db:15:45:3b:30:c6:2f:d1:3f:8c:cc:71:ad:df:ef: 1b:74:23:6e:39:45:0f:d5:28:a4:ba:e4:b3:32:6c: cd:a9:f0:e5:5d:c6:c3:a3:8b:21:f4:90:50:ed:fe: 24:f9:00:0c:71:2e:8d:d2:55:de:45:e0:ae:27:34: d3:9c:47:04:f6:3c:5b:ff:7b:81:83:10:e1:6d:89: a1:48:4a:70:9b:5c:2b:e8:44:64:df:89:3e:02:db: 38:d2:f2:63:9e:44:a0:95:0a:92:ed:57:56:3f:40: 8d:5b:05:ee:c2:cf:e5:53:b3:80:64:34:d8:4a:1e: 17:09:c5:55:cd:30:ff:37:07:06:0c:1d:f0:a9:5a: da:08:9e:60:29:1f:d5:a5:08:cf:6a:6f:fd:24:c3: 54:18:36:56:9f:12:6e:fd:af:23:cc:a8:90:1a:7f: 11:cd:68:99:af:e6:54:dd:22:e1:9f:bb:9a:62:f8: 48:e3:be:db:14:50:58:42:2f:d5:40:ca:90:b2:2f: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:12:5B:7D:76:FD:0A:96:6F:BC:EE:C7:2E:81:97:69:0B:85:E9 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:07:f3:71:84:e6:57:9a:17:45:bc:59:6d:0b:13:1d:11: 7a:1e:e1:e3:07:ad:86:38:aa:0c:69:a3:90:12:6e:ce:7b:6e: 47:b4:74:ab:8b:2c:67:16:51:75:08:71:d2:3d:c4:07:67:cf: 4e:7a:c2:b7:f8:c0:28:1e:09:d7:72:47:f1:f7:89:5c:07:30: 21:0f:50:a5:d0:fb:23:da:04:60:c2:7f:99:a6:26:7a:73:5d: 90:d0:b1:28:18:a2:66:5c:27:a0:3c:15:85:d6:d5:53:72:ae: 56:81:9a:01:05:c7:a8:93:30:e9:2b:5e:1b:c7:06:f1:8c:25: d4:65:c7:82:59:ae:2c:3e:71:4f:ec:7e:4c:8e:cb:11:79:6a: 35:9d:e9:92:f7:64:9b:4f:44:27:a3:23:f2:8d:db:63:12:20: 65:ef:b4:cb:3b:ef:7d:08:3d:57:ba:22:6e:2d:d5:84:fd:b0: d5:af:7f:9c:6c:da:2c:c2:0b:5f:aa:ff:da:4d:eb:ad:7c:7e: db:75:20:18:27:1d:e4:85:c8:43:9a:b6:98:1a:9c:14:8c:10: 64:cb:5a:12:9d:7e:13:c2:c2:d3:3f:24:10:7d:1e:5f:18:b5: 69:b4:c3:8a:94:c8:61:a1:6d:22:cf:9b:e6:9d:ff:bd:3a:54: 91:d9:02:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjQwNTE3MDE1NzAwWhcNMjQwNTI0MDE1NzAwWjAYMRYwFAYD VQQDEw02NjQ2Yjk2Yy04ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuA5j1N9yxTb7DTNoSRQiCNVL6kcPmUNXjnAJaq3upk8ljJstbONRmR9G35n idfMSUDQHGQ//xLElAXbFUU7MMYv0T+MzHGt3+8bdCNuOUUP1SikuuSzMmzNqfDl XcbDo4sh9JBQ7f4k+QAMcS6N0lXeReCuJzTTnEcE9jxb/3uBgxDhbYmhSEpwm1wr 6ERk34k+Ats40vJjnkSglQqS7VdWP0CNWwXuws/lU7OAZDTYSh4XCcVVzTD/NwcG DB3wqVraCJ5gKR/VpQjPam/9JMNUGDZWnxJu/a8jzKiQGn8RzWiZr+ZU3SLhn7ua YvhI477bFFBYQi/VQMqQsi9a/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2OElt9 dv0Klm+87scugZdpC4XpMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5YwfzcYTmV5oXRbxZbQsTHRF6HuHjB62GOKoMaaOQEm7Oe25HtHSr iyxnFlF1CHHSPcQHZ89OesK3+MAoHgnXckfx94lcBzAhD1Cl0Psj2gRgwn+ZpiZ6 c12Q0LEoGKJmXCegPBWF1tVTcq5WgZoBBceokzDpK14bxwbxjCXUZceCWa4sPnFP 7H5MjssReWo1nemS92SbT0QnoyPyjdtjEiBl77TLO+99CD1XuiJuLdWE/bDVr3+c bNoswgtfqv/aTeutfH7bdSAYJx3khchDmraYGpwUjBBky1oSnX4TwsLTPyQQfR5f GLVptMOKlMhhoW0iz5vmnf+9OlSR2QIK -----END CERTIFICATE-----Generated at Fri May 17 03:06:30 2024 by rpki-client on console-ams.rpki-client.org