$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: ybnyY8L/d5HXxJz3pg4Fb5S8cs1rc74gWQCqDHTGzBc= Subject key identifier: 1A:AD:F0:3D:E8:2E:41:D0:11:8E:0C:34:31:43:8B:5C:83:E5:74:43 Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: B0 Signing time: Tue 07 May 2024 06:31:39 +0000 Manifest this update: Tue 07 May 2024 06:31:38 +0000 Manifest next update: Tue 14 May 2024 06:31:38 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: vAv5PdGKm8cntb19HSs2oC6bTqVUioMfNKI9Ut6TlME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: May 7 06:31:38 2024 GMT Not After : May 14 06:31:38 2024 GMT Subject: CN=6639caca-be93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:4e:1e:20:a4:0b:ac:b3:ff:3a:77:f1:96: 8e:79:2c:b2:4f:ca:43:3d:4e:48:a2:ec:84:51:f6: 96:8d:ff:5f:ff:02:a8:04:fe:e9:10:d5:21:a4:ad: 78:f3:48:63:37:00:45:65:c1:85:3c:1e:1d:66:5f: 69:3d:54:48:94:79:14:2c:b7:8d:8a:19:17:af:e6: 8d:a6:a6:d7:e1:07:a9:da:85:da:b3:b6:8c:88:2d: 0c:a1:81:55:ed:11:ba:54:88:e4:81:7c:98:e5:55: 63:bf:2b:f5:65:7b:09:29:92:1e:44:c8:fb:7b:86: 53:d0:93:a6:01:33:a4:ef:0b:7b:37:36:a2:1d:d2: 26:bb:9e:1f:b4:b7:40:ee:fe:90:d7:a1:48:df:08: c4:4c:b3:5d:5d:90:09:46:8f:31:03:c3:b9:fd:46: 5e:87:16:4b:ae:fe:ec:ce:84:26:9b:6a:f9:07:bd: 97:d8:be:37:86:6f:c2:17:9e:f4:04:d4:5b:a7:28: f5:8b:e9:0f:d6:d5:b2:9a:9d:79:0d:36:ea:2f:7d: 6f:3c:9f:9b:c0:77:f8:33:65:be:97:d1:10:f0:74: f6:d7:9b:c4:7c:11:0e:83:a6:a5:98:71:c5:85:53: b1:7f:6b:88:32:c0:c3:9b:ac:f2:e0:81:f4:dd:00: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AD:F0:3D:E8:2E:41:D0:11:8E:0C:34:31:43:8B:5C:83:E5:74:43 X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:b8:a0:83:c4:0d:c5:01:f4:ce:70:09:b2:d4:5f:80:c2:b2: 03:4b:56:d3:8e:1f:24:3a:71:ef:62:c3:f2:c1:a2:c0:ac:65: 68:4e:f7:f6:67:70:58:a9:e5:a4:40:39:c8:9e:df:ac:8b:bb: c5:41:9c:01:45:b6:16:00:06:e0:fc:03:e7:cc:39:24:32:1a: fa:42:c0:9e:e5:10:74:e6:18:d3:75:76:90:fa:84:90:38:e1: 1d:96:34:37:a5:9b:1f:5e:d1:0b:5e:b2:27:85:63:e0:9d:33: 40:05:6b:e8:2f:d2:70:0b:5b:9a:c5:6b:ec:97:de:69:ba:7e: 15:64:37:5c:47:0b:aa:b9:3a:da:31:d3:77:32:83:59:66:72: e1:2e:39:ad:c2:39:7c:ae:97:55:0f:53:d5:da:9c:8b:32:38: b8:8b:50:cb:af:00:21:4f:09:63:a6:dc:85:7f:99:04:5d:bd: b6:0e:cf:89:21:9b:01:34:b9:66:69:a7:5e:03:d1:b6:5f:a9: bf:3a:81:54:3b:b6:3b:bd:4e:0c:eb:a8:e7:3b:4e:9a:ad:d5: 49:87:76:ae:65:26:33:09:e4:81:6f:1c:89:88:7e:e5:c5:a1: cd:f7:c9:77:be:71:7e:b8:35:d5:a8:58:cb:8d:91:2e:3c:29: 7e:01:94:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjQwNTA3MDYzMTM4WhcNMjQwNTE0MDYzMTM4WjAYMRYwFAYD VQQDEw02NjM5Y2FjYS1iZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3hOHiCkC6yz/zp38ZaOeSyyT8pDPU5IouyEUfaWjf9f/wKoBP7pENUhpK14 80hjNwBFZcGFPB4dZl9pPVRIlHkULLeNihkXr+aNpqbX4Qep2oXas7aMiC0MoYFV 7RG6VIjkgXyY5VVjvyv1ZXsJKZIeRMj7e4ZT0JOmATOk7wt7NzaiHdImu54ftLdA 7v6Q16FI3wjETLNdXZAJRo8xA8O5/UZehxZLrv7szoQmm2r5B72X2L43hm/CF570 BNRbpyj1i+kP1tWymp15DTbqL31vPJ+bwHf4M2W+l9EQ8HT215vEfBEOg6almHHF hVOxf2uIMsDDm6zy4IH03QBeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqt8D3o LkHQEY4MNDFDi1yD5XRDMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpuKCDxA3FAfTOcAmy1F+AwrIDS1bTjh8kOnHvYsPywaLArGVoTvf2 Z3BYqeWkQDnInt+si7vFQZwBRbYWAAbg/APnzDkkMhr6QsCe5RB05hjTdXaQ+oSQ OOEdljQ3pZsfXtELXrInhWPgnTNABWvoL9JwC1uaxWvsl95pun4VZDdcRwuquTra MdN3MoNZZnLhLjmtwjl8rpdVD1PV2pyLMji4i1DLrwAhTwljptyFf5kEXb22Ds+J IZsBNLlmaadeA9G2X6m/OoFUO7Y7vU4M66jnO06ardVJh3auZSYzCeSBbxyJiH7l xaHN98l3vnF+uDXVqFjLjZEuPCl+AZS9 -----END CERTIFICATE-----Generated at Tue May 7 07:13:00 2024 by rpki-client on console-ams.rpki-client.org