$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json) Hash identifier: JfUGB7/Zks7h9D5+0QlwB+N4F3+226M/mVgT0BMwNiU= Subject key identifier: 48:93:20:4E:13:28:E7:50:15:67:18:4D:D7:CE:E1:62:20:33:2C:24 Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft Manifest number: 042F Signing time: Sun 05 May 2024 02:08:46 +0000 Manifest this update: Sun 05 May 2024 02:08:46 +0000 Manifest next update: Sun 12 May 2024 02:08:46 +0000 Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: z88HTI8HuioMjmRxf490ksQdsLPneV87iXtrL26FLvs=) 2: D407C038E19611ED9103032DC4F9AE02.roa (hash: ZXQfU7dv9X2VANaLDXpWp464qvGJrwWNABgWLIr0VUI=) 3: D2FDFC66E19611ED9103032DC4F9AE02.roa (hash: lv7xkGUTtsyU5nQEDXmC7Abo35Jim29gzp42dV+VXYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Validity Not Before: May 5 02:08:46 2024 GMT Not After : May 12 02:08:46 2024 GMT Subject: CN=6636ea2e-49c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:c0:1a:fb:60:d8:5d:ae:3a:0d:6e:18:6c: 27:47:16:7a:df:74:97:b5:c5:c8:c0:66:4e:ea:85: ff:ed:91:50:ec:a7:88:d1:c6:5a:e4:9a:cc:46:c9: a2:10:e3:dc:4c:9a:ca:cd:f6:64:83:ce:5e:fb:4d: e0:27:89:ab:21:b5:cb:38:45:3d:37:95:20:a0:a8: 9c:e0:56:ce:36:50:56:84:ad:e7:4e:e7:e6:2b:f0: 5e:e0:0d:62:ae:8e:1d:49:5c:27:09:98:7f:a4:3d: 28:ed:38:2d:44:a3:af:fe:ec:85:93:09:2a:87:e4: 69:25:10:d4:f8:2e:df:1f:70:b2:81:22:9c:c7:d0: fe:64:cb:d2:94:e3:23:1c:91:18:9e:66:19:ef:e7: aa:91:67:10:f0:2f:f4:e5:42:5f:52:f0:3b:cf:39: 9f:75:c2:09:07:dd:71:aa:56:26:05:c7:18:49:ab: 03:5f:75:bd:02:7d:bc:69:ea:91:ad:50:1f:06:9a: 24:c8:0e:79:3d:9a:46:ab:4f:8d:ed:72:34:90:61: 07:e1:78:b5:86:fa:62:e5:41:f1:33:de:2b:a0:18: 48:d0:2a:2b:c9:b1:8f:38:f5:c8:d6:fd:e5:f5:0c: d6:d7:c1:de:01:1d:36:5b:2e:76:21:d2:71:40:77: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:20:4E:13:28:E7:50:15:67:18:4D:D7:CE:E1:62:20:33:2C:24 X509v3 Authority Key Identifier: keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:90:58:bf:4a:2b:98:29:ef:00:ec:7b:65:ad:80:14:ee: 3f:eb:7c:7b:55:c7:76:67:af:18:56:7d:4d:3a:31:0e:30:f8: b7:b2:d1:ef:09:22:44:bd:5f:eb:f4:eb:e9:7f:fc:aa:08:b3: e3:aa:d7:33:c6:3d:19:58:e6:84:ad:d7:7a:80:17:6c:f5:9d: 63:6b:59:13:7e:97:37:fd:30:d0:4f:4e:bf:b0:d6:a2:36:b8: f4:8e:40:d7:c2:74:f4:29:ab:de:78:a7:a9:8c:cf:c2:d7:bd: 45:12:b1:ee:20:f8:4c:16:5c:17:81:fe:d1:f7:f7:96:bd:25: 97:2e:7c:54:22:3d:e1:eb:07:2e:47:01:c4:b2:a6:9b:2d:77: 18:08:29:ca:8e:5f:17:37:f4:2e:25:7d:48:80:5c:0e:ad:97: 3d:56:0a:5d:ee:1c:19:32:0a:61:5e:d3:fd:62:e2:28:6e:2e: f7:59:52:03:b3:8f:af:4c:de:11:f0:46:a9:8e:bf:72:e3:6d: da:bf:50:87:13:85:0a:23:98:ad:d6:33:ee:5c:f4:8c:65:ab: be:24:82:7f:48:20:7e:58:58:99:3c:63:5b:f9:23:22:9e:b1: 49:a2:d8:c6:6b:8c:0c:0f:87:58:fc:f8:ad:f0:40:27:41:7d: d4:8b:2c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYzQjY4QTdBMTk4 NDVDN0JCMEEwHhcNMjQwNTA1MDIwODQ2WhcNMjQwNTEyMDIwODQ2WjAYMRYwFAYD VQQDEw02NjM2ZWEyZS00OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zPAGvtg2F2uOg1uGGwnRxZ633SXtcXIwGZO6oX/7ZFQ7KeI0cZa5JrMRsmi EOPcTJrKzfZkg85e+03gJ4mrIbXLOEU9N5UgoKic4FbONlBWhK3nTufmK/Be4A1i ro4dSVwnCZh/pD0o7TgtRKOv/uyFkwkqh+RpJRDU+C7fH3CygSKcx9D+ZMvSlOMj HJEYnmYZ7+eqkWcQ8C/05UJfUvA7zzmfdcIJB91xqlYmBccYSasDX3W9An28aeqR rVAfBpokyA55PZpGq0+N7XI0kGEH4Xi1hvpi5UHxM94roBhI0CorybGPOPXI1v3l 9QzW18HeAR02Wy52IdJxQHcthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiTIE4T KOdQFWcYTdfO4WIgMywkMB8GA1UdIwQYMBaAFAGYMRH9bwsn4kBGO2inoZhFx7sK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNCMC8xMzhFMTQzMDE0 NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5ZmlRRVk3YUtlaG1FWEh1 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaZ3hFZjF2Q3lmaVFFWTdhS2VobUVYSHV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5 ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUyZBYv0ormCnvAOx7Za2AFO4/63x7Vcd2Z68YVn1NOjEOMPi3stHv CSJEvV/r9Ovpf/yqCLPjqtczxj0ZWOaErdd6gBds9Z1ja1kTfpc3/TDQT06/sNai Nrj0jkDXwnT0KaveeKepjM/C171FErHuIPhMFlwXgf7R9/eWvSWXLnxUIj3h6wcu RwHEsqabLXcYCCnKjl8XN/QuJX1IgFwOrZc9Vgpd7hwZMgphXtP9YuIobi73WVID s4+vTN4R8Eapjr9y423av1CHE4UKI5it1jPuXPSMZau+JIJ/SCB+WFiZPGNb+SMi nrFJotjGa4wMD4dY/Pit8EAnQX3Uiyz0 -----END CERTIFICATE-----Generated at Sun May 5 03:09:54 2024 by rpki-client on console-ams.rpki-client.org