$ rpki-client -vvf rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft File: c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft (raw, json) Hash identifier: uxAX+GH7M8pZ6Bs8N3CN1CCKNEjBBgrd6bOLzJe3NYM= Subject key identifier: F1:23:FA:7C:41:69:3F:B8:A5:00:3C:A5:8F:F9:21:75:67:B9:D2:28 Authority key identifier: 73:73:45:2A:57:C9:71:70:65:08:16:E2:36:E6:2C:4F:04:ED:43:8A Certificate issuer: /CN=A9121EE5/serialNumber=7373452A57C97170650816E236E62C4F04ED438A Certificate serial: 2F71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft Manifest number: 2F71 Signing time: Mon 06 May 2024 15:45:16 +0000 Manifest this update: Mon 06 May 2024 15:45:16 +0000 Manifest next update: Mon 13 May 2024 15:45:16 +0000 Files and hashes: 1: c3NFKlfJcXBlCBbiNuYsTwTtQ4o.crl (hash: hRe3yNgXqw7y0DIMRHn/QCEclFr85EVqOVDQxFNusRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.crl rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12145 (0x2f71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121EE5/serialNumber=7373452A57C97170650816E236E62C4F04ED438A Validity Not Before: May 6 15:45:16 2024 GMT Not After : May 13 15:45:16 2024 GMT Subject: CN=6638fb0c-9650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:20:21:4f:76:17:30:dc:f6:f9:03:73:b0: 8b:d2:2e:a4:c3:03:e8:5a:5d:f4:bb:fa:71:20:c8: cb:92:1f:bf:ad:f6:08:eb:7a:b2:19:a1:51:2a:5e: 4f:40:7e:a7:0b:b5:b9:4d:a1:e4:21:42:de:eb:d8: e2:ea:76:1e:0c:f6:ac:fe:c5:8a:f2:d0:c0:4b:9d: 6b:7b:d2:c2:c3:ad:f4:ac:54:bd:bf:d0:37:1e:c6: 43:ee:81:2c:2e:0c:9a:dd:0c:10:1a:13:22:de:8a: 4e:4a:b2:19:45:fe:d6:e1:9d:4d:97:08:83:bb:1a: 38:27:1d:cf:3c:06:f1:1b:4d:52:a4:dc:db:df:dc: 9f:1f:95:c6:3c:b1:25:f6:02:d8:79:35:b5:b9:5e: 0a:14:c1:9b:d6:80:07:27:e2:1a:d1:47:95:2d:84: 5d:d8:a4:a2:c7:1d:56:b8:ea:98:c7:de:3f:89:12: bb:4b:b5:e0:61:02:28:c5:bf:89:80:af:c7:4a:8e: ae:8b:8e:27:a1:27:9f:2f:f9:a8:da:12:3b:a4:f0: 17:17:98:a9:2b:ad:47:8f:9a:6f:b1:64:e6:20:12: 0a:30:ee:32:96:c9:8c:c1:f0:df:36:05:6c:1c:c8: 15:d9:0a:cc:26:e3:4d:f3:81:ad:0a:e8:de:46:72: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:23:FA:7C:41:69:3F:B8:A5:00:3C:A5:8F:F9:21:75:67:B9:D2:28 X509v3 Authority Key Identifier: keyid:73:73:45:2A:57:C9:71:70:65:08:16:E2:36:E6:2C:4F:04:ED:43:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9f:39:b9:61:9e:0a:e8:71:d4:69:b4:dd:22:01:90:06:cc: 75:93:dd:c9:c8:42:1a:d1:9d:e1:82:f6:50:2c:04:d9:3f:71: c4:a7:65:6a:a0:d6:b0:28:a9:0b:f7:e2:31:5e:84:1a:72:33: 15:c1:ed:8f:cf:1f:20:5d:48:c5:0d:ad:ad:6c:2b:9d:1a:38: cf:19:0b:cc:fb:db:40:b9:e1:fd:75:79:4e:09:8c:10:ea:e3: 77:03:bd:a6:63:e5:69:45:ce:df:ee:4e:02:a7:3a:25:71:f8: 6e:30:31:38:93:e9:ce:d5:b2:c0:64:d5:8a:a0:2f:0d:66:92: cf:e9:03:4f:12:ae:70:e9:f7:f6:08:e5:bc:f1:10:f8:a2:80: 26:61:f4:28:90:a8:22:be:8c:4c:86:d1:b2:12:18:45:05:5f: 42:81:0a:6d:32:52:4e:f4:98:ae:0a:82:86:62:5a:e4:b7:c0: 03:30:d8:35:41:84:21:98:7e:98:7f:29:ff:b2:11:f2:b0:8f: c1:ef:0f:7d:cf:5a:95:95:ed:01:e4:cc:54:aa:3f:b4:9f:a0: 2e:77:eb:e1:7d:8a:e3:8a:52:d4:fb:f7:61:ca:fc:a5:3d:09: 78:ea:80:c9:15:1e:03:08:00:4f:51:bb:bf:bb:f2:c4:8a:11: a3:bb:92:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFFRTUxMTAvBgNVBAUTKDczNzM0NTJBNTdDOTcxNzA2NTA4MTZFMjM2RTYyQzRG MDRFRDQzOEEwHhcNMjQwNTA2MTU0NTE2WhcNMjQwNTEzMTU0NTE2WjAYMRYwFAYD VQQDEw02NjM4ZmIwYy05NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVIgIU92FzDc9vkDc7CL0i6kwwPoWl30u/pxIMjLkh+/rfYI63qyGaFRKl5P QH6nC7W5TaHkIULe69ji6nYeDPas/sWK8tDAS51re9LCw630rFS9v9A3HsZD7oEs Lgya3QwQGhMi3opOSrIZRf7W4Z1NlwiDuxo4Jx3PPAbxG01SpNzb39yfH5XGPLEl 9gLYeTW1uV4KFMGb1oAHJ+Ia0UeVLYRd2KSixx1WuOqYx94/iRK7S7XgYQIoxb+J gK/HSo6ui44noSefL/mo2hI7pPAXF5ipK61Hj5pvsWTmIBIKMO4ylsmMwfDfNgVs HMgV2QrMJuNN84GtCujeRnLBaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEj+nxB aT+4pQA8pY/5IXVnudIoMB8GA1UdIwQYMBaAFHNzRSpXyXFwZQgW4jbmLE8E7UOK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUVFNS82NUYyOURCMEY1 MkYxMUUyODA3MjhBNjE1OTExRUEzMi9jM05GS2xmSmNYQmxDQmJpTnVZc1R3VHRR NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MzTkZLbGZKY1hCbENCYmlOdVlzVHdUdFE0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUVFNS82NUYyOURCMEY1MkYxMUUyODA3MjhBNjE1OTExRUEzMi9jM05GS2xmSmNY QmxDQmJpTnVZc1R3VHRRNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHnzm5YZ4K6HHUabTdIgGQBsx1k93JyEIa0Z3hgvZQLATZP3HEp2Vq oNawKKkL9+IxXoQacjMVwe2Pzx8gXUjFDa2tbCudGjjPGQvM+9tAueH9dXlOCYwQ 6uN3A72mY+VpRc7f7k4CpzolcfhuMDE4k+nO1bLAZNWKoC8NZpLP6QNPEq5w6ff2 COW88RD4ooAmYfQokKgivoxMhtGyEhhFBV9CgQptMlJO9JiuCoKGYlrkt8ADMNg1 QYQhmH6Yfyn/shHysI/B7w99z1qVle0B5MxUqj+0n6Aud+vhfYrjilLU+/dhyvyl PQl46oDJFR4DCABPUbu/u/LEihGju5JJ -----END CERTIFICATE-----Generated at Mon May 6 17:42:38 2024 by rpki-client on console-ams.rpki-client.org