$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json) Hash identifier: atOIKxRax8PJENpBsk0mDul7raaB8L64QXFEZIYXJec= Subject key identifier: 70:D6:BD:B2:DB:22:05:9D:23:B4:65:17:FD:9D:37:2E:CD:AD:F8:8A Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19 Certificate serial: 1656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft Manifest number: 1ED6 Signing time: Fri 31 May 2024 17:22:29 +0000 Manifest this update: Fri 31 May 2024 17:22:28 +0000 Manifest next update: Fri 07 Jun 2024 17:22:28 +0000 Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: byQsJMUAMkGYkDwMc2hELs+VFoQUa+QQrAdqtSDap9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5718 (0x1656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19 Validity Not Before: May 31 17:22:28 2024 GMT Not After : Jun 7 17:22:28 2024 GMT Subject: CN=665a0754-51ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:c8:90:0d:88:1e:13:ea:23:42:23:34:e3: a4:2f:17:2a:41:8a:55:f5:57:ad:a7:b0:7b:df:70: 52:23:7f:ed:56:e2:70:7c:8d:14:e5:41:1a:97:13: 4a:6d:cf:97:f0:df:7e:9b:26:cb:cd:58:4b:5b:1b: 7f:00:08:17:00:0f:d7:ee:64:e3:3c:e7:af:9d:07: 57:4b:3c:5b:be:d1:f7:5a:30:8a:3c:a6:7d:2f:59: 61:5b:26:18:36:e7:7f:24:46:6c:5d:3f:60:e7:59: 9e:ae:a7:d8:37:38:e7:0d:a1:d1:04:fa:b8:67:41: db:8e:23:86:a6:12:26:73:31:29:f7:12:c6:53:6b: 8e:e3:6b:76:d9:5d:ea:79:b8:66:6a:11:26:4a:fd: ca:5c:06:e5:cb:8c:7e:84:f8:75:bd:82:a0:0e:7a: 34:ed:fc:a4:23:81:84:a9:92:41:84:9f:8b:28:94: f9:bf:fa:b2:d2:ad:f9:32:34:85:e6:40:a4:18:13: 8d:2a:43:fc:70:98:c6:37:2c:cb:02:d5:c1:ba:3b: d5:c8:0b:e4:ec:30:3a:4b:c5:46:52:3e:94:f7:c5: 03:55:24:66:f9:52:44:f2:f3:46:ec:b5:bf:b1:fa: 7c:15:a0:4c:98:43:c1:0c:22:67:86:38:e0:f0:2b: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D6:BD:B2:DB:22:05:9D:23:B4:65:17:FD:9D:37:2E:CD:AD:F8:8A X509v3 Authority Key Identifier: keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b1:54:99:f8:ca:4a:9f:24:55:46:52:29:ab:d3:9e:3f:72: 6e:83:68:33:7a:13:ed:72:6c:7f:60:fd:fb:dd:a0:1e:52:d9: 19:7d:3a:5f:d7:b1:cd:5f:54:62:c7:55:27:3e:c6:c3:4e:16: 18:36:46:f5:4b:27:0d:08:a4:9f:41:a7:91:af:18:af:d3:98: 58:e0:86:ca:4a:80:ff:9b:3e:33:3a:ad:7e:84:6f:c5:a5:c5: d8:da:67:11:37:32:2d:61:35:c0:17:21:0c:a4:34:7a:ec:9c: b1:e0:38:05:99:54:c9:79:5a:70:be:07:d8:40:97:71:ca:d7: 72:2e:28:73:41:25:0a:83:20:10:a5:84:b9:5c:10:2b:39:fe: d7:1c:73:54:d5:a3:bc:98:05:a2:33:77:1a:28:90:52:6c:d6: 46:f4:a0:f6:53:89:3f:59:4a:1f:90:d3:58:07:66:79:4a:65: a2:cc:86:2b:65:d2:51:c9:00:e7:a9:47:3b:13:4d:4e:0b:be: f1:fb:a1:6c:a7:c7:8f:3d:91:22:d1:fe:01:a8:f8:af:9d:52: 73:23:ab:88:f3:9a:c9:09:45:d4:0e:e8:9d:5c:b7:b3:17:8f: d3:b8:a4:ea:c3:01:f3:a8:b3:2b:19:71:9d:7f:02:11:1a:a7: 6f:83:1b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKDZCRDZDOENFODgyMTkwQzgxNjlFODEzNjQ1RTBFREQ5 Qjc1N0VCMTkwHhcNMjQwNTMxMTcyMjI4WhcNMjQwNjA3MTcyMjI4WjAYMRYwFAYD VQQDEw02NjVhMDc1NC01MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7DIkA2IHhPqI0IjNOOkLxcqQYpV9Vetp7B733BSI3/tVuJwfI0U5UEalxNK bc+X8N9+mybLzVhLWxt/AAgXAA/X7mTjPOevnQdXSzxbvtH3WjCKPKZ9L1lhWyYY Nud/JEZsXT9g51merqfYNzjnDaHRBPq4Z0HbjiOGphImczEp9xLGU2uO42t22V3q ebhmahEmSv3KXAbly4x+hPh1vYKgDno07fykI4GEqZJBhJ+LKJT5v/qy0q35MjSF 5kCkGBONKkP8cJjGNyzLAtXBujvVyAvk7DA6S8VGUj6U98UDVSRm+VJE8vNG7LW/ sfp8FaBMmEPBDCJnhjjg8CutXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDWvbLb IgWdI7RlF/2dNy7NrfiKMB8GA1UdIwQYMBaAFGvWyM6IIZDIFp6BNkXg7dm3V+sZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtNZ1dub0UyUmVEdDJiZFg2 eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5Ykl6b2doa01nV25vRTJSZUR0MmJkWDZ4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9hOWJJem9naGtN Z1dub0UyUmVEdDJiZFg2eGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2sVSZ+MpKnyRVRlIpq9OeP3Jug2gzehPtcmx/YP373aAeUtkZfTpf 17HNX1Rix1UnPsbDThYYNkb1SycNCKSfQaeRrxiv05hY4IbKSoD/mz4zOq1+hG/F pcXY2mcRNzItYTXAFyEMpDR67Jyx4DgFmVTJeVpwvgfYQJdxytdyLihzQSUKgyAQ pYS5XBArOf7XHHNU1aO8mAWiM3caKJBSbNZG9KD2U4k/WUofkNNYB2Z5SmWizIYr ZdJRyQDnqUc7E01OC77x+6Fsp8ePPZEi0f4BqPivnVJzI6uI85rJCUXUDuidXLez F4/TuKTqwwHzqLMrGXGdfwIRGqdvgxvk -----END CERTIFICATE-----Generated at Fri May 31 19:47:47 2024 by rpki-client on console-fra.rpki-client.org