$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: UqFnUYdQd3NAPsoucvg5KNPZOyRRaDMYHoJyDrgbZUc= Subject key identifier: 4F:7F:B9:19:A9:C0:C0:85:45:51:19:D7:A4:F2:66:FB:8E:83:D3:AF Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: C4 Signing time: Sun 19 May 2024 06:18:15 +0000 Manifest this update: Sun 19 May 2024 06:18:15 +0000 Manifest next update: Sun 26 May 2024 06:18:15 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: 9ZvKP0eL2n2FBpql10B1exSNW01AaZ/XZL8XtD3DHM8=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: CEGzbb8mbwbCceZtpxGKn27etBkh86Y23v6fJ7nUYK8=) 3: F2439C1AEB4211EDB83DE270C4F9AE02.roa (hash: pTLezp3872oFUP10UFCAjfrKkGbGedCDyE1r8Pl4UAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: May 19 06:18:15 2024 GMT Not After : May 26 06:18:15 2024 GMT Subject: CN=664999a7-2e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:fe:17:20:4e:59:0f:c5:8b:9c:7e:b7:ac: 99:f4:de:eb:63:cb:d6:08:aa:d0:68:d4:79:9b:11: bc:0f:ba:8a:89:b5:9c:7d:55:b0:58:29:8d:3d:1e: d2:be:ae:f6:4e:54:b6:64:75:ec:22:66:02:42:d6: 17:92:60:ee:97:1a:b4:ed:88:52:2e:c5:e2:50:88: f6:28:60:69:e6:45:6a:51:10:7f:03:83:d7:49:9d: f6:cd:97:22:8f:ce:bf:97:85:c9:cc:d7:16:e1:51: c9:77:ac:27:f4:6d:46:c0:48:fc:cb:59:c7:69:67: f9:49:89:e6:3c:79:25:fc:fd:47:b4:9f:61:d3:56: ac:38:88:e1:85:b6:e0:4f:e1:1a:4c:0e:f9:1a:e4: f1:df:5b:d4:bd:60:81:fa:67:90:09:42:f4:b7:94: 71:07:85:67:ba:d7:48:61:c7:57:15:6b:ba:8f:e6: 78:a3:93:a8:19:02:7d:8d:0a:46:ae:d5:d7:14:8d: 81:9d:12:c2:c4:9f:5c:15:d6:2a:19:29:26:fb:09: 2e:fd:d4:9d:9e:41:d2:19:e4:46:84:9b:dd:1c:8e: 77:b2:1e:c6:a0:a5:45:e8:dc:6e:10:95:1e:de:35: 7d:a9:4e:e7:ab:32:41:6a:9c:d0:e9:92:ff:03:4d: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7F:B9:19:A9:C0:C0:85:45:51:19:D7:A4:F2:66:FB:8E:83:D3:AF X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:8e:56:03:20:93:99:c6:c8:cb:90:a3:b8:3e:0f:f5:dc:da: 06:46:04:39:7e:c3:87:f4:b0:40:6a:6e:6b:2f:5b:e2:2b:0e: a1:e5:7b:f2:37:44:b4:fe:b0:f7:2a:8e:9d:74:e4:e6:a5:18: 07:01:9d:67:a9:a9:df:19:a6:5a:d3:b2:48:82:5e:d6:34:56: c8:1e:c3:a1:1a:9b:6b:8c:5f:d4:12:f0:40:20:e8:3e:ff:b0: 52:53:03:4f:ea:64:7a:a6:79:24:6c:5d:38:1f:7b:81:a8:8c: 13:89:36:f5:39:5e:4a:f2:93:6d:3f:0b:38:51:e4:90:bf:2d: bd:a4:47:d6:e2:47:86:95:c5:a3:5a:87:fd:a3:0f:88:32:65: 31:a3:56:44:10:b9:8f:bb:1e:2a:0e:4e:57:d0:49:00:c8:65: bf:76:24:b8:8e:dc:82:4d:9c:57:df:89:0c:86:ce:ed:ef:ad: 66:e1:5e:d7:e7:9a:80:50:2c:b9:66:9e:e0:6b:e3:49:27:d4: 70:5b:bb:c4:72:bc:d0:13:31:c8:b8:20:e8:2a:0d:fb:51:54: be:cc:a2:42:28:21:fe:02:6a:55:e9:3f:f6:94:f4:1a:82:28: 62:74:fe:59:14:a0:74:07:ee:51:1f:a6:e4:23:64:1a:73:55: 9e:4a:dd:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjQwNTE5MDYxODE1WhcNMjQwNTI2MDYxODE1WjAYMRYwFAYD VQQDEw02NjQ5OTlhNy0yZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwD+FyBOWQ/Fi5x+t6yZ9N7rY8vWCKrQaNR5mxG8D7qKibWcfVWwWCmNPR7S vq72TlS2ZHXsImYCQtYXkmDulxq07YhSLsXiUIj2KGBp5kVqURB/A4PXSZ32zZci j86/l4XJzNcW4VHJd6wn9G1GwEj8y1nHaWf5SYnmPHkl/P1HtJ9h01asOIjhhbbg T+EaTA75GuTx31vUvWCB+meQCUL0t5RxB4VnutdIYcdXFWu6j+Z4o5OoGQJ9jQpG rtXXFI2BnRLCxJ9cFdYqGSkm+wku/dSdnkHSGeRGhJvdHI53sh7GoKVF6NxuEJUe 3jV9qU7nqzJBapzQ6ZL/A03pMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9/uRmp wMCFRVEZ16TyZvuOg9OvMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkjlYDIJOZxsjLkKO4Pg/13NoGRgQ5fsOH9LBAam5rL1viKw6h5Xvy N0S0/rD3Ko6ddOTmpRgHAZ1nqanfGaZa07JIgl7WNFbIHsOhGptrjF/UEvBAIOg+ /7BSUwNP6mR6pnkkbF04H3uBqIwTiTb1OV5K8pNtPws4UeSQvy29pEfW4keGlcWj Wof9ow+IMmUxo1ZEELmPux4qDk5X0EkAyGW/diS4jtyCTZxX34kMhs7t761m4V7X 55qAUCy5Zp7ga+NJJ9RwW7vEcrzQEzHIuCDoKg37UVS+zKJCKCH+AmpV6T/2lPQa gihidP5ZFKB0B+5RH6bkI2Qac1WeSt0h -----END CERTIFICATE-----Generated at Sun May 19 08:24:56 2024 by rpki-client on console-ams.rpki-client.org