$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: cRkiPJ3VLmgAR9DC6VsDNXh7BfGtmuelGTZzXzYk2NY= Subject key identifier: B6:BC:C7:C8:99:12:40:73:46:23:DC:D9:10:1F:08:6E:10:AC:A4:4A Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0B81 Signing time: Thu 02 May 2024 19:24:54 +0000 Manifest this update: Thu 02 May 2024 19:24:54 +0000 Manifest next update: Thu 09 May 2024 19:24:54 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: HVKmw+65/qrCm0PjRWWg06YfBdE9Po0hEPZezjhcfWM=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: TfslzRg8GnFh8WZZlRlz17hq1aYEemXqD5Pt4nOxrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: May 2 19:24:54 2024 GMT Not After : May 9 19:24:54 2024 GMT Subject: CN=6633e886-6aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:ff:ae:82:c5:14:ed:2a:7a:62:4d:98:03: 41:d8:83:34:82:0e:b8:d1:52:f9:db:a7:31:94:27: 0b:7c:bf:94:59:70:1c:28:d4:80:6d:85:3e:4d:19: f2:16:87:7e:97:3a:c8:ab:b1:75:d9:87:6d:9f:1a: c0:67:8c:82:de:08:e4:ad:29:08:91:f5:45:49:93: da:c5:7a:d8:6b:de:95:6f:61:25:22:27:d1:fd:15: 5e:90:15:e7:c0:54:60:bd:85:60:04:35:d5:b0:e9: c0:50:b8:f4:aa:a3:59:45:27:07:10:b6:b3:5c:a7: c3:9a:f7:ee:7b:b7:bc:a5:45:68:f3:c0:c7:3f:63: c0:af:7d:5e:13:09:65:0d:08:04:3d:0f:98:90:c0: a6:40:a2:ca:05:85:91:83:3e:7e:1b:b1:46:37:cd: f9:22:aa:c7:c1:fc:08:00:cc:9f:fd:50:93:5b:97: 52:7a:f8:19:dc:cf:27:1c:7c:d0:33:c7:98:aa:ed: 2e:63:6a:6c:05:45:ae:f8:ac:7c:18:06:cc:d5:d1: c1:26:67:79:d2:40:59:cd:e5:d3:a4:76:e6:07:f0: 2b:13:cb:16:c4:d8:94:84:37:f2:f6:dc:18:24:c6: 36:dc:5d:74:2a:45:3f:79:52:b3:4c:cc:de:ae:43: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BC:C7:C8:99:12:40:73:46:23:DC:D9:10:1F:08:6E:10:AC:A4:4A X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0f:fe:a2:30:fd:39:ef:aa:55:63:34:9e:99:20:15:ea:bf: ad:74:dc:e5:54:8e:4d:0f:06:44:ba:29:14:bc:b0:67:f2:d6: d5:e2:24:ab:3b:46:68:d9:cb:09:fb:0f:12:fc:64:90:10:63: 8d:25:4c:fe:79:43:9f:81:d9:13:66:b6:1b:09:92:cc:3e:d1: 5b:41:73:25:f2:0a:fa:ec:02:f1:6d:c3:11:3b:28:d8:52:5b: fa:dd:48:96:ae:9f:63:d8:36:c6:c0:03:77:41:49:91:94:66: 78:45:46:71:a9:25:83:8e:6b:13:a2:86:40:a8:f3:c0:85:e1: 85:97:9d:78:2f:85:d2:60:3c:a9:8a:15:44:08:63:81:59:b2: 6c:31:40:61:41:1a:69:e3:6f:a2:88:f4:66:18:b7:2d:a9:8b: 61:74:f5:e2:b1:b8:33:43:37:22:24:53:c6:23:42:fe:53:95: 04:6d:3e:48:cb:49:93:d1:5f:3e:8b:55:cc:0b:58:9f:3a:1c: f7:fc:02:fe:96:02:ac:d4:55:6d:bc:70:e4:ef:dc:d8:ae:07: cc:e2:6c:e9:88:92:24:bb:e1:bb:d5:18:dc:d8:14:cd:6a:eb: ba:b2:71:d4:e2:4e:b9:83:2f:53:e0:ed:4b:21:9f:34:fe:a0: c2:e8:9e:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjQwNTAyMTkyNDU0WhcNMjQwNTA5MTkyNDU0WjAYMRYwFAYD VQQDEw02NjMzZTg4Ni02YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lj/roLFFO0qemJNmANB2IM0gg640VL526cxlCcLfL+UWXAcKNSAbYU+TRny Fod+lzrIq7F12YdtnxrAZ4yC3gjkrSkIkfVFSZPaxXrYa96Vb2ElIifR/RVekBXn wFRgvYVgBDXVsOnAULj0qqNZRScHELazXKfDmvfue7e8pUVo88DHP2PAr31eEwll DQgEPQ+YkMCmQKLKBYWRgz5+G7FGN835IqrHwfwIAMyf/VCTW5dSevgZ3M8nHHzQ M8eYqu0uY2psBUWu+Kx8GAbM1dHBJmd50kBZzeXTpHbmB/ArE8sWxNiUhDfy9twY JMY23F10KkU/eVKzTMzerkOx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa8x8iZ EkBzRiPc2RAfCG4QrKRKMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4D/6iMP0576pVYzSemSAV6r+tdNzlVI5NDwZEuikUvLBn8tbV4iSr O0Zo2csJ+w8S/GSQEGONJUz+eUOfgdkTZrYbCZLMPtFbQXMl8gr67ALxbcMROyjY Ulv63UiWrp9j2DbGwAN3QUmRlGZ4RUZxqSWDjmsTooZAqPPAheGFl514L4XSYDyp ihVECGOBWbJsMUBhQRpp42+iiPRmGLctqYthdPXisbgzQzciJFPGI0L+U5UEbT5I y0mT0V8+i1XMC1ifOhz3/AL+lgKs1FVtvHDk79zYrgfM4mzpiJIku+G71Rjc2BTN auu6snHU4k65gy9T4O1LIZ80/qDC6J5D -----END CERTIFICATE-----Generated at Thu May 2 20:04:40 2024 by rpki-client on console-ams.rpki-client.org