$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft File: CL0cxa7edJKy8iV6oZTbCFVa9vI.mft (raw, json) Hash identifier: r+DVEuIXuRyJ6Si14vk78fWfxQRkpMrgqY87OKcbHyk= Subject key identifier: 5C:DD:9B:68:98:D3:A4:02:E1:E4:04:8C:84:48:18:21:FD:76:B4:C6 Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2 Certificate issuer: /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2 Certificate serial: 0C06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft Manifest number: 0BC9 Signing time: Mon 06 May 2024 19:30:30 +0000 Manifest this update: Mon 06 May 2024 19:30:30 +0000 Manifest next update: Mon 13 May 2024 19:30:30 +0000 Files and hashes: 1: CL0cxa7edJKy8iV6oZTbCFVa9vI.crl (hash: mvI5MKcA169whhePNerrqxtZPFtn5THH7bRbZeNwrk4=) 2: 556EF788AEDB11EE9F1F155BC4F9AE02.roa (hash: BxQr7v4jzSRtBhZk9P48m6WY0RtcX7uNqK+t5UxzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2 Validity Not Before: May 6 19:30:30 2024 GMT Not After : May 13 19:30:30 2024 GMT Subject: CN=66392fd6-eb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:e8:0d:84:fe:c5:6c:03:9d:ee:14:47:a6: 7b:c3:bf:86:f2:b8:01:33:f9:6b:4b:76:cd:3e:14: dc:e3:09:3f:46:45:18:3a:e6:68:9a:da:02:ef:90: 84:ea:18:b2:1b:ff:0f:61:cf:5f:d3:64:ff:74:d6: cb:a6:6e:6d:3d:6c:a2:ea:70:3f:26:88:83:3a:5f: 02:84:9f:b7:5e:c5:87:4e:b0:55:17:f5:ee:f5:42: db:67:66:d1:3a:71:0c:c8:73:0f:bd:e7:8a:7d:c9: 6a:d5:28:a8:a1:21:0b:4b:4e:e1:5a:5a:b0:a4:f0: a2:ee:a2:e7:ca:ae:82:f9:a5:41:5a:d0:33:fe:39: 03:44:d3:33:0c:d6:ae:28:b3:bf:6d:00:0d:f8:41: 01:48:e3:89:4a:34:d1:78:d0:9d:5a:a2:a1:80:98: dd:6a:86:e6:5b:dd:cd:4b:75:ce:e8:f1:9d:5a:3c: a7:a3:6f:dd:e0:36:2c:b7:f7:ad:c9:7a:ca:ae:63: e2:07:2a:70:f2:32:a9:45:91:17:8a:74:22:34:14: f4:a4:12:cf:fc:d1:8d:31:76:23:fd:98:39:d7:de: 5d:ba:78:63:c1:f9:fb:02:33:6d:71:a9:e0:f5:2b: 5d:80:ba:a4:64:16:7a:a3:87:87:02:4e:c0:14:c3: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:9B:68:98:D3:A4:02:E1:E4:04:8C:84:48:18:21:FD:76:B4:C6 X509v3 Authority Key Identifier: keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:18:19:0f:6c:c4:76:01:13:bc:3b:d4:17:d1:65:3e:48:c8: c2:a4:87:0f:cd:73:1c:00:ee:59:84:d7:e9:1f:f9:8e:e8:67: 80:95:c2:5f:55:84:a3:f4:23:1a:8f:3b:f8:ce:f9:76:7b:64: d7:fc:ae:c6:10:40:d1:56:0a:4d:62:28:81:17:2d:c3:a3:a3: b2:95:a2:96:7f:c5:e5:7f:d5:2c:bf:f9:a1:8f:52:77:83:b4: cc:dc:6d:49:b6:63:5a:f9:13:36:8e:95:bf:14:0e:af:a4:95: c2:0b:02:0c:47:d1:a2:6e:21:b5:36:52:51:6f:14:e4:76:ca: 05:40:38:df:43:a5:fe:88:30:45:04:60:74:92:76:76:6e:35: 79:33:52:88:dc:7f:5a:5a:cf:7c:b5:e3:13:b7:af:67:57:df: 69:c0:e4:2c:aa:4a:3e:95:7e:39:f2:44:c2:54:77:6f:c7:b5: 64:64:56:ea:68:9c:ee:16:bb:d4:21:91:6e:08:b1:eb:2c:f6: 18:01:83:64:46:47:0c:a4:e7:26:15:d3:95:87:f7:b8:8f:b0: 62:a4:d8:e0:f1:e1:c8:fc:97:10:38:28:56:e1:3b:6a:31:2c: dc:7d:25:77:9d:ed:c6:7e:df:53:f0:f8:e0:5f:13:d1:73:59: 4b:bd:ad:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDRjExMTAvBgNVBAUTKDA4QkQxQ0M1QUVERTc0OTJCMkYyMjU3QUExOTREQjA4 NTU1QUY2RjIwHhcNMjQwNTA2MTkzMDMwWhcNMjQwNTEzMTkzMDMwWjAYMRYwFAYD VQQDEw02NjM5MmZkNi1lYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi3oDYT+xWwDne4UR6Z7w7+G8rgBM/lrS3bNPhTc4wk/RkUYOuZomtoC75CE 6hiyG/8PYc9f02T/dNbLpm5tPWyi6nA/JoiDOl8ChJ+3XsWHTrBVF/Xu9ULbZ2bR OnEMyHMPveeKfclq1SiooSELS07hWlqwpPCi7qLnyq6C+aVBWtAz/jkDRNMzDNau KLO/bQAN+EEBSOOJSjTReNCdWqKhgJjdaobmW93NS3XO6PGdWjyno2/d4DYst/et yXrKrmPiBypw8jKpRZEXinQiNBT0pBLP/NGNMXYj/Zg5195dunhjwfn7AjNtcang 9StdgLqkZBZ6o4eHAk7AFMMiBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzdm2iY 06QC4eQEjIRIGCH9drTGMB8GA1UdIwQYMBaAFAi9HMWu3nSSsvIleqGU2whVWvby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNENGMS9BRDkwNDZGRTA1 ODYxMUVBOTJFNTY1NTJDNEY5QUUwMi9DTDBjeGE3ZWRKS3k4aVY2b1pUYkNGVmE5 dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NMMGN4YTdlZEpLeThpVjZvWlRiQ0ZWYTl2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NENGMS9BRDkwNDZGRTA1ODYxMUVBOTJFNTY1NTJDNEY5QUUwMi9DTDBjeGE3ZWRK S3k4aVY2b1pUYkNGVmE5dkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmGBkPbMR2ARO8O9QX0WU+SMjCpIcPzXMcAO5ZhNfpH/mO6GeAlcJf VYSj9CMajzv4zvl2e2TX/K7GEEDRVgpNYiiBFy3Do6OylaKWf8Xlf9Usv/mhj1J3 g7TM3G1JtmNa+RM2jpW/FA6vpJXCCwIMR9GibiG1NlJRbxTkdsoFQDjfQ6X+iDBF BGB0knZ2bjV5M1KI3H9aWs98teMTt69nV99pwOQsqko+lX458kTCVHdvx7VkZFbq aJzuFrvUIZFuCLHrLPYYAYNkRkcMpOcmFdOVh/e4j7BipNjg8eHI/JcQOChW4Ttq MSzcfSV3ne3Gft9T8PjgXxPRc1lLva0Q -----END CERTIFICATE-----Generated at Mon May 6 20:19:45 2024 by rpki-client on console-ams.rpki-client.org