$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: zYlMI12/zYx6N6xi7gFhdFRut7IVhZhY8p8SJ6/t5y8= Subject key identifier: F1:42:02:36:1F:D1:5F:DC:35:2E:E1:A4:A5:88:89:C6:07:EE:8E:1C Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1896 Signing time: Mon 06 May 2024 17:52:44 +0000 Manifest this update: Mon 06 May 2024 17:52:43 +0000 Manifest next update: Mon 13 May 2024 17:52:43 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: ZksmIQvh6D+1PRKefSVAVfFGJvw+4CmnP8Xe7LAULg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4471 (0x1177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: May 6 17:52:43 2024 GMT Not After : May 13 17:52:43 2024 GMT Subject: CN=663918eb-8903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:e4:98:3d:11:9a:a3:96:85:e9:96:06:5f: 92:95:51:ac:4b:83:bc:a1:b9:5b:d0:98:0e:cd:f4: de:10:6c:35:83:d0:23:6d:ab:3f:dc:6f:0d:e8:2f: 28:cc:92:17:d2:33:19:c3:08:87:5c:d7:4d:53:16: e9:da:0c:1f:0d:c0:35:f7:2c:f0:a4:7f:73:0c:b0: eb:70:85:b2:4e:3a:8f:bc:6f:b9:1e:4c:aa:a9:da: d1:ae:6a:64:0b:cf:25:09:97:b3:2a:ae:5a:bf:0b: 05:f4:b9:01:8d:d5:f5:06:30:8f:e5:5d:90:48:0f: 16:4a:25:2d:f9:5f:e3:a5:71:b2:77:84:b6:f5:b8: 54:25:20:93:94:ac:d5:8f:0f:00:4d:e6:c3:ef:5b: 50:31:99:ba:0a:05:73:c9:26:ad:71:0c:a3:17:56: 4c:1f:96:2d:31:31:c0:ae:2f:3e:d8:71:cc:48:71: 04:03:fb:02:a3:a6:54:da:0a:6d:d5:9b:80:61:d4: 02:86:17:46:be:60:92:94:1f:66:40:b6:c5:c2:30: a7:39:22:9f:12:6e:c7:6d:ef:6e:e2:c9:22:86:2d: 44:5d:59:1b:7a:a4:91:a2:01:48:49:10:37:7f:d2: 46:fe:9e:41:37:9f:ca:02:65:cb:2a:00:f5:59:6f: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:02:36:1F:D1:5F:DC:35:2E:E1:A4:A5:88:89:C6:07:EE:8E:1C X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a4:3f:cd:f7:e8:94:cf:2a:40:99:d0:bc:61:3a:23:c7:11: 2f:45:7e:7f:da:85:5f:06:2c:06:d0:f0:b7:88:e2:e0:56:69: 21:c9:ec:56:b7:d7:52:ed:2f:34:0e:0c:99:4e:be:67:0a:3f: e7:cd:d0:d8:bf:d0:8c:0a:d4:02:d2:da:c5:95:f4:3a:38:14: bb:d6:00:be:11:c1:85:04:32:d2:f0:bf:98:64:d5:03:f4:f4: 30:bb:ee:0d:3b:2e:92:af:f6:f0:7a:db:f8:ab:1f:01:38:7e: 6c:9c:0f:a9:e9:50:dd:ef:bf:ef:d9:8b:b9:c4:ab:0a:ce:2d: 66:db:63:94:55:60:be:05:00:5d:04:79:12:1a:46:8f:ed:d9: b3:33:67:91:de:d4:8e:c2:00:49:8c:48:79:d7:5d:3f:cc:55: 7b:db:76:04:64:e3:bf:34:52:54:66:49:7f:d8:9e:bc:14:f4: b6:b4:af:89:e9:9d:81:45:74:16:b9:d8:bb:f2:d4:6e:d0:88: 29:76:27:05:1e:11:4e:e6:4a:47:19:28:88:f7:9b:49:5a:26: 9b:8a:44:51:60:f7:b2:44:7d:8c:7f:14:ee:8d:f0:65:3c:c8: 8b:d4:7f:2d:5b:b9:67:b4:09:00:ed:75:65:1f:d9:87:80:c6: ac:ae:9c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjQwNTA2MTc1MjQzWhcNMjQwNTEzMTc1MjQzWjAYMRYwFAYD VQQDEw02NjM5MThlYi04OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszPkmD0RmqOWhemWBl+SlVGsS4O8oblb0JgOzfTeEGw1g9Ajbas/3G8N6C8o zJIX0jMZwwiHXNdNUxbp2gwfDcA19yzwpH9zDLDrcIWyTjqPvG+5HkyqqdrRrmpk C88lCZezKq5avwsF9LkBjdX1BjCP5V2QSA8WSiUt+V/jpXGyd4S29bhUJSCTlKzV jw8ATebD71tQMZm6CgVzySatcQyjF1ZMH5YtMTHAri8+2HHMSHEEA/sCo6ZU2gpt 1ZuAYdQChhdGvmCSlB9mQLbFwjCnOSKfEm7Hbe9u4skihi1EXVkbeqSRogFISRA3 f9JG/p5BN5/KAmXLKgD1WW++6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFCAjYf 0V/cNS7hpKWIicYH7o4cMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRpD/N9+iUzypAmdC8YTojxxEvRX5/2oVfBiwG0PC3iOLgVmkhyexW t9dS7S80DgyZTr5nCj/nzdDYv9CMCtQC0trFlfQ6OBS71gC+EcGFBDLS8L+YZNUD 9PQwu+4NOy6Sr/bwetv4qx8BOH5snA+p6VDd77/v2Yu5xKsKzi1m22OUVWC+BQBd BHkSGkaP7dmzM2eR3tSOwgBJjEh5110/zFV723YEZOO/NFJUZkl/2J68FPS2tK+J 6Z2BRXQWudi78tRu0IgpdicFHhFO5kpHGSiI95tJWiabikRRYPeyRH2MfxTujfBl PMiL1H8tW7lntAkA7XVlH9mHgMasrpwW -----END CERTIFICATE-----Generated at Mon May 6 20:19:32 2024 by rpki-client on console-ams.rpki-client.org