$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: AQ2KSnZTi6BcvF8fDIWmQ1jH+GvUsIrgBE0LbJPBE/Q= Subject key identifier: B1:E0:A5:3E:7C:25:A6:69:2A:57:21:36:2F:B3:D1:AD:14:EE:2A:3A Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 23C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 23B4 Signing time: Sat 04 May 2024 16:09:59 +0000 Manifest this update: Sat 04 May 2024 16:09:58 +0000 Manifest next update: Sat 11 May 2024 16:09:58 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: qNJrIGmIo+d04XLua3vBRJKQzrM9oz+TDJM4Gv2YM+c=) 2: E7BF2DC6B10D11E5894F4D1CC4F9AE02.roa (hash: qUw5Mfwcrnht/D+/7moB10IpxZS6XQCgRUGUGmQ0790=) 3: 0AEF32C6FC3611EC95130A10C4F9AE02.roa (hash: OgnXLORFGXXu2SwRr4cx/2WbeNsSuSP3wMn0legKHGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9159 (0x23c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: May 4 16:09:58 2024 GMT Not After : May 11 16:09:58 2024 GMT Subject: CN=66365dd6-32b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:ed:5a:98:07:29:61:22:c2:e5:26:96:2e: 55:e1:57:b2:eb:17:7d:a7:b7:c5:92:39:b0:f1:bd: 55:bf:5c:78:24:08:f7:8f:19:ad:6a:42:69:81:90: 07:d8:fa:a5:5f:79:74:60:01:2a:69:43:89:8f:52: 65:6e:a1:ba:25:45:9c:d4:98:fd:c0:4b:02:81:67: ad:81:47:89:8b:8a:ef:fe:08:a8:b5:50:3a:7c:1a: 59:83:1e:19:a6:55:a2:58:05:88:12:61:f9:5f:84: 4b:92:87:6f:bb:58:b0:82:98:4e:38:0a:76:dc:47: 68:4f:58:7a:c7:40:02:b8:a8:ee:e3:65:56:83:85: e4:00:e6:20:db:0e:6d:b0:69:94:a3:0a:61:b4:61: 01:6a:44:06:2a:b1:dd:dc:0a:b4:8a:77:f5:a8:e1: 3d:20:56:4c:e3:97:90:e1:70:dc:46:7e:e9:ad:b5: 4a:16:9a:6a:12:1f:20:23:45:50:54:92:6c:7c:da: df:7f:b8:d7:27:64:4d:9f:3b:e1:33:1e:40:b9:e7: 6a:c4:13:aa:56:e4:61:89:42:4d:02:79:63:ef:71: 99:c4:11:cc:f4:2c:c9:c3:57:e5:b9:20:53:31:ed: 18:be:c1:26:91:b9:97:d2:af:9d:b1:13:a8:a9:f6: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E0:A5:3E:7C:25:A6:69:2A:57:21:36:2F:B3:D1:AD:14:EE:2A:3A X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:44:bf:f1:50:38:4f:6b:97:38:17:fe:bc:5b:3e:f6:b2:44: f4:7a:e4:6d:04:e1:e9:68:7b:49:9f:1d:1a:71:31:42:02:2f: 0c:1a:ad:57:0a:22:77:97:36:64:7c:c9:1b:db:b3:42:a6:56: c1:61:0f:29:0e:26:0b:1a:f2:b5:46:ff:50:bc:d6:e9:a0:0a: a5:55:ee:db:26:c9:7f:2b:88:6a:34:eb:69:cb:42:aa:8d:b5: d7:9f:95:a4:c4:27:a8:f9:87:a5:5f:a2:9a:d0:4f:80:37:77: d0:81:e7:3d:1c:6f:23:e6:2e:68:43:9e:a5:c4:3b:19:19:4e: be:5f:f9:32:13:83:60:bd:fb:d7:58:2a:12:8f:95:54:8a:65: 04:7b:18:4e:3b:70:43:0f:ac:01:29:24:92:91:e6:24:6d:ba: 9c:be:f9:3f:de:ce:d4:d1:54:15:f1:25:7f:42:5c:8b:f7:d9: c5:6e:71:be:bd:9c:0d:a6:de:98:77:ef:cf:e0:81:4b:a3:00: c8:26:5d:68:0c:5d:d2:f6:05:d1:05:51:7c:6c:65:78:37:49: 6c:52:d4:c6:f9:93:45:68:c1:61:20:0f:14:9a:56:50:27:56: 23:0d:74:d8:9f:03:c5:3a:38:49:95:33:00:4e:ce:3e:06:1f: f3:e0:ae:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjQwNTA0MTYwOTU4WhcNMjQwNTExMTYwOTU4WjAYMRYwFAYD VQQDEw02NjM2NWRkNi0zMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSntWpgHKWEiwuUmli5V4Vey6xd9p7fFkjmw8b1Vv1x4JAj3jxmtakJpgZAH 2PqlX3l0YAEqaUOJj1JlbqG6JUWc1Jj9wEsCgWetgUeJi4rv/giotVA6fBpZgx4Z plWiWAWIEmH5X4RLkodvu1iwgphOOAp23EdoT1h6x0ACuKju42VWg4XkAOYg2w5t sGmUowphtGEBakQGKrHd3Aq0inf1qOE9IFZM45eQ4XDcRn7prbVKFppqEh8gI0VQ VJJsfNrff7jXJ2RNnzvhMx5AuedqxBOqVuRhiUJNAnlj73GZxBHM9CzJw1fluSBT Me0YvsEmkbmX0q+dsROoqfZZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHgpT58 JaZpKlchNi+z0a0U7io6MB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNRL/xUDhPa5c4F/68Wz72skT0euRtBOHpaHtJnx0acTFCAi8MGq1X CiJ3lzZkfMkb27NCplbBYQ8pDiYLGvK1Rv9QvNbpoAqlVe7bJsl/K4hqNOtpy0Kq jbXXn5WkxCeo+YelX6Ka0E+AN3fQgec9HG8j5i5oQ56lxDsZGU6+X/kyE4NgvfvX WCoSj5VUimUEexhOO3BDD6wBKSSSkeYkbbqcvvk/3s7U0VQV8SV/QlyL99nFbnG+ vZwNpt6Yd+/P4IFLowDIJl1oDF3S9gXRBVF8bGV4N0lsUtTG+ZNFaMFhIA8UmlZQ J1YjDXTYnwPFOjhJlTMATs4+Bh/z4K5d -----END CERTIFICATE-----Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org