$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: sLtWWbS1oYkh7SiLwHs1xmjUu7DQeXkzLq+UJPOHTdQ= Subject key identifier: D1:BE:3F:7B:55:E9:6F:43:E7:AC:FC:B2:94:50:57:FB:99:B0:6E:27 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 095C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0957 Signing time: Sat 18 May 2024 21:03:18 +0000 Manifest this update: Sat 18 May 2024 21:03:17 +0000 Manifest next update: Sat 25 May 2024 21:03:17 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: zcxWu31YfwC7o5IBRIIzl8cGVgzuULfcmDuiBbxCmnQ=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: RT83I+TolxDRcxk82UOgWwbGfqpuT2NK5r8nhl6YOnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2396 (0x95c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: May 18 21:03:17 2024 GMT Not After : May 25 21:03:17 2024 GMT Subject: CN=66491795-afb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:51:6d:e2:c4:21:75:a5:59:ae:78:3e:fb: 2c:92:70:a1:ec:17:18:8a:de:6c:55:a5:8a:49:2e: 77:3a:f8:b9:1e:34:14:a9:55:66:d8:5b:24:60:c3: 7d:5d:86:a1:32:02:ce:73:c7:14:e4:36:bd:1d:07: 82:e9:59:4a:be:ba:27:d7:3c:e6:51:c5:24:b4:80: 73:97:7a:cf:a5:cd:53:1d:81:0b:e8:e4:30:5c:01: 13:6c:12:16:10:7e:e9:c1:00:5b:35:0a:06:07:2c: e3:f1:ef:66:9e:21:ad:0b:22:72:27:60:2d:fe:09: dd:56:1e:c3:84:2c:4f:52:9f:5d:82:20:b2:e5:5d: c3:c8:46:d0:c2:62:9a:8f:18:fa:ee:22:00:b1:3d: 60:5a:30:24:5f:0b:33:a5:fe:6e:94:46:bf:20:99: df:a5:34:07:d1:b3:67:dc:82:94:ea:ed:f5:8e:24: f3:e3:33:37:9c:e4:6c:2a:49:fc:dd:f6:10:8d:c1: c3:d5:45:43:12:14:0d:af:cd:bc:b3:58:8f:a8:9c: ea:69:6e:96:f3:39:35:01:b8:75:e4:59:0d:0b:11: 39:38:ac:35:7f:42:b0:73:93:20:1b:11:aa:88:06: 93:e6:7b:0e:5d:82:04:ff:33:8b:d7:17:27:df:47: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BE:3F:7B:55:E9:6F:43:E7:AC:FC:B2:94:50:57:FB:99:B0:6E:27 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:bb:54:f1:cd:22:1c:d7:9d:42:dd:a4:d1:88:34:2c:ae:7d: b6:2f:5c:d1:c1:38:e5:42:ba:bd:7f:66:58:16:ec:d8:10:12: d5:28:0c:2a:89:72:ec:e9:36:17:d0:23:ec:9f:d3:da:a6:38: 9d:fc:03:87:8c:2b:4f:82:1c:cd:c0:78:1e:e7:21:a5:17:4f: dc:3b:f9:54:af:3e:ff:62:82:7b:26:35:2e:47:7c:32:c5:a9: a3:34:e6:28:93:b1:88:60:76:00:11:af:96:9c:25:33:e5:a8: 1e:2a:87:cd:b2:5b:89:bb:37:51:2f:16:b4:19:3a:92:ef:b4: 70:f9:4a:dc:38:79:65:4b:29:04:6a:90:70:fb:fb:48:c3:41: ed:35:41:71:9a:9f:8c:f3:e9:9a:3c:a1:ce:9e:f3:33:c3:94: 55:b3:c0:51:e0:b7:b0:19:66:27:8f:23:f1:53:35:29:ae:9f: a2:b0:a6:cb:e2:d7:cf:be:d0:0c:8e:5d:e2:d5:10:d7:cb:d9: ea:b2:b1:8a:23:c1:83:34:10:4b:57:4b:74:08:54:48:f2:31: e3:b7:03:2c:03:36:bc:36:3c:f1:0b:84:f8:b5:ec:dc:26:c5: 1d:de:cc:53:31:3d:15:05:0b:32:88:16:69:ac:18:38:10:c0: fc:b3:f6:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjQwNTE4MjEwMzE3WhcNMjQwNTI1MjEwMzE3WjAYMRYwFAYD VQQDEw02NjQ5MTc5NS1hZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobpRbeLEIXWlWa54PvssknCh7BcYit5sVaWKSS53Ovi5HjQUqVVm2FskYMN9 XYahMgLOc8cU5Da9HQeC6VlKvron1zzmUcUktIBzl3rPpc1THYEL6OQwXAETbBIW EH7pwQBbNQoGByzj8e9mniGtCyJyJ2At/gndVh7DhCxPUp9dgiCy5V3DyEbQwmKa jxj67iIAsT1gWjAkXwszpf5ulEa/IJnfpTQH0bNn3IKU6u31jiTz4zM3nORsKkn8 3fYQjcHD1UVDEhQNr828s1iPqJzqaW6W8zk1Abh15FkNCxE5OKw1f0Kwc5MgGxGq iAaT5nsOXYIE/zOL1xcn30fpqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG+P3tV 6W9D56z8spRQV/uZsG4nMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBou1TxzSIc151C3aTRiDQsrn22L1zRwTjlQrq9f2ZYFuzYEBLVKAwq iXLs6TYX0CPsn9Papjid/AOHjCtPghzNwHge5yGlF0/cO/lUrz7/YoJ7JjUuR3wy xamjNOYok7GIYHYAEa+WnCUz5ageKofNsluJuzdRLxa0GTqS77Rw+UrcOHllSykE apBw+/tIw0HtNUFxmp+M8+maPKHOnvMzw5RVs8BR4LewGWYnjyPxUzUprp+isKbL 4tfPvtAMjl3i1RDXy9nqsrGKI8GDNBBLV0t0CFRI8jHjtwMsAza8NjzxC4T4tezc JsUd3sxTMT0VBQsyiBZprBg4EMD8s/ab -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org