$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json) Hash identifier: 5Y1NG6ip+dKlcVk53v6ZwOHRt588s1nBu8yl9yE4tJE= Subject key identifier: DC:B7:74:2E:D8:6A:43:7D:5D:42:AE:75:A4:D0:2D:75:70:B0:B0:66 Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft Manifest number: 0122 Signing time: Wed 01 May 2024 05:26:35 +0000 Manifest this update: Wed 01 May 2024 05:26:35 +0000 Manifest next update: Wed 08 May 2024 05:26:35 +0000 Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: pySYDzp/Z5pCSfD3oU9SbUJogiAAiVgIK3CySzPPQmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Validity Not Before: May 1 05:26:35 2024 GMT Not After : May 8 05:26:35 2024 GMT Subject: CN=6631d28b-9abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:49:0a:a1:00:77:c3:5c:ed:c4:73:a8:29: bc:f2:b4:68:5e:f4:f6:9a:e3:72:45:54:29:33:4a: fb:72:86:2f:81:2e:2b:79:cf:cb:b9:be:bd:62:f2: ce:4b:75:ca:09:65:5a:8e:09:7d:77:ce:e4:31:6e: 5b:7b:97:7f:a0:1a:a4:f1:f8:2d:0a:c3:08:f4:87: f7:be:0d:29:2d:58:cc:39:f2:90:18:58:43:06:03: 76:57:39:e2:d6:f0:6f:11:5f:c7:c1:12:1d:31:c2: 78:38:ea:25:ca:45:f2:9e:bc:61:f6:d6:68:f0:58: 70:eb:45:f8:50:52:0d:6b:a4:ae:09:6c:9f:2b:08: 97:78:2a:3f:3c:7a:67:85:57:4b:74:9d:f6:68:90: 4e:08:5f:9c:70:bc:5b:84:25:8e:67:1e:8c:0b:b0: da:0e:41:ef:27:7d:07:23:91:8c:4c:2e:97:30:c2: 77:86:ab:8f:f3:69:96:e4:d8:20:5f:2b:74:b2:ed: 61:7e:05:0d:e8:8f:b5:50:97:0c:aa:4d:b8:2e:da: 05:a6:70:0d:16:5f:76:3c:6f:b0:ed:17:ef:11:08: 42:a2:2a:13:b2:52:d3:5a:9e:0d:46:80:e6:3b:c9: 81:df:39:2d:57:74:26:62:5d:d8:59:e8:53:aa:3c: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:74:2E:D8:6A:43:7D:5D:42:AE:75:A4:D0:2D:75:70:B0:B0:66 X509v3 Authority Key Identifier: keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0a:ad:23:ab:bf:47:94:1a:c6:1e:91:8d:18:ac:4e:07:a1: 73:2e:ad:d6:2a:28:5a:c6:9b:11:2c:53:3f:3d:55:7e:8d:54: 45:08:5a:3a:d8:bd:2f:9e:a7:81:af:4f:57:d9:18:4d:ec:b0: af:3e:5c:cb:80:89:22:15:d9:8f:dc:5e:16:74:68:78:b7:a2: 02:42:97:6a:c0:7e:2f:36:77:cd:5a:96:cf:f8:21:40:6e:4e: a8:f9:d0:38:17:ca:bc:8a:d1:43:b2:bd:ab:b4:b4:01:fa:89: 6d:e9:5d:14:be:f9:cb:1f:1b:a7:73:ae:22:ed:dd:4a:10:28: 8a:ac:c6:d4:89:fe:e5:cc:6d:2b:f5:5f:46:01:93:20:88:64: b2:ba:87:ec:07:3a:a3:48:af:69:96:14:c3:fa:d2:45:c5:34: fd:af:0a:1d:55:44:cb:c9:43:18:ec:ea:14:a1:ff:3c:46:1f: a1:12:9f:db:60:e1:95:26:70:67:c8:6c:35:6c:ef:69:d4:55: c4:92:d4:aa:ae:98:a2:7a:55:e5:77:94:6a:d0:1f:33:39:54: e3:b2:3c:cd:09:dc:94:22:7c:ff:78:f9:b5:01:42:5e:fc:1a: 0a:63:b4:10:bc:af:40:62:70:a0:e4:ae:ad:ff:0b:2a:55:bf: 19:db:59:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2 MDk2MjMzRjEwHhcNMjQwNTAxMDUyNjM1WhcNMjQwNTA4MDUyNjM1WjAYMRYwFAYD VQQDEw02NjMxZDI4Yi05YWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw99JCqEAd8Nc7cRzqCm88rRoXvT2muNyRVQpM0r7coYvgS4rec/Lub69YvLO S3XKCWVajgl9d87kMW5be5d/oBqk8fgtCsMI9If3vg0pLVjMOfKQGFhDBgN2Vzni 1vBvEV/HwRIdMcJ4OOolykXynrxh9tZo8Fhw60X4UFINa6SuCWyfKwiXeCo/PHpn hVdLdJ32aJBOCF+ccLxbhCWOZx6MC7DaDkHvJ30HI5GMTC6XMMJ3hquP82mW5Ngg Xyt0su1hfgUN6I+1UJcMqk24LtoFpnANFl92PG+w7RfvEQhCoioTslLTWp4NRoDm O8mB3zktV3QmYl3YWehTqjwVJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy3dC7Y akN9XUKudaTQLXVwsLBmMB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS81NzExNTlFMjRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1do TmRKaE9wZkYzc2xnbGlNX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQCq0jq79HlBrGHpGNGKxOB6FzLq3WKihaxpsRLFM/PVV+jVRFCFo6 2L0vnqeBr09X2RhN7LCvPlzLgIkiFdmP3F4WdGh4t6ICQpdqwH4vNnfNWpbP+CFA bk6o+dA4F8q8itFDsr2rtLQB+olt6V0UvvnLHxunc64i7d1KECiKrMbUif7lzG0r 9V9GAZMgiGSyuofsBzqjSK9plhTD+tJFxTT9rwodVUTLyUMY7OoUof88Rh+hEp/b YOGVJnBnyGw1bO9p1FXEktSqrpiielXld5Rq0B8zOVTjsjzNCdyUInz/ePm1AUJe /BoKY7QQvK9AYnCg5K6t/wsqVb8Z21kA -----END CERTIFICATE-----Generated at Wed May 1 05:55:42 2024 by rpki-client on console-ams.rpki-client.org