$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: C1wG+Gp3b6CiNDqrWTpuYo8bFe+wsC8VptAAXByTbp4= Subject key identifier: 26:37:19:A9:3F:F3:36:BF:4C:62:10:35:58:EB:27:B9:2C:99:91:36 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 0545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 059A Signing time: Wed 01 May 2024 01:28:04 +0000 Manifest this update: Wed 01 May 2024 01:28:04 +0000 Manifest next update: Wed 08 May 2024 01:28:04 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: vnMynGG3vrqHrpARpSSTCJaTJSScPb0vR9piTuOpYvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: May 1 01:28:04 2024 GMT Not After : May 8 01:28:04 2024 GMT Subject: CN=66319aa4-08ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:31:fe:42:12:d9:e2:3b:53:83:cb:68:d4: 97:37:02:55:84:bb:9d:9f:ce:50:29:68:87:2e:79: b1:3c:5f:fa:fd:69:cb:3c:d3:9a:90:7b:3b:fa:90: 75:b3:de:5b:d5:4b:cf:50:7e:f4:a1:f8:c9:bc:0f: 27:48:73:60:b8:56:38:05:b9:0b:fc:ae:c7:08:80: 2a:ba:18:2e:3b:3c:8f:12:15:1f:49:d2:9c:b2:14: a9:64:41:35:5f:f0:ed:d3:b4:35:22:3e:aa:68:2d: 9c:e4:e3:ae:27:90:5b:4c:29:0f:82:2a:5c:e6:be: 9f:3f:6a:f7:a9:54:46:09:9b:9f:b2:ac:bd:25:a5: 94:d4:68:b1:bf:57:68:f8:9a:56:60:a6:1b:4e:a4: aa:e6:3f:45:85:79:c7:0e:23:17:65:e5:58:d4:b2: 36:93:d0:68:af:a9:14:23:66:d9:26:31:7c:5b:c7: 76:8f:35:42:92:ee:b1:15:e8:12:03:2f:e2:fd:16: 13:2b:9a:d4:df:3b:53:d8:22:04:f7:b6:b5:76:c0: b5:e8:b2:d5:c3:6a:dd:2f:07:fd:c0:d0:5c:92:f1: 27:96:cf:13:d5:9e:b3:8d:d0:f9:69:05:11:31:6f: ee:55:2b:cd:c8:34:c6:2a:40:a3:72:7a:c0:b0:14: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:37:19:A9:3F:F3:36:BF:4C:62:10:35:58:EB:27:B9:2C:99:91:36 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fb:cb:fe:83:c7:7f:8c:c2:34:cb:97:3c:09:c9:b3:1c:fa: c5:0b:9c:12:a8:2c:e1:64:5f:da:f1:eb:42:9f:06:25:69:17: 38:a6:c6:b7:22:30:a9:1a:e9:00:6a:5d:c4:b4:63:e1:bf:26: 11:32:b1:7a:46:9c:c9:23:22:ba:3b:52:34:a0:bc:f9:74:a2: 2a:d2:31:bf:12:72:00:1d:8e:64:1d:58:42:43:b1:3b:33:6c: 5d:05:f1:dc:f6:84:6a:b1:36:a9:87:a0:86:e5:90:51:5e:80: 29:67:a7:18:94:8b:8e:ae:21:fb:71:ab:82:d4:e3:4a:58:02: 5d:ba:65:48:fa:2f:14:2f:68:4b:54:85:78:73:5a:00:57:57: d0:4d:68:81:59:99:4e:c3:fd:1f:8f:ee:b0:77:91:7f:9c:d1: b6:01:13:38:91:a2:66:ae:27:73:e2:22:e2:33:d2:9d:fd:df: 23:1f:f5:69:0a:95:1b:c7:2e:a0:94:02:f0:08:7a:71:a7:d7: 0c:3e:27:7b:89:a0:85:b8:1d:32:9f:ae:c1:92:8c:a4:17:ac: 7b:df:21:f9:4c:83:4f:dc:37:ee:9d:63:0b:45:9e:99:07:f6: 9c:3f:40:f2:dc:09:5a:19:18:21:84:ec:43:3e:16:d9:e3:8b: 92:7f:23:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjQwNTAxMDEyODA0WhcNMjQwNTA4MDEyODA0WjAYMRYwFAYD VQQDEw02NjMxOWFhNC0wOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUYx/kIS2eI7U4PLaNSXNwJVhLudn85QKWiHLnmxPF/6/WnLPNOakHs7+pB1 s95b1UvPUH70ofjJvA8nSHNguFY4BbkL/K7HCIAquhguOzyPEhUfSdKcshSpZEE1 X/Dt07Q1Ij6qaC2c5OOuJ5BbTCkPgipc5r6fP2r3qVRGCZufsqy9JaWU1Gixv1do +JpWYKYbTqSq5j9FhXnHDiMXZeVY1LI2k9Bor6kUI2bZJjF8W8d2jzVCku6xFegS Ay/i/RYTK5rU3ztT2CIE97a1dsC16LLVw2rdLwf9wNBckvEnls8T1Z6zjdD5aQUR MW/uVSvNyDTGKkCjcnrAsBT9BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY3Gak/ 8za/TGIQNVjrJ7ksmZE2MB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+8v+g8d/jMI0y5c8CcmzHPrFC5wSqCzhZF/a8etCnwYlaRc4psa3 IjCpGukAal3EtGPhvyYRMrF6RpzJIyK6O1I0oLz5dKIq0jG/EnIAHY5kHVhCQ7E7 M2xdBfHc9oRqsTaph6CG5ZBRXoApZ6cYlIuOriH7cauC1ONKWAJdumVI+i8UL2hL VIV4c1oAV1fQTWiBWZlOw/0fj+6wd5F/nNG2ARM4kaJmridz4iLiM9Kd/d8jH/Vp CpUbxy6glALwCHpxp9cMPid7iaCFuB0yn67BkoykF6x73yH5TINP3DfunWMLRZ6Z B/acP0Dy3AlaGRghhOxDPhbZ44uSfyOF -----END CERTIFICATE-----Generated at Wed May 1 02:46:18 2024 by rpki-client on console-ams.rpki-client.org