$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: M4kf6FifTW8QnMc6SedsMdL4uvheEJLvlPYRJJAasy8= Subject key identifier: AC:5E:D9:BC:24:71:22:09:3C:A1:9C:93:56:65:6F:01:94:5E:48:C5 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0A0A Signing time: Mon 06 May 2024 20:45:28 +0000 Manifest this update: Mon 06 May 2024 20:45:28 +0000 Manifest next update: Mon 13 May 2024 20:45:28 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: RbcXng57C50b6xgySlnOoVCh8q+O9SXiKQ3BZz2hIh4=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: sCxBbTPaAxo4ky7RFi9ioL8DjtsOBCB5CQvN1aJZ7Qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: May 6 20:45:28 2024 GMT Not After : May 13 20:45:28 2024 GMT Subject: CN=66394168-75dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:8d:25:36:29:77:b4:4e:30:8e:d9:2b:e5: 10:1f:ed:0b:ef:7b:6e:4f:1f:47:d3:d6:bf:65:10: 67:bd:24:4e:de:81:c4:8d:bc:2d:25:3f:b0:f6:16: 44:d6:17:ef:07:3c:80:bc:8b:f8:ac:87:92:03:22: 7d:b3:f8:d4:f7:51:00:f4:d6:8c:9d:c9:4f:18:68: aa:5d:f2:56:0e:8b:35:6f:3c:3f:46:e6:61:af:7e: 7e:38:b5:1e:62:83:9e:8c:bb:91:fa:41:74:a2:94: 33:1f:60:ac:a3:27:4d:bd:3a:13:31:4e:92:cc:d6: 70:39:ec:aa:6b:51:16:b1:d1:47:43:7d:1c:68:18: 60:2c:ab:d2:a4:25:8e:c7:45:02:81:32:e3:eb:49: f7:bb:6f:e0:46:c2:d6:f9:62:d8:c7:bf:48:bc:eb: b0:5f:5d:3d:4f:f1:68:07:56:e7:a1:54:47:91:1a: 79:1e:ca:43:56:c1:10:54:a1:cb:ad:d6:2a:58:0c: fb:16:96:d8:71:e3:33:cd:90:10:5e:42:d1:75:5b: a9:68:5a:dd:67:57:99:1b:b6:72:23:cb:80:5a:0e: f3:80:4d:49:cb:9e:e5:51:ba:c3:3d:4c:38:03:eb: 51:66:19:aa:a4:26:75:33:d6:6b:a8:81:70:f3:a2: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:D9:BC:24:71:22:09:3C:A1:9C:93:56:65:6F:01:94:5E:48:C5 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1f:cb:42:73:fb:31:78:9c:18:ad:1b:e6:29:8a:b4:84:3b: 75:bc:81:fa:e4:fc:ca:70:6f:5d:24:61:57:fb:f0:d8:39:ad: 64:62:d2:3c:db:35:2d:90:0b:52:bf:83:c0:3c:5c:aa:1c:a0: c5:f3:d7:f1:37:e2:27:aa:92:64:c8:ea:0e:55:db:d3:76:f0: 8f:b9:b7:98:ba:bd:1b:50:fe:d0:17:d3:8b:e2:3a:d9:05:f3: 5a:eb:a3:dd:c3:9e:cc:82:90:d0:68:ca:c7:2a:5f:01:50:42: 7f:ec:fc:ed:41:64:7d:a1:e4:55:80:33:1f:6b:c2:17:35:f6: 18:f0:d3:4d:7e:4e:ad:ac:2d:ba:03:0d:78:43:7e:19:7a:1d: 1f:11:6c:5b:cd:14:d6:e1:fe:00:5f:9e:13:01:47:ff:87:eb: 25:4b:39:bc:fa:bd:96:db:b8:c9:7c:62:23:bf:24:f4:bb:07: f4:0e:bb:e7:04:9a:08:aa:2c:95:4b:b7:d2:78:73:cb:97:bd: 81:f4:3c:c9:c2:ee:3b:d8:34:bb:5c:80:d2:ee:85:16:30:5b: 33:a2:4e:5e:4c:39:74:01:b0:fa:81:7e:c6:a1:64:62:69:9b: 22:fc:b3:06:18:ff:5b:9f:4f:b3:09:44:23:44:ae:6f:6f:eb: 3a:d1:c1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjQwNTA2MjA0NTI4WhcNMjQwNTEzMjA0NTI4WjAYMRYwFAYD VQQDEw02NjM5NDE2OC03NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2mNJTYpd7ROMI7ZK+UQH+0L73tuTx9H09a/ZRBnvSRO3oHEjbwtJT+w9hZE 1hfvBzyAvIv4rIeSAyJ9s/jU91EA9NaMnclPGGiqXfJWDos1bzw/RuZhr35+OLUe YoOejLuR+kF0opQzH2CsoydNvToTMU6SzNZwOeyqa1EWsdFHQ30caBhgLKvSpCWO x0UCgTLj60n3u2/gRsLW+WLYx79IvOuwX109T/FoB1bnoVRHkRp5HspDVsEQVKHL rdYqWAz7FpbYceMzzZAQXkLRdVupaFrdZ1eZG7ZyI8uAWg7zgE1Jy57lUbrDPUw4 A+tRZhmqpCZ1M9ZrqIFw86KKwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxe2bwk cSIJPKGck1ZlbwGUXkjFMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6H8tCc/sxeJwYrRvmKYq0hDt1vIH65PzKcG9dJGFX+/DYOa1kYtI8 2zUtkAtSv4PAPFyqHKDF89fxN+InqpJkyOoOVdvTdvCPubeYur0bUP7QF9OL4jrZ BfNa66Pdw57MgpDQaMrHKl8BUEJ/7PztQWR9oeRVgDMfa8IXNfYY8NNNfk6trC26 Aw14Q34Zeh0fEWxbzRTW4f4AX54TAUf/h+slSzm8+r2W27jJfGIjvyT0uwf0Drvn BJoIqiyVS7fSeHPLl72B9DzJwu472DS7XIDS7oUWMFszok5eTDl0AbD6gX7GoWRi aZsi/LMGGP9bn0+zCUQjRK5vb+s60cG3 -----END CERTIFICATE-----Generated at Mon May 6 23:05:52 2024 by rpki-client on console-fra.rpki-client.org