$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: +MCsiaJNqRT5UcPVjSEflIwBNw+Ecqw1hslI4STFbtM= Subject key identifier: 79:75:78:A5:5C:2C:D9:8B:71:60:2C:D7:61:AF:26:CA:4A:F3:30:01 Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 4F Signing time: Fri 17 May 2024 08:09:41 +0000 Manifest this update: Fri 17 May 2024 08:09:41 +0000 Manifest next update: Fri 24 May 2024 08:09:41 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: 7TRxtHFr1LSyplS7FrvSp7r56TzMWGYv5Wm/QXz+JvM=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: fjydwDrZROwxfgj42CG2gOq+dhBEEh9PfDMSPGOK9ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: May 17 08:09:41 2024 GMT Not After : May 24 08:09:41 2024 GMT Subject: CN=664710c5-5feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:45:4f:e3:bb:fa:f4:37:a8:ec:14:8a:99: 31:59:2d:61:1e:45:bd:a6:df:c2:c5:7e:01:b9:66: 16:2b:3e:3b:9a:1b:26:88:bd:d5:ff:d3:a0:ce:eb: 24:66:a9:67:f1:4b:62:cc:00:dd:8b:55:a1:85:6d: c1:ed:85:9b:76:8d:b7:9f:23:6e:de:6c:aa:a7:1f: b8:a5:96:3c:b6:60:a3:fd:0f:50:40:15:38:49:f2: 43:df:6f:de:ef:c0:fa:42:6f:cb:c6:8c:a5:d3:21: cf:20:59:8f:8f:94:38:d8:ff:0b:27:45:6e:41:75: f6:b6:a5:2a:f0:98:a2:31:e0:40:f2:1c:cf:57:e4: 42:5c:b9:8e:b0:52:3f:70:4b:34:fe:ca:35:2e:bd: 34:68:70:a7:69:ee:70:7c:fa:48:0b:27:b4:f7:51: 97:a8:91:94:c1:91:70:3a:cc:7e:94:e9:df:34:d3: 48:b1:9b:cf:d9:ed:a7:d5:49:ff:19:9b:a8:68:56: 92:77:a1:ac:c9:7f:2e:da:40:36:55:d3:38:76:97: 5f:a4:16:75:3a:a5:64:55:cb:ad:fa:8d:64:cc:3d: 61:d5:a9:be:0a:52:19:81:87:66:24:c0:82:56:0d: 02:90:2c:70:82:c9:e8:5d:33:e9:70:6a:ac:9b:d2: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:75:78:A5:5C:2C:D9:8B:71:60:2C:D7:61:AF:26:CA:4A:F3:30:01 X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:78:04:53:08:31:fe:cc:3f:26:d8:95:39:c2:47:0a:74:46: ed:e5:24:93:aa:6b:df:02:e0:7d:ed:2f:ce:33:ed:97:ac:8f: 4e:f1:f1:8f:e9:40:5c:64:a7:ff:7b:27:31:b6:ec:74:f0:61: ba:da:bd:37:f5:90:36:3d:9e:fc:39:7e:7c:df:92:d7:0c:cf: c9:2f:b4:cb:6f:f8:0e:6a:44:b0:9e:6d:23:5d:f1:e9:14:40: 42:d2:bc:5e:d4:c0:42:41:06:81:b3:9f:55:c6:a7:90:f6:bc: 60:d7:a5:03:37:55:55:d2:ea:d1:3e:6b:a8:8f:09:5c:ec:f8: 21:8d:28:2c:16:ad:cb:ef:31:46:8b:23:86:f3:65:2a:87:34: 9f:5b:17:76:da:c4:e3:90:29:77:a0:2a:28:a6:2c:fe:22:03: 8c:4e:bc:d0:a9:b7:72:d0:db:1c:7e:f9:3f:b1:6d:3a:dc:30: 1f:3b:77:e4:eb:da:1f:7b:d6:ec:d0:70:1a:e5:13:92:2b:f9: 6d:75:c9:17:b4:60:5d:17:42:2b:c8:c5:ae:9a:b4:d2:5d:b5: 20:80:0c:28:7e:7a:b0:ef:6d:8a:c1:cb:eb:11:bd:ff:af:9e: 37:0d:e5:3b:e4:a5:49:f1:8e:f2:8e:f3:7d:91:3b:d1:fd:d5: 8d:74:bb:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDVDRTExMC8GA1UEBRMoNzI5MjZGQzYwRjdDMTg0QTYxRDczQkQwOTRBQTZBMzg2 QjYzMDAyQTAeFw0yNDA1MTcwODA5NDFaFw0yNDA1MjQwODA5NDFaMBgxFjAUBgNV BAMTDTY2NDcxMGM1LTVmZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDINkVP47v69Deo7BSKmTFZLWEeRb2m38LFfgG5ZhYrPjuaGyaIvdX/06DO6yRm qWfxS2LMAN2LVaGFbcHthZt2jbefI27ebKqnH7illjy2YKP9D1BAFThJ8kPfb97v wPpCb8vGjKXTIc8gWY+PlDjY/wsnRW5Bdfa2pSrwmKIx4EDyHM9X5EJcuY6wUj9w SzT+yjUuvTRocKdp7nB8+kgLJ7T3UZeokZTBkXA6zH6U6d8000ixm8/Z7afVSf8Z m6hoVpJ3oazJfy7aQDZV0zh2l1+kFnU6pWRVy636jWTMPWHVqb4KUhmBh2YkwIJW DQKQLHCCyehdM+lwaqyb0hfjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeXV4pVws 2YtxYCzXYa8mykrzMAEwHwYDVR0jBBgwFoAUcpJvxg98GEph1zvQlKpqOGtjACow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNUNFLzBFQjA5RDM2QUU3 NDExRUU4Q0VEMjM1Q0M0RjlBRTAyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3BKdnhnOThHRXBoMXp2UWxLcHFPR3RqQUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NUNFLzBFQjA5RDM2QUU3NDExRUU4Q0VEMjM1Q0M0RjlBRTAyL2NwSnZ4Zzk4R0Vw aDF6dlFsS3BxT0d0akFDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFp4BFMIMf7MPybYlTnCRwp0Ru3lJJOqa98C4H3tL84z7Zesj07x8Y/p QFxkp/97JzG27HTwYbravTf1kDY9nvw5fnzfktcMz8kvtMtv+A5qRLCebSNd8ekU QELSvF7UwEJBBoGzn1XGp5D2vGDXpQM3VVXS6tE+a6iPCVzs+CGNKCwWrcvvMUaL I4bzZSqHNJ9bF3baxOOQKXegKiimLP4iA4xOvNCpt3LQ2xx++T+xbTrcMB87d+Tr 2h971uzQcBrlE5Ir+W11yRe0YF0XQivIxa6atNJdtSCADCh+erDvbYrBy+sRvf+v njcN5TvkpUnxjvKO832RO9H91Y10u3A= -----END CERTIFICATE-----Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org