$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: MpHsQIc2pOn5NbPN9S5oUuOCDQuM9XBXWq91LAubiYk= Subject key identifier: 19:7D:24:F3:01:86:22:E3:1A:1C:02:AF:CC:64:AD:01:DF:2D:67:E0 Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: E4 Signing time: Sun 19 May 2024 05:58:08 +0000 Manifest this update: Sun 19 May 2024 05:58:08 +0000 Manifest next update: Sun 26 May 2024 05:58:08 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: Ft9L5s+GI9BLQzPLV7JOKuQKWGBtVOfh3SuW/egWYn0=) 2: 1E925A56BEE111ED83037109C4F9AE02.roa (hash: TBhcbssExgqFxRfQy6kh4THFtAGhrBLT/uB9I75u5Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: May 19 05:58:08 2024 GMT Not After : May 26 05:58:08 2024 GMT Subject: CN=664994f0-2b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:70:66:4d:73:3f:21:57:a8:31:a5:61:97: 92:16:8a:35:76:a6:04:a6:c9:bd:c5:18:81:4b:17: f0:87:4e:df:d3:f1:d7:32:e2:1f:11:97:bd:d1:08: fa:22:a2:40:aa:f1:91:4e:46:e5:51:4b:b6:d6:06: 7e:3e:a1:a6:1a:cf:0f:15:b5:cc:5c:f8:43:96:3a: 15:4f:4b:66:02:1b:db:4b:36:77:b2:97:a1:ba:2a: 65:bf:9f:ef:76:75:a7:f7:25:46:c0:35:6b:1b:1e: c0:3b:e1:61:6e:6a:a6:05:1a:cd:fc:f0:5b:d3:bb: 3f:50:48:5a:96:bc:89:9c:01:6b:e7:55:37:6d:00: cb:97:30:90:a7:84:2a:b1:18:65:d5:c8:de:89:b7: 10:0d:f6:1b:92:50:ab:e1:d4:8f:6e:06:a8:3e:f5: 58:05:de:8e:c7:5e:d2:65:14:d9:5d:05:c6:1b:10: 5f:5a:e4:3c:51:2d:d9:f7:5a:0c:30:76:35:0f:14: e0:61:3e:38:a9:26:6f:24:44:b2:66:3b:1c:b1:a6: 5c:6f:06:0c:4c:82:34:69:bd:3c:18:4f:64:f4:49: e3:fd:eb:7a:c1:46:3c:d9:2a:6d:ae:6e:07:0f:5d: 4a:50:23:30:c6:60:82:99:28:d0:7f:42:95:2b:5e: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7D:24:F3:01:86:22:E3:1A:1C:02:AF:CC:64:AD:01:DF:2D:67:E0 X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:33:4a:48:f7:43:a4:22:ca:d0:56:c9:9c:42:34:d1:fb:0a: 08:0b:c2:01:de:98:98:3d:be:bb:12:67:f1:5c:8d:1c:2a:b7: 5d:0a:86:06:94:18:6b:39:75:aa:c0:bb:e5:6b:46:6a:ef:9a: 06:f8:72:80:09:66:cf:39:a0:ff:de:7d:11:8c:ee:51:4e:c3: ce:f5:35:32:3f:9d:e8:69:95:fc:05:6f:91:fe:8f:7a:6c:0f: be:f2:6d:e6:de:20:0c:49:6a:6c:48:13:0c:f6:30:7e:b4:98: 2e:06:a4:01:ec:75:f0:5c:5a:fb:a7:f7:d0:32:11:f9:c1:f4: 2a:e5:fd:51:f0:5e:15:a5:e2:f6:74:9d:9d:d5:8f:e7:55:09: 2b:57:fa:9a:85:7d:6e:b4:05:c5:48:04:ff:75:9e:91:86:ec: 5b:dc:36:c8:b9:ed:6d:1d:97:04:43:72:10:66:46:9f:a2:ff: 77:c0:c3:dd:ae:09:e8:c4:d3:3a:01:b8:6a:b8:ce:ad:9a:9d: d3:5a:0b:96:33:01:f9:a3:21:2d:43:2a:98:da:a2:3f:25:56: dd:fe:fa:54:c4:83:4e:18:92:75:10:b1:e7:72:bd:7b:66:4f: ef:2f:bb:79:0b:50:f7:f4:07:30:3b:48:74:65:1b:a2:63:b2: b4:18:df:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjQwNTE5MDU1ODA4WhcNMjQwNTI2MDU1ODA4WjAYMRYwFAYD VQQDEw02NjQ5OTRmMC0yYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdBwZk1zPyFXqDGlYZeSFoo1dqYEpsm9xRiBSxfwh07f0/HXMuIfEZe90Qj6 IqJAqvGRTkblUUu21gZ+PqGmGs8PFbXMXPhDljoVT0tmAhvbSzZ3spehuiplv5/v dnWn9yVGwDVrGx7AO+FhbmqmBRrN/PBb07s/UEhalryJnAFr51U3bQDLlzCQp4Qq sRhl1cjeibcQDfYbklCr4dSPbgaoPvVYBd6Ox17SZRTZXQXGGxBfWuQ8US3Z91oM MHY1DxTgYT44qSZvJESyZjscsaZcbwYMTII0ab08GE9k9Enj/et6wUY82Sptrm4H D11KUCMwxmCCmSjQf0KVK14VIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl9JPMB hiLjGhwCr8xkrQHfLWfgMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOM0pI90OkIsrQVsmcQjTR+woIC8IB3piYPb67EmfxXI0cKrddCoYG lBhrOXWqwLvla0Zq75oG+HKACWbPOaD/3n0RjO5RTsPO9TUyP53oaZX8BW+R/o96 bA++8m3m3iAMSWpsSBMM9jB+tJguBqQB7HXwXFr7p/fQMhH5wfQq5f1R8F4VpeL2 dJ2d1Y/nVQkrV/qahX1utAXFSAT/dZ6Rhuxb3DbIue1tHZcEQ3IQZkafov93wMPd rgnoxNM6AbhquM6tmp3TWguWMwH5oyEtQyqY2qI/JVbd/vpUxINOGJJ1ELHncr17 Zk/vL7t5C1D39AcwO0h0ZRuiY7K0GN/0 -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org