$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json) Hash identifier: M1triqIuJiwQK1OfK2s1n7ja8ralOKCuAdJRQd60EHU= Subject key identifier: 21:2D:AA:89:EF:C9:6A:21:0C:AC:C2:E9:73:85:A3:83:12:33:C8:FC Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D Certificate issuer: /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft Manifest number: 04A9 Signing time: Wed 01 May 2024 01:51:59 +0000 Manifest this update: Wed 01 May 2024 01:51:58 +0000 Manifest next update: Wed 08 May 2024 01:51:58 +0000 Files and hashes: 1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: wTcdTfoofLrJaJChW70YoFO/f5lgTmDnB+/kgq+6haE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Validity Not Before: May 1 01:51:58 2024 GMT Not After : May 8 01:51:58 2024 GMT Subject: CN=6631a03e-a9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:08:d6:fd:24:97:64:54:a9:30:64:14:bc:ac: f5:f6:7a:92:7a:fa:21:46:c4:e5:76:6c:df:fd:da: 9c:23:32:9b:aa:cd:fe:cd:20:0f:58:34:8b:e7:b3: 23:c6:bc:ae:82:4b:ff:e2:3d:7a:8b:f2:c8:69:88: 23:7e:04:19:8f:09:63:db:e2:c2:ea:fd:60:0c:d4: b2:07:90:50:70:91:47:f3:a2:13:88:4c:cc:a5:20: a9:71:da:ba:e9:21:4e:2e:47:0f:98:ca:5a:2b:15: 6d:29:c8:e2:4f:b9:89:8f:29:d2:8d:da:3a:73:20: 83:32:39:4d:fd:ea:a7:14:5f:63:d2:df:ed:40:ca: 4e:24:47:8d:03:39:4c:88:48:fc:2a:55:04:e0:72: d5:8d:25:b2:7d:a5:d3:4d:28:8b:0f:1c:cf:20:81: 38:d5:18:b0:26:d5:8c:e0:0e:dd:99:64:75:fb:21: 9b:68:13:f7:20:76:94:f9:9c:82:82:b3:77:93:77: d6:f8:c5:f8:11:a4:d1:42:44:21:ca:7c:7a:36:11: a5:79:bc:df:40:b8:de:b8:2e:3d:4e:9b:c3:8a:02: 27:f0:02:52:e9:98:70:e1:89:3a:35:54:7f:0f:79: f1:2b:28:74:e2:7e:ec:6d:48:d3:f9:a3:dc:4c:c0: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2D:AA:89:EF:C9:6A:21:0C:AC:C2:E9:73:85:A3:83:12:33:C8:FC X509v3 Authority Key Identifier: keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:48:72:4c:b8:33:bf:0f:7f:3a:a6:12:d5:a3:84:bc:58:1b: 8a:cb:4a:50:d4:fa:92:2c:ae:db:86:17:69:6a:5b:ee:16:88: fb:6d:ea:f3:56:07:a6:03:64:c1:c2:1f:f7:79:f8:74:2e:65: cc:53:18:ee:96:2e:17:34:71:3c:37:9c:3e:8c:34:52:ad:99: 7b:34:bd:85:b3:e7:b9:fb:60:ab:00:09:17:63:6f:ad:ea:2a: 09:9d:dc:9f:77:c2:e4:db:5b:ec:ce:5a:1e:ee:e7:af:2c:ca: f4:b0:7c:d3:a3:c8:30:ff:4c:bf:cd:c8:1b:4a:e0:ee:18:bb: 78:98:08:74:4c:4c:b9:ee:b2:b7:fb:4b:8a:1c:2f:d7:d6:a9: 29:5a:c0:e0:fa:3e:ee:5a:db:27:a7:03:55:9c:f9:88:0e:46: a0:21:f4:be:52:66:05:77:81:0a:ce:e8:12:f1:ca:b5:65:0f: 41:46:64:96:af:58:e7:7b:b6:a7:e4:39:bb:5e:8d:4d:54:79: 20:13:0f:1e:a6:a3:b6:af:2e:ed:3d:12:28:6a:09:81:a1:77: 01:e4:88:5d:24:1c:79:58:27:cb:c8:e8:e5:a2:bc:3b:e4:65: 28:34:cd:f2:9a:65:23:17:47:7a:a6:c5:21:09:08:3e:28:4e: e0:e9:68:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDEyMDRGRTMxNUMwMDkwQjE1RDkxMjVCNDI5ODU1QTA2 RjRENDIxMUQwHhcNMjQwNTAxMDE1MTU4WhcNMjQwNTA4MDE1MTU4WjAYMRYwFAYD VQQDEw02NjMxYTAzZS1hOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gjW/SSXZFSpMGQUvKz19nqSevohRsTldmzf/dqcIzKbqs3+zSAPWDSL57Mj xryugkv/4j16i/LIaYgjfgQZjwlj2+LC6v1gDNSyB5BQcJFH86ITiEzMpSCpcdq6 6SFOLkcPmMpaKxVtKcjiT7mJjynSjdo6cyCDMjlN/eqnFF9j0t/tQMpOJEeNAzlM iEj8KlUE4HLVjSWyfaXTTSiLDxzPIIE41RiwJtWM4A7dmWR1+yGbaBP3IHaU+ZyC grN3k3fW+MX4EaTRQkQhynx6NhGlebzfQLjeuC49TpvDigIn8AJS6Zhw4Yk6NVR/ D3nxKyh04n7sbUjT+aPcTMBgiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEtqonv yWohDKzC6XOFo4MSM8j8MB8GA1UdIwQYMBaAFBIE/jFcAJCxXZEltCmFWgb01CEd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wMEE0RDVGMEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtMRmRrU1cwS1lWYUJ2VFVJ UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VnVC1NVndBa0xGZGtTVzBLWVZhQnZUVUlSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wMEE0RDVGMEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtM RmRrU1cwS1lWYUJ2VFVJUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADSHJMuDO/D386phLVo4S8WBuKy0pQ1PqSLK7bhhdpalvuFoj7berz VgemA2TBwh/3efh0LmXMUxjuli4XNHE8N5w+jDRSrZl7NL2Fs+e5+2CrAAkXY2+t 6ioJndyfd8Lk21vszloe7uevLMr0sHzTo8gw/0y/zcgbSuDuGLt4mAh0TEy57rK3 +0uKHC/X1qkpWsDg+j7uWtsnpwNVnPmIDkagIfS+UmYFd4EKzugS8cq1ZQ9BRmSW r1jne7an5Dm7Xo1NVHkgEw8epqO2ry7tPRIoagmBoXcB5IhdJBx5WCfLyOjlorw7 5GUoNM3ymmUjF0d6psUhCQg+KE7g6Wj6 -----END CERTIFICATE-----Generated at Wed May 1 02:46:18 2024 by rpki-client on console-ams.rpki-client.org