$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: R+wtufh59o7FcaYGWw1h0sTa54sycD2TjQcelGjVv0s= Subject key identifier: FB:90:2C:94:5E:0B:F4:60:FA:68:9B:FF:A2:B0:CB:95:D5:85:82:85 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 11D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 11CB Signing time: Sat 18 May 2024 17:44:29 +0000 Manifest this update: Sat 18 May 2024 17:44:29 +0000 Manifest next update: Sat 25 May 2024 17:44:29 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: NeSdd7rJ/ZJdIcFBw0gox9/4tkSPkOAmxrczLHwN/8Q=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: OPz27nP3CQDCCDKBRilAtcc3FWYpgtDai6u0ugzendo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4561 (0x11d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: May 18 17:44:29 2024 GMT Not After : May 25 17:44:29 2024 GMT Subject: CN=6648e8fd-1f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:f5:9e:00:31:3f:e1:30:cf:39:58:2d:be: f0:ed:12:a0:1f:67:c3:f4:0d:6a:7e:d4:4d:d6:fe: 96:2d:88:80:a6:c2:77:f1:c4:1e:5b:d7:99:28:31: dc:75:1f:f0:6b:1f:c6:aa:87:c4:1b:86:89:23:b2: 71:bb:c0:c7:04:26:24:52:31:66:29:aa:b6:55:7d: 28:87:86:53:7a:4c:02:28:d7:61:73:a4:31:86:2c: 02:1e:c2:aa:be:07:38:98:2e:48:2c:d4:b1:1a:1f: 20:a7:35:07:70:81:74:0f:ba:d4:03:36:53:3f:26: 4d:f7:4d:6b:a3:ec:fb:72:a7:12:a1:07:7c:6e:8b: 99:da:03:f4:94:68:de:bb:dd:3a:54:f1:e4:56:d9: 01:97:88:9f:63:fc:61:b7:1f:a9:19:1d:fc:6c:f1: f9:14:77:5d:d4:a5:02:16:6b:4d:4c:bd:54:29:34: 6d:5e:d6:0c:78:8a:00:e6:8c:78:65:c2:10:57:4f: 55:63:f2:53:95:ca:b4:7b:0c:3f:19:9e:53:9a:17: 28:eb:67:0f:40:e4:15:8b:43:ca:09:63:78:7d:f3: 53:9a:b2:63:b5:79:7b:b7:24:70:56:3d:e4:05:4f: b3:f4:81:ca:d6:05:9b:c7:ef:38:a0:84:53:13:ff: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:2C:94:5E:0B:F4:60:FA:68:9B:FF:A2:B0:CB:95:D5:85:82:85 X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b1:09:84:7a:5b:2d:3f:a0:bb:bf:97:ad:6e:bc:cd:8a:6a: cd:fe:65:76:de:81:e0:7c:4f:c6:b2:04:b5:8f:a4:23:d1:d8: 4f:3e:3b:c9:0a:61:33:4d:e2:1c:fc:d9:2d:3a:0e:da:80:e8: ab:8f:50:ca:e3:54:d4:8b:29:44:28:4a:f8:55:2f:4d:75:b5: 3f:c8:eb:80:48:e5:8c:85:42:61:ad:34:40:3d:a5:78:b0:ec: 47:dc:49:32:f5:80:14:c7:4c:65:d0:ad:9a:ab:c3:2e:49:ba: 0b:4d:39:3f:91:b3:1a:f1:8f:ac:6c:57:eb:c9:39:ab:64:13: cd:5b:99:b8:3f:47:81:4c:cd:56:28:ad:7b:58:b7:19:07:34: 7e:69:28:41:da:ef:1f:64:44:22:bf:99:92:83:fb:b0:17:a5: ce:cc:c3:26:49:05:71:32:2d:15:29:fb:99:e4:79:9d:0d:01: 8d:71:fd:64:30:75:f1:cb:5f:8d:e3:9d:1a:97:27:1f:80:c9: 31:21:b2:e0:f9:90:5f:d3:3f:3e:e1:18:c4:79:56:bb:f9:dd: 2a:69:ba:1e:14:b3:52:88:43:70:df:f4:6d:b9:0b:98:5f:d4: b8:4a:76:da:fb:99:a1:ae:58:e0:b3:5d:f2:9f:23:af:58:02: fc:67:78:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjQwNTE4MTc0NDI5WhcNMjQwNTI1MTc0NDI5WjAYMRYwFAYD VQQDEw02NjQ4ZThmZC0xZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGj1ngAxP+EwzzlYLb7w7RKgH2fD9A1qftRN1v6WLYiApsJ38cQeW9eZKDHc dR/wax/GqofEG4aJI7Jxu8DHBCYkUjFmKaq2VX0oh4ZTekwCKNdhc6QxhiwCHsKq vgc4mC5ILNSxGh8gpzUHcIF0D7rUAzZTPyZN901ro+z7cqcSoQd8bouZ2gP0lGje u906VPHkVtkBl4ifY/xhtx+pGR38bPH5FHdd1KUCFmtNTL1UKTRtXtYMeIoA5ox4 ZcIQV09VY/JTlcq0eww/GZ5Tmhco62cPQOQVi0PKCWN4ffNTmrJjtXl7tyRwVj3k BU+z9IHK1gWbx+84oIRTE/8drwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuQLJRe C/Rg+mib/6Kwy5XVhYKFMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcsQmEelstP6C7v5etbrzNimrN/mV23oHgfE/GsgS1j6Qj0dhPPjvJ CmEzTeIc/NktOg7agOirj1DK41TUiylEKEr4VS9NdbU/yOuASOWMhUJhrTRAPaV4 sOxH3Eky9YAUx0xl0K2aq8MuSboLTTk/kbMa8Y+sbFfryTmrZBPNW5m4P0eBTM1W KK17WLcZBzR+aShB2u8fZEQiv5mSg/uwF6XOzMMmSQVxMi0VKfuZ5HmdDQGNcf1k MHXxy1+N450alycfgMkxIbLg+ZBf0z8+4RjEeVa7+d0qaboeFLNSiENw3/RtuQuY X9S4Snba+5mhrljgs13ynyOvWAL8Z3ht -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org