$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: JtEwsb/aDKV28Rtu6bx9tKLkEpl3upnCzbtiEz6+RiM= Subject key identifier: 04:DB:E3:D5:3D:D3:BA:7E:9E:C7:08:BF:55:2D:72:D3:6C:AB:F7:6C Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0C79 Signing time: Tue 30 Apr 2024 19:09:54 +0000 Manifest this update: Tue 30 Apr 2024 19:09:54 +0000 Manifest next update: Tue 07 May 2024 19:09:54 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: yJnBeVTdlPI3iYhPOk8T1VovFAvPZR8q0QagVdoi/E4=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 9b6iL+tiTyfSwzROgZslQ1z42UtLvtwJif/NNFdULZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Apr 30 19:09:54 2024 GMT Not After : May 7 19:09:54 2024 GMT Subject: CN=66314202-680e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:ab:bb:29:fd:7a:c1:59:fa:ed:3e:42:5c: e6:0f:39:7b:36:8d:8c:25:e1:ca:aa:09:92:f0:1f: 5e:c8:69:31:cb:b9:f0:ca:ea:3f:54:2c:b9:f4:71: 58:f0:70:74:fa:f9:40:f3:4c:15:c8:d0:e1:59:28: 6e:31:b2:a4:3b:69:86:ad:0b:0e:9b:e1:b6:51:ee: 4e:5b:cc:64:f0:a3:9c:60:a0:fc:7d:a1:2f:fa:e6: 49:b5:f0:9d:03:a3:26:67:68:4d:11:a1:c0:f9:d3: e9:e4:e6:a8:c1:29:b1:4b:66:8f:34:86:a3:17:d0: 5d:f6:8b:11:cd:37:b0:0f:e6:cc:e9:82:12:84:20: 5e:89:57:8f:6d:ed:03:9b:70:5f:66:7f:de:f7:05: 7b:6d:a7:83:2a:83:2b:d0:1f:58:ac:f3:a6:f5:57: 29:e7:ee:8f:c5:65:21:c4:b2:31:5e:3c:0d:d1:40: b8:4f:ea:35:7f:25:c1:5f:60:74:25:27:da:34:9a: aa:32:27:c7:5e:10:65:4f:a7:4a:5a:08:71:40:b1: a5:d5:9e:39:ce:f8:9b:c5:58:4d:7a:6f:63:33:c4: 78:ef:9f:d8:f3:d8:3c:bc:05:a2:50:d2:fa:11:99: ae:74:84:3b:83:69:f1:c3:91:ed:c1:e3:1b:4c:c5: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:E3:D5:3D:D3:BA:7E:9E:C7:08:BF:55:2D:72:D3:6C:AB:F7:6C X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a2:9f:82:9e:84:c4:ab:9a:8e:13:41:99:10:b4:c9:7e:4c: 6e:11:aa:b1:e7:28:57:75:22:8b:f0:5f:81:e1:18:a9:30:48: 37:a8:0f:40:1f:0b:5a:21:f7:cd:bc:6c:73:08:a0:cb:25:c4: 01:07:cb:87:f2:f3:2b:05:bf:c4:9a:4b:1b:98:1f:54:16:f8: ce:3d:93:61:cb:42:0e:0b:ee:f8:ce:a0:03:b5:d3:33:12:42: cb:60:6c:21:58:a2:e9:50:d1:1e:c1:42:1e:3a:8a:dc:30:99: 93:73:f7:fb:c4:2a:09:bc:e0:92:87:13:9c:24:c8:1a:63:85: 4f:7d:ed:ca:c5:de:7a:e8:a8:56:2a:8d:19:7c:70:95:fa:ca: 61:88:cf:57:5b:85:de:63:71:00:fe:73:ff:ad:c6:7f:08:8e: 04:b1:63:1d:b0:eb:e8:6e:5f:99:ac:19:b7:1d:d1:6e:c1:56: 62:45:ad:b1:76:86:8c:0d:25:6c:a1:d3:fb:b7:7e:e1:13:7e: 1e:f9:c0:41:f8:6f:c2:ac:ef:40:d1:45:29:d1:f4:b0:0a:09: e6:a8:42:c6:dc:8e:8f:49:e8:34:6d:da:79:db:cf:ed:53:6f: 66:1d:71:82:79:63:3b:d8:01:bb:5d:4f:f5:bd:4c:09:1f:b6: 8a:70:7b:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjQwNDMwMTkwOTU0WhcNMjQwNTA3MTkwOTU0WjAYMRYwFAYD VQQDEw02NjMxNDIwMi02ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkGruyn9esFZ+u0+QlzmDzl7No2MJeHKqgmS8B9eyGkxy7nwyuo/VCy59HFY 8HB0+vlA80wVyNDhWShuMbKkO2mGrQsOm+G2Ue5OW8xk8KOcYKD8faEv+uZJtfCd A6MmZ2hNEaHA+dPp5OaowSmxS2aPNIajF9Bd9osRzTewD+bM6YIShCBeiVePbe0D m3BfZn/e9wV7baeDKoMr0B9YrPOm9Vcp5+6PxWUhxLIxXjwN0UC4T+o1fyXBX2B0 JSfaNJqqMifHXhBlT6dKWghxQLGl1Z45zvibxVhNem9jM8R475/Y89g8vAWiUNL6 EZmudIQ7g2nxw5HtweMbTMV3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATb49U9 07p+nscIv1UtctNsq/dsMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0op+CnoTEq5qOE0GZELTJfkxuEaqx5yhXdSKL8F+B4RipMEg3qA9A HwtaIffNvGxzCKDLJcQBB8uH8vMrBb/EmksbmB9UFvjOPZNhy0IOC+74zqADtdMz EkLLYGwhWKLpUNEewUIeOorcMJmTc/f7xCoJvOCShxOcJMgaY4VPfe3Kxd566KhW Ko0ZfHCV+sphiM9XW4XeY3EA/nP/rcZ/CI4EsWMdsOvobl+ZrBm3HdFuwVZiRa2x doaMDSVsodP7t37hE34e+cBB+G/CrO9A0UUp0fSwCgnmqELG3I6PSeg0bdp528/t U29mHXGCeWM72AG7XU/1vUwJH7aKcHs1 -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:04 2024 by rpki-client on console-ams.rpki-client.org