$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: LCjZszYzAP7fSOjjeFpFZY9LTwZINdru8padrzKL/6w= Subject key identifier: 5C:D6:DF:FD:93:F5:44:33:AC:2C:0E:11:30:5B:60:34:41:65:36:83 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 11CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 11C4 Signing time: Sat 04 May 2024 17:53:09 +0000 Manifest this update: Sat 04 May 2024 17:53:08 +0000 Manifest next update: Sat 11 May 2024 17:53:08 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: PYDkV4J32WvLdUgHrwKlljPC5GCItaMsDxL3g5zF+8Y=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: OPz27nP3CQDCCDKBRilAtcc3FWYpgtDai6u0ugzendo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4554 (0x11ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: May 4 17:53:08 2024 GMT Not After : May 11 17:53:08 2024 GMT Subject: CN=66367605-4fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:93:f9:a3:53:67:99:0a:b0:2d:2f:0a:3c:44: da:52:c8:5a:01:65:ef:25:57:8f:84:ee:1c:3c:06: db:7a:42:ed:2f:29:e2:28:bb:d1:6b:4a:45:87:d3: 0c:c4:e2:17:0b:10:93:35:67:53:0e:37:e3:58:36: bc:d6:25:3e:b3:41:59:7c:4a:c2:d5:57:5f:46:f5: 78:66:31:56:19:57:92:61:6f:84:13:09:3b:35:4a: af:b9:37:b5:18:8a:d2:bf:f9:92:f0:3f:8b:59:68: ee:d8:6f:63:4c:8f:01:1a:68:d4:d1:34:22:1b:bb: c3:16:23:32:f7:2d:f6:46:c2:df:9c:7a:f9:c0:ad: a2:70:3a:bc:7e:6f:dc:6e:ac:9c:c7:ed:5c:ca:fa: 49:09:a5:ad:59:a6:65:d2:b1:53:03:20:91:91:9b: c8:dc:0c:9e:a1:0a:88:8e:08:87:db:01:9e:a7:1e: c3:fa:c7:ee:39:b1:d4:a8:df:26:9d:e7:39:3f:6b: fd:83:c3:2d:48:dd:95:99:c5:6e:9e:5d:32:df:9a: b8:8c:4f:9c:00:33:b0:59:d4:42:04:fa:ed:42:ad: 8f:87:b0:44:b0:9a:b4:04:7a:5f:0d:26:5a:d6:95: b7:cd:f0:d1:86:18:83:d4:f4:16:cf:60:8f:84:39: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D6:DF:FD:93:F5:44:33:AC:2C:0E:11:30:5B:60:34:41:65:36:83 X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:78:2e:11:71:d4:3b:13:9a:78:1f:48:de:11:95:c5:0d: 2b:f0:67:62:5b:96:8a:06:82:bc:90:65:6e:71:06:5c:40:09: 8a:6d:1f:8f:64:a9:79:42:49:29:e5:69:4b:f4:98:9c:11:b4: 55:27:15:7d:6d:05:a1:13:fb:db:c7:c2:86:dc:25:d4:d4:74: 92:fc:76:21:ca:0f:67:e2:03:b0:a4:ca:81:59:b3:2e:48:03: 45:34:90:44:12:25:7a:4b:e6:a4:31:4e:de:49:e7:16:95:9f: b2:32:b9:ae:ea:9c:f2:19:6b:64:31:af:5a:03:04:cc:24:35: 42:4c:a1:8a:a8:5f:8c:7d:9b:2d:e6:d2:46:19:b3:57:d8:8d: 8b:bc:95:4a:c9:5f:0a:3e:ed:6d:5f:a4:fb:9a:e0:65:fd:b9: f6:19:be:cb:f6:14:b1:fe:3a:f8:b2:d3:d4:5b:f1:e9:cc:56: 44:db:7f:ae:8c:71:01:de:9c:c6:4c:7f:66:a7:51:90:ca:95: 46:2a:da:cb:5d:34:7e:39:22:14:26:b6:93:eb:dc:16:09:56: 90:3a:0c:98:d5:62:41:8e:f8:df:8f:2d:1f:5e:f3:b8:10:3b: ae:ef:bb:79:b7:1c:c9:fb:5e:6c:79:27:20:18:03:80:02:34: fd:6e:10:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjQwNTA0MTc1MzA4WhcNMjQwNTExMTc1MzA4WjAYMRYwFAYD VQQDEw02NjM2NzYwNS00ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pP5o1NnmQqwLS8KPETaUshaAWXvJVePhO4cPAbbekLtLyniKLvRa0pFh9MM xOIXCxCTNWdTDjfjWDa81iU+s0FZfErC1VdfRvV4ZjFWGVeSYW+EEwk7NUqvuTe1 GIrSv/mS8D+LWWju2G9jTI8BGmjU0TQiG7vDFiMy9y32RsLfnHr5wK2icDq8fm/c bqycx+1cyvpJCaWtWaZl0rFTAyCRkZvI3AyeoQqIjgiH2wGepx7D+sfuObHUqN8m nec5P2v9g8MtSN2VmcVunl0y35q4jE+cADOwWdRCBPrtQq2Ph7BEsJq0BHpfDSZa 1pW3zfDRhhiD1PQWz2CPhDmD2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzW3/2T 9UQzrCwOETBbYDRBZTaDMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXZ3guEXHUOxOaeB9I3hGVxQ0r8GdiW5aKBoK8kGVucQZcQAmKbR+P ZKl5Qkkp5WlL9JicEbRVJxV9bQWhE/vbx8KG3CXU1HSS/HYhyg9n4gOwpMqBWbMu SANFNJBEEiV6S+akMU7eSecWlZ+yMrmu6pzyGWtkMa9aAwTMJDVCTKGKqF+MfZst 5tJGGbNX2I2LvJVKyV8KPu1tX6T7muBl/bn2Gb7L9hSx/jr4stPUW/HpzFZE23+u jHEB3pzGTH9mp1GQypVGKtrLXTR+OSIUJraT69wWCVaQOgyY1WJBjvjfjy0fXvO4 EDuu77t5txzJ+15seScgGAOAAjT9bhCT -----END CERTIFICATE-----Generated at Sat May 4 20:37:14 2024 by rpki-client on console-fra.rpki-client.org