$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft File: mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json) Hash identifier: mXrOTbirVLYOsiDFBurBYt2IjJENNjkphMo/CmSib7o= Subject key identifier: 56:AC:32:6C:C4:C4:11:9E:8A:2F:19:F1:F4:86:2B:21:F5:18:E7:E8 Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D Certificate issuer: /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Certificate serial: 0ED0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft Manifest number: 0ED0 Signing time: Sat 18 May 2024 18:17:56 +0000 Manifest this update: Sat 18 May 2024 18:17:55 +0000 Manifest next update: Sat 25 May 2024 18:17:55 +0000 Files and hashes: 1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: Os8yMEvsn3IwdOdtdu1M1KXPbXHPa9mr8TNeTeHLdRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3792 (0xed0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Validity Not Before: May 18 18:17:55 2024 GMT Not After : May 25 18:17:55 2024 GMT Subject: CN=6648f0d3-8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:07:9a:dc:c5:a0:f2:7c:ee:c0:9e:a7:16: 50:df:ac:c1:eb:fd:17:bf:63:49:cf:94:d5:17:b0: a1:06:43:2d:09:8d:f7:1f:31:d7:ce:b7:38:60:bb: 79:7b:8f:cf:37:2d:d2:8a:aa:97:86:c8:21:19:5e: be:f2:b0:05:7e:bb:2c:90:87:0f:fd:aa:81:f7:80: 04:4c:78:3a:70:8b:e2:c4:25:a1:0c:f6:a1:4c:52: e3:ed:31:9c:e4:61:6c:ce:e2:bd:12:25:46:4c:2c: 8a:c4:2b:d1:7d:8d:46:29:54:93:83:ce:1d:79:de: 4c:c2:4c:e3:8d:47:a9:d1:09:db:fb:0c:1c:c8:1c: 13:f7:2e:d1:9c:a5:d4:8c:80:c6:38:c8:e5:dc:04: a1:a8:14:0d:6a:9a:cc:40:7e:63:c4:8b:3b:41:ba: 36:2f:f3:7d:96:56:ea:41:10:61:7d:57:d6:b5:ee: 9f:b2:ea:ff:8a:f7:61:d6:8e:14:8c:17:40:e9:c0: 0b:ba:64:2d:95:58:2b:6c:82:ed:4e:f0:d2:f5:fa: ea:dc:bb:55:de:87:7a:1b:74:b4:ff:da:dd:0b:66: 94:a5:33:a0:c3:eb:2d:02:e7:eb:23:0a:9f:57:cf: 91:c2:dc:e0:ba:f5:1f:cf:ae:ac:b9:47:4f:db:bc: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AC:32:6C:C4:C4:11:9E:8A:2F:19:F1:F4:86:2B:21:F5:18:E7:E8 X509v3 Authority Key Identifier: keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7c:6d:f4:6c:e2:c9:6b:ce:66:0c:be:d4:34:56:b4:59:ee: 3d:22:b1:2d:cb:83:8f:a4:2c:c2:11:f2:77:0a:4a:b4:c3:72: 31:1b:8a:a6:cb:6b:e3:aa:63:7e:11:bd:f7:d4:18:c1:fe:57: 60:4e:e6:b6:8e:d0:92:ec:27:03:69:ac:ed:0d:22:37:4a:4a: 8c:90:ae:d0:45:58:10:0e:10:fa:db:5c:0d:4e:ab:de:b5:8a: 03:74:0b:ea:76:f0:02:38:45:fc:76:c1:ad:96:ce:8e:f4:35: f3:96:c7:32:84:d0:54:37:06:27:6b:2c:60:ab:e0:e2:2a:c4: f7:44:bb:04:c0:f8:d4:9d:5e:17:d1:c6:b7:8b:cc:34:53:9e: 52:c7:12:b4:40:d8:91:67:eb:7d:45:11:76:19:3c:5e:bb:91: 1e:b0:ca:d5:a0:d2:44:20:30:e5:c6:a4:7e:61:3b:6b:ea:9a: 5a:9a:a6:45:d3:99:0c:a9:00:f4:e0:1f:c5:10:d4:e2:da:55: a0:97:9b:2e:b0:2a:60:e3:02:41:31:64:b9:99:cb:4e:51:03: 3e:99:28:cc:ef:07:08:2c:8d:38:f5:57:4f:d5:26:3b:3e:59: 5a:16:59:aa:8e:2a:83:ab:cb:df:a9:a8:b6:fb:b0:a9:3c:24: c2:a1:52:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NzcxMTAvBgNVBAUTKDlBNkQxNTdBNjdDREY4RkY2QTFDQ0VBMDNFNDNFNEMy RDk1QkY4NkQwHhcNMjQwNTE4MTgxNzU1WhcNMjQwNTI1MTgxNzU1WjAYMRYwFAYD VQQDEw02NjQ4ZjBkMy04OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkQHmtzFoPJ87sCepxZQ36zB6/0Xv2NJz5TVF7ChBkMtCY33HzHXzrc4YLt5 e4/PNy3SiqqXhsghGV6+8rAFfrsskIcP/aqB94AETHg6cIvixCWhDPahTFLj7TGc 5GFszuK9EiVGTCyKxCvRfY1GKVSTg84ded5MwkzjjUep0Qnb+wwcyBwT9y7RnKXU jIDGOMjl3AShqBQNaprMQH5jxIs7Qbo2L/N9llbqQRBhfVfWte6fsur/ivdh1o4U jBdA6cALumQtlVgrbILtTvDS9frq3LtV3od6G3S0/9rdC2aUpTOgw+stAufrIwqf V8+RwtzguvUfz66suUdP27whswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFasMmzE xBGeii8Z8fSGKyH1GOfoMB8GA1UdIwQYMBaAFJptFXpnzfj/ahzOoD5D5MLZW/ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Ny82NkE0MDM2MjVD RTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1QOXFITTZnUGtQa3d0bGIt RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tMFZlbWZOLVA5cUhNNmdQa1Brd3RsYi1HMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Ny82NkE0MDM2MjVDRTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1Q OXFITTZnUGtQa3d0bGItRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhfG30bOLJa85mDL7UNFa0We49IrEty4OPpCzCEfJ3Ckq0w3IxG4qm y2vjqmN+Eb331BjB/ldgTua2jtCS7CcDaaztDSI3SkqMkK7QRVgQDhD621wNTqve tYoDdAvqdvACOEX8dsGtls6O9DXzlscyhNBUNwYnayxgq+DiKsT3RLsEwPjUnV4X 0ca3i8w0U55SxxK0QNiRZ+t9RRF2GTxeu5EesMrVoNJEIDDlxqR+YTtr6ppamqZF 05kMqQD04B/FENTi2lWgl5susCpg4wJBMWS5mctOUQM+mSjM7wcILI049VdP1SY7 PllaFlmqjiqDq8vfqai2+7CpPCTCoVKV -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org