$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: x8kaKD7o2cgPAAXZXjhwL9RTh9OxBC0l89s7PxYWqBM= Subject key identifier: 5F:37:C9:0C:2B:1A:3A:CB:07:BD:18:03:67:AE:E5:82:45:8A:CD:E4 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 04AE Signing time: Sun 05 May 2024 01:44:26 +0000 Manifest this update: Sun 05 May 2024 01:44:25 +0000 Manifest next update: Sun 12 May 2024 01:44:25 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: N8TL/ZKPZGbzatZGMBiOEe5Gh9R0Vnqh7WNDMJen4Oc=) 2: E396EAA40ABF11EE98BEAB54C4F9AE02.roa (hash: spQjo44QVyrLiz7wNXak9m0XRKOyQz9Ej7dddTmzhRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: May 5 01:44:25 2024 GMT Not After : May 12 01:44:25 2024 GMT Subject: CN=6636e479-9f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:4e:17:f1:74:c4:bc:1e:fb:cb:4b:90:30: 8a:7b:ed:17:75:9c:13:32:d2:47:e8:34:4f:86:fc: c7:5c:ab:5b:9a:83:49:44:86:3f:c3:3d:c6:ba:e0: d8:ab:ce:c4:94:5c:75:a7:23:ff:4c:44:8f:6f:95: 73:74:f5:85:ee:50:fe:a0:5d:00:a4:5a:51:6f:d4: 90:35:dd:78:22:73:13:1a:74:32:8f:17:42:ca:60: 6e:25:8d:90:a5:5b:cd:70:14:4c:58:bd:82:06:e5: 73:d2:3a:79:9f:23:93:c3:9b:08:46:e3:ba:d1:85: 05:86:42:98:12:9e:6f:1e:c4:e5:ef:7b:d9:23:cd: 2a:96:0e:31:39:6e:21:10:11:b5:ab:78:10:05:12: 68:a5:0e:3b:72:06:81:0b:9c:55:c3:ef:a3:20:87: 8e:5e:35:2b:f0:f2:62:1c:ea:8a:ef:a6:8c:0f:d9: 5e:67:98:92:1e:0e:be:b2:4e:b1:72:ce:ab:c2:bc: 1d:a5:ed:ef:5e:c1:1b:e3:cb:cd:f3:c1:9c:55:57: 32:ee:cb:2d:0d:26:f0:cf:f8:3f:79:3b:8e:c7:56: 92:4f:bb:a0:96:30:a4:40:02:35:cc:25:a4:ec:07: af:83:0e:20:3d:a6:c7:0d:73:87:4d:d2:99:52:66: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:37:C9:0C:2B:1A:3A:CB:07:BD:18:03:67:AE:E5:82:45:8A:CD:E4 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c6:e9:25:41:db:db:73:97:7e:03:88:90:4d:6c:68:3d:3f: 60:77:2c:33:e9:04:21:eb:74:db:58:0e:e9:75:01:d9:b5:f2: 70:95:8c:da:05:a8:70:74:22:bf:1e:2a:46:e0:ed:ff:24:a8: e8:ac:0d:42:2a:ec:7c:61:88:9f:bd:9a:ed:6d:ac:ce:e0:4b: 33:24:09:48:21:9b:a6:f1:47:c3:b4:0f:30:6a:7f:de:9d:c1: 9a:6f:f7:c5:9d:6c:09:ca:72:88:5f:7b:55:b1:60:8d:88:a7: 7f:6e:7f:05:49:f5:05:d3:b7:b2:1d:ec:d3:fb:bd:93:c4:4e: ea:b7:9d:36:74:f8:61:52:15:ae:de:84:e1:af:ac:ad:af:a6: c1:52:69:63:9b:d4:51:ef:40:88:9d:e2:1b:76:2a:82:bb:73: f3:84:05:39:f0:05:d5:32:e9:b1:04:76:7f:f4:d6:d6:a4:97: e0:68:aa:e5:1a:20:36:dc:16:73:93:ed:37:6e:ab:32:d4:04: 21:17:a2:47:b7:cd:f9:07:f1:5b:66:82:2f:d9:d7:9b:d2:c6: 0d:fd:5e:cd:0a:33:9c:c7:71:32:0c:cf:a1:26:50:64:79:ae: 73:a6:40:7e:1b:15:5a:b4:4d:f0:a9:9d:28:41:76:04:56:f7: c0:26:c5:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjQwNTA1MDE0NDI1WhcNMjQwNTEyMDE0NDI1WjAYMRYwFAYD VQQDEw02NjM2ZTQ3OS05ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNpOF/F0xLwe+8tLkDCKe+0XdZwTMtJH6DRPhvzHXKtbmoNJRIY/wz3GuuDY q87ElFx1pyP/TESPb5VzdPWF7lD+oF0ApFpRb9SQNd14InMTGnQyjxdCymBuJY2Q pVvNcBRMWL2CBuVz0jp5nyOTw5sIRuO60YUFhkKYEp5vHsTl73vZI80qlg4xOW4h EBG1q3gQBRJopQ47cgaBC5xVw++jIIeOXjUr8PJiHOqK76aMD9leZ5iSHg6+sk6x cs6rwrwdpe3vXsEb48vN88GcVVcy7sstDSbwz/g/eTuOx1aST7ugljCkQAI1zCWk 7Aevgw4gPabHDXOHTdKZUmYbMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF83yQwr GjrLB70YA2eu5YJFis3kMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbxuklQdvbc5d+A4iQTWxoPT9gdywz6QQh63TbWA7pdQHZtfJwlYza BahwdCK/HipG4O3/JKjorA1CKux8YYifvZrtbazO4EszJAlIIZum8UfDtA8wan/e ncGab/fFnWwJynKIX3tVsWCNiKd/bn8FSfUF07eyHezT+72TxE7qt502dPhhUhWu 3oThr6ytr6bBUmljm9RR70CIneIbdiqCu3PzhAU58AXVMumxBHZ/9NbWpJfgaKrl GiA23BZzk+03bqsy1AQhF6JHt835B/FbZoIv2deb0sYN/V7NCjOcx3EyDM+hJlBk ea5zpkB+GxVatE3wqZ0oQXYEVvfAJsVC -----END CERTIFICATE-----Generated at Sun May 5 02:13:01 2024 by rpki-client on console-ams.rpki-client.org