$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: pjYggErwbxweGLbzMKpwsxar7Tgr1XzIvTE1/Wz4IFM= Subject key identifier: B2:DC:7A:63:7B:77:81:16:F5:A6:59:76:28:52:CC:DE:C0:9B:96:E5 Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 04A8 Signing time: Fri 03 May 2024 01:39:39 +0000 Manifest this update: Fri 03 May 2024 01:39:38 +0000 Manifest next update: Fri 10 May 2024 01:39:38 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: VjIP85gWv/EvfrWop/NvoLY6e0IvV4Pkyb0PfnhptOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: May 3 01:39:38 2024 GMT Not After : May 10 01:39:38 2024 GMT Subject: CN=6634405b-032a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:e6:76:d3:ac:b8:7c:fd:15:38:cc:2e:bf: 78:57:c9:82:19:f6:a0:6a:6d:4f:83:fb:05:44:30: 75:af:8f:8b:3d:63:58:8e:c9:fa:06:b9:c8:60:ea: 22:84:c3:19:83:10:f2:2a:ac:97:61:a7:f3:d5:bd: fd:f3:2b:a7:74:ed:32:0a:14:23:46:64:5a:a7:9d: a9:4d:fe:82:fe:63:3b:0d:55:2c:b6:2a:5c:e3:a6: b3:20:7c:38:af:a3:97:c3:5c:88:9d:df:94:59:4c: c2:2d:d8:2f:20:82:42:08:b1:08:97:56:ed:0b:bd: 37:6a:42:9a:a6:6c:08:29:06:5e:c9:db:09:3d:9f: 6a:af:2a:f4:c2:91:58:7b:49:e7:11:e2:e2:ae:f0: 5e:46:ec:6f:80:08:54:d3:6d:87:6a:09:d5:93:86: df:87:0e:42:26:46:49:12:f5:b5:5b:31:e2:be:73: f4:62:2b:1f:dd:9c:4b:dc:39:48:0b:ca:0e:b0:be: 45:3e:73:43:2d:af:25:54:3d:7f:c9:1b:38:f2:11: b2:f0:50:9f:b4:e1:56:cc:57:7b:82:fe:74:8a:49: 5f:c1:bb:a9:26:d4:56:5c:8b:f3:14:10:0a:18:46: ac:52:e0:b6:9e:88:e7:2e:c5:29:e3:a0:f7:6d:8e: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:7A:63:7B:77:81:16:F5:A6:59:76:28:52:CC:DE:C0:9B:96:E5 X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c2:9f:88:f5:8f:ec:43:4e:59:52:f3:ae:89:51:27:f1:77: 5c:04:12:da:32:ba:17:31:7f:8e:ed:57:38:04:ed:6b:5a:dd: 92:94:cf:53:c3:d8:e8:40:8a:f6:2d:ec:4d:48:d3:b4:b8:38: 5e:2c:29:e6:52:f3:35:f6:3e:ad:db:ee:83:aa:43:d2:58:bf: 92:d5:9f:e7:77:3e:2c:21:f9:b6:93:5c:84:a9:35:c5:ef:c8: ad:d8:59:b3:30:68:32:0c:c3:74:3a:7d:4f:02:4c:00:83:89: 58:22:d1:e8:5a:05:57:65:ba:04:9a:e9:30:f5:54:f2:75:72: d9:a9:6f:84:b4:ba:cc:ea:be:2c:8f:81:18:6d:ba:77:b1:2b: d6:a5:80:72:13:05:3c:5c:95:72:0c:c7:9b:c0:60:01:86:08: 44:8e:2b:11:64:16:e1:ca:39:e8:b9:01:b0:60:c6:dc:1f:7a: c6:00:d8:47:e2:bd:6d:35:5c:f1:3e:02:c4:e9:49:0b:7e:a1: 9b:bc:8f:2a:18:c8:94:7c:c5:30:9a:a9:e9:dc:ef:26:ba:2d: 16:fb:b9:30:98:1b:47:29:05:8f:c7:57:40:97:bf:2f:50:67: f0:04:34:d5:b4:60:30:81:53:ee:f7:a0:b6:60:fd:37:9f:00: 15:99:94:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjQwNTAzMDEzOTM4WhcNMjQwNTEwMDEzOTM4WjAYMRYwFAYD VQQDEw02NjM0NDA1Yi0wMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvADmdtOsuHz9FTjMLr94V8mCGfagam1Pg/sFRDB1r4+LPWNYjsn6BrnIYOoi hMMZgxDyKqyXYafz1b398yundO0yChQjRmRap52pTf6C/mM7DVUstipc46azIHw4 r6OXw1yInd+UWUzCLdgvIIJCCLEIl1btC703akKapmwIKQZeydsJPZ9qryr0wpFY e0nnEeLirvBeRuxvgAhU022HagnVk4bfhw5CJkZJEvW1WzHivnP0Yisf3ZxL3DlI C8oOsL5FPnNDLa8lVD1/yRs48hGy8FCftOFWzFd7gv50iklfwbupJtRWXIvzFBAK GEasUuC2nojnLsUp46D3bY5z/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLcemN7 d4EW9aZZdihSzN7Am5blMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6wp+I9Y/sQ05ZUvOuiVEn8XdcBBLaMroXMX+O7Vc4BO1rWt2SlM9T w9joQIr2LexNSNO0uDheLCnmUvM19j6t2+6DqkPSWL+S1Z/ndz4sIfm2k1yEqTXF 78it2FmzMGgyDMN0On1PAkwAg4lYItHoWgVXZboEmukw9VTydXLZqW+EtLrM6r4s j4EYbbp3sSvWpYByEwU8XJVyDMebwGABhghEjisRZBbhyjnouQGwYMbcH3rGANhH 4r1tNVzxPgLE6UkLfqGbvI8qGMiUfMUwmqnp3O8mui0W+7kwmBtHKQWPx1dAl78v UGfwBDTVtGAwgVPu96C2YP03nwAVmZTb -----END CERTIFICATE-----Generated at Fri May 3 03:10:47 2024 by rpki-client on console-ams.rpki-client.org