$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: qHn9B1dX+ibO592M2wk0yTbqzdz9Zwwm8F5wG6f73yk= Subject key identifier: 6F:0F:B4:50:C8:A2:76:7F:C7:5A:F4:FB:57:1A:DA:FD:72:AC:0D:67 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0C82 Signing time: Sat 18 May 2024 18:51:58 +0000 Manifest this update: Sat 18 May 2024 18:51:57 +0000 Manifest next update: Sat 25 May 2024 18:51:57 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: dCNpUVJS/DtQA+m7rNxYT8mBgCfrmQya40PP0/lfAYU=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 9b6iL+tiTyfSwzROgZslQ1z42UtLvtwJif/NNFdULZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: May 18 18:51:57 2024 GMT Not After : May 25 18:51:57 2024 GMT Subject: CN=6648f8ce-8cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:c2:bb:7e:4c:e0:41:19:d6:20:7c:5c:f6: 86:db:bb:6c:a0:5f:de:6f:98:75:85:3f:ec:62:0a: 7e:42:3b:77:c7:ec:3c:b9:ef:c9:a5:00:b5:60:3b: 51:26:6e:ea:ba:10:3c:af:8d:41:46:87:1b:a9:3c: 87:b9:b7:c9:c7:91:68:a7:9c:18:af:40:e8:58:6d: c0:26:dd:51:e0:d7:c0:07:a8:6b:13:62:65:8a:b7: dc:4f:8a:cd:3a:e3:e4:b8:7f:cb:cc:6c:d1:90:58: 25:4c:57:6f:cf:2e:d1:2b:2a:4f:e2:00:65:10:03: 65:1b:da:91:8f:c7:20:1b:eb:73:da:56:5b:e8:4d: 4b:fd:7e:bf:55:f6:d1:62:97:f5:3e:f6:7d:b7:9d: a5:aa:9b:27:96:aa:fa:af:4f:b0:a4:ec:12:8a:96: 97:19:56:14:88:b1:5f:58:f5:d7:ef:60:d4:a5:aa: 6a:6e:af:43:94:1f:5c:db:22:2e:14:b5:c5:54:ab: 2d:30:17:77:50:38:86:71:7b:b7:75:53:65:39:a9: 3e:6c:22:9f:d3:c4:3e:9c:cb:e1:b4:fd:79:b4:5a: 27:12:57:20:34:e7:b2:7c:3c:4c:30:d1:59:c5:83: 6e:ff:cb:71:64:99:99:80:87:d6:b7:47:e0:a0:b5: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0F:B4:50:C8:A2:76:7F:C7:5A:F4:FB:57:1A:DA:FD:72:AC:0D:67 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7c:c2:e3:3c:b7:6f:53:f2:5f:c5:5d:dd:a5:8f:73:8e:6a: 15:06:d0:41:10:4b:2a:51:2c:7c:01:2f:d3:0b:f0:15:3b:41: 75:76:d2:b5:8d:ad:f9:bf:2f:25:1e:ea:9b:9e:3d:fb:5b:b5: fc:28:8b:ae:92:b6:a2:4e:76:d6:9f:89:c4:5f:ac:c2:17:ef: 1d:06:07:c8:4c:90:a0:71:54:71:3f:4e:b2:1c:75:f0:de:09: c6:3f:3a:b6:2c:ca:95:6e:73:07:11:38:4d:0c:fe:d9:53:ee: 19:d4:4c:e8:ee:78:62:36:dd:6d:9c:11:35:ba:98:01:0d:14: 2a:38:7f:3c:98:77:8e:1f:11:5f:f9:ea:ea:92:d8:d5:64:c9: 0a:d5:02:1e:1c:8d:9d:f2:55:f9:98:be:89:e8:85:67:8e:cb: 7a:ac:62:d8:39:b7:8c:fc:05:30:c3:73:9a:0a:15:6d:b0:5b: 07:40:d9:cd:8f:90:55:25:2c:48:12:eb:d0:0a:02:45:54:bc: 1b:e1:32:58:58:06:14:83:2d:d9:18:be:f5:e7:43:c5:ac:88: a8:94:54:1d:db:18:80:0f:d0:5d:63:08:c1:5d:fd:b5:3c:b1: ba:38:94:5a:0b:19:af:cd:4f:a0:01:cb:a0:7c:e6:c0:72:ed: 23:dc:59:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjQwNTE4MTg1MTU3WhcNMjQwNTI1MTg1MTU3WjAYMRYwFAYD VQQDEw02NjQ4ZjhjZS04Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEjCu35M4EEZ1iB8XPaG27tsoF/eb5h1hT/sYgp+Qjt3x+w8ue/JpQC1YDtR Jm7quhA8r41BRocbqTyHubfJx5Fop5wYr0DoWG3AJt1R4NfAB6hrE2JlirfcT4rN OuPkuH/LzGzRkFglTFdvzy7RKypP4gBlEANlG9qRj8cgG+tz2lZb6E1L/X6/VfbR Ypf1PvZ9t52lqpsnlqr6r0+wpOwSipaXGVYUiLFfWPXX72DUpapqbq9DlB9c2yIu FLXFVKstMBd3UDiGcXu3dVNlOak+bCKf08Q+nMvhtP15tFonElcgNOeyfDxMMNFZ xYNu/8txZJmZgIfWt0fgoLWVFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8PtFDI onZ/x1r0+1ca2v1yrA1nMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAufMLjPLdvU/JfxV3dpY9zjmoVBtBBEEsqUSx8AS/TC/AVO0F1dtK1 ja35vy8lHuqbnj37W7X8KIuukraiTnbWn4nEX6zCF+8dBgfITJCgcVRxP06yHHXw 3gnGPzq2LMqVbnMHEThNDP7ZU+4Z1Ezo7nhiNt1tnBE1upgBDRQqOH88mHeOHxFf +erqktjVZMkK1QIeHI2d8lX5mL6J6IVnjst6rGLYObeM/AUww3OaChVtsFsHQNnN j5BVJSxIEuvQCgJFVLwb4TJYWAYUgy3ZGL7150PFrIiolFQd2xiAD9BdYwjBXf21 PLG6OJRaCxmvzU+gAcugfObAcu0j3Fnm -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org