$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: T1RIUZcFTZNO32Px0uriQPYI/k29bxsZ6X1qaUiVRus= Subject key identifier: 82:F4:30:2A:53:8C:A7:63:89:4E:AC:E7:98:B2:2D:A7:D5:03:78:49 Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 13E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 13E0 Signing time: Mon 06 May 2024 17:32:22 +0000 Manifest this update: Mon 06 May 2024 17:32:21 +0000 Manifest next update: Mon 13 May 2024 17:32:21 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: 6YTzh5e9GTxQuxkl36AhWYhMJV0LYGSBDTUG4Fntc6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5088 (0x13e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Validity Not Before: May 6 17:32:21 2024 GMT Not After : May 13 17:32:21 2024 GMT Subject: CN=66391426-94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:b7:20:bf:c7:81:e9:68:77:66:ed:d1:85: 3f:08:06:5b:df:c2:bf:cf:32:61:fc:87:09:bd:01: 29:4b:07:64:6d:73:60:b3:ce:8d:ca:fe:1d:5f:b3: d5:57:6a:64:4f:ce:36:30:37:e3:bf:8a:98:83:d8: 48:a4:ef:61:21:43:19:85:de:10:e4:79:7c:59:6a: 98:5e:62:c8:1a:05:70:05:37:44:ce:8f:48:68:4a: b0:1a:39:d8:d9:34:1a:3f:27:df:02:f5:ac:b9:44: e0:bc:63:d5:ab:3a:3e:a5:05:69:af:d9:9e:ee:af: 83:80:4e:4c:cb:24:dc:54:de:c4:68:71:de:93:8f: ce:ff:86:2b:81:c9:3e:16:b3:44:64:83:a6:1a:fb: f3:81:03:df:80:d7:8e:85:1f:6c:31:60:60:11:d6: a8:3f:0b:76:fd:7a:6b:d1:fa:46:8b:7f:ed:23:c6: 4c:1e:e8:f6:b8:97:c7:bd:a2:ac:a4:63:64:ae:f5: 05:5f:5d:b4:1b:34:0a:b6:8b:e8:4d:bf:bc:da:1b: ab:7e:5a:8c:0c:fb:85:dc:7e:e4:41:ab:d6:bf:bb: d2:e8:96:99:4b:79:09:41:f7:34:14:c9:e9:bd:cb: a8:cf:29:b9:e7:0f:4c:8b:f3:ee:ed:0c:46:42:9d: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F4:30:2A:53:8C:A7:63:89:4E:AC:E7:98:B2:2D:A7:D5:03:78:49 X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:77:94:14:5a:49:58:48:0a:75:1b:f5:f9:3a:e0:c9:48:a2: 44:d5:9f:e5:9f:36:ec:2f:c6:20:0b:3c:29:48:12:4c:43:67: 5d:0c:2a:c4:8d:74:6b:75:a2:a0:fb:58:b2:0e:b7:fa:db:08: 5b:51:b1:3a:89:63:70:f6:41:49:87:4d:ca:ab:06:91:c9:a1: c1:26:67:0c:80:90:22:18:72:30:0e:05:99:3d:7f:cf:41:bd: 71:3e:36:78:20:c5:37:6f:bb:0b:6d:52:80:de:c1:28:00:0f: b0:81:51:8d:53:10:c0:72:4c:88:f0:9b:80:f2:59:6b:79:0b: 35:9b:b9:0e:5a:77:3a:9d:d9:a9:f5:f0:bd:2b:d5:b5:68:e8: cb:d2:d5:7b:9b:65:59:d3:4a:9b:ee:fc:3f:d6:fc:9c:ee:06: 63:24:aa:db:c3:d8:19:2e:a4:ac:52:9b:a0:db:29:c5:0e:39: 8d:e0:c6:5f:4c:19:fa:58:8b:5a:08:cb:5b:17:fd:83:f0:9f: ac:f2:19:4f:2f:6a:5e:12:e3:cd:a8:0a:ba:b5:df:63:8f:f8: b9:35:bb:7a:cd:ae:8e:10:09:65:4c:6d:50:b1:76:7b:b0:44: b3:a1:ec:a8:26:a8:44:97:99:7b:20:42:7f:ad:b1:45:b4:3e: b5:ec:60:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjQwNTA2MTczMjIxWhcNMjQwNTEzMTczMjIxWjAYMRYwFAYD VQQDEw02NjM5MTQyNi05NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4+3IL/Hgelod2bt0YU/CAZb38K/zzJh/IcJvQEpSwdkbXNgs86Nyv4dX7PV V2pkT842MDfjv4qYg9hIpO9hIUMZhd4Q5Hl8WWqYXmLIGgVwBTdEzo9IaEqwGjnY 2TQaPyffAvWsuUTgvGPVqzo+pQVpr9me7q+DgE5MyyTcVN7EaHHek4/O/4Yrgck+ FrNEZIOmGvvzgQPfgNeOhR9sMWBgEdaoPwt2/Xpr0fpGi3/tI8ZMHuj2uJfHvaKs pGNkrvUFX120GzQKtovoTb+82hurflqMDPuF3H7kQavWv7vS6JaZS3kJQfc0FMnp vcuozym55w9Mi/Pu7QxGQp1NlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL0MCpT jKdjiU6s55iyLafVA3hJMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtd5QUWklYSAp1G/X5OuDJSKJE1Z/lnzbsL8YgCzwpSBJMQ2ddDCrE jXRrdaKg+1iyDrf62whbUbE6iWNw9kFJh03KqwaRyaHBJmcMgJAiGHIwDgWZPX/P Qb1xPjZ4IMU3b7sLbVKA3sEoAA+wgVGNUxDAckyI8JuA8llreQs1m7kOWnc6ndmp 9fC9K9W1aOjL0tV7m2VZ00qb7vw/1vyc7gZjJKrbw9gZLqSsUpug2ynFDjmN4MZf TBn6WItaCMtbF/2D8J+s8hlPL2peEuPNqAq6td9jj/i5Nbt6za6OEAllTG1QsXZ7 sESzoeyoJqhEl5l7IEJ/rbFFtD617GDs -----END CERTIFICATE-----Generated at Mon May 6 20:19:40 2024 by rpki-client on console-ams.rpki-client.org