$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: UPrxTOdJAKvyc1cSq7sRohIZRY2t4pRtX7crS/spVoE= Subject key identifier: BD:79:2F:F5:04:46:26:51:61:5E:BC:04:D3:26:A6:D9:D1:26:51:B2 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 9E Signing time: Wed 15 May 2024 06:51:59 +0000 Manifest this update: Wed 15 May 2024 06:51:59 +0000 Manifest next update: Wed 22 May 2024 06:51:59 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: xeWaEuSS2JAvvjFnmdTWFCnCQ7CiBwa9jAzRTalcSiY=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: 35Fu5kbfFZ/W8ChJYNEjKYFETgUE1SYcZrzysaLOzTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: May 15 06:51:59 2024 GMT Not After : May 22 06:51:59 2024 GMT Subject: CN=66445b8f-0c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:6f:66:41:eb:58:96:51:c3:c6:90:0a:48: b8:36:98:dc:7f:20:bc:96:3f:b5:0e:83:2a:f9:16: a7:97:89:ce:9a:32:40:5b:06:a6:f6:94:ca:64:53: 2f:fd:2d:52:31:56:3b:16:ee:37:76:bf:ab:ef:e8: a3:de:87:ba:e2:83:eb:57:d3:21:49:dd:9a:88:7e: 70:49:b3:3a:a8:54:4b:49:08:6e:69:0d:ad:20:60: fc:74:7c:4a:d1:38:ca:eb:99:f3:46:bf:e8:dd:50: 48:25:75:cb:53:5d:4a:25:d3:17:8b:21:59:8a:48: c4:ed:0b:ff:c8:7f:65:7d:45:55:a1:6c:90:0d:0a: f1:ea:62:79:5b:2c:63:ab:c6:d2:89:39:42:80:4b: 38:cc:a5:3c:80:c6:7d:4a:4f:eb:46:b1:b1:11:c3: b9:5b:13:cc:2e:89:10:12:2d:89:c6:ad:77:d3:af: 96:ab:02:b3:bd:3e:c5:af:78:88:0f:e3:a9:2c:dc: b0:67:b3:65:5e:76:aa:62:cb:f4:e8:a8:e0:e2:61: 04:a9:c1:66:39:af:90:d2:cb:98:94:b4:15:7f:17: 8c:af:ee:aa:b2:87:92:54:08:44:a2:c4:8b:5e:3d: 27:c7:2e:4b:33:9e:79:d7:f1:ee:36:f7:6d:86:24: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:2F:F5:04:46:26:51:61:5E:BC:04:D3:26:A6:D9:D1:26:51:B2 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:00:09:68:d1:46:d0:17:eb:cd:82:ff:d7:77:b3:98:ca:49: ac:b0:54:92:19:9d:36:17:d0:b9:8d:c1:30:55:91:97:33:d1: cb:82:f3:3b:35:9a:b7:ee:82:48:e9:9a:e1:34:e9:83:27:f9: 3e:2a:09:15:52:43:f5:6c:5b:1f:b6:8f:28:2c:2f:e6:22:99: e3:59:15:1b:35:3e:0d:5d:d1:16:27:9e:92:ca:99:f7:4b:9b: f2:f5:65:5b:b2:1a:e0:ac:ed:67:dc:0e:49:a5:6f:4a:6c:db: dc:9e:09:56:12:ac:7d:c1:8f:1a:54:f1:d0:cf:9f:3f:75:7b: 64:66:25:53:50:67:7b:ff:f8:fe:14:2b:a7:58:3a:ee:c1:d4: 42:ab:79:13:bf:c7:53:35:d2:7a:6a:09:03:38:22:77:4c:43: 9c:bf:cf:22:f0:c9:2e:37:d5:a7:a7:92:2f:76:54:e8:b6:31: ff:09:6f:5e:4b:4b:b5:f6:88:b2:b1:0e:f5:d4:55:8f:6e:35: 52:df:0c:cd:89:db:37:57:c5:2e:50:b6:7b:e8:f9:0d:c3:3b: ef:4c:f7:a2:da:9c:04:f0:78:41:d8:62:80:94:1f:07:16:80: 9b:fe:ea:14:a4:da:9c:cc:57:f9:26:fc:80:ed:3b:9e:cc:f9: 79:10:94:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjQwNTE1MDY1MTU5WhcNMjQwNTIyMDY1MTU5WjAYMRYwFAYD VQQDEw02NjQ0NWI4Zi0wYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TVvZkHrWJZRw8aQCki4NpjcfyC8lj+1DoMq+Ranl4nOmjJAWwam9pTKZFMv /S1SMVY7Fu43dr+r7+ij3oe64oPrV9MhSd2aiH5wSbM6qFRLSQhuaQ2tIGD8dHxK 0TjK65nzRr/o3VBIJXXLU11KJdMXiyFZikjE7Qv/yH9lfUVVoWyQDQrx6mJ5Wyxj q8bSiTlCgEs4zKU8gMZ9Sk/rRrGxEcO5WxPMLokQEi2Jxq1306+WqwKzvT7Fr3iI D+OpLNywZ7NlXnaqYsv06Kjg4mEEqcFmOa+Q0suYlLQVfxeMr+6qsoeSVAhEosSL Xj0nxy5LM5551/HuNvdthiTStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL15L/UE RiZRYV68BNMmptnRJlGyMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzAAlo0UbQF+vNgv/Xd7OYykmssFSSGZ02F9C5jcEwVZGXM9HLgvM7 NZq37oJI6ZrhNOmDJ/k+KgkVUkP1bFsfto8oLC/mIpnjWRUbNT4NXdEWJ56Sypn3 S5vy9WVbshrgrO1n3A5JpW9KbNvcnglWEqx9wY8aVPHQz58/dXtkZiVTUGd7//j+ FCunWDruwdRCq3kTv8dTNdJ6agkDOCJ3TEOcv88i8MkuN9Wnp5IvdlTotjH/CW9e S0u19oiysQ711FWPbjVS3wzNids3V8UuULZ76PkNwzvvTPei2pwE8HhB2GKAlB8H FoCb/uoUpNqczFf5JvyA7TuezPl5EJQk -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org