$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json) Hash identifier: 1qOvtPzr/co3TxItYT7/JxP/4Ntu9LRoiLlocJK8Q9Y= Subject key identifier: 0B:38:CF:74:EA:19:1F:99:CF:DE:9A:9B:E8:B2:A6:A8:DB:FA:89:CE Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft Manifest number: 037D Signing time: Sat 27 Apr 2024 02:45:26 +0000 Manifest this update: Sat 27 Apr 2024 02:45:26 +0000 Manifest next update: Sat 04 May 2024 02:45:26 +0000 Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: hLSf3wMgqcpOy9J4i9jJdt3rgHkqYSpcZvYBuzS85zE=) 2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: mx4DNBMtrIqGJPKG4BoTOV4N4i0hZnjpy07RfH48zs0=) 3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: a+5DHZllHj2t4pWMl/jcv7gobKLpcocfFIGeisUrfj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Validity Not Before: Apr 27 02:45:26 2024 GMT Not After : May 4 02:45:26 2024 GMT Subject: CN=662c66c6-17a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:72:27:89:65:d3:e8:e6:99:0f:ad:51:15: 40:6b:16:b6:17:70:5e:a4:07:f2:3f:e9:a8:fa:f1: 21:12:17:48:3a:82:c7:d8:fc:6f:92:2f:68:cf:99: 0c:62:05:20:2e:aa:06:65:14:91:b5:e4:33:4a:d6: b4:8d:64:c8:1f:fc:ab:a4:32:9a:ff:6c:a4:0b:14: 60:3a:b6:a5:2d:03:76:fd:ce:bc:af:c5:55:e3:cf: a8:ed:39:07:c0:37:b3:38:6e:4e:c4:ab:1d:55:6b: 1e:84:15:a8:07:88:0d:64:08:4a:3b:96:21:18:22: 88:96:1b:30:af:df:38:68:06:f9:ab:4a:d3:13:b5: 2e:2a:ff:0b:a6:29:8d:9e:f5:77:7e:47:a1:6b:c5: ad:b5:c5:39:f9:f6:cf:97:a7:e4:93:6e:be:14:8b: 5b:4f:d9:e5:8b:f5:0d:cb:cd:cf:46:4f:07:60:7d: 93:f7:e7:96:a2:2d:71:6c:e5:17:7a:b3:e3:46:be: 63:a3:9a:e3:64:0d:37:23:0c:28:be:33:dd:5f:fa: 87:9e:80:15:8a:a4:af:68:70:a3:c1:ae:1a:20:95: 6c:b6:ff:ac:2a:9d:c9:5d:c1:6d:be:03:54:83:d9: 28:30:ae:79:5f:e8:9d:e6:0f:e2:a7:6e:4d:54:80: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:CF:74:EA:19:1F:99:CF:DE:9A:9B:E8:B2:A6:A8:DB:FA:89:CE X509v3 Authority Key Identifier: keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e5:59:3d:2c:1e:93:28:1a:c3:21:22:b2:3d:60:be:b1:e8: 95:ea:cc:d5:cf:01:35:11:1b:85:a3:a0:eb:78:1b:60:f5:ac: 77:69:fe:13:a4:f5:df:bd:01:68:1d:45:5e:5e:9d:a5:5d:7b: ec:97:fb:01:4c:38:ac:a8:95:e4:3e:06:2e:52:3c:f4:5e:2e: f3:de:31:51:c4:38:0a:2d:9a:e0:14:63:b0:48:96:da:fb:3a: 19:fb:b5:a5:b8:68:39:0f:68:23:80:3c:75:3f:41:2f:48:d5: 2e:8d:fd:d8:11:b9:d1:05:ca:9b:1d:b3:99:a4:84:cf:24:f9: b2:c9:63:87:97:d1:6b:e5:21:cd:99:1d:25:a1:b7:9f:b5:27: 79:3c:e2:b2:8f:aa:c4:62:26:32:1f:01:40:37:19:c2:02:a8: 61:20:02:b3:67:5a:bc:56:14:56:80:3e:4a:24:28:72:dd:bc: b8:d9:4f:1a:d8:43:12:ce:f3:a4:29:70:63:fb:b5:27:97:23: 34:22:ea:09:19:74:29:b5:8c:5c:14:6f:e8:b4:eb:cb:4a:18: 5a:15:c4:1a:54:d7:c5:31:1a:5c:ff:c0:84:62:f0:84:c8:33: f7:10:df:7d:26:c5:19:d4:a3:98:70:4d:62:11:f6:61:4e:06: 77:85:4d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZGMkMxMTAvBgNVBAUTKEZFM0RBMTdCNTRBNEQ0MkY3QzVDOUE4QTY3RDM3OTA2 N0E3NjA4MEUwHhcNMjQwNDI3MDI0NTI2WhcNMjQwNTA0MDI0NTI2WjAYMRYwFAYD VQQDEw02NjJjNjZjNi0xN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/hyJ4ll0+jmmQ+tURVAaxa2F3BepAfyP+mo+vEhEhdIOoLH2Pxvki9oz5kM YgUgLqoGZRSRteQzSta0jWTIH/yrpDKa/2ykCxRgOralLQN2/c68r8VV48+o7TkH wDezOG5OxKsdVWsehBWoB4gNZAhKO5YhGCKIlhswr984aAb5q0rTE7UuKv8LpimN nvV3fkeha8WttcU5+fbPl6fkk26+FItbT9nli/UNy83PRk8HYH2T9+eWoi1xbOUX erPjRr5jo5rjZA03IwwovjPdX/qHnoAViqSvaHCjwa4aIJVstv+sKp3JXcFtvgNU g9koMK55X+id5g/ip25NVIDd1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs4z3Tq GR+Zz96am+iypqjb+onOMB8GA1UdIwQYMBaAFP49oXtUpNQvfFyaimfTeQZ6dggO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkYyQy9FRDM1NTZEQTVG MzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFDOThYSnFLWjlONUJucDJD QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qMmhlMVNrMUM5OFhKcUtaOU41Qm5wMkNBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkYyQy9FRDM1NTZEQTVGMzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFD OThYSnFLWjlONUJucDJDQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx5Vk9LB6TKBrDISKyPWC+seiV6szVzwE1ERuFo6DreBtg9ax3af4T pPXfvQFoHUVeXp2lXXvsl/sBTDisqJXkPgYuUjz0Xi7z3jFRxDgKLZrgFGOwSJba +zoZ+7WluGg5D2gjgDx1P0EvSNUujf3YEbnRBcqbHbOZpITPJPmyyWOHl9Fr5SHN mR0lobeftSd5POKyj6rEYiYyHwFANxnCAqhhIAKzZ1q8VhRWgD5KJChy3by42U8a 2EMSzvOkKXBj+7UnlyM0IuoJGXQptYxcFG/otOvLShhaFcQaVNfFMRpc/8CEYvCE yDP3EN99JsUZ1KOYcE1iEfZhTgZ3hU0b -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org