$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: NhSHvl0K+XTzYyza2R0WUVEYMtFnzNwSEjh2uk3AeoE= Subject key identifier: 7D:69:FD:04:FF:08:C6:EE:B4:41:A9:53:DD:34:73:37:E0:29:58:1D Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: D3 Signing time: Sat 01 Jun 2024 02:05:06 +0000 Manifest this update: Sat 01 Jun 2024 02:05:05 +0000 Manifest next update: Sat 08 Jun 2024 02:05:05 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: bME2Rs7S+LJYamqi4NJ2q5ZmdAB3IwaVrcf6SvDCE5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Jun 1 02:05:05 2024 GMT Not After : Jun 8 02:05:05 2024 GMT Subject: CN=665a81d1-b17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:b4:5a:31:e7:3b:1c:93:12:24:0c:8e:fe: 26:e2:32:dc:ae:1f:cf:08:80:b6:e1:32:f2:7c:67: 08:02:56:64:a8:ba:fd:f8:55:fb:26:3d:41:4a:74: a0:ea:1b:37:b5:0e:30:a2:42:c1:3e:f4:51:a0:ce: a6:5b:ca:eb:04:66:a8:49:2c:26:d0:30:e8:ea:a5: c3:b4:49:36:c9:c7:7b:fc:a6:d4:6d:c2:89:4f:6a: fb:0b:48:4e:fe:27:f8:33:ab:f8:fb:a8:09:a1:8b: 9b:e0:d9:89:04:80:d7:84:ab:39:69:ee:f5:f8:8c: e6:58:c3:40:6f:af:6a:3e:5d:cd:08:b7:01:43:bc: 2a:0e:d8:5a:38:de:ee:1a:0b:c3:d8:33:fe:fe:d6: 50:56:f1:c2:78:54:91:db:a8:0f:5f:82:91:b0:14: 6b:c5:24:64:cd:b7:31:8b:8d:b9:36:dc:5d:cf:cc: 9d:44:1c:13:01:85:11:05:5a:c4:65:98:2c:ed:14: 96:2e:97:78:c5:70:1c:d2:cd:f8:3c:d1:d0:bb:b1: de:a6:91:a3:60:c2:d4:63:0c:b4:d7:9f:30:f1:7c: 6c:55:68:2a:f1:dd:e3:7c:16:35:20:c4:67:db:e7: a9:f5:57:d8:3d:6a:4c:75:62:f7:c7:ab:6f:1a:3d: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:69:FD:04:FF:08:C6:EE:B4:41:A9:53:DD:34:73:37:E0:29:58:1D X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d1:80:76:d8:b5:57:fc:80:15:c4:1a:12:3a:78:0e:19:64: d0:e5:49:5d:57:62:1b:15:03:a0:c0:7f:67:70:1d:df:00:42: ed:a2:c0:c9:71:a9:15:5a:9f:c7:ac:eb:60:0b:20:b6:7b:fc: 6b:a5:21:27:d8:81:f1:6f:62:ca:fc:99:a9:96:89:ef:4c:5b: 11:8f:9d:78:a3:5b:de:83:a5:91:63:34:10:62:bf:e8:d3:ad: d5:7f:b1:e4:64:8b:bd:0b:e6:f7:68:87:75:dd:bc:e1:87:95: 49:66:c4:34:ee:6c:61:15:97:d0:03:96:01:12:83:44:a0:2f: a7:04:3d:ae:dd:69:ef:3b:fd:e1:a3:ed:fd:26:00:ea:4b:9c: 1c:74:02:8b:5e:ce:8b:f0:c1:ca:f9:a9:66:cc:d0:9a:7f:0a: 1d:64:dc:16:f2:e2:10:58:14:da:db:22:6d:67:ac:06:67:25: 10:d5:bb:b8:75:3f:93:27:43:38:57:70:41:9a:f9:0e:de:33: d6:43:fe:f8:87:40:62:38:5e:82:f7:71:01:5d:d3:e6:3a:fb: d2:7d:13:8e:ed:1a:d9:ab:a4:ac:e4:08:4b:9c:d9:13:df:9f: 33:e6:45:2c:21:4a:2b:1a:9f:c5:34:6b:96:ad:95:f9:b9:ac: b9:ad:c5:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjQwNjAxMDIwNTA1WhcNMjQwNjA4MDIwNTA1WjAYMRYwFAYD VQQDEw02NjVhODFkMS1iMTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAura0WjHnOxyTEiQMjv4m4jLcrh/PCIC24TLyfGcIAlZkqLr9+FX7Jj1BSnSg 6hs3tQ4wokLBPvRRoM6mW8rrBGaoSSwm0DDo6qXDtEk2ycd7/KbUbcKJT2r7C0hO /if4M6v4+6gJoYub4NmJBIDXhKs5ae71+IzmWMNAb69qPl3NCLcBQ7wqDthaON7u GgvD2DP+/tZQVvHCeFSR26gPX4KRsBRrxSRkzbcxi425Ntxdz8ydRBwTAYURBVrE ZZgs7RSWLpd4xXAc0s34PNHQu7HeppGjYMLUYwy0158w8XxsVWgq8d3jfBY1IMRn 2+ep9VfYPWpMdWL3x6tvGj0B2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1p/QT/ CMbutEGpU900czfgKVgdMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT0YB22LVX/IAVxBoSOngOGWTQ5UldV2IbFQOgwH9ncB3fAELtosDJ cakVWp/HrOtgCyC2e/xrpSEn2IHxb2LK/JmplonvTFsRj514o1veg6WRYzQQYr/o 063Vf7HkZIu9C+b3aId13bzhh5VJZsQ07mxhFZfQA5YBEoNEoC+nBD2u3WnvO/3h o+39JgDqS5wcdAKLXs6L8MHK+almzNCafwodZNwW8uIQWBTa2yJtZ6wGZyUQ1bu4 dT+TJ0M4V3BBmvkO3jPWQ/74h0BiOF6C93EBXdPmOvvSfROO7RrZq6Ss5AhLnNkT 358z5kUsIUorGp/FNGuWrZX5uay5rcVz -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:31 2024 by rpki-client on console-ams.rpki-client.org