$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: NmAzB+8lqoU07hq8Up+VA20neKQhWTTpdj2c5OwO1NE= Subject key identifier: 42:22:84:0C:A1:D5:F5:95:D7:8B:DD:F6:08:3A:7B:1D:B8:4A:12:21 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0AE4 Signing time: Sat 18 May 2024 20:02:28 +0000 Manifest this update: Sat 18 May 2024 20:02:28 +0000 Manifest next update: Sat 25 May 2024 20:02:28 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: InVtccPv9Oqa/mdR+GRrNz5hwvlQjdM9hHGA+FJ5pMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: May 18 20:02:28 2024 GMT Not After : May 25 20:02:28 2024 GMT Subject: CN=66490954-12a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:48:ee:9d:54:12:c7:72:68:84:4b:83:40: c8:55:17:3e:a5:d7:30:f8:61:c9:63:53:a1:31:78: ca:4c:c2:d5:66:bd:55:f6:5d:71:00:cf:4f:4e:7e: 58:a9:24:ca:02:60:49:4a:47:7e:a2:ae:30:62:0f: 48:2a:8d:46:97:70:02:1c:45:47:4a:3e:97:86:62: c2:c3:07:03:c9:e7:93:29:35:41:bf:25:11:31:da: 48:04:dc:b7:ff:1a:d3:75:2b:c9:4a:d9:fb:35:39: 17:27:1a:9c:f6:c7:32:89:6b:8e:b8:e7:fa:5e:e6: 8e:cd:8c:f4:be:cb:55:e8:ad:7d:3d:58:6f:64:aa: 3d:4f:53:f1:6c:61:f0:42:71:28:15:c6:ed:10:bd: ab:49:c9:07:f8:4d:17:83:ce:04:61:5b:ab:ff:9c: 10:1e:c9:e0:8c:96:59:6e:63:87:5e:c4:0a:87:6f: 6c:a2:40:ed:c8:bb:e7:b4:c3:70:f0:d4:8c:e0:08: c4:55:50:2f:2d:01:58:21:59:e7:8a:11:ab:8b:7f: c7:6d:8f:78:d0:5b:2f:64:8f:7a:ad:8c:ba:23:b3: 5c:52:24:3c:45:da:b3:3d:6a:3d:e3:3c:92:27:37: 77:15:e1:e7:58:03:8a:e0:0b:d4:66:d0:ea:ae:d9: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:22:84:0C:A1:D5:F5:95:D7:8B:DD:F6:08:3A:7B:1D:B8:4A:12:21 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:af:30:1a:33:c9:58:f4:f2:6f:24:09:6e:63:fc:38:60:c4: 81:69:d5:8d:ca:2b:3f:c8:ae:d5:f6:9d:88:2c:8d:7a:3c:58: 0c:3a:d9:f8:3e:05:c4:44:24:71:b4:c0:4b:07:f8:a3:a9:78: 44:55:95:94:6f:b5:6d:e3:96:39:68:b5:d3:3a:87:67:e6:26: d1:4f:62:de:d0:00:a4:b1:d0:8c:1d:81:40:3e:ee:aa:0f:e0: 7c:b6:9a:52:68:05:bb:a1:bf:f5:5e:47:b6:64:35:aa:7a:34: 12:01:c6:53:4c:0d:ae:ca:1a:59:1e:9e:bd:d0:7e:e8:c2:32: d5:f9:2d:73:1e:16:3a:74:46:26:d6:93:11:f4:88:e5:3f:72: f9:53:92:3c:a1:19:64:5b:d6:e5:37:1d:24:3c:a3:f1:7b:45: 5e:1a:58:f6:d4:19:74:be:20:35:f2:26:75:38:9e:ed:2b:8d: a4:67:4e:46:56:c7:4e:8c:25:23:e6:93:47:c7:bd:38:3c:8a: 61:2f:de:33:45:26:e7:f6:15:41:31:78:5b:a5:83:26:32:91: 7b:69:ed:3b:97:5f:93:fc:20:52:f1:6c:55:06:bc:f8:d8:a1: 4e:61:20:cb:48:7d:3d:79:dc:5d:9c:36:e8:01:25:13:80:8f: 20:ed:20:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjQwNTE4MjAwMjI4WhcNMjQwNTI1MjAwMjI4WjAYMRYwFAYD VQQDEw02NjQ5MDk1NC0xMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLJI7p1UEsdyaIRLg0DIVRc+pdcw+GHJY1OhMXjKTMLVZr1V9l1xAM9PTn5Y qSTKAmBJSkd+oq4wYg9IKo1Gl3ACHEVHSj6XhmLCwwcDyeeTKTVBvyURMdpIBNy3 /xrTdSvJStn7NTkXJxqc9scyiWuOuOf6XuaOzYz0vstV6K19PVhvZKo9T1PxbGHw QnEoFcbtEL2rSckH+E0Xg84EYVur/5wQHsngjJZZbmOHXsQKh29sokDtyLvntMNw 8NSM4AjEVVAvLQFYIVnnihGri3/HbY940FsvZI96rYy6I7NcUiQ8RdqzPWo94zyS Jzd3FeHnWAOK4AvUZtDqrtlqJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIihAyh 1fWV14vd9gg6ex24ShIhMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjrzAaM8lY9PJvJAluY/w4YMSBadWNyis/yK7V9p2ILI16PFgMOtn4 PgXERCRxtMBLB/ijqXhEVZWUb7Vt45Y5aLXTOodn5ibRT2Le0ACksdCMHYFAPu6q D+B8tppSaAW7ob/1Xke2ZDWqejQSAcZTTA2uyhpZHp690H7owjLV+S1zHhY6dEYm 1pMR9IjlP3L5U5I8oRlkW9blNx0kPKPxe0VeGlj21Bl0viA18iZ1OJ7tK42kZ05G VsdOjCUj5pNHx704PIphL94zRSbn9hVBMXhbpYMmMpF7ae07l1+T/CBS8WxVBrz4 2KFOYSDLSH09edxdnDboASUTgI8g7SBB -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org