$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft File: iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json) Hash identifier: ess5l6KxlFZz8G4CC0dCzCy0uwzE94FxY1R8iEmlb1Q= Subject key identifier: 6E:B4:90:87:55:12:66:DA:7A:EA:ED:51:19:70:B8:33:40:AE:98:9B Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 Certificate issuer: /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Certificate serial: 048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft Manifest number: 04C1 Signing time: Fri 03 May 2024 01:44:25 +0000 Manifest this update: Fri 03 May 2024 01:44:24 +0000 Manifest next update: Fri 10 May 2024 01:44:24 +0000 Files and hashes: 1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: UEkOG1SBl42OBv48JjBwgwXHoOBDgFzRThday7P4LR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5 Validity Not Before: May 3 01:44:24 2024 GMT Not After : May 10 01:44:24 2024 GMT Subject: CN=66344179-f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:c6:55:bf:3b:76:44:af:1d:27:7c:f6:ea: 97:30:ee:ec:8c:7a:05:ee:e9:c2:2b:72:ba:17:43: 7d:6e:e9:63:eb:46:79:6b:42:4b:fb:c3:2b:c1:59: a8:de:04:70:4e:43:4f:d9:8c:9e:be:84:fa:74:2c: 99:a5:c3:11:01:65:63:5f:09:98:7b:e7:92:c9:a6: ef:d9:7a:25:f6:d5:3a:09:7b:bc:e5:38:25:71:73: a5:22:4e:41:43:ff:8f:0b:68:53:e3:62:13:93:58: 0e:59:c4:11:49:8e:8a:b9:01:26:f3:a9:9b:06:42: b7:65:8e:50:13:48:e7:da:20:13:e9:79:d5:dc:5a: 46:e3:0d:49:da:4d:a4:4a:92:ec:5c:bf:ef:6e:86: a0:8e:3a:dc:82:f4:7d:39:80:cd:f5:bd:28:6d:2a: 09:7d:2c:ac:92:d3:11:5a:d7:4e:8f:12:cb:dc:42: 40:7e:43:05:26:29:92:ad:9c:5a:b2:7b:1d:44:f5: 7a:91:c2:ed:33:99:09:88:4d:0b:65:f5:aa:dd:69: 2e:bd:07:b2:80:b9:95:85:e0:34:fe:89:77:1a:f3: ba:d3:a3:51:1b:42:98:0e:c6:a8:23:4b:1c:27:9a: 93:6f:eb:bb:ac:09:25:2b:7e:82:24:28:48:f0:4b: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:90:87:55:12:66:DA:7A:EA:ED:51:19:70:B8:33:40:AE:98:9B X509v3 Authority Key Identifier: keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b1:c7:94:06:9e:4d:e2:db:c7:e2:90:bf:4c:48:61:f5:b4: bd:68:06:c3:b5:b3:a9:7a:94:d8:e1:8c:10:dc:50:28:82:71: 14:39:b2:9c:9e:14:ef:23:30:79:e7:56:2a:12:40:c4:39:2f: 95:26:fd:a7:7e:7b:2d:a8:6b:fc:ef:03:82:56:ca:5b:61:a8: bf:c0:aa:80:f4:4e:31:74:e7:05:79:f2:3f:0e:36:94:b1:6a: d0:c0:7b:09:7f:ad:b4:27:05:ee:b9:8c:81:83:c8:35:f0:f8: 1b:6e:27:a7:4b:61:c9:a5:45:1a:4b:a5:24:b2:f8:57:ec:47: 12:cc:f7:5e:91:29:23:85:48:65:c0:a7:8b:2a:2b:96:95:56: d2:93:c1:a6:bf:6b:cd:7a:e9:ac:a1:de:25:a1:8b:11:a8:92: 5a:7a:88:1d:f9:77:53:00:81:5e:df:58:83:c8:f1:0a:47:cc: d6:5d:47:6e:01:a3:7a:4a:26:87:7b:5a:d6:fb:d5:de:2c:50: 6a:b0:81:a7:41:e4:f7:7f:16:d3:83:d9:1a:4d:11:87:df:c1: 35:d1:cf:e6:df:e6:a1:a3:c6:7e:b1:ed:af:71:fb:24:2a:e5: a7:3e:c4:d0:49:16:55:77:b7:45:30:7e:cb:3d:2c:d2:a7:91: 29:ad:6f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDg5MzEyMTgwNUY5NDE0N0QzN0RDQzZENzRCNjM3ODQ2 RjcyMzk3QzUwHhcNMjQwNTAzMDE0NDI0WhcNMjQwNTEwMDE0NDI0WjAYMRYwFAYD VQQDEw02NjM0NDE3OS1mNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVLGVb87dkSvHSd89uqXMO7sjHoF7unCK3K6F0N9bulj60Z5a0JL+8MrwVmo 3gRwTkNP2YyevoT6dCyZpcMRAWVjXwmYe+eSyabv2Xol9tU6CXu85TglcXOlIk5B Q/+PC2hT42ITk1gOWcQRSY6KuQEm86mbBkK3ZY5QE0jn2iAT6XnV3FpG4w1J2k2k SpLsXL/vboagjjrcgvR9OYDN9b0obSoJfSysktMRWtdOjxLL3EJAfkMFJimSrZxa snsdRPV6kcLtM5kJiE0LZfWq3WkuvQeygLmVheA0/ol3GvO606NRG0KYDsaoI0sc J5qTb+u7rAklK36CJChI8Etx5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG60kIdV EmbaeurtURlwuDNArpibMB8GA1UdIwQYMBaAFIkxIYBflBR9N9zG10tjeEb3I5fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZIMDMzTWJYUzJONFJ2Y2ps OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lURWhnRi1VRkgwMzNNYlhTMk40UnZjamw4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZI MDMzTWJYUzJONFJ2Y2psOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1sceUBp5N4tvH4pC/TEhh9bS9aAbDtbOpepTY4YwQ3FAognEUObKc nhTvIzB551YqEkDEOS+VJv2nfnstqGv87wOCVspbYai/wKqA9E4xdOcFefI/DjaU sWrQwHsJf620JwXuuYyBg8g18PgbbienS2HJpUUaS6UksvhX7EcSzPdekSkjhUhl wKeLKiuWlVbSk8Gmv2vNeumsod4loYsRqJJaeogd+XdTAIFe31iDyPEKR8zWXUdu AaN6SiaHe1rW+9XeLFBqsIGnQeT3fxbTg9kaTRGH38E10c/m3+aho8Z+se2vcfsk KuWnPsTQSRZVd7dFMH7LPSzSp5EprW+T -----END CERTIFICATE-----Generated at Fri May 3 03:10:51 2024 by rpki-client on console-ams.rpki-client.org