$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: 5HBGstnnK2u4Y/3qDawlNyoj8V9txRMHW9MjrM9fnuo= Subject key identifier: CB:98:66:C2:D3:79:D1:65:41:42:6E:3A:50:B6:82:6B:5E:80:03:04 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 049D Signing time: Fri 31 May 2024 02:45:16 +0000 Manifest this update: Fri 31 May 2024 02:45:15 +0000 Manifest next update: Fri 07 Jun 2024 02:45:15 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: yMTMOgtzsHFHhb/ZtclhRBE0UNgbUMAAGy6vRRuEg1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: May 31 02:45:15 2024 GMT Not After : Jun 7 02:45:15 2024 GMT Subject: CN=665939bc-1977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:f4:46:47:40:52:ab:91:ff:65:2a:37:47: e7:77:8b:6d:48:90:9e:d0:58:28:6f:9a:2d:58:6c: 5a:95:da:77:ca:fd:e2:16:bc:99:e3:35:cb:d4:2b: 1a:de:df:f5:2e:88:5f:ba:06:19:2f:af:0c:72:60: 1d:ac:9a:92:07:96:b6:57:7f:72:44:34:ac:f3:02: e5:85:30:f0:79:c7:9b:c3:dd:81:5e:91:c3:86:a2: a3:3e:69:a9:ac:a1:0b:35:34:fa:14:77:59:9a:e0: da:73:fc:1c:e1:b5:26:db:3a:78:28:b8:e6:99:35: 09:ed:35:f2:c7:7b:bd:e0:c7:a2:38:7c:94:3c:1d: 84:9a:11:30:8a:63:5b:32:66:30:95:3b:f7:70:bb: e8:7f:49:73:39:27:a1:f3:de:78:40:a3:59:5e:d8: a4:d3:5c:2e:2b:ff:d5:ca:11:b8:a0:d7:18:12:4e: 52:2f:46:05:fc:86:84:f7:ae:c8:10:c6:a9:db:64: 30:23:00:87:b2:6f:d7:dc:e1:4a:01:fd:de:5c:75: df:5e:96:8c:0c:c5:14:07:4a:6b:af:62:32:06:ca: c2:fb:9d:68:c8:66:5e:98:ff:8a:ac:9d:d6:49:b4: fc:6e:63:9d:f1:37:41:59:61:a5:c9:92:6a:bd:e5: ed:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:66:C2:D3:79:D1:65:41:42:6E:3A:50:B6:82:6B:5E:80:03:04 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a3:32:eb:a8:bf:54:f0:2a:ce:83:f8:4b:bb:35:a3:a6:cd: 8f:ef:1d:e8:9c:56:f3:a9:e5:71:67:14:8d:c2:57:8b:cb:b2: bb:72:bc:5e:a0:c7:0c:3a:1f:74:ec:99:a9:3f:a5:ce:cb:e1: 34:01:68:41:76:08:9d:a0:81:2e:62:b0:22:65:e0:03:96:46: fa:2f:6b:c6:9c:0d:5c:e2:bb:f6:77:85:86:e9:dc:60:c2:9f: bc:00:fb:6a:3f:d2:98:63:26:a2:5c:bd:a5:59:fe:1b:fd:9d: 31:32:e7:46:f9:43:26:b9:26:42:a4:92:fc:06:cb:ec:34:23: 7d:40:c4:74:b7:5c:ad:ce:8c:95:c9:ae:b1:4b:bf:90:aa:2c: 6b:37:b8:7e:3a:ca:95:da:27:da:19:3b:0b:dd:f9:74:70:a4: da:76:69:96:18:81:96:da:d6:c4:b4:41:14:33:45:9b:7b:a3: 33:50:fc:7f:83:6e:fd:8e:73:0e:3a:fa:ed:12:87:76:af:a3: 17:e1:2b:a0:b2:15:46:14:f2:be:03:96:24:dc:1e:81:3f:d3: 9b:a0:92:75:29:8c:c9:ff:86:3c:fa:eb:3f:00:d1:48:2f:71: 27:a1:4d:15:ad:0e:1a:2a:8a:0e:59:7b:87:7d:34:e3:57:f8: aa:2d:f7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjQwNTMxMDI0NTE1WhcNMjQwNjA3MDI0NTE1WjAYMRYwFAYD VQQDEw02NjU5MzliYy0xOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmL0RkdAUquR/2UqN0fnd4ttSJCe0Fgob5otWGxaldp3yv3iFryZ4zXL1Csa 3t/1LohfugYZL68McmAdrJqSB5a2V39yRDSs8wLlhTDwecebw92BXpHDhqKjPmmp rKELNTT6FHdZmuDac/wc4bUm2zp4KLjmmTUJ7TXyx3u94MeiOHyUPB2EmhEwimNb MmYwlTv3cLvof0lzOSeh8954QKNZXtik01wuK//VyhG4oNcYEk5SL0YF/IaE967I EMap22QwIwCHsm/X3OFKAf3eXHXfXpaMDMUUB0prr2IyBsrC+51oyGZemP+KrJ3W SbT8bmOd8TdBWWGlyZJqveXtEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuYZsLT edFlQUJuOlC2gmtegAMEMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlozLrqL9U8CrOg/hLuzWjps2P7x3onFbzqeVxZxSNwleLy7K7crxe oMcMOh907JmpP6XOy+E0AWhBdgidoIEuYrAiZeADlkb6L2vGnA1c4rv2d4WG6dxg wp+8APtqP9KYYyaiXL2lWf4b/Z0xMudG+UMmuSZCpJL8BsvsNCN9QMR0t1ytzoyV ya6xS7+QqixrN7h+OsqV2ifaGTsL3fl0cKTadmmWGIGW2tbEtEEUM0Wbe6MzUPx/ g279jnMOOvrtEod2r6MX4SugshVGFPK+A5Yk3B6BP9OboJJ1KYzJ/4Y8+us/ANFI L3EnoU0VrQ4aKooOWXuHfTTjV/iqLfcI -----END CERTIFICATE-----Generated at Fri May 31 06:49:19 2024 by rpki-client on console-ams.rpki-client.org