$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: LwlaKV+PEWlBeDwZ7hFi1TrgY3lPlwuv5uwwwNEUE0A= Subject key identifier: 08:DA:D9:F5:6B:1A:C5:47:39:B5:97:52:B9:F2:66:D5:F6:0E:82:41 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 2043 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 2043 Signing time: Sat 18 May 2024 16:18:43 +0000 Manifest this update: Sat 18 May 2024 16:18:42 +0000 Manifest next update: Sat 25 May 2024 16:18:42 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: HufTA5daFNLCBj8qn1/kmaXpYve0zV4G0rqnpFwuBx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8259 (0x2043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: May 18 16:18:42 2024 GMT Not After : May 25 16:18:42 2024 GMT Subject: CN=6648d4e3-16da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:af:5e:61:77:03:66:6e:cb:17:72:d3:38: f5:64:75:1e:6e:10:e9:2b:bb:9d:8c:73:5c:c1:fa: d7:b6:0e:ee:ff:a0:09:5c:6b:02:9f:df:d7:d6:86: 1c:fd:58:96:a0:37:5c:f4:cd:33:bd:9f:2c:8e:1f: fe:ad:b2:e4:be:5b:38:d0:ff:02:f1:16:38:52:da: 3c:8a:05:76:71:b1:e3:22:69:b4:16:5b:ff:92:d8: c4:d2:d5:ed:a9:d1:65:a1:86:3d:0e:1d:19:be:ef: 7c:b1:aa:98:37:ab:f8:e7:6a:29:a6:f7:96:c7:27: 3d:19:17:61:30:32:25:a4:83:0b:c1:aa:d6:f8:30: 0e:87:07:96:e0:9a:da:6c:15:99:9b:63:dc:74:d3: af:3c:93:b2:a4:c6:69:40:0b:b2:cc:49:8e:dd:c4: 27:0f:b0:5b:d8:a4:7f:39:a5:c4:a2:97:b7:8a:51: d1:51:a0:45:d8:1f:7e:48:b3:ae:63:a4:69:66:9d: fa:c5:52:da:e4:db:5c:a6:7e:2d:b0:73:30:a2:40: bb:34:ba:c6:98:8f:a1:32:d6:05:81:6b:0e:dd:8e: 2a:d7:f4:97:23:11:1c:26:aa:5c:42:80:f2:a6:9f: 81:63:fa:99:20:5d:b8:fa:a7:73:76:b5:09:48:dd: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:D9:F5:6B:1A:C5:47:39:B5:97:52:B9:F2:66:D5:F6:0E:82:41 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d6:57:af:7c:af:51:4b:74:33:e4:63:2c:fb:65:c1:8b:14: 2e:8e:a9:ce:43:d6:2c:71:d5:39:61:52:6b:ff:f0:94:29:24: e4:9f:9e:32:c9:9b:1f:ac:20:2b:4b:d1:5a:88:b0:8c:d4:86: 9a:d9:92:cd:b6:6d:f2:19:a6:4f:90:6d:a0:6e:7d:3f:30:94: ff:74:f5:61:34:d7:b6:76:20:e6:e3:8b:8f:49:2e:34:35:b2: c2:ca:3b:ff:7e:9a:fe:fb:1c:5e:01:3a:bd:ba:28:56:79:80: 1a:64:d3:53:4e:61:a6:35:32:94:64:4d:7c:ae:2a:3f:e4:5b: 9f:1d:ae:24:9b:df:83:a3:78:6c:0c:e2:b6:08:a8:6a:34:de: 84:33:35:8c:0c:15:25:eb:9f:08:c2:a0:b5:03:ad:46:fc:fc: 9b:95:ea:2a:04:02:e8:52:80:2a:dc:13:f3:65:21:ff:95:8e: 7b:84:26:e2:82:e7:f9:3d:42:d2:df:63:a0:26:dd:f7:76:d9: a6:44:62:d4:c5:78:9c:9c:23:29:d2:ed:e0:ff:b7:b2:0f:fc: 29:35:fe:6c:e9:d7:85:08:e0:3d:b1:78:53:dd:cc:28:36:b3: da:5d:39:72:b0:87:00:6b:a6:20:04:6b:94:2b:b7:79:a7:b9: b9:60:54:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjQwNTE4MTYxODQyWhcNMjQwNTI1MTYxODQyWjAYMRYwFAYD VQQDEw02NjQ4ZDRlMy0xNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTWvXmF3A2Zuyxdy0zj1ZHUebhDpK7udjHNcwfrXtg7u/6AJXGsCn9/X1oYc /ViWoDdc9M0zvZ8sjh/+rbLkvls40P8C8RY4Uto8igV2cbHjImm0Flv/ktjE0tXt qdFloYY9Dh0Zvu98saqYN6v452oppveWxyc9GRdhMDIlpIMLwarW+DAOhweW4Jra bBWZm2PcdNOvPJOypMZpQAuyzEmO3cQnD7Bb2KR/OaXEope3ilHRUaBF2B9+SLOu Y6RpZp36xVLa5Ntcpn4tsHMwokC7NLrGmI+hMtYFgWsO3Y4q1/SXIxEcJqpcQoDy pp+BY/qZIF24+qdzdrUJSN1ejQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAja2fVr GsVHObWXUrnyZtX2DoJBMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1levfK9RS3Qz5GMs+2XBixQujqnOQ9YscdU5YVJr//CUKSTkn54y yZsfrCArS9FaiLCM1Iaa2ZLNtm3yGaZPkG2gbn0/MJT/dPVhNNe2diDm44uPSS40 NbLCyjv/fpr++xxeATq9uihWeYAaZNNTTmGmNTKUZE18rio/5FufHa4km9+Do3hs DOK2CKhqNN6EMzWMDBUl658IwqC1A61G/PybleoqBALoUoAq3BPzZSH/lY57hCbi guf5PULS32OgJt33dtmmRGLUxXicnCMp0u3g/7eyD/wpNf5s6deFCOA9sXhT3cwo NrPaXTlysIcAa6YgBGuUK7d5p7m5YFTx -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org