$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: vADZSdXFMXwEtIz81AR8eNQ3itMf05d77zKVJig/Swg= Subject key identifier: 40:CA:12:CA:0E:47:1B:26:E9:12:BD:2F:6A:82:B3:E9:E9:FD:F1:D6 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 10 Signing time: Wed 15 May 2024 08:59:45 +0000 Manifest this update: Wed 15 May 2024 08:59:44 +0000 Manifest next update: Wed 22 May 2024 08:59:44 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: gsUWX4VJ4atRfQvZ/Wr7q5BO7Ecclnp/q0EQTZsowNM=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: BiLzgqh1b2wzfZ0A9uXIsrplPF10Zq40y4XUi97+Tqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: May 15 08:59:44 2024 GMT Not After : May 22 08:59:44 2024 GMT Subject: CN=66447981-2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:fb:ea:18:02:ef:30:e0:ee:f6:ba:bd:86: 9c:d8:1e:d2:27:ad:2e:f6:b7:2c:36:d5:b5:d5:b2: 80:94:1b:3c:94:c2:42:51:ae:ab:33:f1:3e:11:22: fd:b6:03:10:f4:ab:6a:b3:5e:76:90:57:7f:6c:20: 67:92:97:a3:b4:bf:44:d3:21:99:5b:c0:30:85:f1: 97:2b:b3:cb:a7:f7:86:b7:83:41:27:97:20:6a:f1: 94:42:22:33:35:18:68:37:cf:f2:f0:da:25:da:85: 9b:ff:71:14:ad:58:ae:86:00:44:33:4e:d0:d5:f6: 1e:72:15:b3:41:11:49:b6:1d:68:58:b5:65:13:2c: 10:1d:84:8c:34:60:44:f3:0c:5c:22:59:8f:84:bf: fc:b8:ec:92:74:84:8f:ab:8d:74:0a:55:57:b7:f9: 03:8a:15:88:4d:f5:64:8a:30:c3:c1:ed:43:6e:bc: 5a:84:ad:57:68:85:f5:c7:43:3d:78:6f:a3:68:e2: 5f:9f:99:b2:c1:c3:dd:4b:6b:ce:c8:1e:86:b5:7a: 52:f2:e2:89:10:ef:6c:0e:2f:91:5a:6f:05:ed:5c: 90:9d:a0:38:5d:bb:5d:e7:9b:28:ed:e9:82:89:39: 6c:91:ea:e2:1f:cd:33:7b:fa:34:12:63:fb:2d:7b: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:12:CA:0E:47:1B:26:E9:12:BD:2F:6A:82:B3:E9:E9:FD:F1:D6 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:18:17:bf:ee:fd:0b:6b:5e:b5:ad:7f:6d:e2:0e:05:f2: 49:48:32:69:a6:d2:14:a6:74:66:36:9e:af:18:82:66:a4:e0: 46:f1:e7:09:93:14:05:14:eb:ed:fd:1b:40:56:c8:e5:d4:50: f1:da:6a:c4:28:aa:db:74:ba:8f:c9:cd:56:c8:53:1a:91:2a: 0b:e1:71:8a:58:e1:cd:74:2e:c7:85:bd:04:de:36:84:26:bb: 93:ef:ea:d6:ad:40:43:1d:a7:c8:cb:61:ba:93:b2:87:4c:74: bd:66:eb:94:b8:64:eb:21:ea:b4:ea:a3:d7:af:e6:ab:de:f8: bf:a3:0d:c2:1d:cc:5e:f6:94:a0:a5:47:26:25:cc:3a:89:e3: 1d:f9:d2:49:8e:fe:90:75:61:fd:23:fa:dc:0c:03:05:54:27: 0d:2b:cb:3a:11:bf:4b:88:e5:a8:bd:63:d8:8a:86:26:e5:42: 28:e6:37:f8:1d:97:a1:b2:77:a0:0c:36:09:16:ae:31:e0:92: 6e:d1:fe:9c:98:eb:2c:79:87:67:ed:97:1b:18:ff:da:6e:c5: f2:92:94:ba:15:ab:a7:70:a3:cd:3d:fa:81:6a:99:06:c0:97: d3:b2:91:b2:55:d0:ef:57:68:e0:37:e8:02:3d:d3:b3:22:f7: b2:19:61:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTgwQzExMC8GA1UEBRMoRkVCQjQyNzY2NzVBMDQ3NTRBNTM1M0Q1NzA3RTU3OTIx Q0RGNDM5MjAeFw0yNDA1MTUwODU5NDRaFw0yNDA1MjIwODU5NDRaMBgxFjAUBgNV BAMTDTY2NDQ3OTgxLTJkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChxvvqGALvMODu9rq9hpzYHtInrS72tyw21bXVsoCUGzyUwkJRrqsz8T4RIv22 AxD0q2qzXnaQV39sIGeSl6O0v0TTIZlbwDCF8Zcrs8un94a3g0EnlyBq8ZRCIjM1 GGg3z/Lw2iXahZv/cRStWK6GAEQzTtDV9h5yFbNBEUm2HWhYtWUTLBAdhIw0YETz DFwiWY+Ev/y47JJ0hI+rjXQKVVe3+QOKFYhN9WSKMMPB7UNuvFqErVdohfXHQz14 b6No4l+fmbLBw91La87IHoa1elLy4okQ72wOL5FabwXtXJCdoDhdu13nmyjt6YKJ OWyR6uIfzTN7+jQSY/stexfVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQMoSyg5H GybpEr0vaoKz6en98dYwHwYDVR0jBBgwFoAU/rtCdmdaBHVKU1PVcH5XkhzfQ5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODBDLzlBRDhCNTU0RkJG QTExRUVBRUU1RkUxRUM0RjlBRTAyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3J0Q2RtZGFCSFZLVTFQVmNINVhraHpmUTVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODBDLzlBRDhCNTU0RkJGQTExRUVBRUU1RkUxRUM0RjlBRTAyL19ydENkbWRhQkhW S1UxUFZjSDVYa2h6ZlE1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAluGBe/7v0La161rX9t4g4F8klIMmmm0hSmdGY2nq8Ygmak4Ebx5wmT FAUU6+39G0BWyOXUUPHaasQoqtt0uo/JzVbIUxqRKgvhcYpY4c10LseFvQTeNoQm u5Pv6tatQEMdp8jLYbqTsodMdL1m65S4ZOsh6rTqo9ev5qve+L+jDcIdzF72lKCl RyYlzDqJ4x350kmO/pB1Yf0j+twMAwVUJw0ryzoRv0uI5ai9Y9iKhiblQijmN/gd l6Gyd6AMNgkWrjHgkm7R/pyY6yx5h2ftlxsY/9puxfKSlLoVq6dwo809+oFqmQbA l9OykbJV0O9XaOA36AI907Mi97IZYe4= -----END CERTIFICATE-----Generated at Wed May 15 11:17:41 2024 by rpki-client on console-ams.rpki-client.org