$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json) Hash identifier: tAORAvp19CeAUJGSQ6U4vHF0ZcvN1IHQ9vGs7uDQ1nY= Subject key identifier: E5:9F:5B:62:CC:A7:1B:F0:1D:2D:E2:15:0A:F6:EA:B9:AC:F1:49:81 Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft Manifest number: 0728 Signing time: Sat 04 May 2024 22:41:33 +0000 Manifest this update: Sat 04 May 2024 22:41:33 +0000 Manifest next update: Sat 11 May 2024 22:41:33 +0000 Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: kl2pDYKCSOSMD4Ceb9xUXieIWdTXc+a1aMHaFtFc+/0=) 2: D2027F2A09B711EC93F7E66FC4F9AE02.roa (hash: 6KNgKZXZVV/AvknRswKbpktVqgCEKw/OBPB+JqhURXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Validity Not Before: May 4 22:41:33 2024 GMT Not After : May 11 22:41:33 2024 GMT Subject: CN=6636b99d-766b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:63:b8:14:f5:f6:8c:d4:12:6a:8a:78:2a: 84:58:3d:f7:32:4e:f8:d2:9f:cd:2d:83:e2:81:bc: 5d:2d:db:03:7a:40:b9:0f:bc:6c:fe:11:2b:b1:54: bc:5c:2e:37:3f:c2:0a:c7:1a:65:2a:8d:f0:bc:84: 7f:ff:24:40:24:cc:3e:d1:db:07:bc:5b:c7:7b:8c: 5a:82:15:5b:ad:0c:9d:3c:03:7a:2b:18:4f:42:5c: 37:99:db:35:42:85:ae:e0:2d:d0:3c:7d:4f:48:3c: 0c:4c:35:b4:05:39:15:7f:47:2e:78:54:ee:7a:2a: 2f:25:64:b3:e6:28:72:aa:90:08:28:a7:63:74:26: 9d:43:f4:f6:cb:a6:a3:d8:93:2a:8c:ab:04:e9:a3: 88:e6:a5:a9:f1:6f:73:d8:2b:a9:d9:88:39:7e:ad: 5c:0d:56:44:97:7b:d5:60:e8:e8:3a:77:21:70:49: 99:84:62:9c:94:09:f1:0a:d6:37:ba:a4:cc:d2:53: 7e:5a:94:f0:05:49:a7:d8:f3:4e:1a:b8:bf:53:fd: 4b:9b:b4:7e:63:5c:6c:38:9a:c4:7a:09:d7:66:e3: 4b:aa:b7:a1:53:41:c0:81:26:c2:b0:84:72:0b:28: 7e:db:db:cf:bf:98:9e:ef:99:97:06:8f:fa:91:72: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:5B:62:CC:A7:1B:F0:1D:2D:E2:15:0A:F6:EA:B9:AC:F1:49:81 X509v3 Authority Key Identifier: keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:69:fd:00:3f:01:6e:0e:09:18:3c:3c:fc:50:20:47:85:15: 12:72:63:ae:83:71:19:e3:0c:15:71:1b:7a:e1:25:55:52:d7: 2f:50:4b:fb:08:00:89:16:48:91:44:c2:e1:af:2c:03:82:15: 44:44:d2:17:dd:9a:0c:a6:9a:51:bd:04:ff:ac:3b:75:9d:9d: 30:d0:d8:8b:a8:c2:9b:b8:a6:e3:9d:33:e8:c6:01:bf:38:0b: 81:38:34:c2:4f:58:6e:f9:66:be:d2:98:cb:05:2a:ef:22:be: 2c:7d:20:78:bf:42:5b:b0:d7:e7:71:48:02:b6:f3:81:d8:09: a6:e4:c2:94:a5:8f:58:67:9d:74:fa:84:79:60:8b:f0:65:4e: a0:34:ca:4f:fd:55:e9:85:ea:f1:79:ce:f1:9d:2c:e7:ba:b7: 8b:08:a8:36:f4:8c:4b:0b:5f:ca:0f:11:e0:ce:86:9b:7f:3c: 2e:f0:ba:80:9e:c3:b4:e2:35:a9:59:e7:0a:6a:be:51:89:26: f2:a5:34:80:8c:6d:1e:59:7d:45:64:43:eb:47:b4:1f:31:01: ff:d4:51:3c:f3:af:fc:80:8f:63:ea:0e:97:3c:7a:67:f8:df: 20:b1:fb:0d:a0:ae:38:b4:69:e4:33:60:25:0d:8a:93:5b:09: d8:7f:e5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdCQjU3MUE1MjAw Q0U1NUQ4RjMwHhcNMjQwNTA0MjI0MTMzWhcNMjQwNTExMjI0MTMzWjAYMRYwFAYD VQQDEw02NjM2Yjk5ZC03NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxtjuBT19ozUEmqKeCqEWD33Mk740p/NLYPigbxdLdsDekC5D7xs/hErsVS8 XC43P8IKxxplKo3wvIR//yRAJMw+0dsHvFvHe4xaghVbrQydPAN6KxhPQlw3mds1 QoWu4C3QPH1PSDwMTDW0BTkVf0cueFTueiovJWSz5ihyqpAIKKdjdCadQ/T2y6aj 2JMqjKsE6aOI5qWp8W9z2Cup2Yg5fq1cDVZEl3vVYOjoOnchcEmZhGKclAnxCtY3 uqTM0lN+WpTwBUmn2PNOGri/U/1Lm7R+Y1xsOJrEegnXZuNLqrehU0HAgSbCsIRy Cyh+29vPv5ie75mXBo/6kXKGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWfW2LM pxvwHS3iFQr26rms8UmBMB8GA1UdIwQYMBaAFAtTuApsnIrrdNbXu1caUgDOVdjz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NURFQi8xNjJDQjI3NEVB NEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1dDAxdGU3VnhwU0FNNVYy UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MxTzRDbXljaXV0MDF0ZTdWeHBTQU01VjJQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1 dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwaf0APwFuDgkYPDz8UCBHhRUScmOug3EZ4wwVcRt64SVVUtcvUEv7 CACJFkiRRMLhrywDghVERNIX3ZoMpppRvQT/rDt1nZ0w0NiLqMKbuKbjnTPoxgG/ OAuBODTCT1hu+Wa+0pjLBSrvIr4sfSB4v0JbsNfncUgCtvOB2Amm5MKUpY9YZ510 +oR5YIvwZU6gNMpP/VXpherxec7xnSznureLCKg29IxLC1/KDxHgzoabfzwu8LqA nsO04jWpWecKar5RiSbypTSAjG0eWX1FZEPrR7QfMQH/1FE886/8gI9j6g6XPHpn +N8gsfsNoK44tGnkM2AlDYqTWwnYf+XV -----END CERTIFICATE-----Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org