$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: lk16rxfawa6BGv2m0L5V9KjMqx4c4UGm1S0WzYO2YQg= Subject key identifier: 1D:4D:4F:C4:06:18:F7:AC:72:6D:10:AA:3A:B6:BD:20:16:C3:B7:F9 Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1D71 Signing time: Sat 04 May 2024 16:32:41 +0000 Manifest this update: Sat 04 May 2024 16:32:40 +0000 Manifest next update: Sat 11 May 2024 16:32:40 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: lrk1yM9IxaEm4MQGHJDA1BCFELSDFwavtuo7R4jFro0=) 2: EF0BF59A39BF11EDA8838D3AC4F9AE02.roa (hash: 6aok0ni7ls4Xmr8xNQwlSADkjqsC8vKakPIl+CEMLrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7556 (0x1d84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: May 4 16:32:40 2024 GMT Not After : May 11 16:32:40 2024 GMT Subject: CN=66366328-6b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:a9:0d:21:81:a8:1a:5d:2f:a4:7b:72:5e: ed:a9:f3:07:0d:8f:ea:0f:99:ed:f3:8a:7b:7d:5f: 55:0d:d8:9c:7e:12:ab:00:92:10:1c:a8:5d:5f:73: 02:0f:57:df:97:84:1d:68:eb:8a:16:6d:20:1b:be: f9:e5:ed:80:fe:9e:f6:70:fa:0b:ed:3a:52:45:d6: f6:21:89:27:f5:b4:af:30:d4:7f:ae:d8:92:c1:70: 5d:5d:63:96:c7:4c:b9:0e:fa:9b:6b:ee:fd:b7:0c: 15:6d:a2:ea:2e:81:6e:60:cd:f5:2b:c5:3f:a5:4f: cf:ca:a1:bf:1d:b1:89:d8:7e:c4:83:2c:58:e8:1a: e2:6f:5b:ab:df:88:14:18:ec:fd:b1:41:74:27:bc: 02:7b:77:89:30:7b:c6:f2:2b:61:42:e2:d7:78:20: 61:cc:d3:d6:7e:73:87:4c:f5:e7:3e:fc:d3:4d:f0: 0c:03:c5:70:cb:dc:5f:1d:bd:59:64:25:24:26:7c: 57:2e:6d:73:69:41:5d:84:14:08:be:40:98:c8:e5: 69:67:79:f5:51:29:e9:8d:1b:82:fc:9f:bc:38:2f: 7c:a7:c2:8b:7a:24:b0:52:6d:be:01:84:68:b2:1b: 4b:62:de:df:09:72:82:b9:33:1e:ab:9d:6e:b6:a6: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:4F:C4:06:18:F7:AC:72:6D:10:AA:3A:B6:BD:20:16:C3:B7:F9 X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:75:b9:66:81:14:12:43:b4:84:cd:42:9a:44:50:72:94:24: f6:65:2e:42:a7:d8:55:dc:53:c8:f3:33:f3:4c:ad:8e:7c:96: a8:99:0a:93:68:aa:e7:15:dd:25:62:b0:fc:db:c2:dc:9f:67: 0a:97:8c:23:d2:a5:e3:ce:dd:6d:ce:4f:72:ef:2b:c0:53:53: 80:de:21:7a:90:71:dc:1a:3b:14:00:34:84:00:c3:c5:f7:1a: df:21:04:f4:9d:16:20:10:32:72:8e:85:dd:c8:87:42:55:10: b3:c9:60:cd:b8:8f:e7:48:dc:ae:76:98:e3:c3:3b:fd:c6:4d: bb:b9:e1:3f:ef:1e:0d:a7:36:dd:21:05:eb:9b:26:94:09:86: 8c:88:3b:c5:93:d1:a7:68:21:d3:a9:a9:ad:da:6f:bf:5c:34: 08:72:31:04:56:6d:1b:29:aa:74:67:52:c2:cf:bf:fc:08:0e: c3:cd:c2:f4:00:53:e1:4f:d0:2d:62:35:7c:dc:9d:fa:f7:c8: d7:2d:63:a7:3c:56:78:41:44:ae:e3:7f:1f:7d:5c:36:f8:3b: 21:55:1f:2b:de:50:6b:69:0f:15:aa:5f:63:ed:04:96:3c:08: 5a:b7:44:c0:09:6e:2d:80:25:53:b6:72:db:a4:d7:e8:47:59: c1:13:a8:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjQwNTA0MTYzMjQwWhcNMjQwNTExMTYzMjQwWjAYMRYwFAYD VQQDEw02NjM2NjMyOC02YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+WpDSGBqBpdL6R7cl7tqfMHDY/qD5nt84p7fV9VDdicfhKrAJIQHKhdX3MC D1ffl4QdaOuKFm0gG7755e2A/p72cPoL7TpSRdb2IYkn9bSvMNR/rtiSwXBdXWOW x0y5Dvqba+79twwVbaLqLoFuYM31K8U/pU/PyqG/HbGJ2H7EgyxY6Brib1ur34gU GOz9sUF0J7wCe3eJMHvG8ithQuLXeCBhzNPWfnOHTPXnPvzTTfAMA8Vwy9xfHb1Z ZCUkJnxXLm1zaUFdhBQIvkCYyOVpZ3n1USnpjRuC/J+8OC98p8KLeiSwUm2+AYRo shtLYt7fCXKCuTMeq51utqbBYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1NT8QG GPescm0Qqjq2vSAWw7f5MB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCndblmgRQSQ7SEzUKaRFBylCT2ZS5Cp9hV3FPI8zPzTK2OfJaomQqT aKrnFd0lYrD828Lcn2cKl4wj0qXjzt1tzk9y7yvAU1OA3iF6kHHcGjsUADSEAMPF 9xrfIQT0nRYgEDJyjoXdyIdCVRCzyWDNuI/nSNyudpjjwzv9xk27ueE/7x4Npzbd IQXrmyaUCYaMiDvFk9GnaCHTqamt2m+/XDQIcjEEVm0bKap0Z1LCz7/8CA7DzcL0 AFPhT9AtYjV83J3698jXLWOnPFZ4QUSu438ffVw2+DshVR8r3lBraQ8Vql9j7QSW PAhat0TACW4tgCVTtnLbpNfoR1nBE6j9 -----END CERTIFICATE-----Generated at Sat May 4 17:44:41 2024 by rpki-client on console-ams.rpki-client.org