$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft File: owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json) Hash identifier: PjrfLAthwHc9hszFXnFB4K4aJnWIGrBOLKIqW8CBjXk= Subject key identifier: 20:9C:19:09:2D:B6:62:BD:B2:B7:00:A6:E8:5B:22:40:36:4A:E9:3B Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 Certificate issuer: /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft Manifest number: E2 Signing time: Sun 19 May 2024 05:57:50 +0000 Manifest this update: Sun 19 May 2024 05:57:49 +0000 Manifest next update: Sun 26 May 2024 05:57:49 +0000 Files and hashes: 1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: 6wgMYDVDIbgNwj5WlrmXuC5+W/rra3wU6DyEff/tTA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406 Validity Not Before: May 19 05:57:49 2024 GMT Not After : May 26 05:57:49 2024 GMT Subject: CN=664994dd-186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:39:42:a4:d7:1c:7d:1b:96:3d:f0:a0:62: 81:84:57:e7:39:dc:20:99:1b:f9:94:b4:4e:0f:e4: bb:42:3b:4f:85:f3:5d:3c:74:a9:1b:6f:fc:7b:ca: 8b:3f:14:09:e4:0f:6c:ae:85:4c:96:cb:ea:39:c8: 55:81:41:b5:67:d8:7d:10:c3:cf:e8:06:50:11:f8: 29:d3:62:a2:4e:4d:ac:55:da:8a:3d:72:6f:39:7a: 21:cc:3d:8b:5b:b7:03:8e:9d:e2:48:e1:e1:29:28: 27:2e:8a:8b:83:c4:b5:7a:a7:bf:a8:13:9d:68:e2: 8b:f1:dd:c8:b2:0a:49:3f:32:60:5d:62:d0:c9:bb: 2c:67:f3:29:43:aa:9d:2b:1c:6c:d9:a9:81:d3:6c: 47:c9:ba:d3:62:d3:68:11:48:3d:e1:31:1c:d5:ed: fd:02:a4:26:c1:4d:d9:50:2e:ac:12:14:c7:8c:ef: a4:44:a1:8f:2c:97:e5:77:07:6c:ed:65:9a:82:ef: 64:e8:16:90:a7:d8:7c:04:50:69:fe:c2:14:62:7a: 69:ae:7b:f2:51:dd:5b:f8:f9:87:4f:e8:c7:60:f3: 70:f7:03:29:44:35:02:01:3c:12:22:24:c1:99:78: 2e:ef:77:31:5b:ff:4a:91:fb:65:68:ef:12:9e:63: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:19:09:2D:B6:62:BD:B2:B7:00:A6:E8:5B:22:40:36:4A:E9:3B X509v3 Authority Key Identifier: keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e0:57:87:b3:58:b5:60:cf:b7:cc:3d:df:ff:41:ff:fd:1c: 46:36:ee:bf:39:f0:d3:9a:9a:79:25:2e:76:7c:1b:10:c3:db: 03:3a:54:9d:8d:1d:62:7b:f4:0a:b5:e4:56:82:c6:d8:6b:0e: 0b:3a:0a:d8:88:fa:80:da:6a:8a:b5:dd:cb:72:a6:8a:eb:ef: 1d:5c:cf:80:47:07:db:05:02:4c:a2:df:63:a9:2f:ce:4f:81: 26:ac:3e:bf:2b:a9:53:74:ef:5c:3c:b1:41:df:4b:82:ac:69: c2:6c:e9:1e:95:6e:15:5c:ca:e2:dd:de:7e:9b:85:12:84:a8: e7:3d:1c:90:33:ab:b7:f6:a7:49:41:10:24:17:1f:47:df:37: 76:c5:53:61:65:5e:30:e5:cf:79:2e:27:10:5b:8c:54:ae:c5: 5d:80:bf:30:c1:78:c8:13:9e:9d:aa:56:fc:7c:89:2c:76:61: d0:1e:7c:92:89:45:4f:d2:20:f7:fc:3a:b4:b8:41:e5:74:71: 08:af:93:f6:85:d0:73:50:a7:5d:11:1d:b8:cf:1e:07:8e:17: 1a:4d:96:1a:6b:3d:eb:a6:52:5e:f6:3d:59:cc:be:1d:d6:c9: 1e:3c:20:47:8b:7f:f1:7f:d1:9f:b7:17:ed:58:9b:76:7b:7a: 49:76:38:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy NzQ3RDQ0MDYwHhcNMjQwNTE5MDU1NzQ5WhcNMjQwNTI2MDU1NzQ5WjAYMRYwFAYD VQQDEw02NjQ5OTRkZC0xODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbc5QqTXHH0blj3woGKBhFfnOdwgmRv5lLROD+S7QjtPhfNdPHSpG2/8e8qL PxQJ5A9sroVMlsvqOchVgUG1Z9h9EMPP6AZQEfgp02KiTk2sVdqKPXJvOXohzD2L W7cDjp3iSOHhKSgnLoqLg8S1eqe/qBOdaOKL8d3IsgpJPzJgXWLQybssZ/MpQ6qd Kxxs2amB02xHybrTYtNoEUg94TEc1e39AqQmwU3ZUC6sEhTHjO+kRKGPLJfldwds 7WWagu9k6BaQp9h8BFBp/sIUYnpprnvyUd1b+PmHT+jHYPNw9wMpRDUCATwSIiTB mXgu73cxW/9KkftlaO8SnmP8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCcGQkt tmK9srcApuhbIkA2Suk7MB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA14FeHs1i1YM+3zD3f/0H//RxGNu6/OfDTmpp5JS52fBsQw9sDOlSd jR1ie/QKteRWgsbYaw4LOgrYiPqA2mqKtd3LcqaK6+8dXM+ARwfbBQJMot9jqS/O T4EmrD6/K6lTdO9cPLFB30uCrGnCbOkelW4VXMri3d5+m4UShKjnPRyQM6u39qdJ QRAkFx9H3zd2xVNhZV4w5c95LicQW4xUrsVdgL8wwXjIE56dqlb8fIksdmHQHnyS iUVP0iD3/Dq0uEHldHEIr5P2hdBzUKddER24zx4HjhcaTZYaaz3rplJe9j1ZzL4d 1skePCBHi3/xf9GftxftWJt2e3pJdjh5 -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org