$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json) Hash identifier: fbd4Oz5FNj8Qg41EyFRpWwZocTaMoxyL7elMpzji7b8= Subject key identifier: BC:DE:C0:FF:AD:98:72:0E:06:EF:AC:0E:9F:91:32:59:13:07:ED:7E Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft Manifest number: FC Signing time: Sun 05 May 2024 05:43:47 +0000 Manifest this update: Sun 05 May 2024 05:43:46 +0000 Manifest next update: Sun 12 May 2024 05:43:46 +0000 Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: wDi90g+0Rplc1RvH7r20W6wpfNuHIa4Ee6QTqET+SNQ=) 2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: W5OlriKqsGvAYkiKiP0+ut/DuoT3rJFnzrVmS85TFFw=) 3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: 8564C+EFY8R4KjhdM4HUf5Q8OK5v33Z+3MObpfw6evI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Validity Not Before: May 5 05:43:46 2024 GMT Not After : May 12 05:43:46 2024 GMT Subject: CN=66371c93-b8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:e2:77:4d:77:78:20:da:41:07:5b:66:1d: 35:0d:ac:ee:87:c5:51:cd:8f:9a:02:c9:0d:70:f4: a1:48:e2:08:ff:d6:69:16:49:d1:4d:8d:e9:7f:ad: 8b:ae:ab:fb:07:b5:33:d0:6b:fd:8c:4f:22:37:d7: fd:a1:80:02:49:2e:4c:f2:29:25:82:07:76:5d:75: 67:5f:8a:ab:d7:21:1f:21:a1:74:91:25:30:b5:a2: ea:91:20:1e:58:e9:21:69:75:6f:cf:d0:d3:0b:8b: bd:1a:0f:41:fd:d0:88:85:c8:28:f0:94:6d:8d:af: 79:a2:ac:e2:54:47:8b:51:0d:28:44:a9:88:e7:85: e3:cf:3e:c7:6f:35:52:28:ad:b8:9b:aa:8d:58:c6: 24:99:bf:23:d7:f8:97:18:fa:fe:9b:a0:ba:f8:df: 6d:67:5b:55:b5:5c:ed:39:1e:02:fb:65:19:6d:8c: b4:d5:cc:38:72:cd:c0:b9:f3:67:31:30:38:08:65: 28:69:89:f4:de:f3:ba:bb:f1:d5:94:d6:41:4f:7f: e7:b7:e0:32:8b:47:4e:f0:fb:f0:21:9c:28:af:cf: 08:a8:0a:8d:26:94:6c:cb:5c:ec:dd:fd:91:87:ca: 28:c4:f0:78:36:18:81:1d:80:38:7f:c0:70:69:2f: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:C0:FF:AD:98:72:0E:06:EF:AC:0E:9F:91:32:59:13:07:ED:7E X509v3 Authority Key Identifier: keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d6:bb:3d:f8:35:66:b9:45:f1:b8:5e:59:46:85:2a:fb:bc: 1e:74:45:a6:cc:01:97:7c:a4:e5:90:fe:fb:e6:6c:16:b0:3e: bc:3d:50:d4:05:b0:28:fe:e7:26:7d:fb:e0:1c:3e:bb:b5:8c: ae:3e:2d:c7:61:72:ae:1e:bb:b5:4d:42:dd:56:ba:33:43:f2: 08:c7:16:b6:f2:14:66:42:fb:07:e1:6c:06:6c:9e:3f:b6:a9: 36:c1:ff:8c:db:21:53:0d:a2:0a:f1:3d:98:cf:80:08:4f:c3: 3e:aa:1b:12:6e:4c:a1:ec:c0:2e:fe:72:18:10:57:54:15:63: cb:5c:32:48:ef:ff:ce:1f:71:5c:b8:19:29:06:7a:85:8e:ab: 61:bc:16:4f:9f:76:78:ef:0b:26:07:9b:51:ec:7c:6a:68:f4: 0e:7d:25:98:13:57:62:bb:b8:f6:70:b2:0f:ed:f2:33:aa:47: 5f:38:b8:8b:ca:91:0a:ce:06:64:03:31:d7:ee:3f:a1:c1:c9: ed:95:ca:e2:15:41:e0:f9:c3:d3:61:fb:f3:68:3f:68:03:d2: 26:24:3e:39:a4:27:72:e5:31:cb:de:2a:e2:c5:c8:e1:01:fa: 21:c0:3b:15:b1:90:50:2d:5e:8b:78:ed:03:e9:6e:5c:ba:d6: 36:17:c4:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OEUxMTAvBgNVBAUTKEFFQjg5QzAyNkZFOTU1MkExNTBCMDNDMzBBQTBDREM0 NzlEMUUyQTEwHhcNMjQwNTA1MDU0MzQ2WhcNMjQwNTEyMDU0MzQ2WjAYMRYwFAYD VQQDEw02NjM3MWM5My1iOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3rid013eCDaQQdbZh01Dazuh8VRzY+aAskNcPShSOII/9ZpFknRTY3pf62L rqv7B7Uz0Gv9jE8iN9f9oYACSS5M8iklggd2XXVnX4qr1yEfIaF0kSUwtaLqkSAe WOkhaXVvz9DTC4u9Gg9B/dCIhcgo8JRtja95oqziVEeLUQ0oRKmI54Xjzz7HbzVS KK24m6qNWMYkmb8j1/iXGPr+m6C6+N9tZ1tVtVztOR4C+2UZbYy01cw4cs3AufNn MTA4CGUoaYn03vO6u/HVlNZBT3/nt+Ayi0dO8PvwIZwor88IqAqNJpRsy1zs3f2R h8ooxPB4NhiBHYA4f8BwaS/JswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzewP+t mHIOBu+sDp+RMlkTB+1+MB8GA1UdIwQYMBaAFK64nAJv6VUqFQsDwwqgzcR50eKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY4RS8xNDNEMDI1NDhD MjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZTb1ZDd1BEQ3FETnhIblI0 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyaWNBbV9wVlNvVkN3UERDcUROeEhuUjRxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY4RS8xNDNEMDI1NDhDMjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZT b1ZDd1BEQ3FETnhIblI0cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu1rs9+DVmuUXxuF5ZRoUq+7wedEWmzAGXfKTlkP775mwWsD68PVDU BbAo/ucmffvgHD67tYyuPi3HYXKuHru1TULdVrozQ/IIxxa28hRmQvsH4WwGbJ4/ tqk2wf+M2yFTDaIK8T2Yz4AIT8M+qhsSbkyh7MAu/nIYEFdUFWPLXDJI7//OH3Fc uBkpBnqFjqthvBZPn3Z47wsmB5tR7HxqaPQOfSWYE1diu7j2cLIP7fIzqkdfOLiL ypEKzgZkAzHX7j+hwcntlcriFUHg+cPTYfvzaD9oA9ImJD45pCdy5THL3irixcjh AfohwDsVsZBQLV6LeO0D6W5cutY2F8S/ -----END CERTIFICATE-----Generated at Sun May 5 06:13:35 2024 by rpki-client on console-ams.rpki-client.org