$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: XZeiiP3Wr2dEoqhjBLH0BJAK2ynRocCXI7ycZ9DVt/U= Subject key identifier: BC:D8:98:ED:84:B6:C0:DE:67:A5:EF:DC:79:04:6C:3E:29:D8:8D:18 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 1567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 244D Signing time: Thu 02 May 2024 17:20:32 +0000 Manifest this update: Thu 02 May 2024 17:20:32 +0000 Manifest next update: Thu 09 May 2024 17:20:32 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 0joQ8wFXeb2F1rlGgbJWA79ejIB+AegXy693is0pXzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5479 (0x1567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: May 2 17:20:32 2024 GMT Not After : May 9 17:20:32 2024 GMT Subject: CN=6633cb60-ad2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:0d:2f:11:53:43:4e:1e:bc:84:21:c2:68: 0d:60:0a:d1:be:0d:d9:05:6f:6b:b7:67:ed:e2:11: 8e:d3:a2:ab:80:2a:c6:9c:75:74:36:9e:f5:c7:90: 47:20:f1:56:ed:62:5f:de:d7:6b:48:34:2d:6e:f6: 90:a9:a6:f0:f0:fd:65:fe:7f:31:a6:0c:6a:d0:a8: 9d:65:d8:1a:48:a3:32:46:26:d3:35:22:24:2d:2e: 98:2d:10:46:65:59:d5:b3:6c:0a:59:99:62:a4:da: 21:34:77:fe:f6:22:3b:f4:16:c7:32:33:b7:c9:f2: 57:7b:b6:24:f1:30:7d:16:a5:18:64:0e:0c:45:c5: 42:1b:bf:9e:42:b4:d0:b6:78:cf:01:7d:0d:e8:51: 9f:ac:d2:2f:c3:b9:74:36:6f:55:07:b8:9f:a2:c8: 88:e6:5d:61:f1:4f:a1:00:23:67:7a:ac:6f:7f:aa: 81:83:fd:9c:8d:4c:39:ab:b0:85:7d:02:51:23:aa: 0c:bb:83:af:08:45:7c:a0:92:8f:d0:4e:ff:03:97: 4f:d9:4c:df:97:e5:d9:bd:bf:aa:8f:0f:49:5d:10: 67:1a:d9:c8:9f:3d:a1:0a:d4:50:37:bd:67:75:ca: cb:d8:b9:90:da:4c:18:d1:de:dc:dd:97:81:87:d0: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D8:98:ED:84:B6:C0:DE:67:A5:EF:DC:79:04:6C:3E:29:D8:8D:18 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:16:5c:ad:21:0d:5c:4b:5e:28:a4:7f:98:40:2c:05:a7:8c: 76:85:dc:d2:6b:9a:f6:80:7a:81:70:51:b1:08:f0:01:33:74: 80:76:42:03:07:a9:0b:3b:3b:af:3d:65:03:a0:9b:75:cc:07: 67:41:c6:b8:3e:a8:9e:96:99:4d:4c:3c:aa:31:39:fc:aa:c8: ae:42:c7:22:d5:2b:eb:28:2a:e6:30:77:19:ee:bb:3d:42:41: f4:a3:c5:13:63:4d:66:de:61:c4:4d:d0:bc:cc:b5:34:f3:e4: f1:65:2d:69:ef:f1:67:fa:1e:a2:92:63:ab:f2:24:59:9a:52: 20:53:bd:81:ce:43:b4:0f:8b:7d:70:30:7f:1f:0a:07:a2:de: 06:9f:78:f9:ec:61:3b:26:fa:14:f2:b5:73:6c:79:fb:bd:ff: 79:28:4d:5d:80:a3:46:fe:44:be:e1:1c:b4:2b:aa:b4:65:c4: e6:65:3f:4e:ce:68:ec:c9:56:cc:7e:68:0a:53:d1:75:33:61: 79:15:a1:17:97:f4:45:ef:de:99:32:be:39:87:b2:df:88:16: 43:03:f4:0a:5c:9d:d9:27:ec:59:7e:bf:38:30:c0:3f:8b:82: db:ee:63:08:a4:08:82:ba:ac:02:53:30:af:e1:6a:1e:24:45: b7:ca:56:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjQwNTAyMTcyMDMyWhcNMjQwNTA5MTcyMDMyWjAYMRYwFAYD VQQDEw02NjMzY2I2MC1hZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujMNLxFTQ04evIQhwmgNYArRvg3ZBW9rt2ft4hGO06KrgCrGnHV0Np71x5BH IPFW7WJf3tdrSDQtbvaQqabw8P1l/n8xpgxq0KidZdgaSKMyRibTNSIkLS6YLRBG ZVnVs2wKWZlipNohNHf+9iI79BbHMjO3yfJXe7Yk8TB9FqUYZA4MRcVCG7+eQrTQ tnjPAX0N6FGfrNIvw7l0Nm9VB7ifosiI5l1h8U+hACNneqxvf6qBg/2cjUw5q7CF fQJRI6oMu4OvCEV8oJKP0E7/A5dP2Uzfl+XZvb+qjw9JXRBnGtnInz2hCtRQN71n dcrL2LmQ2kwY0d7c3ZeBh9AcawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzYmO2E tsDeZ6Xv3HkEbD4p2I0YMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAFlytIQ1cS14opH+YQCwFp4x2hdzSa5r2gHqBcFGxCPABM3SAdkID B6kLOzuvPWUDoJt1zAdnQca4PqielplNTDyqMTn8qsiuQsci1SvrKCrmMHcZ7rs9 QkH0o8UTY01m3mHETdC8zLU08+TxZS1p7/Fn+h6ikmOr8iRZmlIgU72BzkO0D4t9 cDB/HwoHot4Gn3j57GE7JvoU8rVzbHn7vf95KE1dgKNG/kS+4Ry0K6q0ZcTmZT9O zmjsyVbMfmgKU9F1M2F5FaEXl/RF796ZMr45h7LfiBZDA/QKXJ3ZJ+xZfr84MMA/ i4Lb7mMIpAiCuqwCUzCv4WoeJEW3ylYm -----END CERTIFICATE-----Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org