$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: 5mBzzT6GmKFTm///DvULaEptbXno9H93ichrxl8xQwk= Subject key identifier: DF:F9:7B:70:54:8C:44:C9:B0:24:94:03:81:5C:3E:4D:2D:B2:61:EE Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 1EC9 Signing time: Sat 18 May 2024 17:09:48 +0000 Manifest this update: Sat 18 May 2024 17:09:48 +0000 Manifest next update: Sat 25 May 2024 17:09:48 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: KGlD1MqlblTkFIn7ADg32YorQ44ede7yNrUbAwvpXIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: May 18 17:09:48 2024 GMT Not After : May 25 17:09:48 2024 GMT Subject: CN=6648e0dc-ab73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:65:40:1e:44:52:23:84:fe:fd:74:b0:89: 97:08:2e:0f:fb:de:fc:0f:96:fe:ca:af:98:c2:15: 19:c3:dd:7d:53:15:b7:0f:c8:f3:ac:3a:1f:2f:66: d4:18:e2:f3:4c:aa:c3:1b:d6:3c:4a:33:68:54:32: 6c:e1:94:c2:63:d2:84:32:14:43:8b:e1:0c:c8:fd: 49:98:61:35:15:7a:f5:81:8b:ee:c0:95:97:35:ba: d3:bb:0f:a5:38:7e:23:cd:64:88:1e:e8:ef:23:f9: 92:b8:c8:d2:e5:6e:0c:dc:2c:ac:94:f2:26:59:ad: e8:cd:5c:36:5e:cd:fc:4a:36:fa:df:3e:e4:3d:6d: b6:d2:49:0f:cf:c7:00:32:cd:79:90:69:9c:ba:82: 0a:69:87:49:83:c8:50:62:1e:9f:eb:4a:72:c5:71: 64:48:24:c9:ae:ac:cc:14:27:8e:cb:90:5b:6d:df: 7a:89:08:cd:7b:1c:4e:e8:84:00:aa:85:49:23:d9: 9b:a6:35:fc:7b:0b:f4:3f:b5:30:7d:2c:be:86:c3: 2b:6b:12:f9:f0:64:a7:57:85:79:f1:82:5e:fc:1c: 54:53:63:25:94:f8:35:73:07:16:99:e3:6f:2d:66: 86:19:fa:e7:a9:9d:0c:17:c3:4e:4f:f8:f9:2e:0e: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F9:7B:70:54:8C:44:C9:B0:24:94:03:81:5C:3E:4D:2D:B2:61:EE X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e7:9d:cc:f3:e4:a4:00:fe:e8:40:95:69:20:94:96:34:05: 1b:9a:01:ae:29:cd:5d:3e:1a:88:5b:a8:f4:ea:9f:cb:66:9d: 2a:53:ac:20:39:36:a9:fd:bc:59:0b:49:4f:39:af:34:fc:a2: 82:fb:c6:95:18:96:c3:8c:a3:a5:60:24:83:89:46:27:6e:56: b6:54:4b:de:ec:bc:fe:0a:dc:77:a2:b7:1a:b1:d2:c0:09:56: 2d:ec:14:c1:23:4e:4a:5b:00:cc:02:5d:b1:c0:bf:79:7c:a7: 35:40:4c:b2:ee:56:9c:77:63:10:5c:3c:14:21:e8:02:10:9d: b9:6f:58:f7:b9:f9:86:b4:56:0d:85:ac:21:39:1d:95:94:ba: 62:4c:58:a1:29:2a:46:91:fc:b8:8b:98:bb:10:76:82:7e:2c: ed:12:89:6c:ec:03:93:b0:b8:b8:cf:63:c8:77:ad:0b:a4:43: 2f:05:0d:f0:5e:a1:f2:5f:08:c1:e6:2d:45:7a:77:b7:8f:1e: b9:af:d4:db:5f:d7:99:27:39:dc:18:22:46:c9:85:38:59:86: 97:79:28:c2:ac:93:28:5f:fc:9c:56:a1:ef:51:d1:25:49:53: 9a:89:2c:31:0e:ac:80:d1:b7:33:91:91:10:6c:3a:e1:18:ac: 3c:e1:19:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjQwNTE4MTcwOTQ4WhcNMjQwNTI1MTcwOTQ4WjAYMRYwFAYD VQQDEw02NjQ4ZTBkYy1hYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs55lQB5EUiOE/v10sImXCC4P+978D5b+yq+YwhUZw919UxW3D8jzrDofL2bU GOLzTKrDG9Y8SjNoVDJs4ZTCY9KEMhRDi+EMyP1JmGE1FXr1gYvuwJWXNbrTuw+l OH4jzWSIHujvI/mSuMjS5W4M3CyslPImWa3ozVw2Xs38Sjb63z7kPW220kkPz8cA Ms15kGmcuoIKaYdJg8hQYh6f60pyxXFkSCTJrqzMFCeOy5Bbbd96iQjNexxO6IQA qoVJI9mbpjX8ewv0P7UwfSy+hsMraxL58GSnV4V58YJe/BxUU2MllPg1cwcWmeNv LWaGGfrnqZ0MF8NOT/j5Lg4zvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/5e3BU jETJsCSUA4FcPk0tsmHuMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+553M8+SkAP7oQJVpIJSWNAUbmgGuKc1dPhqIW6j06p/LZp0qU6wg OTap/bxZC0lPOa80/KKC+8aVGJbDjKOlYCSDiUYnbla2VEve7Lz+Ctx3orcasdLA CVYt7BTBI05KWwDMAl2xwL95fKc1QEyy7lacd2MQXDwUIegCEJ25b1j3ufmGtFYN hawhOR2VlLpiTFihKSpGkfy4i5i7EHaCfiztEols7AOTsLi4z2PId60LpEMvBQ3w XqHyXwjB5i1Fene3jx65r9TbX9eZJzncGCJGyYU4WYaXeSjCrJMoX/ycVqHvUdEl SVOaiSwxDqyA0bczkZEQbDrhGKw84Rl8 -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org