$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: 0tNxLP8YOPWR7zo4IDha0MklgHqsL/Bo/VViu/BsxpQ= Subject key identifier: DE:8D:F1:B5:10:17:03:8F:09:4F:BA:38:DF:69:62:25:C8:18:CD:C0 Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: AC Signing time: Wed 01 May 2024 06:56:17 +0000 Manifest this update: Wed 01 May 2024 06:56:17 +0000 Manifest next update: Wed 08 May 2024 06:56:17 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: ynZOPfEtfiHSq2361ZWFORwurvVYA5AbLwOgPtN4Amk=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: BGY/uPAB8s6bOk+iTJOiyTH1PPXIxJM6rQPQkuaz0DI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: May 1 06:56:17 2024 GMT Not After : May 8 06:56:17 2024 GMT Subject: CN=6631e791-b075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:2f:1f:50:49:fc:93:7f:72:6f:71:15:98: c8:66:29:05:13:0e:50:29:0f:7a:8f:2a:1b:39:d1: f1:d6:b0:ca:1d:a3:36:d3:5c:5b:82:76:90:d9:5c: 9e:8f:76:7b:b7:b6:5b:07:b4:08:49:9e:ed:87:f9: ff:2a:95:8a:26:29:e5:57:7d:e0:4a:d5:a9:42:83: 01:59:fd:e5:21:14:d3:2a:ab:8a:15:a6:e9:78:ff: b9:03:c5:b9:74:0d:e7:68:a5:5e:dc:fa:67:67:7f: 37:9d:e2:c7:68:9b:36:03:b8:35:fc:29:35:a2:cf: 4d:d2:26:98:55:be:85:52:65:7d:f0:4e:1c:87:56: 2f:39:23:01:63:81:eb:90:4b:dd:5e:21:67:4e:2a: e8:c4:b1:5a:60:35:7a:49:c0:44:47:28:10:dc:71: cf:b3:2f:06:1a:f0:e8:38:4e:c3:42:06:2e:df:2c: 25:33:16:24:52:2d:b1:d5:0c:2e:6c:dc:91:1e:c4: 6e:96:05:b2:49:6b:93:75:a4:af:b4:0f:bb:66:5e: f2:e8:85:de:89:ab:63:3a:8f:05:04:b1:2f:65:57: b6:59:c6:cc:d7:b2:75:10:6c:89:44:91:4a:ce:7d: a4:45:59:08:1c:a2:eb:fb:91:49:28:7b:45:bb:b6: c2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8D:F1:B5:10:17:03:8F:09:4F:BA:38:DF:69:62:25:C8:18:CD:C0 X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2d:03:36:6e:00:f5:c6:dd:0d:af:4e:1a:a8:d8:25:f9:ac: 55:b7:8a:2d:4b:30:49:19:a5:cd:6c:22:6b:01:37:2d:29:7c: 91:44:3f:d6:d6:67:c3:f4:dc:df:d3:df:7b:ab:c1:a6:c1:a8: 70:4a:38:1b:3e:46:a3:96:7f:ef:48:5d:d4:88:ad:15:3c:82: 1f:65:eb:ce:92:ce:da:29:11:6c:18:0c:0a:81:9a:e1:0f:47: 24:a2:24:2c:95:ee:0c:cc:f0:bf:f4:9b:a1:0d:a8:45:6a:0a: 00:7e:7b:c5:9a:ea:35:36:70:76:b7:d7:c8:f8:6a:2e:10:22: 31:a7:7f:f9:55:8a:82:79:b7:2a:94:ad:cf:c9:42:94:3e:e6: 5a:7d:8d:c2:cd:3c:e4:f3:c4:a0:4f:dd:fe:6f:1a:30:7b:45: e2:b6:2b:14:71:c3:07:3f:a9:ea:2f:f1:1b:7d:10:fb:bc:93: 24:f6:f5:65:bc:3c:6c:60:44:51:d0:7d:e3:b6:1d:39:e9:72: 11:62:74:51:ef:29:44:07:f7:19:89:87:e1:b2:d6:c1:48:e8: 7a:4e:4d:b7:b6:b7:70:e8:af:7f:7b:82:2f:0b:ce:64:50:42: 60:a1:6b:57:57:f4:de:0a:3c:ce:77:4d:9b:5b:6c:45:ec:14: 39:1e:92:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjQwNTAxMDY1NjE3WhcNMjQwNTA4MDY1NjE3WjAYMRYwFAYD VQQDEw02NjMxZTc5MS1iMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjgvH1BJ/JN/cm9xFZjIZikFEw5QKQ96jyobOdHx1rDKHaM201xbgnaQ2Vye j3Z7t7ZbB7QISZ7th/n/KpWKJinlV33gStWpQoMBWf3lIRTTKquKFabpeP+5A8W5 dA3naKVe3PpnZ383neLHaJs2A7g1/Ck1os9N0iaYVb6FUmV98E4ch1YvOSMBY4Hr kEvdXiFnTiroxLFaYDV6ScBERygQ3HHPsy8GGvDoOE7DQgYu3ywlMxYkUi2x1Qwu bNyRHsRulgWySWuTdaSvtA+7Zl7y6IXeiatjOo8FBLEvZVe2WcbM17J1EGyJRJFK zn2kRVkIHKLr+5FJKHtFu7bCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6N8bUQ FwOPCU+6ON9pYiXIGM3AMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMLQM2bgD1xt0Nr04aqNgl+axVt4otSzBJGaXNbCJrATctKXyRRD/W 1mfD9Nzf0997q8GmwahwSjgbPkajln/vSF3UiK0VPIIfZevOks7aKRFsGAwKgZrh D0ckoiQsle4MzPC/9JuhDahFagoAfnvFmuo1NnB2t9fI+GouECIxp3/5VYqCebcq lK3PyUKUPuZafY3CzTzk88SgT93+bxowe0XitisUccMHP6nqL/EbfRD7vJMk9vVl vDxsYERR0H3jth056XIRYnRR7ylEB/cZiYfhstbBSOh6Tk23trdw6K9/e4IvC85k UEJgoWtXV/TeCjzOd02bW2xF7BQ5HpJp -----END CERTIFICATE-----Generated at Wed May 1 08:05:05 2024 by rpki-client on console-ams.rpki-client.org