$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: YLlC0MnHGck45Et/xGpiR91LDlw3YOqCHOFFMhnaxlg= Subject key identifier: 65:60:5D:22:15:5E:58:C5:DD:43:1F:63:C8:22:9F:AD:EB:13:B4:CC Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: AA Signing time: Mon 20 May 2024 15:25:06 +0000 Manifest this update: Mon 20 May 2024 15:25:06 +0000 Manifest next update: Mon 27 May 2024 15:25:06 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: Ya3VpnQqDjbOaHwjI1ruKbn+WWrMgIj/6g6FgWrnsNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 15:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: May 20 15:25:06 2024 GMT Not After : May 27 15:25:06 2024 GMT Subject: CN=664b6b52-69a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:4a:cf:fc:79:3f:9e:8c:50:7f:e6:bb:06: 5f:88:b1:15:19:06:36:97:f8:c3:fa:d6:c1:10:b9: 28:46:fa:5b:0b:f1:52:1e:cf:f9:99:8a:4c:75:cf: 4f:65:e9:1e:1d:fe:fc:c9:61:c0:c4:bd:c0:2e:7a: fb:1d:4e:d6:27:0e:24:17:3b:63:70:77:9c:98:f0: bb:c1:50:d0:17:23:1c:83:bf:19:4d:3f:f1:73:8d: 2b:50:06:ab:c6:fe:6d:f7:07:26:7a:a1:5e:9f:85: 74:80:3c:5d:90:cf:47:58:9f:84:c4:0b:e3:dc:54: d6:24:b0:a9:42:ca:50:f5:90:fa:03:ce:56:ff:5c: 01:2f:90:77:94:29:50:58:73:f7:6c:2e:7e:56:ab: 94:4c:61:7f:1f:88:2c:31:80:ea:93:0a:34:a3:4d: 43:84:36:15:b2:d8:64:cc:7d:06:ce:a5:94:db:2c: e0:22:f8:51:cf:78:49:e6:64:0f:bd:bb:1c:85:f2: 4b:6c:18:d8:df:e7:b3:09:39:ff:05:67:10:57:ff: 23:ff:d6:27:ab:25:bb:a7:50:11:d1:91:25:b3:a7: e0:e0:b4:4a:82:d4:c4:2c:03:ab:f5:9d:fe:47:60: 88:f8:02:6f:3b:49:68:7a:91:b2:15:f9:1b:0e:22: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:5D:22:15:5E:58:C5:DD:43:1F:63:C8:22:9F:AD:EB:13:B4:CC X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:48:ca:eb:78:38:dc:6b:f0:a9:bc:df:ba:c3:5a:41:a4:6a: 56:00:ec:7d:2b:f8:a8:2a:e6:b1:c0:2d:fe:ed:d1:37:95:19: ea:28:53:5b:3d:af:bf:4a:02:8c:44:8b:e5:cc:bf:71:ae:f6: d9:f3:0d:9d:7b:b8:e1:c8:0c:45:ae:2f:68:80:38:d6:13:50: e2:eb:a2:ff:42:76:84:c9:47:df:ab:c2:53:da:7b:31:3e:7d: fd:73:bc:06:29:13:56:29:0e:09:8c:02:77:34:88:38:49:c6: 60:20:12:82:d4:6b:17:c6:2c:08:18:bb:a6:0e:77:36:bb:ac: cb:a4:6e:26:a5:02:85:03:01:4a:42:0b:c8:dd:70:cf:dd:bd: 48:e1:94:70:8e:1d:c0:a4:ae:97:b8:5a:6a:a7:e3:e7:77:87: 68:7b:73:97:6b:65:e5:62:01:64:e7:4b:1b:ff:79:53:e8:9d: f2:cf:66:70:23:40:9b:f1:16:b0:14:34:a8:7d:e7:be:1c:3f: ad:59:2c:e3:bc:d2:f1:7b:f6:8b:68:cf:18:b8:2e:d9:b1:c0: 78:13:b0:87:da:d3:97:96:27:c2:05:bf:30:4b:42:65:12:eb: a2:dc:bf:a4:33:1d:76:07:f9:97:57:08:4c:c9:97:3c:1c:98: f3:09:b9:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjQwNTIwMTUyNTA2WhcNMjQwNTI3MTUyNTA2WjAYMRYwFAYD VQQDEw02NjRiNmI1Mi02OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8JKz/x5P56MUH/muwZfiLEVGQY2l/jD+tbBELkoRvpbC/FSHs/5mYpMdc9P ZekeHf78yWHAxL3ALnr7HU7WJw4kFztjcHecmPC7wVDQFyMcg78ZTT/xc40rUAar xv5t9wcmeqFen4V0gDxdkM9HWJ+ExAvj3FTWJLCpQspQ9ZD6A85W/1wBL5B3lClQ WHP3bC5+VquUTGF/H4gsMYDqkwo0o01DhDYVsthkzH0GzqWU2yzgIvhRz3hJ5mQP vbschfJLbBjY3+ezCTn/BWcQV/8j/9YnqyW7p1AR0ZEls6fg4LRKgtTELAOr9Z3+ R2CI+AJvO0loepGyFfkbDiJVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVgXSIV XljF3UMfY8gin63rE7TMMB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARSMrreDjca/CpvN+6w1pBpGpWAOx9K/ioKuaxwC3+7dE3lRnqKFNb Pa+/SgKMRIvlzL9xrvbZ8w2de7jhyAxFri9ogDjWE1Di66L/QnaEyUffq8JT2nsx Pn39c7wGKRNWKQ4JjAJ3NIg4ScZgIBKC1GsXxiwIGLumDnc2u6zLpG4mpQKFAwFK QgvI3XDP3b1I4ZRwjh3ApK6XuFpqp+Pnd4doe3OXa2XlYgFk50sb/3lT6J3yz2Zw I0Cb8RawFDSofee+HD+tWSzjvNLxe/aLaM8YuC7ZscB4E7CH2tOXlifCBb8wS0Jl Euui3L+kMx12B/mXVwhMyZc8HJjzCbng -----END CERTIFICATE-----Generated at Mon May 20 17:23:13 2024 by rpki-client on console-ams.rpki-client.org