$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: DxtxlHhj53D1vjHj/pIZVdrxNdPcfj2CAoNg8m3CCys= Subject key identifier: 5F:62:AB:1B:3F:C9:9A:3A:47:AD:9C:97:B2:24:B9:FC:02:FF:00:AB Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2AE5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2AE5 Signing time: Sat 18 May 2024 15:49:12 +0000 Manifest this update: Sat 18 May 2024 15:49:11 +0000 Manifest next update: Sat 25 May 2024 15:49:11 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: 3+YrZgXnUdrwKCqmJ1xo1+PpcY6NVqJR1BOGcdKUR7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10981 (0x2ae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: May 18 15:49:11 2024 GMT Not After : May 25 15:49:11 2024 GMT Subject: CN=6648cdf7-db9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:2e:d8:18:3c:65:ca:8f:e9:63:61:97:08: a9:0f:b5:2a:3d:8a:33:bd:50:aa:40:14:77:f2:98: 6f:8b:22:d5:46:2b:92:6d:3a:b1:ff:b9:28:8e:4d: 6f:8a:f6:f4:e6:2a:a5:45:9b:d4:f9:69:a0:a5:d4: b1:d8:b3:b6:72:78:31:5e:c7:37:7a:15:36:54:af: 9a:cd:bc:c0:42:f7:a7:9c:2e:24:a4:0c:ab:66:bd: 29:a4:d1:30:39:1f:15:9c:b7:16:6d:a3:27:ad:84: 6c:47:2a:17:90:de:42:92:87:05:90:7d:b6:7f:1d: ee:1c:51:d7:14:4b:7d:74:48:74:6b:53:d6:05:00: a5:ea:06:82:f0:e3:67:55:27:d0:6e:4a:e5:3e:15: f1:aa:9b:89:f2:84:cc:2e:49:12:c2:89:87:ac:4d: cd:3d:5e:04:dc:09:5e:cc:e3:84:57:55:a1:e4:a0: 45:7d:f0:2f:62:90:c8:4f:16:99:6b:90:78:57:3e: 5d:b4:ca:44:c9:69:7d:ce:da:bb:88:d3:73:cf:98: d2:1d:6d:c0:96:1d:b5:90:f9:22:ba:ed:14:8d:c2: 5f:cf:c3:f9:23:8d:8e:22:cf:fb:b4:5f:86:de:af: 65:b3:64:95:3c:3a:ff:62:e4:7a:36:b8:5b:c8:47: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:62:AB:1B:3F:C9:9A:3A:47:AD:9C:97:B2:24:B9:FC:02:FF:00:AB X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:b1:a6:06:21:e4:3f:c3:65:ba:87:d0:65:b2:05:6d:49: c8:4e:42:47:f3:8e:40:4f:b0:83:d3:0e:9b:5f:d8:8c:3e:36: 67:bf:35:e1:09:5c:5b:7f:11:b1:87:b0:ba:65:bf:03:15:be: 3b:01:b2:0a:e2:8f:4b:1a:27:5d:e4:02:9d:bf:ac:51:db:de: b0:93:a8:7c:ac:de:1d:95:71:96:a4:25:7d:e4:05:be:70:40: ba:0b:1d:8a:53:d3:8f:0d:83:36:a2:01:06:34:80:6d:f2:b6: 0f:5c:04:4b:37:a3:03:25:de:4a:90:f9:7a:0c:1d:95:9a:72: 04:6a:38:ac:19:a3:75:5c:6a:10:46:82:b9:a7:e9:29:5e:db: 39:44:24:e3:e1:9e:a6:5a:2f:77:30:92:93:06:1a:fc:da:f1: 8a:75:2b:f2:c2:3e:f5:80:79:57:c6:80:ee:19:ae:b9:12:55: 8a:14:80:04:4c:6d:5b:d1:3f:c5:0a:b7:41:f9:f9:a6:52:0a: a7:09:c1:d4:a5:87:7b:a7:86:34:58:8f:74:45:e1:47:be:2b: a1:d5:ff:b0:31:a8:10:d3:1c:b9:3d:74:72:1b:e8:cc:ed:9e: 04:9c:0c:b4:17:c8:5b:6c:f7:e1:2a:58:a1:90:e4:7e:41:48: 8e:8f:19:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjQwNTE4MTU0OTExWhcNMjQwNTI1MTU0OTExWjAYMRYwFAYD VQQDEw02NjQ4Y2RmNy1kYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+gu2Bg8ZcqP6WNhlwipD7UqPYozvVCqQBR38phviyLVRiuSbTqx/7kojk1v ivb05iqlRZvU+WmgpdSx2LO2cngxXsc3ehU2VK+azbzAQvennC4kpAyrZr0ppNEw OR8VnLcWbaMnrYRsRyoXkN5CkocFkH22fx3uHFHXFEt9dEh0a1PWBQCl6gaC8ONn VSfQbkrlPhXxqpuJ8oTMLkkSwomHrE3NPV4E3AlezOOEV1Wh5KBFffAvYpDITxaZ a5B4Vz5dtMpEyWl9ztq7iNNzz5jSHW3Alh21kPkiuu0UjcJfz8P5I42OIs/7tF+G 3q9ls2SVPDr/YuR6NrhbyEfocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9iqxs/ yZo6R62cl7IkufwC/wCrMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8tLGmBiHkP8NluofQZbIFbUnITkJH845AT7CD0w6bX9iMPjZnvzXh CVxbfxGxh7C6Zb8DFb47AbIK4o9LGidd5AKdv6xR296wk6h8rN4dlXGWpCV95AW+ cEC6Cx2KU9OPDYM2ogEGNIBt8rYPXARLN6MDJd5KkPl6DB2VmnIEajisGaN1XGoQ RoK5p+kpXts5RCTj4Z6mWi93MJKTBhr82vGKdSvywj71gHlXxoDuGa65ElWKFIAE TG1b0T/FCrdB+fmmUgqnCcHUpYd7p4Y0WI90ReFHviuh1f+wMagQ0xy5PXRyG+jM 7Z4EnAy0F8hbbPfhKlihkOR+QUiOjxkP -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org