$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: 4Iz7+JXdUzQdulckIebA9YAeUt88KyGAiloqDFmLJNs= Subject key identifier: C0:FA:19:56:93:D2:BD:D6:B7:F1:9B:15:C3:A9:A9:78:E5:09:77:90 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 33BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 33BB Signing time: Mon 06 May 2024 15:04:12 +0000 Manifest this update: Mon 06 May 2024 15:04:12 +0000 Manifest next update: Mon 13 May 2024 15:04:12 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: hKr6TpqSLRprTDsk9nX987JFcV51+UOPlWGDoq00vXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13243 (0x33bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: May 6 15:04:12 2024 GMT Not After : May 13 15:04:12 2024 GMT Subject: CN=6638f16c-69d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:99:47:8d:d7:ac:09:71:09:43:f8:7b:f6:ac: 8b:b5:b4:56:12:89:8f:47:39:92:c5:1c:ec:84:b2: 94:67:d6:32:bc:26:b7:04:e0:9d:fc:1b:3e:b2:ff: dc:03:89:2e:4d:7c:6a:8b:5b:a4:77:62:28:05:9f: 57:1b:56:fa:0c:6a:22:14:c6:8b:56:3a:46:0a:6d: 92:99:fc:ac:3b:15:ae:d7:8b:77:45:f5:da:ca:af: a2:77:38:22:eb:3d:f1:59:16:cb:a9:26:58:4f:80: 68:f6:6c:58:e1:28:92:a9:05:59:56:9d:aa:81:22: 85:8b:4e:53:37:f7:d2:fe:01:95:e0:b9:bc:52:5e: 27:46:0f:30:6d:5e:6c:c2:1d:15:75:47:da:54:df: fb:fb:c6:6f:fb:ce:cc:34:4e:a6:da:b4:f7:91:ad: ed:76:04:6d:bf:53:69:1f:5c:ac:b1:48:ab:f9:56: 79:15:e1:c3:94:73:af:f1:2d:a9:a8:66:81:b6:ac: a8:27:26:cc:99:24:a5:3c:0d:dd:a6:94:76:f2:bb: 7b:cc:63:01:02:63:e1:46:de:b7:da:92:a0:85:a2: 08:0a:b8:0e:52:ba:30:bf:70:2c:2e:08:06:39:c5: e7:e1:b6:a7:46:91:96:77:8a:04:1f:18:3c:1e:1a: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:19:56:93:D2:BD:D6:B7:F1:9B:15:C3:A9:A9:78:E5:09:77:90 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9a:a0:05:8e:3b:c1:6a:97:e1:65:8b:1d:8e:51:d9:04:a4: a8:9a:37:98:e2:39:42:a7:df:23:ab:1a:68:30:40:92:88:ab: 34:1d:1f:9b:28:53:71:18:ff:7a:68:9f:d5:aa:50:b8:93:1c: c6:a7:7d:82:06:f5:b5:5b:23:80:7c:6e:9d:68:c4:ca:61:76: ad:42:d4:e3:70:30:c6:bd:9b:ce:4c:94:14:ba:89:56:74:68: e9:eb:56:cd:44:39:89:11:ff:4e:71:2d:2c:7a:4d:ef:46:58: 38:0e:b0:af:8a:dd:2e:ee:53:96:e6:14:37:96:b7:a1:73:e2: ee:eb:bc:ee:7a:0b:17:c2:9a:32:6e:1e:3b:f9:0a:07:a6:e8: 8b:0d:14:68:b6:03:66:a6:ed:7c:29:06:db:2a:c9:f0:40:8d: 37:25:c0:9d:41:35:cc:41:7e:63:60:7a:3d:74:ac:67:01:c6: a6:f0:55:04:22:2b:10:02:d0:e5:b4:f2:ea:64:c4:df:0b:e5: c1:ac:44:19:1c:98:e0:e9:20:cc:d5:47:19:4f:7a:66:22:f2: 30:b1:9e:c4:4e:a1:a3:d6:28:8a:7b:c7:57:1c:10:27:be:4a: d6:60:0b:7b:4d:13:b2:31:cb:28:1e:f0:1e:62:6a:00:67:49: f9:d7:52:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjQwNTA2MTUwNDEyWhcNMjQwNTEzMTUwNDEyWjAYMRYwFAYD VQQDEw02NjM4ZjE2Yy02OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JlHjdesCXEJQ/h79qyLtbRWEomPRzmSxRzshLKUZ9YyvCa3BOCd/Bs+sv/c A4kuTXxqi1ukd2IoBZ9XG1b6DGoiFMaLVjpGCm2SmfysOxWu14t3RfXayq+idzgi 6z3xWRbLqSZYT4Bo9mxY4SiSqQVZVp2qgSKFi05TN/fS/gGV4Lm8Ul4nRg8wbV5s wh0VdUfaVN/7+8Zv+87MNE6m2rT3ka3tdgRtv1NpH1yssUir+VZ5FeHDlHOv8S2p qGaBtqyoJybMmSSlPA3dppR28rt7zGMBAmPhRt632pKghaIICrgOUrowv3AsLggG OcXn4banRpGWd4oEHxg8HhrH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD6GVaT 0r3Wt/GbFcOpqXjlCXeQMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6mqAFjjvBapfhZYsdjlHZBKSomjeY4jlCp98jqxpoMECSiKs0HR+b KFNxGP96aJ/VqlC4kxzGp32CBvW1WyOAfG6daMTKYXatQtTjcDDGvZvOTJQUuolW dGjp61bNRDmJEf9OcS0sek3vRlg4DrCvit0u7lOW5hQ3lrehc+Lu67zuegsXwpoy bh47+QoHpuiLDRRotgNmpu18KQbbKsnwQI03JcCdQTXMQX5jYHo9dKxnAcam8FUE IisQAtDltPLqZMTfC+XBrEQZHJjg6SDM1UcZT3pmIvIwsZ7ETqGj1iiKe8dXHBAn vkrWYAt7TROyMcsoHvAeYmoAZ0n511JJ -----END CERTIFICATE-----Generated at Mon May 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org