$ rpki-client -vvf rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft File: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft (raw, json) Hash identifier: v7SuOFMCA45hhAsX0kkCCqkQF4/Sq/EIH3R1nttQdII= Subject key identifier: 3C:CD:C3:46:B9:40:63:AF:04:01:FF:65:DA:AC:EA:22:2C:7B:F0:C7 Authority key identifier: 03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 Certificate issuer: /CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft Manifest number: 06B2 Signing time: Thu 02 May 2024 23:17:25 +0000 Manifest this update: Thu 02 May 2024 23:17:25 +0000 Manifest next update: Thu 09 May 2024 23:17:25 +0000 Files and hashes: 1: Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl (hash: sTmYpie/ck1wDyiP6pFuUHrjIfeI0U0aRLjY/48LnyU=) 2: B89D979A13F411EB8BF49553C4F9AE02.roa (hash: Elt6JYpPcUNolUdz4IF+3v+14XhKVVmXORmOfAqBK0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805BF/serialNumber=031E29F26E783281B768E8910853144DF1EE5534 Validity Not Before: May 2 23:17:25 2024 GMT Not After : May 9 23:17:25 2024 GMT Subject: CN=66341f05-353d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:76:f1:7d:ef:b5:3d:3b:71:2f:4c:a6:6f: 8b:51:6d:93:c1:b5:ed:df:b2:53:e2:c1:d3:75:f9: e3:ba:05:ec:38:58:9a:98:35:af:e0:7d:2f:d8:dc: f6:ee:45:81:73:02:eb:24:d5:90:07:71:e3:2b:86: 35:0d:ae:f6:2b:d8:db:49:16:8d:e8:ed:e7:bf:a1: 85:bf:c3:bd:f7:47:33:10:61:6f:ab:74:b9:40:50: 85:65:21:c2:0d:56:b6:a3:96:a4:cb:ee:7f:14:f2: 2d:60:52:b6:a4:f1:69:b0:2a:ad:83:fe:fe:4a:1b: c5:24:d4:0f:20:1a:36:b1:f6:6d:d0:bc:aa:3e:e3: 29:c1:e8:12:ef:94:ea:67:50:5c:42:12:8e:2d:94: 68:63:79:b9:b4:eb:4f:70:7d:9a:c5:59:35:68:34: fb:bf:13:90:66:29:86:46:74:f6:21:c8:a8:d6:4a: b1:8d:be:89:6c:2e:d6:a8:c5:f6:6c:63:fb:9d:0d: 94:5f:1e:bd:3e:68:da:59:b2:2a:8b:67:24:44:91: c9:76:36:7d:53:5a:dc:6b:d3:07:fd:b7:b3:9d:ae: 14:ae:20:05:c4:f2:a8:10:c0:73:0f:e9:b3:ab:95: 52:d4:38:e8:4d:9b:82:d2:9d:a8:75:21:b9:32:b8: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CD:C3:46:B9:40:63:AF:04:01:FF:65:DA:AC:EA:22:2C:7B:F0:C7 X509v3 Authority Key Identifier: keyid:03:1E:29:F2:6E:78:32:81:B7:68:E8:91:08:53:14:4D:F1:EE:55:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805BF/F133BDAC13F211EB9BEFCD51C4F9AE02/Ax4p8m54MoG3aOiRCFMUTfHuVTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3f:37:bc:9b:07:6f:bb:4c:32:9d:8d:27:5a:8e:f3:79:63: 2c:08:ed:e5:2e:c5:8c:45:32:52:54:c7:eb:25:9e:fb:35:37: 69:a6:f9:77:15:39:1f:23:a1:d5:2d:c4:5d:ad:82:3a:65:b5: e2:79:6b:92:bd:d8:f7:8c:bc:24:ef:a3:6e:56:75:aa:53:cd: 4a:97:c1:1c:d9:7e:07:5e:bb:8d:db:e1:f4:1b:02:d9:2b:85: 8d:78:b1:25:6f:38:60:e8:04:30:b8:13:35:d0:b7:a8:72:e8: a2:a3:a4:92:9b:81:47:4f:70:4a:d2:fc:07:6b:15:8c:9a:76: f6:9d:a3:53:3e:1d:a5:70:9b:0f:79:d3:c4:c0:86:ef:a6:40: ff:24:ad:c1:7d:86:31:cf:27:a4:9b:7c:fe:91:07:b3:94:c2: 77:e1:39:7c:ce:62:74:d9:3b:6c:4c:6a:c1:5f:a6:25:95:a4: d1:fb:1e:e4:9d:f2:0a:34:ba:63:cd:d0:1b:21:de:bb:39:c1: 3c:50:c4:ba:c1:5e:0e:71:38:1c:92:18:ff:12:a5:a1:1f:ea: f0:22:57:02:87:73:49:ec:53:33:ba:b0:5a:3f:c3:2d:ff:99: 7a:c2:d5:e5:fd:3f:cb:34:f4:9a:bf:2c:5f:6e:17:27:e1:f3: 8a:07:ac:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1QkYxMTAvBgNVBAUTKDAzMUUyOUYyNkU3ODMyODFCNzY4RTg5MTA4NTMxNDRE RjFFRTU1MzQwHhcNMjQwNTAyMjMxNzI1WhcNMjQwNTA5MjMxNzI1WjAYMRYwFAYD VQQDEw02NjM0MWYwNS0zNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEx28X3vtT07cS9Mpm+LUW2TwbXt37JT4sHTdfnjugXsOFiamDWv4H0v2Nz2 7kWBcwLrJNWQB3HjK4Y1Da72K9jbSRaN6O3nv6GFv8O990czEGFvq3S5QFCFZSHC DVa2o5aky+5/FPItYFK2pPFpsCqtg/7+ShvFJNQPIBo2sfZt0LyqPuMpwegS75Tq Z1BcQhKOLZRoY3m5tOtPcH2axVk1aDT7vxOQZimGRnT2Icio1kqxjb6JbC7WqMX2 bGP7nQ2UXx69PmjaWbIqi2ckRJHJdjZ9U1rca9MH/bezna4UriAFxPKoEMBzD+mz q5VS1DjoTZuC0p2odSG5Mrg29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzNw0a5 QGOvBAH/Zdqs6iIse/DHMB8GA1UdIwQYMBaAFAMeKfJueDKBt2jokQhTFE3x7lU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVCRi9GMTMzQkRBQzEz RjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1vRzNhT2lSQ0ZNVVRmSHVW VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4NHA4bTU0TW9HM2FPaVJDRk1VVGZIdVZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVCRi9GMTMzQkRBQzEzRjIxMUVCOUJFRkNENTFDNEY5QUUwMi9BeDRwOG01NE1v RzNhT2lSQ0ZNVVRmSHVWVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Pze8mwdvu0wynY0nWo7zeWMsCO3lLsWMRTJSVMfrJZ77NTdppvl3 FTkfI6HVLcRdrYI6ZbXieWuSvdj3jLwk76NuVnWqU81Kl8Ec2X4HXruN2+H0GwLZ K4WNeLElbzhg6AQwuBM10Leocuiio6SSm4FHT3BK0vwHaxWMmnb2naNTPh2lcJsP edPEwIbvpkD/JK3BfYYxzyekm3z+kQezlMJ34Tl8zmJ02TtsTGrBX6YllaTR+x7k nfIKNLpjzdAbId67OcE8UMS6wV4OcTgckhj/EqWhH+rwIlcCh3NJ7FMzurBaP8Mt /5l6wtXl/T/LNPSavyxfbhcn4fOKB6w7 -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org