$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: X/sESZyTmkGMk48RksccCWzNbdjy50cDhyFDOVQnd2c= Subject key identifier: 0C:72:56:63:67:AF:97:41:42:A4:0B:4C:CD:D2:67:A4:53:EF:73:80 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 73 Signing time: Wed 29 May 2024 08:05:18 +0000 Manifest this update: Wed 29 May 2024 08:05:17 +0000 Manifest next update: Wed 05 Jun 2024 08:05:17 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: tPXykgqrWjgcrq2lGEL0YC7MsekVPdB84FbA3M1n3TA=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: vgChqGywZiKFJbe8nMHH+eDKGq5txXITkZSr/n1RaEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: May 29 08:05:17 2024 GMT Not After : Jun 5 08:05:17 2024 GMT Subject: CN=6656e1be-8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:97:27:f8:40:37:e4:f5:2e:58:9b:ce:66: f5:18:b8:fe:ba:96:a3:1e:59:27:f4:40:28:f7:3b: 3f:e5:f6:12:d0:89:b7:c8:7e:29:22:d3:2a:e5:4a: 38:be:c8:b5:5c:a7:3c:dc:34:ba:3d:f9:c3:01:77: 79:5b:2d:fe:32:fc:c6:ee:a3:50:33:57:1d:63:1a: 1f:66:64:07:fd:6a:39:86:d2:37:5b:6d:16:66:0b: 15:fe:ca:3d:53:ce:7e:b5:26:42:f5:a1:fd:72:0e: 9e:a4:b4:33:a6:3f:f5:7e:9d:b6:f2:6d:41:5c:ef: 93:a3:c3:79:f4:59:6e:15:36:9e:f6:60:31:9d:7b: 1f:04:c1:72:0f:38:17:b3:53:fe:a9:04:dc:3b:c7: 5b:32:12:e8:9a:8c:60:5e:59:4c:84:3b:12:d7:b0: 91:3c:f8:85:2f:b3:12:e6:b7:f7:90:bf:ec:0b:5a: 28:64:5b:49:29:2b:86:a6:cc:f1:84:80:f8:76:3f: 11:10:3f:c5:62:cd:f2:bb:31:17:3d:78:8c:f6:13: 8d:9f:63:2d:81:cb:e7:50:62:87:a4:e0:1c:42:b6: c8:bf:d9:8e:15:58:82:a6:5f:0b:0a:9d:bb:2e:c1: 3c:a0:eb:7e:ea:bb:2a:98:81:1c:1b:d6:df:94:ee: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:72:56:63:67:AF:97:41:42:A4:0B:4C:CD:D2:67:A4:53:EF:73:80 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:37:c1:ed:fe:77:2b:0b:49:77:d8:f8:17:14:8d:a7:60:d3: f8:29:46:93:c9:90:48:9f:b5:e2:98:b7:b4:a1:fb:32:a2:ac: 9d:de:d5:2d:cf:4a:72:01:d3:34:9e:34:90:0a:90:17:9c:b3: 5e:be:b1:44:d4:31:77:5d:e5:17:0a:3b:39:14:b8:21:d0:61: aa:a4:0c:7d:a2:b2:02:3c:37:34:f4:1d:87:80:67:b0:58:fc: 00:5e:96:5c:b3:ee:75:6c:04:2d:b1:62:87:e7:58:9b:5f:e0: c3:7a:0b:dc:9e:f4:cb:a5:31:56:bf:d1:33:fb:96:26:c7:01: 67:fc:86:37:93:ac:88:80:9c:e2:cc:6e:b1:42:42:b0:c1:2c: a1:d7:81:e5:85:8f:1b:3a:85:b0:91:ec:ea:f6:7b:42:97:a2: 1e:ec:35:35:fb:d4:cb:8a:00:bf:f4:63:46:85:3e:f4:d0:b4: ed:00:ec:de:e6:a7:87:d6:ce:3f:51:a0:b1:3a:57:1c:01:72: 3d:cf:f1:65:3c:c6:58:b2:3e:b5:9b:1f:99:b5:49:58:d3:54: 18:2a:1f:95:6b:19:4e:13:20:db:9b:0c:ff:bf:2f:f5:82:bc: c4:6a:79:ca:c8:be:f9:92:45:9c:8c:e5:4c:d7:62:d8:cf:55: 86:c2:e6:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEQwNzExMC8GA1UEBRMoNzM4NERDNjY3QjRENDlBNUFDRDUwQTU4QjQ4OTE2QTE1 QUMyNjE2QjAeFw0yNDA1MjkwODA1MTdaFw0yNDA2MDUwODA1MTdaMBgxFjAUBgNV BAMTDTY2NTZlMWJlLThjZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCny5cn+EA35PUuWJvOZvUYuP66lqMeWSf0QCj3Oz/l9hLQibfIfiki0yrlSji+ yLVcpzzcNLo9+cMBd3lbLf4y/Mbuo1AzVx1jGh9mZAf9ajmG0jdbbRZmCxX+yj1T zn61JkL1of1yDp6ktDOmP/V+nbbybUFc75Ojw3n0WW4VNp72YDGdex8EwXIPOBez U/6pBNw7x1syEuiajGBeWUyEOxLXsJE8+IUvsxLmt/eQv+wLWihkW0kpK4amzPGE gPh2PxEQP8VizfK7MRc9eIz2E42fYy2By+dQYoek4BxCtsi/2Y4VWIKmXwsKnbsu wTyg637quyqYgRwb1t+U7lPzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDHJWY2ev l0FCpAtMzdJnpFPvc4AwHwYDVR0jBBgwFoAUc4TcZntNSaWs1QpYtIkWoVrCYWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RDA3LzUwNTU2MEI2NkU3 QjExRUVCN0U5N0Q1RkM0RjlBRTAyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzRUY1pudE5TYVdzMVFwWXRJa1dvVnJDWVdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RDA3LzUwNTU2MEI2NkU3QjExRUVCN0U5N0Q1RkM0RjlBRTAyL2M0VGNabnROU2FX czFRcFl0SWtXb1ZyQ1lXcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHw3we3+dysLSXfY+BcUjadg0/gpRpPJkEifteKYt7Sh+zKirJ3e1S3P SnIB0zSeNJAKkBecs16+sUTUMXdd5RcKOzkUuCHQYaqkDH2isgI8NzT0HYeAZ7BY /ABellyz7nVsBC2xYofnWJtf4MN6C9ye9MulMVa/0TP7libHAWf8hjeTrIiAnOLM brFCQrDBLKHXgeWFjxs6hbCR7Or2e0KXoh7sNTX71MuKAL/0Y0aFPvTQtO0A7N7m p4fWzj9RoLE6VxwBcj3P8WU8xliyPrWbH5m1SVjTVBgqH5VrGU4TINubDP+/L/WC vMRqecrIvvmSRZyM5UzXYtjPVYbC5vw= -----END CERTIFICATE-----Generated at Wed May 29 10:44:03 2024 by rpki-client on console-ams.rpki-client.org