$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: JCTUhZfL9JgCKXcr8HFoZ+3G/Yxs4+EsFciVxEnF8iY= Subject key identifier: 6A:F5:52:8A:B8:55:1B:BC:18:CE:41:F6:81:A4:24:6C:47:67:09:A8 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0ADA Signing time: Fri 26 Apr 2024 20:02:45 +0000 Manifest this update: Fri 26 Apr 2024 20:02:45 +0000 Manifest next update: Fri 03 May 2024 20:02:45 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: k8v4DkJLQ99LE+ylNr5HG1lrw+4yhN16i1l6HEJkVKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Apr 26 20:02:45 2024 GMT Not After : May 3 20:02:45 2024 GMT Subject: CN=662c0865-27c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:34:8a:61:66:29:88:8b:bc:5c:a4:ad:45: 21:ab:7b:b9:b4:85:01:8d:ac:4e:ed:47:4f:d4:9f: 4a:0b:a5:01:d6:b9:07:4f:72:80:13:b8:c0:0c:c0: 78:95:53:6b:23:6a:a9:67:62:df:be:87:bb:32:a7: 87:0a:f9:46:5c:17:27:bf:83:03:ba:20:82:65:0a: 83:26:6b:55:e5:9f:39:9b:b4:a7:42:fe:6a:05:b8: af:fa:f2:81:ef:b3:a6:8c:db:a8:c8:78:59:12:70: 88:9e:02:25:16:6a:fc:81:cb:e2:68:c1:d3:44:33: 14:7c:91:54:5e:1c:6c:46:7f:3f:bb:77:eb:08:fe: 39:dc:fc:f5:df:7b:c4:95:f3:79:cc:24:ed:d5:8a: 2c:10:4b:30:c4:d3:f0:96:2a:5e:f6:51:b7:92:45: cd:26:2b:c8:f3:b5:60:e7:f6:bd:03:c1:7c:44:40: a0:5d:15:f9:5c:b3:41:2c:71:e9:d9:b2:f3:be:16: cb:d8:32:85:32:2c:b5:7c:b2:87:a2:ae:2d:4c:69: ed:f0:fd:e1:a8:33:26:ac:9f:7f:a2:38:44:df:3f: e3:23:ac:58:7c:73:b4:b2:5e:89:2d:ae:12:cc:dd: b9:e5:4b:01:9e:05:2c:ab:de:43:54:9e:22:b5:9c: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F5:52:8A:B8:55:1B:BC:18:CE:41:F6:81:A4:24:6C:47:67:09:A8 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9a:2e:2b:99:d2:01:be:1d:1e:b6:e4:7e:48:0b:2e:ad:24: 1c:78:89:76:ea:e4:96:ed:26:d4:6b:f7:b1:8a:12:fa:08:f0: 67:27:9c:07:75:13:4f:eb:e8:eb:d4:d8:77:96:24:12:86:34: a6:69:81:e9:14:f3:52:3e:4d:ab:75:b9:b3:6a:bb:97:11:69: eb:be:16:51:3b:59:aa:4f:c9:fe:2a:14:b9:c5:fa:14:76:23: 79:65:b1:7c:6d:d8:a2:a4:72:5c:2a:16:60:30:92:d9:1e:ee: 73:a1:ff:75:15:ed:a0:e7:7e:56:36:51:4c:05:26:72:9c:80: 5a:a0:08:c7:a6:88:83:74:ab:e5:e5:00:ee:5c:1d:f7:86:17: b9:aa:df:ee:b2:58:5e:2b:e1:d6:8a:86:0d:27:70:33:a9:24: 80:82:ec:dc:ba:36:62:14:30:65:5f:1a:ac:93:de:15:08:c1: 10:60:5a:51:b9:0a:9c:5d:92:79:ea:83:61:e7:28:5c:6b:29: 12:97:55:da:73:53:56:62:e2:8a:90:82:63:ea:61:97:11:55: d4:33:03:19:c0:c7:e3:cd:08:ba:63:17:4f:92:09:2c:28:9a: e3:55:8c:db:aa:bc:55:87:33:3d:b7:9e:fb:fd:00:a4:64:a9: 6f:fa:66:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjQwNDI2MjAwMjQ1WhcNMjQwNTAzMjAwMjQ1WjAYMRYwFAYD VQQDEw02NjJjMDg2NS0yN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbQ0imFmKYiLvFykrUUhq3u5tIUBjaxO7UdP1J9KC6UB1rkHT3KAE7jADMB4 lVNrI2qpZ2Lfvoe7MqeHCvlGXBcnv4MDuiCCZQqDJmtV5Z85m7SnQv5qBbiv+vKB 77OmjNuoyHhZEnCIngIlFmr8gcviaMHTRDMUfJFUXhxsRn8/u3frCP453Pz133vE lfN5zCTt1YosEEswxNPwlipe9lG3kkXNJivI87Vg5/a9A8F8RECgXRX5XLNBLHHp 2bLzvhbL2DKFMiy1fLKHoq4tTGnt8P3hqDMmrJ9/ojhE3z/jI6xYfHO0sl6JLa4S zN255UsBngUsq95DVJ4itZwIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr1Uoq4 VRu8GM5B9oGkJGxHZwmoMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxmi4rmdIBvh0etuR+SAsurSQceIl26uSW7SbUa/exihL6CPBnJ5wH dRNP6+jr1Nh3liQShjSmaYHpFPNSPk2rdbmzaruXEWnrvhZRO1mqT8n+KhS5xfoU diN5ZbF8bdiipHJcKhZgMJLZHu5zof91Fe2g535WNlFMBSZynIBaoAjHpoiDdKvl 5QDuXB33hhe5qt/uslheK+HWioYNJ3AzqSSAguzcujZiFDBlXxqsk94VCMEQYFpR uQqcXZJ56oNh5yhcaykSl1Xac1NWYuKKkIJj6mGXEVXUMwMZwMfjzQi6YxdPkgks KJrjVYzbqrxVhzM9t577/QCkZKlv+mbQ -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:17 2024 by rpki-client on console-ams.rpki-client.org