$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: JztH1Baf7tMazFD3cSiifKdmgKRESfUYXEBjD21+Jck= Subject key identifier: 43:46:31:C8:9A:BF:9F:60:A3:BC:D1:44:65:F2:FE:8A:58:DD:51:B5 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: EA Signing time: Sun 05 May 2024 05:54:00 +0000 Manifest this update: Sun 05 May 2024 05:53:59 +0000 Manifest next update: Sun 12 May 2024 05:53:59 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 59QZXE3/pxLf5TeauwSBLHDXi8VbiMOPnVRKEISXebI=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 47vlfzWlDi/rzCvjry72vsvqm5wYnEkiXvlf9lL/4OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: May 5 05:53:59 2024 GMT Not After : May 12 05:53:59 2024 GMT Subject: CN=66371ef8-ffb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:5a:57:18:67:31:c7:b2:46:85:93:48:2a: 79:e8:70:8f:2a:50:6e:00:9a:7a:83:f1:b5:8b:0b: 45:8a:13:dc:52:c7:b9:d8:f6:43:be:b3:b4:df:f5: c7:f3:70:3d:30:18:16:55:ce:76:a8:3f:d2:12:34: 32:5d:00:ba:b5:e4:e4:4a:c6:5b:c8:d5:f0:6e:2b: 7f:a6:36:e1:c9:39:ba:98:57:26:f9:f3:c6:30:56: 70:c8:c1:87:83:66:de:db:9b:40:2c:88:90:a0:d3: d1:b6:a2:cc:22:bc:ba:64:b9:c0:17:f2:bf:44:1e: ec:bd:0d:b3:de:5b:8f:95:38:ea:8c:b0:45:f0:ab: 58:34:58:31:ed:4a:3c:7f:22:89:09:ad:57:aa:0d: 98:e7:ed:df:1d:e7:2c:47:4f:f2:1b:83:a9:40:9a: d8:f9:4c:92:84:26:8a:42:ce:41:04:12:c9:a4:66: 26:1d:b8:36:a6:cb:ef:75:2b:4b:87:cb:a1:23:5b: d5:89:d9:dd:e6:08:25:d6:c2:5e:11:79:96:a4:79: b9:d4:2f:56:68:6d:c3:23:7b:16:bb:e7:50:9e:52: d1:b8:06:ac:ba:48:67:86:e2:68:ff:0d:a2:2d:96: 46:d3:39:b2:98:8a:35:60:48:14:3c:a5:e9:b2:07: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:31:C8:9A:BF:9F:60:A3:BC:D1:44:65:F2:FE:8A:58:DD:51:B5 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:92:ce:6d:0d:33:50:c4:f4:59:08:53:a3:d1:6b:19:54: 79:1a:38:8d:d3:b5:24:1d:60:96:fb:0e:75:f7:1b:fd:8b:b8: 41:84:bf:f6:ac:57:55:e9:d7:4b:b1:f4:9d:6a:63:8c:56:28: 97:6c:21:fc:5a:6b:5d:cb:8c:6a:89:0c:c2:25:ef:ac:3d:76: 6d:b3:9a:78:e0:6e:b2:ee:b4:08:a3:4b:04:50:45:88:78:ec: e5:3f:6b:1b:11:24:1a:c9:a5:f5:42:31:06:c4:67:a9:30:cd: 2e:f6:8b:7f:93:bb:7c:5d:fa:d2:b1:5a:9a:e5:fb:94:ce:23: 06:b0:8a:85:6a:b1:eb:47:a2:2e:85:2d:37:a4:90:f1:64:a7: 39:35:cf:93:7f:8e:33:e6:cc:74:57:ea:5e:13:c6:07:c6:7f: 6e:0c:81:ad:99:79:87:21:6f:45:cb:a9:db:02:00:c0:86:29: 16:ff:e5:fc:59:3e:4e:ed:33:83:15:83:35:ee:b0:68:a5:58: 4f:ca:da:77:1d:fb:41:97:4e:64:cb:e7:83:20:1f:99:2a:2b: a4:d5:69:d5:a8:66:c3:cd:b9:33:7d:7a:34:0c:53:4a:63:9c: ba:b6:ee:cc:b7:09:90:51:46:4e:d0:39:f3:19:57:d3:07:1f: 01:cc:e4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjQwNTA1MDU1MzU5WhcNMjQwNTEyMDU1MzU5WjAYMRYwFAYD VQQDEw02NjM3MWVmOC1mZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk1aVxhnMceyRoWTSCp56HCPKlBuAJp6g/G1iwtFihPcUse52PZDvrO03/XH 83A9MBgWVc52qD/SEjQyXQC6teTkSsZbyNXwbit/pjbhyTm6mFcm+fPGMFZwyMGH g2be25tALIiQoNPRtqLMIry6ZLnAF/K/RB7svQ2z3luPlTjqjLBF8KtYNFgx7Uo8 fyKJCa1Xqg2Y5+3fHecsR0/yG4OpQJrY+UyShCaKQs5BBBLJpGYmHbg2psvvdStL h8uhI1vVidnd5ggl1sJeEXmWpHm51C9WaG3DI3sWu+dQnlLRuAasukhnhuJo/w2i LZZG0zmymIo1YEgUPKXpsgcm8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENGMcia v59go7zRRGXy/opY3VG1MB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtpLObQ0zUMT0WQhTo9FrGVR5GjiN07UkHWCW+w519xv9i7hBhL/2 rFdV6ddLsfSdamOMViiXbCH8Wmtdy4xqiQzCJe+sPXZts5p44G6y7rQIo0sEUEWI eOzlP2sbESQayaX1QjEGxGepMM0u9ot/k7t8XfrSsVqa5fuUziMGsIqFarHrR6Iu hS03pJDxZKc5Nc+Tf44z5sx0V+peE8YHxn9uDIGtmXmHIW9Fy6nbAgDAhikW/+X8 WT5O7TODFYM17rBopVhPytp3HftBl05ky+eDIB+ZKiuk1WnVqGbDzbkzfXo0DFNK Y5y6tu7MtwmQUUZO0DnzGVfTBx8BzOSM -----END CERTIFICATE-----Generated at Sun May 5 08:21:08 2024 by rpki-client on console-ams.rpki-client.org