$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: jEsA8xes/SFttawFGL/6hcitALgcMeqSeQCEJmyDFgs= Subject key identifier: 77:AE:E0:A7:9B:C9:B9:CF:0E:F0:2B:77:42:3C:54:69:AA:6B:5A:FB Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 0429 Signing time: Wed 01 May 2024 02:21:42 +0000 Manifest this update: Wed 01 May 2024 02:21:42 +0000 Manifest next update: Wed 08 May 2024 02:21:42 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: Oqc7HCOu6HTw/7ICVnD10foEFC9bpRz7XWj9jfHlXiI=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: Nk4ibWKpPuVtlG9/CDhXT/kC4VGAOuhpnoAKVaH7bcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: May 1 02:21:42 2024 GMT Not After : May 8 02:21:42 2024 GMT Subject: CN=6631a736-486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:f9:3d:ea:8b:17:37:66:9c:f0:13:d8:ca: d7:fa:74:50:fe:ea:00:96:e8:74:14:37:e4:2f:98: 9d:cc:ad:e2:54:4a:44:f4:5e:00:62:3e:6e:ce:b2: 39:aa:12:0c:d7:bd:59:37:61:3a:e6:f5:fb:89:35: 5c:dc:ef:9d:8b:55:2a:b1:54:97:de:37:03:32:fc: 17:ce:37:e1:90:94:ec:8a:c9:68:de:33:98:52:7d: 07:78:43:c2:7f:d5:84:1e:ca:f9:f3:f9:ad:23:17: f7:1e:60:9f:24:07:95:a6:8e:f0:ba:cb:3a:34:83: 7a:d8:df:88:aa:4b:a2:51:db:77:eb:ba:3a:61:73: 44:dd:3e:14:1c:d9:bc:56:f7:f8:89:bb:8e:fe:cf: 0e:4a:38:70:95:88:51:3e:dc:25:d2:51:09:a5:c7: f0:da:21:6b:6e:a6:b4:8a:df:a9:69:b0:eb:d1:9a: f0:28:f2:48:f0:0b:33:cf:cb:8f:06:81:65:e3:46: 0a:a7:32:51:8c:1d:fc:d7:89:b3:72:89:7d:13:b5: c3:a8:db:ec:77:f9:cf:bb:b0:c7:d5:49:16:c6:3f: 90:d7:cf:14:46:7d:9c:1e:81:75:62:b5:14:51:14: 1f:c2:f6:10:9d:cb:9b:49:4d:6a:3e:67:d5:ef:37: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AE:E0:A7:9B:C9:B9:CF:0E:F0:2B:77:42:3C:54:69:AA:6B:5A:FB X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:cb:b9:15:fd:06:d9:87:7c:b8:02:97:c1:11:f4:66:5c:20: 4c:3d:94:a8:bd:82:8d:8e:ae:9a:8c:64:aa:ee:e3:4a:d8:4e: 10:4a:b4:47:e7:90:dd:3d:51:5f:8f:9b:6e:3a:5f:5b:f2:3d: 09:1f:8e:26:fb:29:89:47:6f:85:58:c4:af:ab:c9:c9:28:3f: 67:50:07:64:61:77:de:67:cf:17:47:fc:13:54:4f:64:87:f9: dd:b7:bd:ed:a3:a4:71:eb:9d:22:f2:a3:96:b7:8c:b2:49:27: 63:f0:ff:0e:4a:95:06:38:af:8b:b5:87:a4:02:05:9f:b7:e0: 5b:1e:d6:99:dd:69:d4:b0:72:1c:5c:db:4b:44:1b:54:86:3a: 08:7b:6e:6b:f7:2e:bf:1b:de:ce:90:c2:59:14:ee:25:47:7b: cd:13:20:4e:9d:55:bb:1f:dd:b2:67:90:65:b9:4d:e3:a9:0e: 97:40:b7:ca:ae:dc:50:ec:2e:10:13:1a:25:23:fd:f9:67:14: 2d:61:fc:e5:d0:90:d8:9e:5d:94:65:d1:68:69:58:5e:02:eb: 00:10:1f:43:63:47:27:5f:86:85:89:0e:aa:4b:f9:e5:49:c7: 1e:f8:fd:a0:9d:5a:3f:f2:65:3f:ce:86:44:c2:94:40:f3:81: b7:07:9c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjQwNTAxMDIyMTQyWhcNMjQwNTA4MDIyMTQyWjAYMRYwFAYD VQQDEw02NjMxYTczNi00ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwP5PeqLFzdmnPAT2MrX+nRQ/uoAluh0FDfkL5idzK3iVEpE9F4AYj5uzrI5 qhIM171ZN2E65vX7iTVc3O+di1UqsVSX3jcDMvwXzjfhkJTsislo3jOYUn0HeEPC f9WEHsr58/mtIxf3HmCfJAeVpo7wuss6NIN62N+IqkuiUdt367o6YXNE3T4UHNm8 Vvf4ibuO/s8OSjhwlYhRPtwl0lEJpcfw2iFrbqa0it+pabDr0ZrwKPJI8Aszz8uP BoFl40YKpzJRjB3814mzcol9E7XDqNvsd/nPu7DH1UkWxj+Q188URn2cHoF1YrUU URQfwvYQncubSU1qPmfV7zcQAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeu4Keb ybnPDvArd0I8VGmqa1r7MB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxy7kV/QbZh3y4ApfBEfRmXCBMPZSovYKNjq6ajGSq7uNK2E4QSrRH 55DdPVFfj5tuOl9b8j0JH44m+ymJR2+FWMSvq8nJKD9nUAdkYXfeZ88XR/wTVE9k h/ndt73to6Rx650i8qOWt4yySSdj8P8OSpUGOK+LtYekAgWft+BbHtaZ3WnUsHIc XNtLRBtUhjoIe25r9y6/G97OkMJZFO4lR3vNEyBOnVW7H92yZ5BluU3jqQ6XQLfK rtxQ7C4QExolI/35ZxQtYfzl0JDYnl2UZdFoaVheAusAEB9DY0cnX4aFiQ6qS/nl Scce+P2gnVo/8mU/zoZEwpRA84G3B5yM -----END CERTIFICATE-----Generated at Wed May 1 04:49:21 2024 by rpki-client on console-ams.rpki-client.org