$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: x3Lv7ev7xQ0MbM6MEc8IQEVx4/jESaHQhDCAc6Dra/E= Subject key identifier: C4:FA:E8:63:7C:3A:B8:E3:F3:29:23:26:0B:06:E4:77:63:07:C4:FE Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 199E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 21CA Signing time: Sat 18 May 2024 16:48:34 +0000 Manifest this update: Sat 18 May 2024 16:48:34 +0000 Manifest next update: Sat 25 May 2024 16:48:34 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: DjtzbosNU4yrFH/6uh29J0JTJ9wdAMSx/Ek84LmA/Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6558 (0x199e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: May 18 16:48:34 2024 GMT Not After : May 25 16:48:34 2024 GMT Subject: CN=6648dbe2-d8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:87:78:ab:29:7c:56:17:22:ef:97:2a:8f:73: 47:89:81:35:4a:53:f8:b1:77:38:d9:69:03:81:2c: 71:e1:09:9f:fc:89:46:70:d5:8b:b5:4e:b1:3c:53: 9f:8f:7b:e2:47:55:e0:1c:d3:be:3b:d2:9a:fd:10: b8:6b:c7:16:8e:91:e5:40:bb:7e:71:21:aa:1d:89: 00:a8:ec:e2:45:99:de:4a:eb:42:cf:d7:b4:51:5f: cf:4c:37:88:49:95:c2:84:d5:59:0e:51:bc:93:03: a6:9e:a9:4e:71:f8:3c:d0:0e:f3:be:0c:85:48:2d: a6:ca:82:4a:fd:a7:87:6e:df:e3:ad:b1:f9:f7:6f: b9:d5:82:f4:4f:d2:66:a8:53:86:c5:23:3d:16:56: 9e:45:a3:c6:68:63:b5:86:91:39:95:05:5f:aa:a1: fa:8a:18:09:4c:64:07:e8:b5:0d:d9:1d:b7:3d:07: 83:e4:e0:e0:f7:b2:32:b0:db:f6:aa:2f:cf:b5:e8: 67:cf:7d:6f:d8:16:1b:37:e2:7a:11:e4:20:5c:53: 38:82:d0:27:cc:9b:68:56:f1:4c:a5:ac:0e:6c:1c: 74:30:b2:26:af:2a:ea:36:25:fa:95:36:93:79:05: 1e:3c:aa:f2:e6:e9:57:c4:5e:47:d2:72:74:c8:9f: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FA:E8:63:7C:3A:B8:E3:F3:29:23:26:0B:06:E4:77:63:07:C4:FE X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e7:86:2c:81:75:33:49:09:d3:36:8d:fa:50:2b:6d:04:84: 4c:c4:f4:0d:90:15:ee:4f:94:f2:da:8c:a7:9b:e1:21:a4:1e: 2e:85:f9:50:e3:42:ad:d4:8f:4b:f8:62:9f:f3:2d:1a:2a:f1: e3:fd:c9:ea:f3:56:1b:c8:a9:43:f4:fb:7f:a6:c3:d0:52:92: 1d:77:94:ab:a6:f7:da:3f:81:1d:a9:bd:59:0c:d0:e4:03:16: ce:7a:d0:0c:4e:60:ac:23:23:2e:57:82:d1:4e:2c:ad:22:34: 9b:c4:49:22:ee:08:72:9a:93:e0:e5:bb:d9:21:ef:1e:94:e5: 05:df:e3:d5:69:62:80:f8:11:18:8f:0c:3c:e6:4c:b1:f8:31: 0a:d0:ad:3d:28:c6:4f:72:83:b7:d0:c5:6b:7e:92:2c:26:6e: e9:8a:36:d5:48:d3:69:a5:ec:ec:58:7e:55:84:17:f7:66:74: 0e:fe:49:ba:27:3f:db:50:b0:2b:27:63:13:9c:d3:95:fc:77: 85:86:b3:ba:84:1f:58:f0:07:65:5d:4f:7a:6f:65:d1:a7:63: 7b:07:e5:0c:66:d2:bf:68:e9:99:9b:e3:13:62:77:71:c6:f1: 05:49:55:b6:41:62:7d:9c:df:73:62:3c:d0:5e:16:fe:09:00: 29:f4:de:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjQwNTE4MTY0ODM0WhcNMjQwNTI1MTY0ODM0WjAYMRYwFAYD VQQDEw02NjQ4ZGJlMi1kOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Id4qyl8Vhci75cqj3NHiYE1SlP4sXc42WkDgSxx4Qmf/IlGcNWLtU6xPFOf j3viR1XgHNO+O9Ka/RC4a8cWjpHlQLt+cSGqHYkAqOziRZneSutCz9e0UV/PTDeI SZXChNVZDlG8kwOmnqlOcfg80A7zvgyFSC2myoJK/aeHbt/jrbH592+51YL0T9Jm qFOGxSM9FlaeRaPGaGO1hpE5lQVfqqH6ihgJTGQH6LUN2R23PQeD5ODg97IysNv2 qi/Ptehnz31v2BYbN+J6EeQgXFM4gtAnzJtoVvFMpawObBx0MLImryrqNiX6lTaT eQUePKry5ulXxF5H0nJ0yJ9C5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT66GN8 Orjj8ykjJgsG5HdjB8T+MB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA454YsgXUzSQnTNo36UCttBIRMxPQNkBXuT5Ty2oynm+EhpB4uhflQ 40Kt1I9L+GKf8y0aKvHj/cnq81YbyKlD9Pt/psPQUpIdd5SrpvfaP4Edqb1ZDNDk AxbOetAMTmCsIyMuV4LRTiytIjSbxEki7ghympPg5bvZIe8elOUF3+PVaWKA+BEY jww85kyx+DEK0K09KMZPcoO30MVrfpIsJm7pijbVSNNppezsWH5VhBf3ZnQO/km6 Jz/bULArJ2MTnNOV/HeFhrO6hB9Y8AdlXU96b2XRp2N7B+UMZtK/aOmZm+MTYndx xvEFSVW2QWJ9nN9zYjzQXhb+CQAp9N6d -----END CERTIFICATE-----Generated at Sat May 18 17:37:31 2024 by rpki-client on console-fra.rpki-client.org