$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json) Hash identifier: hS1UA4lVzdoFi7BJz+0yyTFififYr9o1IoNfHD2cBgU= Subject key identifier: F7:C3:E4:5A:06:88:37:AC:39:E6:92:6E:7A:F6:E9:18:CB:0F:1E:B6 Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft Manifest number: 08E7 Signing time: Sat 04 May 2024 21:32:30 +0000 Manifest this update: Sat 04 May 2024 21:32:30 +0000 Manifest next update: Sat 11 May 2024 21:32:30 +0000 Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: LiyvNqQMNpK91/eaQg6cPFV0qnGTncPgQwOP1wafsMk=) 2: 1EEB10267CFB11EBA8C7B009C4F9AE02.roa (hash: a/MoRoBo0aOxnaGvmYiSBL3O+4s2Cj39IafwaUYXkUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Validity Not Before: May 4 21:32:30 2024 GMT Not After : May 11 21:32:30 2024 GMT Subject: CN=6636a96e-9a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:f6:6b:59:d3:99:a8:0d:50:be:55:99:6a: 08:e0:a9:73:d5:1e:fa:f9:e7:06:42:f4:d7:db:3b: 41:b8:95:81:5f:5e:3f:b9:81:da:8d:a8:41:2d:87: 25:c7:d8:90:e1:fb:39:53:05:07:09:ab:a3:a1:c1: cc:78:2c:65:3b:56:6a:bf:27:ed:c8:b2:0b:0e:b0: a1:e1:e7:6f:8c:3c:e8:07:dd:46:dc:ff:b5:94:bf: e2:45:e3:96:9d:39:62:be:2a:24:91:cd:83:93:b3: dc:cf:6d:af:15:08:eb:37:ea:e5:c7:d9:85:c5:4b: f6:17:87:54:5e:56:f3:71:6b:9e:51:19:11:44:72: cd:79:3f:e2:34:13:dc:38:8a:ba:ed:11:c8:9e:aa: 40:99:d7:47:71:53:ee:77:59:f1:45:1a:49:2e:1e: 62:50:ef:1f:c6:8b:06:03:42:f9:ce:b7:db:f5:12: 5b:64:35:f3:7e:78:e5:63:6a:33:50:fb:35:02:2e: 8b:65:ee:ac:8f:14:8e:72:d7:a2:4c:d7:68:0d:8e: 53:3c:3c:0e:a8:de:26:e3:8b:df:32:d0:a2:2e:d9: 6c:23:2f:26:31:5e:ce:c7:5a:2d:64:92:60:fb:3d: 1f:b9:9c:2b:45:4a:7c:c8:0b:54:fc:67:2b:59:d3: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C3:E4:5A:06:88:37:AC:39:E6:92:6E:7A:F6:E9:18:CB:0F:1E:B6 X509v3 Authority Key Identifier: keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:80:5e:5d:47:6b:97:f2:0f:2c:01:de:aa:78:4c:19:4d:6d: 60:6e:ac:e0:50:f8:4c:1e:04:d0:81:02:59:c7:0f:a6:5c:11: f6:a7:bb:6a:86:76:20:d5:31:94:95:87:00:bb:54:4d:a6:be: 44:53:75:37:9b:39:3a:56:a5:6b:bf:3f:72:0c:8b:7d:c0:65: 26:2c:67:9b:73:f8:70:f1:4d:e6:4a:67:e3:71:59:71:ad:fd: 07:b8:15:6d:4e:33:62:a5:7f:59:8c:5c:a5:5f:c2:a3:91:04: 73:ae:bf:45:5c:04:d1:62:ea:be:ff:2f:60:a7:6f:c8:7a:fd: 8c:83:88:73:41:07:89:f3:7f:b4:95:00:08:21:08:e4:aa:05: bb:2c:97:af:6f:c4:82:a0:6c:32:cf:d9:82:da:b7:37:22:58: 7d:11:c1:48:22:bb:0a:8a:ea:18:28:43:d4:2c:a6:f5:33:bb: 0b:9c:a0:5f:5c:ff:a4:04:11:28:70:d7:f9:45:71:ee:d6:a9: cb:3b:e0:8a:22:e5:71:f9:ff:16:80:7a:fd:c9:5d:a4:c6:11: 67:6a:44:db:87:3f:95:f1:e6:30:f7:09:56:22:4c:46:ab:13: 7b:cb:f5:9f:2a:7e:b1:6d:ba:95:fd:3e:87:ae:01:1d:9f:aa: 67:11:a3:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDRTQxMTAvBgNVBAUTKDlCMjAyRjk1ODUxRUZDNEI2NENFM0I0MDlDNkM2MDRC MzVCNDk4RDgwHhcNMjQwNTA0MjEzMjMwWhcNMjQwNTExMjEzMjMwWjAYMRYwFAYD VQQDEw02NjM2YTk2ZS05YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjr2a1nTmagNUL5VmWoI4Klz1R76+ecGQvTX2ztBuJWBX14/uYHajahBLYcl x9iQ4fs5UwUHCaujocHMeCxlO1ZqvyftyLILDrCh4edvjDzoB91G3P+1lL/iReOW nTliviokkc2Dk7Pcz22vFQjrN+rlx9mFxUv2F4dUXlbzcWueURkRRHLNeT/iNBPc OIq67RHInqpAmddHcVPud1nxRRpJLh5iUO8fxosGA0L5zrfb9RJbZDXzfnjlY2oz UPs1Ai6LZe6sjxSOcteiTNdoDY5TPDwOqN4m44vfMtCiLtlsIy8mMV7Ox1otZJJg +z0fuZwrRUp8yAtU/GcrWdNjfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfD5FoG iDesOeaSbnr26RjLDx62MB8GA1UdIwQYMBaAFJsgL5WFHvxLZM47QJxsYEs1tJjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUNFNC8zRUZGMUE5QTg2 MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9FdGt6anRBbkd4Z1N6VzBt TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL215QXZsWVVlX0V0a3pqdEFuR3hnU3pXMG1OZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUNFNC8zRUZGMUE5QTg2MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9F dGt6anRBbkd4Z1N6VzBtTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcgF5dR2uX8g8sAd6qeEwZTW1gbqzgUPhMHgTQgQJZxw+mXBH2p7tq hnYg1TGUlYcAu1RNpr5EU3U3mzk6VqVrvz9yDIt9wGUmLGebc/hw8U3mSmfjcVlx rf0HuBVtTjNipX9ZjFylX8KjkQRzrr9FXATRYuq+/y9gp2/Iev2Mg4hzQQeJ83+0 lQAIIQjkqgW7LJevb8SCoGwyz9mC2rc3Ilh9EcFIIrsKiuoYKEPULKb1M7sLnKBf XP+kBBEocNf5RXHu1qnLO+CKIuVx+f8WgHr9yV2kxhFnakTbhz+V8eYw9wlWIkxG qxN7y/WfKn6xbbqV/T6HrgEdn6pnEaO3 -----END CERTIFICATE-----Generated at Sat May 4 22:06:54 2024 by rpki-client on console-ams.rpki-client.org