$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: L3Ju26ubW/D6BQy6vi0oSG1JBOg6lQ8ipwkYC6cfw4g= Subject key identifier: 45:9B:CE:45:58:64:E6:6D:BD:1B:C1:D7:50:55:9A:55:9D:0C:39:40 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: C1 Signing time: Sat 27 Apr 2024 03:50:34 +0000 Manifest this update: Sat 27 Apr 2024 03:50:33 +0000 Manifest next update: Sat 04 May 2024 03:50:33 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: UgM92lP8OUvrFtwxkxXS+3Jdf5tChXvcU3n0TS2ixio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Apr 27 03:50:33 2024 GMT Not After : May 4 03:50:33 2024 GMT Subject: CN=662c760a-6ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:08:45:2d:64:c4:e5:ed:08:70:04:e9:73: 03:5b:aa:9f:d2:8e:7e:b2:b8:a0:48:81:c5:79:95: 6c:f6:84:84:5a:ff:c5:37:34:fb:e1:fa:dc:bc:28: 2d:76:10:6b:24:d5:63:0d:d5:e7:a4:a0:20:cc:05: 9e:17:b4:20:ea:98:f3:e6:80:54:7c:b3:06:f6:69: cc:36:67:b4:7c:3a:47:7c:d9:1c:0a:15:70:55:03: 31:de:f7:b5:23:3d:10:ed:c9:57:53:a9:42:30:57: 21:de:99:4a:53:10:5a:d8:49:70:f0:b8:0a:ae:be: 2c:d1:bf:bd:3d:e5:97:44:41:42:9e:7c:0d:23:86: eb:ae:6c:b6:f7:04:7a:34:30:94:f6:8d:73:c9:83: a5:e0:b0:fa:a1:b3:ee:f5:3a:f5:c9:25:30:8b:06: 9b:cb:a6:63:d3:66:49:08:80:a2:65:db:92:e2:47: e4:b7:0e:7b:85:e1:06:0f:ce:0f:bc:29:67:85:e7: d0:d4:07:e6:06:ee:9e:d4:37:4e:fc:a1:3d:68:6a: 1e:9e:1e:35:dd:99:8d:71:a4:03:48:3a:ed:08:ab: 31:76:8f:b6:a1:41:dd:4b:6e:16:71:c6:23:5a:a2: 54:74:b6:29:62:00:25:ef:89:d9:b5:0b:6c:8f:d7: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:CE:45:58:64:E6:6D:BD:1B:C1:D7:50:55:9A:55:9D:0C:39:40 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a9:68:2f:94:78:68:4b:ec:75:da:da:9f:10:53:07:bb:62: 40:ee:40:74:aa:bc:76:bc:97:f2:9d:99:83:28:2e:c8:ab:06: 7a:84:68:b3:0e:48:71:6b:75:b3:fc:35:d6:af:61:b2:df:4d: f3:c1:f8:70:36:96:ba:e3:a2:6b:93:9d:d3:a0:15:b0:1f:70: 03:74:a1:bf:1d:e7:24:4b:b3:d2:00:c8:ef:4e:84:5f:c7:df: f0:e0:87:dd:f6:e4:a9:0d:a5:20:28:e0:4a:25:b1:28:5d:d0: 00:4b:aa:bd:7a:a5:2c:08:26:6f:93:ba:44:ca:53:e4:9f:6f: 73:7c:2c:c6:0d:b0:3e:e8:01:42:c7:9a:5f:fc:30:73:52:45: 31:6c:57:a5:be:07:66:cb:a7:2c:14:64:ea:3d:94:8e:e9:dd: 46:dd:70:9a:05:6a:42:c9:27:31:bf:55:89:57:e0:38:da:48: 4a:90:88:ba:6f:85:42:35:a9:8b:9f:dd:fc:f9:20:dc:e2:6e: 23:36:ff:8b:6c:02:fa:8e:6f:cb:12:bf:84:41:95:6d:a1:eb: e9:15:92:59:50:c1:df:5e:e6:47:c1:f2:ed:a7:8c:7d:da:e4: 53:4e:bf:99:e1:93:1a:eb:ba:9e:9b:11:8d:57:c0:36:6d:2f: 6c:fe:fc:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjQwNDI3MDM1MDMzWhcNMjQwNTA0MDM1MDMzWjAYMRYwFAYD VQQDEw02NjJjNzYwYS02YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsgIRS1kxOXtCHAE6XMDW6qf0o5+srigSIHFeZVs9oSEWv/FNzT74frcvCgt dhBrJNVjDdXnpKAgzAWeF7Qg6pjz5oBUfLMG9mnMNme0fDpHfNkcChVwVQMx3ve1 Iz0Q7clXU6lCMFch3plKUxBa2Elw8LgKrr4s0b+9PeWXREFCnnwNI4brrmy29wR6 NDCU9o1zyYOl4LD6obPu9Tr1ySUwiwaby6Zj02ZJCICiZduS4kfktw57heEGD84P vClnhefQ1AfmBu6e1DdO/KE9aGoenh413ZmNcaQDSDrtCKsxdo+2oUHdS24WccYj WqJUdLYpYgAl74nZtQtsj9cC/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWbzkVY ZOZtvRvB11BVmlWdDDlAMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHqWgvlHhoS+x12tqfEFMHu2JA7kB0qrx2vJfynZmDKC7IqwZ6hGiz Dkhxa3Wz/DXWr2Gy303zwfhwNpa646Jrk53ToBWwH3ADdKG/HeckS7PSAMjvToRf x9/w4Ifd9uSpDaUgKOBKJbEoXdAAS6q9eqUsCCZvk7pEylPkn29zfCzGDbA+6AFC x5pf/DBzUkUxbFelvgdmy6csFGTqPZSO6d1G3XCaBWpCyScxv1WJV+A42khKkIi6 b4VCNamLn938+SDc4m4jNv+LbAL6jm/LEr+EQZVtoevpFZJZUMHfXuZHwfLtp4x9 2uRTTr+Z4ZMa67qemxGNV8A2bS9s/vyq -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:27 2024 by rpki-client on console-ams.rpki-client.org