$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: fe3HEZbA+gyAd3R/7oYAaMJBLVThF2pFn4pflxiS7Pg= Subject key identifier: 10:88:98:93:CB:06:6A:D5:BC:08:56:61:56:64:0E:80:2C:E1:DC:F3 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 117D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 18A2 Signing time: Sat 18 May 2024 17:47:18 +0000 Manifest this update: Sat 18 May 2024 17:47:17 +0000 Manifest next update: Sat 25 May 2024 17:47:17 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: g0FSgIGHpvZpOdHpR1Ck8I4X6BF1hAROBevdwvw3J2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4477 (0x117d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: May 18 17:47:17 2024 GMT Not After : May 25 17:47:17 2024 GMT Subject: CN=6648e9a5-1c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:75:5e:5b:98:2c:55:91:4a:e6:76:45:08: 00:e1:21:0a:0e:7a:ca:1f:ac:14:93:c2:46:2b:1a: 9a:83:5a:c2:7f:f2:f1:cc:4f:e7:b0:ae:ae:b6:d0: 76:80:33:c7:d9:1f:35:64:19:bf:85:31:c2:7f:4c: 15:c8:4a:b8:ac:2f:1c:f2:cd:59:72:62:de:93:7f: a8:67:8d:d6:fc:42:7d:2c:81:ab:3c:8c:a9:4c:2e: 70:5f:d6:f7:1d:b1:65:ed:5a:7d:32:bd:fa:b6:e8: 4f:cd:12:ef:58:4f:f8:1d:25:5d:56:9f:2c:9c:97: 77:55:5c:9b:da:7d:9d:74:fa:38:94:8d:38:2d:92: ee:42:e3:fe:df:65:1a:03:e3:91:f7:b0:64:63:9e: 25:0c:8d:7c:55:ad:05:f5:89:ec:6b:63:22:de:75: 1e:8a:4f:39:6f:ae:d8:2e:f5:7b:24:4e:ea:f8:72: 3b:0d:34:f5:bf:4a:83:cd:13:a4:81:66:57:ae:67: b4:6d:dc:cb:2d:b5:94:87:c7:02:7e:7a:d1:0d:4a: f0:8c:c1:43:9a:8c:87:71:4a:19:9b:38:9e:7c:41: ae:6c:46:5d:1c:e4:3b:17:fc:c7:39:3a:9b:0f:80: d3:32:db:66:ad:5c:3f:b5:80:29:41:23:86:26:37: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:88:98:93:CB:06:6A:D5:BC:08:56:61:56:64:0E:80:2C:E1:DC:F3 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:58:ed:07:9b:e3:03:1e:d9:5e:6d:d0:26:58:b4:62:cf:94: d3:88:fc:52:0b:80:51:aa:d9:9b:77:73:16:59:26:0e:98:6f: 5a:ad:a8:97:bf:d6:22:96:4d:d0:e7:0a:fc:ae:de:c7:f5:eb: f2:0c:a6:30:ad:99:72:a0:3a:95:30:5c:a4:95:66:da:96:18: e6:8b:dc:2f:fc:fa:cd:b6:89:87:aa:50:86:cd:b1:e9:b9:63: 7b:16:e9:ff:6b:ac:d7:b0:45:5c:ba:bd:11:9c:81:ae:d9:cc: a0:bf:87:1b:6e:b9:70:8b:5d:b4:a3:cf:1a:ba:df:c2:c9:fa: cd:33:62:12:a4:e7:69:ad:d3:4b:6b:0c:a1:fb:4e:75:3f:da: 55:39:cc:89:02:2f:54:5d:35:df:de:95:6f:7a:98:6e:cb:d1: 12:be:49:d1:e3:9b:9f:d6:69:82:93:f8:b5:ad:5c:5e:36:bd: c0:49:27:04:53:86:ef:df:c5:fa:28:df:a4:8d:4a:ab:b4:8b: de:b9:75:ea:38:09:5f:ed:1b:65:41:06:6f:20:0d:40:12:33: 42:95:1a:60:09:27:dc:be:6c:3c:2a:89:18:f7:2d:28:64:55: e9:a1:24:63:c5:60:ec:9a:49:18:ff:2f:5c:11:29:69:f8:4b: 0d:0c:bd:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjQwNTE4MTc0NzE3WhcNMjQwNTI1MTc0NzE3WjAYMRYwFAYD VQQDEw02NjQ4ZTlhNS0xYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LV1XluYLFWRSuZ2RQgA4SEKDnrKH6wUk8JGKxqag1rCf/LxzE/nsK6uttB2 gDPH2R81ZBm/hTHCf0wVyEq4rC8c8s1ZcmLek3+oZ43W/EJ9LIGrPIypTC5wX9b3 HbFl7Vp9Mr36tuhPzRLvWE/4HSVdVp8snJd3VVyb2n2ddPo4lI04LZLuQuP+32Ua A+OR97BkY54lDI18Va0F9Ynsa2Mi3nUeik85b67YLvV7JE7q+HI7DTT1v0qDzROk gWZXrme0bdzLLbWUh8cCfnrRDUrwjMFDmoyHcUoZmziefEGubEZdHOQ7F/zHOTqb D4DTMttmrVw/tYApQSOGJjdMRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCImJPL BmrVvAhWYVZkDoAs4dzzMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQWO0Hm+MDHtlebdAmWLRiz5TTiPxSC4BRqtmbd3MWWSYOmG9araiX v9Yilk3Q5wr8rt7H9evyDKYwrZlyoDqVMFyklWbalhjmi9wv/PrNtomHqlCGzbHp uWN7Fun/a6zXsEVcur0RnIGu2cygv4cbbrlwi120o88aut/CyfrNM2ISpOdprdNL awyh+051P9pVOcyJAi9UXTXf3pVvephuy9ESvknR45uf1mmCk/i1rVxeNr3ASScE U4bv38X6KN+kjUqrtIveuXXqOAlf7RtlQQZvIA1AEjNClRpgCSfcvmw8KokY9y0o ZFXpoSRjxWDsmkkY/y9cESlp+EsNDL2O -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org