$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json) Hash identifier: yb7ubMvyKHJQ4lLOvACfSUGbPIAf5XjqJtralT634bk= Subject key identifier: 4B:B4:09:62:8D:BB:1D:04:9E:A7:A7:B5:65:D6:37:0F:84:46:77:18 Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft Manifest number: 0B4A Signing time: Fri 26 Apr 2024 19:37:36 +0000 Manifest this update: Fri 26 Apr 2024 19:37:36 +0000 Manifest next update: Fri 03 May 2024 19:37:36 +0000 Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: qohCOF+ByS1fFt5emxzgFhDJddFvYY5OIfD7Egmne0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437 Validity Not Before: Apr 26 19:37:36 2024 GMT Not After : May 3 19:37:36 2024 GMT Subject: CN=662c0280-440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:f9:af:24:c8:f3:a1:2e:55:8d:78:46:53: d8:8a:ff:d9:02:65:89:07:7d:63:56:9f:e1:4c:21: f9:58:26:8f:9c:ee:be:9f:8f:ae:b6:4f:62:fe:72: 58:7f:e4:88:3c:52:0d:15:b7:e8:0c:19:34:92:c1: d1:08:53:f8:51:83:e8:9d:f4:1e:b6:3c:8e:98:e6: de:80:1d:02:bb:c1:cc:27:78:ad:36:0f:a7:bc:8a: 64:42:ad:cf:2e:8d:37:80:5c:09:a3:fa:d6:fa:05: da:6b:68:f2:66:8b:a0:bc:e5:d4:9c:ac:fc:49:1c: dd:62:98:8c:b0:a7:13:f2:17:8e:ff:90:c5:f7:9a: b5:16:a7:c8:3a:03:dc:33:0a:ed:b7:d8:5b:3f:ea: 73:fd:cf:86:32:e9:d1:26:7d:62:8c:b9:9b:65:4d: f5:72:95:38:78:50:b6:6c:17:05:a4:47:2a:53:11: b9:e2:8f:f8:f4:d3:37:40:0d:93:bb:d1:08:13:b0: 03:67:79:5e:0c:7d:39:1b:56:50:5e:34:eb:a4:78: 2e:45:f5:85:b3:73:a2:84:d2:36:a4:76:e5:86:65: bf:48:1d:5d:9e:49:cf:34:78:bf:5a:47:26:c1:8c: e4:88:e5:04:5b:ca:03:8d:4f:48:3f:6c:b3:37:d4: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:09:62:8D:BB:1D:04:9E:A7:A7:B5:65:D6:37:0F:84:46:77:18 X509v3 Authority Key Identifier: keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a8:ef:f8:e2:d8:3c:a4:c4:a8:1a:22:c2:9c:46:a0:7d:ea: ae:84:f7:b5:13:b3:38:12:90:62:1a:55:5e:9e:5e:97:df:fd: c1:34:7c:87:52:f7:b2:33:84:8b:30:1a:08:ad:8f:06:fe:a6: da:74:14:c4:6b:ce:14:a1:1d:66:0e:05:0f:e9:50:0d:00:d5: a3:91:2c:11:df:c6:8b:e6:53:ca:50:cb:10:44:eb:1a:9f:2b: c1:0c:44:7a:55:57:17:c5:7b:cd:60:f6:b2:c2:5c:61:9b:10: 6c:0c:7e:e6:24:21:47:be:ce:6d:13:f9:c7:7b:62:f8:15:17: b7:2b:ba:2c:6d:a9:ee:83:37:4b:91:3c:71:68:e6:b6:a3:12: a2:aa:ef:e1:70:01:fb:99:b1:03:a5:41:ac:19:5f:01:1d:c7: ef:12:36:f1:08:7a:75:8c:94:cf:57:34:4b:b6:8d:05:bd:e2: 66:89:b4:30:fc:82:71:5c:89:30:e9:38:c7:70:ad:33:28:81: ba:18:ad:19:45:80:ee:91:91:4c:e7:b0:ab:57:c8:73:14:38: 36:2c:48:e7:cd:ce:75:6b:5a:73:ee:ce:54:0b:fd:b4:49:3d: 1b:f5:68:b1:c4:2e:1d:e1:5d:08:24:b5:9d:c3:fc:53:58:56: c0:b4:0f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG Mzc1MkY0MzcwHhcNMjQwNDI2MTkzNzM2WhcNMjQwNTAzMTkzNzM2WjAYMRYwFAYD VQQDEw02NjJjMDI4MC00NDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/35ryTI86EuVY14RlPYiv/ZAmWJB31jVp/hTCH5WCaPnO6+n4+utk9i/nJY f+SIPFINFbfoDBk0ksHRCFP4UYPonfQetjyOmObegB0Cu8HMJ3itNg+nvIpkQq3P Lo03gFwJo/rW+gXaa2jyZougvOXUnKz8SRzdYpiMsKcT8heO/5DF95q1FqfIOgPc Mwrtt9hbP+pz/c+GMunRJn1ijLmbZU31cpU4eFC2bBcFpEcqUxG54o/49NM3QA2T u9EIE7ADZ3leDH05G1ZQXjTrpHguRfWFs3OihNI2pHblhmW/SB1dnknPNHi/Wkcm wYzkiOUEW8oDjU9IP2yzN9QGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu0CWKN ux0EnqentWXWNw+ERncYMB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5 RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeqO/44tg8pMSoGiLCnEagfequhPe1E7M4EpBiGlVenl6X3/3BNHyH UveyM4SLMBoIrY8G/qbadBTEa84UoR1mDgUP6VANANWjkSwR38aL5lPKUMsQROsa nyvBDER6VVcXxXvNYPaywlxhmxBsDH7mJCFHvs5tE/nHe2L4FRe3K7osbanugzdL kTxxaOa2oxKiqu/hcAH7mbEDpUGsGV8BHcfvEjbxCHp1jJTPVzRLto0FveJmibQw /IJxXIkw6TjHcK0zKIG6GK0ZRYDukZFM57CrV8hzFDg2LEjnzc51a1pz7s5UC/20 ST0b9WixxC4d4V0IJLWdw/xTWFbAtA+X -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:12 2024 by rpki-client on console-ams.rpki-client.org