$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json) Hash identifier: 6MpLWLree7uCd7ZyIYR5fTiCY47bcXSVZmvd1BduHOY= Subject key identifier: 52:E4:31:BE:AC:5A:2E:5D:C7:50:F0:D8:E7:76:CB:04:EA:4B:57:82 Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft Manifest number: 119B Signing time: Wed 22 May 2024 20:40:06 +0000 Manifest this update: Wed 22 May 2024 20:40:06 +0000 Manifest next update: Wed 29 May 2024 20:40:06 +0000 Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: fwkRJ/Q4Fb8UMI26F1xBY9f6dWCB09wQuqxIWcnm1mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 20:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Validity Not Before: May 22 20:40:06 2024 GMT Not After : May 29 20:40:06 2024 GMT Subject: CN=664e5826-8b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:7c:8b:e4:60:98:59:af:d0:0f:91:dd:b0: c6:1f:f2:57:64:6d:2f:cf:b7:5a:27:d7:3f:cd:85: 31:e7:d4:ae:d4:57:b5:59:d9:ff:a2:bd:72:a0:77: e4:27:ad:6e:88:fa:8e:6a:a1:ed:b0:12:21:b0:18: 32:f0:5c:3d:b0:69:99:67:dc:53:74:05:5b:34:49: b0:0e:2b:41:89:8e:aa:5e:b4:65:f8:ba:f0:77:a4: f5:25:b9:7e:af:f7:b3:f3:7e:6f:ad:17:30:28:dd: 0a:b1:44:7b:df:fe:82:ae:d3:29:91:ab:09:fd:47: 34:fc:f6:bd:6e:de:5e:50:2c:98:b4:89:86:ff:47: 15:a4:07:15:69:da:75:69:f1:6a:b5:54:8f:22:b1: 7b:fd:24:8d:4b:33:9b:df:7c:0a:f5:02:c5:e8:06: 38:2d:8b:47:06:c6:40:09:82:36:ac:d8:a6:0b:0e: 3a:2a:8a:f3:0d:b0:3e:48:89:cf:b6:ca:a9:62:29: a1:2e:7c:4f:bc:c1:5d:ba:06:42:71:4a:17:f6:e5: 98:5b:c8:ae:79:d4:f0:fa:54:a6:2d:6f:0e:11:3f: 94:2f:69:4c:6e:91:09:56:f4:99:03:78:24:2f:95: 97:1a:81:fa:1b:fe:84:1b:91:ef:94:09:f4:15:be: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:31:BE:AC:5A:2E:5D:C7:50:F0:D8:E7:76:CB:04:EA:4B:57:82 X509v3 Authority Key Identifier: keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:52:25:17:ba:c2:4a:7f:c3:23:b7:7d:63:cd:9c:a3:d1:db: fe:2f:c0:e4:64:ff:49:ea:22:7e:a9:b6:39:7c:aa:72:7b:e5: 8e:d5:a3:64:48:e4:b3:c5:7e:3e:52:61:47:a4:2f:e6:bb:c0: c5:f9:f4:0a:75:4a:bb:fa:33:eb:f2:e9:f5:ca:c9:42:30:10: b4:2a:00:98:b2:f7:d8:08:db:01:08:2d:d3:0b:e7:3a:76:3c: d9:98:1c:e7:1d:ae:04:63:3b:f5:2e:f3:fa:46:84:8a:11:9a: b6:ab:0b:c8:51:71:1f:82:63:d2:fa:36:7f:88:0d:66:db:11: 95:f5:02:3d:78:2d:95:d4:18:aa:e0:e8:15:5e:24:c4:b6:78: b6:ce:2a:e9:dd:33:b9:2c:e8:bc:44:9a:84:a5:b4:8e:55:b5: 1e:e8:47:90:c8:e7:fc:b9:34:a3:21:45:18:6d:72:6b:25:e3: a5:9c:1c:3c:6b:c6:8a:43:97:39:d3:84:0f:15:7f:cc:57:5a: 9e:4a:2a:93:51:14:21:a7:ae:39:fd:38:05:fd:9f:0c:2a:17: 2b:14:20:84:36:b1:1d:86:f0:10:f8:54:d7:23:cd:53:e6:1c: e7:fb:61:51:9e:eb:b0:51:da:55:e3:25:57:18:9f:bf:f5:a9: cc:95:42:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG QzU2QkFCMUUwHhcNMjQwNTIyMjA0MDA2WhcNMjQwNTI5MjA0MDA2WjAYMRYwFAYD VQQDEw02NjRlNTgyNi04YjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCR8i+RgmFmv0A+R3bDGH/JXZG0vz7daJ9c/zYUx59Su1Fe1Wdn/or1yoHfk J61uiPqOaqHtsBIhsBgy8Fw9sGmZZ9xTdAVbNEmwDitBiY6qXrRl+Lrwd6T1Jbl+ r/ez835vrRcwKN0KsUR73/6CrtMpkasJ/Uc0/Pa9bt5eUCyYtImG/0cVpAcVadp1 afFqtVSPIrF7/SSNSzOb33wK9QLF6AY4LYtHBsZACYI2rNimCw46KorzDbA+SInP tsqpYimhLnxPvMFdugZCcUoX9uWYW8iuedTw+lSmLW8OET+UL2lMbpEJVvSZA3gk L5WXGoH6G/6EG5HvlAn0Fb5qqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLkMb6s Wi5dx1Dw2Od2ywTqS1eCMB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF bmdJN05IMnBzWVA4VnJxeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/UiUXusJKf8Mjt31jzZyj0dv+L8DkZP9J6iJ+qbY5fKpye+WO1aNk SOSzxX4+UmFHpC/mu8DF+fQKdUq7+jPr8un1yslCMBC0KgCYsvfYCNsBCC3TC+c6 djzZmBznHa4EYzv1LvP6RoSKEZq2qwvIUXEfgmPS+jZ/iA1m2xGV9QI9eC2V1Biq 4OgVXiTEtni2zirp3TO5LOi8RJqEpbSOVbUe6EeQyOf8uTSjIUUYbXJrJeOlnBw8 a8aKQ5c504QPFX/MV1qeSiqTURQhp645/TgF/Z8MKhcrFCCENrEdhvAQ+FTXI81T 5hzn+2FRnuuwUdpV4yVXGJ+/9anMlUK9 -----END CERTIFICATE-----Generated at Wed May 22 23:16:53 2024 by rpki-client on console-ams.rpki-client.org