$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft File: pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json) Hash identifier: E2thwLSw9rbAe0Qtrx5TnBpYxHPq8ATgkj5eGA0/kgA= Subject key identifier: 66:75:94:44:2F:CB:9E:E1:D4:D0:1C:B8:54:9D:2B:F1:60:36:39:B9 Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E Certificate issuer: /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft Manifest number: 040A Signing time: Fri 03 May 2024 02:13:18 +0000 Manifest this update: Fri 03 May 2024 02:13:18 +0000 Manifest next update: Fri 10 May 2024 02:13:18 +0000 Files and hashes: 1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: JEmG5rXm2SA+oD6gmVuBkUrSrDlprTA9mgGv4p5tpjQ=) 2: A027E062300911ECAE581534C4F9AE02.roa (hash: Ms2XqdVRC0rOJIXdphrMLiHPJVpVuh+4Sr7dI2CKwrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E Validity Not Before: May 3 02:13:18 2024 GMT Not After : May 10 02:13:18 2024 GMT Subject: CN=6634483e-e685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:30:74:7a:88:10:87:c8:43:68:e9:17:75: fc:9c:30:21:d4:5a:81:0c:d4:9c:e2:6f:6f:3d:7e: a5:d1:a4:bc:86:11:4c:48:f5:38:3e:27:aa:43:cc: 57:ce:31:60:8d:0d:4b:97:0f:b7:3a:8c:fe:27:37: 9c:10:82:1d:88:ff:0d:d9:09:19:f2:d8:77:6f:52: 26:fd:e1:d3:4e:e9:7d:5a:0e:8e:24:50:18:36:60: 1d:76:41:b6:ef:88:a3:2c:b4:7e:54:c3:d5:e9:b7: 81:5f:4f:d9:e7:20:92:f1:47:63:32:a5:48:5e:06: a4:57:ed:a1:56:7d:82:1d:c2:a2:c0:cf:8f:8a:c3: a0:c9:5c:6d:74:dd:3a:2d:6b:a0:a8:01:0e:dc:b0: dc:c9:3e:5d:49:50:b6:b5:13:86:0f:f9:5e:dd:1c: 93:83:17:b1:7c:79:be:49:c8:6f:7a:fd:1a:10:17: 27:07:63:a5:0e:c2:0d:60:ce:fa:29:2d:55:10:9a: 54:c5:53:97:29:66:47:32:4b:14:9a:60:0d:a8:f4: 6e:6d:9b:9e:7e:70:f8:65:1b:74:b0:11:a8:31:e6: 5d:e2:9b:29:b8:85:23:3c:8b:5f:6d:fa:04:a7:23: 48:5f:e9:d7:88:7a:59:0c:4c:6f:59:61:02:0a:fa: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:75:94:44:2F:CB:9E:E1:D4:D0:1C:B8:54:9D:2B:F1:60:36:39:B9 X509v3 Authority Key Identifier: keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a8:50:42:ff:7a:d1:b5:ae:46:3f:4a:5c:62:b1:4d:c0:4f: 05:27:77:32:47:a2:55:82:1c:2c:1c:77:19:0f:83:8b:2e:fd: c7:53:11:71:e4:d1:47:c1:95:43:b5:4e:f7:bf:38:ff:d5:99: 78:3c:82:bb:e2:a2:00:18:f2:1c:87:ff:e0:a2:a2:07:ba:e5: cb:18:04:f3:c5:20:7e:b8:97:2b:f2:97:94:3c:e3:47:e7:a9: 9f:49:95:d5:18:2b:0e:c8:54:66:02:08:10:09:48:4b:ab:39: 14:2b:b1:4e:d3:cd:0e:a9:cc:ff:75:38:a7:07:4b:c6:39:8b: a9:40:e0:ec:ca:3b:aa:2e:33:d7:12:f7:72:49:f5:40:5c:b2: be:d8:c2:5f:62:76:16:a3:3b:d4:2c:34:d5:79:65:62:f6:cf: 5e:b4:9c:32:69:7b:8d:66:a9:e9:cb:3e:3e:1a:f1:2a:b2:17: fe:73:9b:48:b0:b7:cf:d9:23:bb:13:2c:4b:05:2c:4c:a8:82: 89:e0:9f:df:ba:39:20:12:5c:5f:0f:62:de:f6:23:ef:95:9c: c8:25:ea:da:fe:3f:92:0f:4f:4b:4e:0c:c0:22:ad:06:88:30: ae:88:14:1e:31:de:d4:a1:5c:53:93:29:8a:fd:d2:7c:85:99: f1:f9:ff:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRjUxMTAvBgNVBAUTKEE1OTk4OEVDNEQ2REQ1QkE2QTMwRjg2NjUxQUI1NjJD MThBNkEzNEUwHhcNMjQwNTAzMDIxMzE4WhcNMjQwNTEwMDIxMzE4WjAYMRYwFAYD VQQDEw02NjM0NDgzZS1lNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGAwdHqIEIfIQ2jpF3X8nDAh1FqBDNSc4m9vPX6l0aS8hhFMSPU4PieqQ8xX zjFgjQ1Llw+3Ooz+JzecEIIdiP8N2QkZ8th3b1Im/eHTTul9Wg6OJFAYNmAddkG2 74ijLLR+VMPV6beBX0/Z5yCS8UdjMqVIXgakV+2hVn2CHcKiwM+PisOgyVxtdN06 LWugqAEO3LDcyT5dSVC2tROGD/le3RyTgxexfHm+Schvev0aEBcnB2OlDsINYM76 KS1VEJpUxVOXKWZHMksUmmANqPRubZuefnD4ZRt0sBGoMeZd4pspuIUjPItfbfoE pyNIX+nXiHpZDExvWWECCvoMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ1lEQv y57h1NAcuFSdK/FgNjm5MB8GA1UdIwQYMBaAFKWZiOxNbdW6ajD4ZlGrViwYpqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZGNS8wMTM5NjlCNDIw MUMxMUVDOEExNzNDMkNDNEY5QUUwMi9wWm1JN0UxdDFicHFNUGhtVWF0V0xCaW1v MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BabUk3RTF0MWJwcU1QaG1VYXRXTEJpbW8wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZGNS8wMTM5NjlCNDIwMUMxMUVDOEExNzNDMkNDNEY5QUUwMi9wWm1JN0UxdDFi cHFNUGhtVWF0V0xCaW1vMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYqFBC/3rRta5GP0pcYrFNwE8FJ3cyR6JVghwsHHcZD4OLLv3HUxFx 5NFHwZVDtU73vzj/1Zl4PIK74qIAGPIch//goqIHuuXLGATzxSB+uJcr8peUPONH 56mfSZXVGCsOyFRmAggQCUhLqzkUK7FO080Oqcz/dTinB0vGOYupQODsyjuqLjPX EvdySfVAXLK+2MJfYnYWozvULDTVeWVi9s9etJwyaXuNZqnpyz4+GvEqshf+c5tI sLfP2SO7EyxLBSxMqIKJ4J/fujkgElxfD2Le9iPvlZzIJera/j+SD09LTgzAIq0G iDCuiBQeMd7UoVxTkymK/dJ8hZnx+f+z -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org