$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json) Hash identifier: jzGNXYZIKU19Ns+FkCB1a36qHcFm0FsZA4V/vJqrEjA= Subject key identifier: CC:04:E4:FE:B9:E2:4E:E3:2C:F2:02:8F:79:B8:CD:F6:D9:74:C4:38 Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft Manifest number: 76 Signing time: Wed 15 May 2024 07:32:08 +0000 Manifest this update: Wed 15 May 2024 07:32:07 +0000 Manifest next update: Wed 22 May 2024 07:32:07 +0000 Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: Q1D2P0SNV+XLVOGLsbjelKD8q11nhogrfXY2igORPdk=) 2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: tQbaDYmXOZ6Re8oB65ZBH8mnpQhhpReEIf03ePzZjxI=) 3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: rmTNlu1SG/qosakmBYsrJuce56ugEQR8IKZ27NyvOjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Validity Not Before: May 15 07:32:07 2024 GMT Not After : May 22 07:32:07 2024 GMT Subject: CN=664464f7-3657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:d6:37:63:d6:97:5a:55:68:b6:fe:10:e1: 07:1c:b8:4a:20:72:26:2a:ec:cb:29:79:b8:29:1a: fa:bb:d1:23:71:3b:34:04:c2:dc:d6:23:43:a5:c5: e0:71:97:46:70:36:d1:1d:6a:d4:bf:af:bb:cb:b6: 16:6d:d9:42:91:41:e2:ca:33:cd:c1:7f:ca:8d:7c: f5:35:83:4c:87:81:51:03:53:d9:79:3f:40:99:db: 86:7c:58:a8:fa:14:06:50:04:6d:ee:7d:b9:35:22: a7:b7:28:f1:c7:b9:1f:1d:60:18:5d:87:7e:43:08: 85:88:9b:cc:7d:69:60:13:07:47:67:9d:a2:ac:b9: 1a:1c:18:75:ff:af:55:d0:86:0e:6d:98:7f:4f:8b: 4f:ec:a3:53:6c:21:e7:5e:d4:57:7a:e9:14:5e:d9: b5:1b:c0:03:8d:f2:a8:83:37:b3:de:3f:52:64:e6: be:9c:b9:42:27:c8:ee:4b:14:fb:27:7c:c9:10:7e: 16:ef:eb:7f:63:bc:a2:8c:a7:e8:d9:72:e8:5b:a3: ac:18:1e:ca:c7:1e:ec:cb:ba:c5:cc:ab:d2:c0:c4: 2e:41:27:88:75:fe:5c:c8:16:8e:82:1f:e7:fb:61: 75:8c:de:93:ac:b3:8a:0e:e1:50:b8:0a:65:1c:38: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:E4:FE:B9:E2:4E:E3:2C:F2:02:8F:79:B8:CD:F6:D9:74:C4:38 X509v3 Authority Key Identifier: keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:df:45:5d:34:a1:27:a8:cb:c1:dc:6f:aa:9b:db:97:94: 6c:f0:af:49:8a:a9:c4:1f:07:de:c6:e3:97:de:89:a7:f2:c6: c1:69:78:20:0d:e6:8c:b0:d6:84:76:98:6d:7b:87:ba:7d:77: 85:34:27:8a:f7:64:d6:d7:ac:35:15:a8:7e:e4:06:d8:6f:ed: d5:94:ed:ce:25:37:6b:0e:37:fd:d0:49:d5:23:be:92:9a:38: 7a:6f:c1:96:34:f5:e2:c3:19:35:bb:12:65:34:bf:46:09:7c: 03:93:3b:5a:20:26:f0:58:9c:fc:52:8b:92:0f:5d:dc:b0:a6: 64:40:49:a0:85:af:96:67:27:fa:4f:d9:ba:11:dd:a1:1a:e8: bb:98:82:ff:fd:e7:ff:26:65:55:be:fb:ac:21:5f:f9:b7:2a: ba:c5:14:f4:39:14:2f:ab:b7:21:00:f8:0f:da:20:5a:60:b2: 24:5b:f2:4a:12:32:62:1c:82:0b:db:60:86:ef:ef:7f:3e:8a: 75:93:80:c9:48:5a:37:70:cd:b6:ef:9a:50:ab:c8:42:01:33: bf:33:2c:ee:e9:cd:56:2d:49:5b:75:fe:2a:2f:5f:fd:91:b4: d8:b4:66:b8:f5:ca:1c:53:9b:21:21:72:8d:c5:ca:9b:7c:39: a6:89:84:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUQ5MzExMC8GA1UEBRMoNzJFRjMyREFGNEU4M0Y5MDE5Mjk2MzIwODc0RTNCNDQ1 MDA4RUMzOTAeFw0yNDA1MTUwNzMyMDdaFw0yNDA1MjIwNzMyMDdaMBgxFjAUBgNV BAMTDTY2NDQ2NGY3LTM2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/EdY3Y9aXWlVotv4Q4QccuEogciYq7MspebgpGvq70SNxOzQEwtzWI0OlxeBx l0ZwNtEdatS/r7vLthZt2UKRQeLKM83Bf8qNfPU1g0yHgVEDU9l5P0CZ24Z8WKj6 FAZQBG3ufbk1Iqe3KPHHuR8dYBhdh35DCIWIm8x9aWATB0dnnaKsuRocGHX/r1XQ hg5tmH9Pi0/so1NsIede1Fd66RRe2bUbwAON8qiDN7PeP1Jk5r6cuUInyO5LFPsn fMkQfhbv639jvKKMp+jZcuhbo6wYHsrHHuzLusXMq9LAxC5BJ4h1/lzIFo6CH+f7 YXWM3pOss4oO4VC4CmUcOH9rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzATk/rni TuMs8gKPebjN9tl0xDgwHwYDVR0jBBgwFoAUcu8y2vToP5AZKWMgh047RFAI7Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFRDkzL0EzNkM2OEY0NjhD NjExRUU5NTk2NEY3Q0M0RjlBRTAyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3U4eTJ2VG9QNUFaS1dNZ2gwNDdSRkFJN0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF RDkzL0EzNkM2OEY0NjhDNjExRUU5NTk2NEY3Q0M0RjlBRTAyL2N1OHkydlRvUDVB WktXTWdoMDQ3UkZBSTdEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4b30VdNKEnqMvB3G+qm9uXlGzwr0mKqcQfB97G45feiafyxsFpeCAN 5oyw1oR2mG17h7p9d4U0J4r3ZNbXrDUVqH7kBthv7dWU7c4lN2sON/3QSdUjvpKa OHpvwZY09eLDGTW7EmU0v0YJfAOTO1ogJvBYnPxSi5IPXdywpmRASaCFr5ZnJ/pP 2boR3aEa6LuYgv/95/8mZVW++6whX/m3KrrFFPQ5FC+rtyEA+A/aIFpgsiRb8koS MmIcggvbYIbv738+inWTgMlIWjdwzbbvmlCryEIBM78zLO7pzVYtSVt1/iovX/2R tNi0Zrj1yhxTmyEhco3Fypt8OaaJhM0= -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org