$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: 0rgpd8qXy97fyyQsXkoYKoi8d2vKbB1h6/zGO4wfZW8= Subject key identifier: 49:AF:19:4C:D9:4D:9C:EE:7E:53:8C:AF:98:B0:28:E3:4C:51:F0:30 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 10CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 10CD Signing time: Sat 18 May 2024 17:52:43 +0000 Manifest this update: Sat 18 May 2024 17:52:43 +0000 Manifest next update: Sat 25 May 2024 17:52:43 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: RaCA1hJiOq22hKPii6hMruCd2hP08ug2gLzzSxtDRq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4301 (0x10cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: May 18 17:52:43 2024 GMT Not After : May 25 17:52:43 2024 GMT Subject: CN=6648eaeb-ed81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:ed:79:db:d2:ef:04:f4:cd:17:c9:95:4b: 77:ee:9c:74:f5:6a:bf:3d:35:53:cb:0b:26:ea:24: b0:4e:13:71:b6:bb:27:a5:63:88:00:19:55:62:d6: e3:1f:18:d0:af:b0:39:ba:52:39:84:2f:ed:1b:2b: 6b:3e:a8:9b:ae:20:ba:e4:5f:af:ef:ad:71:d1:5f: 98:2e:bb:ed:10:ac:c1:66:98:1a:98:17:ff:b6:ac: 19:7a:80:21:80:93:e6:11:89:f4:66:63:b1:0b:1d: ce:e6:74:d9:cb:fd:64:2c:21:a9:8c:c1:61:c2:28: 65:08:c9:6f:a1:42:07:4e:42:0f:b8:5e:6c:c2:c6: 6a:6b:8b:77:53:0e:e7:8b:fe:1a:32:3e:df:49:19: 7f:1d:77:fe:d8:4a:69:ad:b7:3c:44:5a:d6:11:71: d5:ee:68:f0:46:48:01:86:46:e8:0f:76:67:a9:17: c6:30:b3:34:56:78:d7:f9:b4:d2:53:d1:c2:87:df: 23:cc:84:23:43:de:ed:fa:4a:fd:22:e9:90:cb:8c: 59:10:ac:76:bd:26:99:6d:80:62:d4:6d:e6:90:04: 63:cf:d6:62:77:0b:23:5f:c1:3d:a3:10:11:e1:03: 1a:bb:de:bd:df:21:99:ec:50:ec:e5:97:48:fd:8d: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:19:4C:D9:4D:9C:EE:7E:53:8C:AF:98:B0:28:E3:4C:51:F0:30 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a0:3c:39:0f:bd:8d:38:06:2d:f6:cf:4e:98:02:00:be:53: d6:d0:87:4f:17:e8:e5:f8:fe:8a:5a:a4:ba:1c:df:54:a2:11: fe:f6:43:69:45:de:b1:47:ba:e2:15:78:ae:99:e9:db:7a:ad: 6f:25:da:4e:b4:98:fa:12:c3:7d:08:87:a6:a0:c2:17:0e:af: de:bc:1c:c4:3d:ea:8f:83:e0:3c:89:08:15:c9:0e:32:c5:ab: a9:2e:50:af:48:9d:42:58:63:da:15:a5:d2:85:d6:e3:4a:f7: 92:0c:9f:95:04:33:c4:60:cd:c5:23:a2:db:58:eb:76:d8:2a: 2c:5d:37:56:da:e2:9b:b9:8c:b0:28:b5:a5:5f:e6:91:f8:d2: 9a:8a:be:eb:64:54:04:9d:e4:98:4e:8d:2a:fb:80:a5:72:79: 8d:81:37:7c:67:65:bb:e1:ee:28:d1:46:78:1e:03:2d:3f:30: 71:5c:67:48:08:3f:bf:25:83:5f:43:88:70:54:f3:f2:c0:a8: 31:eb:9a:f1:0d:4b:c8:10:ac:17:20:0c:e4:84:8a:5d:d9:da: 88:ac:bf:5b:22:54:6c:d6:87:7f:6d:32:36:5a:89:ca:13:90: 7c:29:6c:6a:da:18:a4:9c:f5:a3:0f:09:87:7a:42:25:57:1c: d0:3a:25:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjQwNTE4MTc1MjQzWhcNMjQwNTI1MTc1MjQzWjAYMRYwFAYD VQQDEw02NjQ4ZWFlYi1lZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAHtedvS7wT0zRfJlUt37px09Wq/PTVTywsm6iSwThNxtrsnpWOIABlVYtbj HxjQr7A5ulI5hC/tGytrPqibriC65F+v761x0V+YLrvtEKzBZpgamBf/tqwZeoAh gJPmEYn0ZmOxCx3O5nTZy/1kLCGpjMFhwihlCMlvoUIHTkIPuF5swsZqa4t3Uw7n i/4aMj7fSRl/HXf+2Epprbc8RFrWEXHV7mjwRkgBhkboD3ZnqRfGMLM0VnjX+bTS U9HCh98jzIQjQ97t+kr9IumQy4xZEKx2vSaZbYBi1G3mkARjz9ZidwsjX8E9oxAR 4QMau9693yGZ7FDs5ZdI/Y06cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmvGUzZ TZzuflOMr5iwKONMUfAwMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcoDw5D72NOAYt9s9OmAIAvlPW0IdPF+jl+P6KWqS6HN9UohH+9kNp Rd6xR7riFXiumenbeq1vJdpOtJj6EsN9CIemoMIXDq/evBzEPeqPg+A8iQgVyQ4y xaupLlCvSJ1CWGPaFaXShdbjSveSDJ+VBDPEYM3FI6LbWOt22CosXTdW2uKbuYyw KLWlX+aR+NKair7rZFQEneSYTo0q+4ClcnmNgTd8Z2W74e4o0UZ4HgMtPzBxXGdI CD+/JYNfQ4hwVPPywKgx65rxDUvIEKwXIAzkhIpd2dqIrL9bIlRs1od/bTI2WonK E5B8KWxq2hiknPWjDwmHekIlVxzQOiWO -----END CERTIFICATE-----Generated at Sat May 18 19:15:23 2024 by rpki-client on console-ams.rpki-client.org