$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json) Hash identifier: OhzGIlMxHBnFAGs5GeDCciklcq/bxRqDfjEw2g7Kk0I= Subject key identifier: 18:B1:06:8A:94:7C:AF:EF:65:D7:49:E5:A6:7E:24:DA:B6:9C:C2:5B Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft Manifest number: 06D6 Signing time: Tue 30 Apr 2024 23:11:13 +0000 Manifest this update: Tue 30 Apr 2024 23:11:13 +0000 Manifest next update: Tue 07 May 2024 23:11:12 +0000 Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: 71VWP2pasqzY7YM5oUmaERqgQ66RT6slr7Oio3aj+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Validity Not Before: Apr 30 23:11:13 2024 GMT Not After : May 7 23:11:12 2024 GMT Subject: CN=66317a91-c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:6e:13:65:9c:1f:17:d7:d6:66:8a:e7:ce: fd:e0:07:c5:3e:7c:b9:b4:c8:c7:86:d4:2e:54:05: 40:96:ff:b3:ce:5a:65:58:37:83:9d:dd:f9:58:6c: 6f:1e:a2:5a:4e:e1:36:e2:6b:2a:1e:53:6c:03:5d: 58:13:61:77:ac:47:5d:f1:65:48:e8:68:ca:e7:0f: b9:2d:ca:36:50:bb:3f:81:61:9f:b3:7a:40:e6:f8: 33:c1:c4:07:a4:7a:38:a3:87:67:7b:6c:57:e2:81: 1a:90:10:b6:d0:8e:7c:db:31:3b:d0:fb:39:0d:8a: f2:92:39:43:7a:c7:4d:13:e6:99:12:83:8e:54:0d: 06:36:00:98:de:b3:74:83:6c:f4:65:06:c0:a8:61: f8:88:85:bb:23:35:d4:49:25:bf:2d:3e:6c:40:30: 43:28:03:76:6a:db:b1:75:66:5b:31:dc:62:70:aa: 61:ae:c7:20:62:40:90:3d:2c:f8:ab:f8:9f:fc:44: 3c:f0:f6:65:bc:16:49:d0:65:ce:0d:9c:0d:12:61: 5b:6f:4c:c4:8f:16:e2:c3:1a:e1:ab:f6:8f:96:99: 5d:dc:13:49:36:02:4b:4b:b8:47:ad:6b:ca:d8:6b: 06:df:9c:92:dd:7a:a4:85:1c:69:07:27:ea:63:0f: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B1:06:8A:94:7C:AF:EF:65:D7:49:E5:A6:7E:24:DA:B6:9C:C2:5B X509v3 Authority Key Identifier: keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:30:87:35:e5:7f:c8:17:c7:04:56:98:18:9d:dc:4b:84:26: 22:00:40:48:b7:69:01:7b:9c:b9:82:90:b5:2d:93:09:14:8b: 4b:1e:c4:4f:30:1c:ce:d3:d7:54:f4:b7:9d:3c:09:ab:28:43: d7:f1:43:c1:7a:e9:4b:45:c2:21:ab:3d:97:95:bf:5d:3c:b4: d4:82:2c:12:49:ae:af:8f:e3:86:7c:a6:c7:62:e2:ad:ac:a0: 95:f7:0d:0b:37:dc:04:0c:c7:0d:54:77:a7:b0:01:a9:bc:e7: 91:70:91:af:d5:71:31:4e:00:31:ca:6a:5a:75:b4:c6:b3:35: d1:21:d9:8a:a7:a2:af:cf:f1:07:88:c9:46:58:3e:0c:ef:e5: 87:c4:e9:a8:bf:b3:21:48:c0:6c:25:87:9f:e5:7e:4d:09:8c: 93:f8:33:c9:9d:8c:9d:4a:10:55:c7:6e:95:82:50:94:9b:87: d2:83:bd:7d:ec:fc:45:68:fc:c1:15:b9:ca:a8:8e:16:14:79: b9:de:53:ba:df:17:bb:7a:4a:23:97:85:30:79:72:11:50:63: 73:4a:ab:f3:b8:22:9f:f4:ee:b2:ff:91:89:1b:0b:ce:13:29: 37:e5:ad:ef:d3:20:48:6f:d9:80:26:d4:5e:d9:0d:f0:c3:75: 4c:9c:64:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC NEVEQ0RCN0IwHhcNMjQwNDMwMjMxMTEzWhcNMjQwNTA3MjMxMTEyWjAYMRYwFAYD VQQDEw02NjMxN2E5MS1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGNuE2WcHxfX1maK58794AfFPny5tMjHhtQuVAVAlv+zzlplWDeDnd35WGxv HqJaTuE24msqHlNsA11YE2F3rEdd8WVI6GjK5w+5Lco2ULs/gWGfs3pA5vgzwcQH pHo4o4dne2xX4oEakBC20I582zE70Ps5DYrykjlDesdNE+aZEoOOVA0GNgCY3rN0 g2z0ZQbAqGH4iIW7IzXUSSW/LT5sQDBDKAN2atuxdWZbMdxicKphrscgYkCQPSz4 q/if/EQ88PZlvBZJ0GXODZwNEmFbb0zEjxbiwxrhq/aPlpld3BNJNgJLS7hHrWvK 2GsG35yS3XqkhRxpByfqYw+smQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBixBoqU fK/vZddJ5aZ+JNq2nMJbMB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi V0hRU0x5NGJpc08wN2MyM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9MIc15X/IF8cEVpgYndxLhCYiAEBIt2kBe5y5gpC1LZMJFItLHsRP MBzO09dU9LedPAmrKEPX8UPBeulLRcIhqz2Xlb9dPLTUgiwSSa6vj+OGfKbHYuKt rKCV9w0LN9wEDMcNVHensAGpvOeRcJGv1XExTgAxympadbTGszXRIdmKp6Kvz/EH iMlGWD4M7+WHxOmov7MhSMBsJYef5X5NCYyT+DPJnYydShBVx26VglCUm4fSg719 7PxFaPzBFbnKqI4WFHm53lO63xe7ekojl4UweXIRUGNzSqvzuCKf9O6y/5GJGwvO Eyk35a3v0yBIb9mAJtRe2Q3ww3VMnGSF -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:12 2024 by rpki-client on console-fra.rpki-client.org