$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: 7w55NrQQWmVIBrWXk3XlDJyPXGlcN5p/hBqWMd4DO6s= Subject key identifier: 96:75:45:1C:6B:A5:3B:1D:A8:05:DF:F2:85:19:45:3C:BC:71:FB:A2 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 4430 Signing time: Sat 18 May 2024 16:08:10 +0000 Manifest this update: Sat 18 May 2024 16:08:09 +0000 Manifest next update: Sat 25 May 2024 16:08:09 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: Qx8FTZaYLR/HaZX7RfDBMNzETkhH57yO78CC9heXtE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9058 (0x2362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: May 18 16:08:09 2024 GMT Not After : May 25 16:08:09 2024 GMT Subject: CN=6648d26a-e5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:24:42:5d:ad:e6:0b:18:4a:80:51:4a:3b: e8:b6:59:29:62:21:4a:4f:6c:1e:75:9f:c2:28:fe: a2:6c:92:67:f0:9c:b5:48:29:80:38:a5:da:a2:d9: b5:c6:fc:d6:bf:96:3f:6d:6f:97:bc:f0:b0:f8:70: a8:f8:92:1a:78:d1:91:0f:c7:6b:05:c6:e2:8c:df: 0b:19:98:59:ba:96:1e:07:30:74:49:c6:59:b4:98: 76:88:40:29:18:83:75:03:99:d1:c0:98:d1:30:8a: f6:76:26:0e:aa:56:6f:3c:14:94:94:f6:b3:93:67: 42:fd:d5:78:77:70:ba:62:27:65:03:f3:23:f5:89: 11:b1:51:82:fc:82:ff:b0:28:86:db:7a:df:01:67: 1c:a1:76:21:e4:a1:f4:4b:47:88:b9:ae:3c:6c:de: 7e:0d:d8:42:a4:30:18:7f:2a:b2:0f:f9:67:b8:8c: 2a:96:a4:6f:cf:c8:e1:d4:d2:7b:bd:6d:d7:d9:bb: 2f:36:82:ba:71:0d:57:7e:ee:24:09:4c:80:45:5e: 54:06:c9:0a:ca:2a:41:6b:4b:e5:ae:27:bf:8b:bd: fd:3e:a1:96:3a:81:ec:0e:4d:4c:42:2e:72:b8:0e: bb:6a:62:ea:38:f7:46:6e:c4:af:82:1f:b1:e8:c6: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:75:45:1C:6B:A5:3B:1D:A8:05:DF:F2:85:19:45:3C:BC:71:FB:A2 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f0:fb:52:36:f1:4b:82:a6:0e:17:01:1c:b9:8e:56:f3:72: db:73:36:a7:0b:45:30:8a:5c:33:51:72:a7:09:79:09:b6:26: e7:45:d5:fc:00:d9:8d:a7:d4:ac:04:e3:56:15:3a:1e:e5:d9: 94:1c:01:f1:e7:fb:bd:cb:dd:0d:a7:e2:95:de:dd:d3:7a:6f: 74:89:95:2c:8a:62:5e:90:5a:35:79:6d:c5:22:60:71:19:97: 0a:04:03:04:7e:f1:b4:ff:08:e2:75:78:68:91:b0:2f:5f:c9: b8:02:e3:5c:29:f1:63:f6:cf:22:25:29:3e:51:fb:4f:3f:90: 16:e1:2f:d8:5a:86:af:13:e9:49:6c:03:81:7c:a4:9e:3f:e2: 83:d2:e7:ec:36:d1:b3:f3:4d:96:91:41:b2:7f:49:58:35:7d: a4:8e:46:79:ec:d4:ca:ed:26:47:d3:a4:00:ce:4a:16:a6:8c: 7d:30:03:d8:b5:52:6e:f5:7c:78:56:b3:0e:fe:15:b2:38:39: 4c:c8:04:6a:6e:8f:3d:d0:e6:38:13:8f:ab:e3:6f:54:90:d7: b5:ed:4e:14:de:b4:c0:8c:01:ed:e3:36:dd:4d:b2:4b:1b:93: 71:0e:7f:b9:15:7e:98:42:c7:2a:cc:47:38:a1:b0:ba:4d:6c: 78:8b:79:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjQwNTE4MTYwODA5WhcNMjQwNTI1MTYwODA5WjAYMRYwFAYD VQQDEw02NjQ4ZDI2YS1lNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT8kQl2t5gsYSoBRSjvotlkpYiFKT2wedZ/CKP6ibJJn8Jy1SCmAOKXaotm1 xvzWv5Y/bW+XvPCw+HCo+JIaeNGRD8drBcbijN8LGZhZupYeBzB0ScZZtJh2iEAp GIN1A5nRwJjRMIr2diYOqlZvPBSUlPazk2dC/dV4d3C6YidlA/Mj9YkRsVGC/IL/ sCiG23rfAWccoXYh5KH0S0eIua48bN5+DdhCpDAYfyqyD/lnuIwqlqRvz8jh1NJ7 vW3X2bsvNoK6cQ1Xfu4kCUyARV5UBskKyipBa0vlrie/i739PqGWOoHsDk1MQi5y uA67amLqOPdGbsSvgh+x6MYCqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ1RRxr pTsdqAXf8oUZRTy8cfuiMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr8PtSNvFLgqYOFwEcuY5W83LbczanC0UwilwzUXKnCXkJtibnRdX8 ANmNp9SsBONWFToe5dmUHAHx5/u9y90Np+KV3t3Tem90iZUsimJekFo1eW3FImBx GZcKBAMEfvG0/wjidXhokbAvX8m4AuNcKfFj9s8iJSk+UftPP5AW4S/YWoavE+lJ bAOBfKSeP+KD0ufsNtGz802WkUGyf0lYNX2kjkZ57NTK7SZH06QAzkoWpox9MAPY tVJu9Xx4VrMO/hWyODlMyARqbo890OY4E4+r429UkNe17U4U3rTAjAHt4zbdTbJL G5NxDn+5FX6YQscqzEc4obC6TWx4i3kA -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org