$ rpki-client -vvf rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft File: k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft (raw, json) Hash identifier: ADRwwuq2DgUZNp7+7Z6dHtKJpd8jurN0YnRS4v9V+pI= Subject key identifier: 04:06:2B:6C:E1:9D:81:DA:EE:F6:F5:B2:53:C3:F9:E9:34:B0:C2:60 Authority key identifier: 93:96:61:02:16:F7:51:5B:3A:5D:AE:22:1F:7B:E4:77:72:87:A3:20 Certificate issuer: /CN=A913D657/serialNumber=9396610216F7515B3A5DAE221F7BE4777287A320 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft Manifest number: 41 Signing time: Sat 18 May 2024 20:27:26 +0000 Manifest this update: Sat 18 May 2024 20:27:26 +0000 Manifest next update: Sat 25 May 2024 20:27:26 +0000 Files and hashes: 1: k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl (hash: Ohxo511E9TQPiU6ZcPBU6/AKdtO1etVP/opb7rulRNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D657/serialNumber=9396610216F7515B3A5DAE221F7BE4777287A320 Validity Not Before: May 18 20:27:26 2024 GMT Not After : May 25 20:27:26 2024 GMT Subject: CN=66490f2e-8523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:56:69:a6:a2:62:d3:9c:34:9d:43:2f:6e: f3:82:d8:b2:93:bc:e2:c4:a3:25:9c:da:43:30:83: 15:53:97:f5:7d:92:cf:3f:38:11:6c:98:a5:ab:99: f2:98:b9:26:32:18:50:10:4f:89:72:70:57:8c:ac: ea:d6:c3:fb:ff:5e:9c:84:19:8f:68:87:a5:76:e8: c5:40:24:1a:7c:36:70:25:f3:02:b1:76:ed:b4:58: 27:ae:40:2a:68:df:74:17:b1:78:78:67:68:ce:70: f2:15:1c:f7:94:64:9e:92:11:8d:33:a7:2f:85:6c: f8:6a:7b:49:7f:04:8d:8b:70:64:f9:43:e8:a3:d0: 59:79:0f:98:98:8f:7b:78:2f:c2:e7:d7:fc:87:c9: d4:89:33:66:6a:e5:3c:eb:57:bb:06:04:21:ad:36: 0a:2b:e7:b7:a9:cf:af:27:c2:2f:a5:21:05:64:d4: 81:cd:48:1f:4e:6f:e9:24:d1:6f:22:dd:8d:7e:4d: 9c:1d:aa:5f:b3:f4:3f:7a:3b:97:a1:ef:7c:79:f0: 62:65:4d:ec:f2:eb:7c:0b:cd:b6:48:84:da:2a:ce: 30:db:76:9a:42:90:88:e1:8e:0c:4f:9c:46:84:55: e7:cd:bb:7c:b5:fd:c0:5f:5d:75:99:74:39:4a:48: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:06:2B:6C:E1:9D:81:DA:EE:F6:F5:B2:53:C3:F9:E9:34:B0:C2:60 X509v3 Authority Key Identifier: keyid:93:96:61:02:16:F7:51:5B:3A:5D:AE:22:1F:7B:E4:77:72:87:A3:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:74:26:d6:81:8e:d0:6b:85:ea:ec:5d:af:ee:42:ee:ab:db: b2:63:16:18:57:0f:cf:d4:dc:75:4b:97:7b:72:8d:f3:83:b4: 24:7a:f8:2f:07:97:b8:e0:82:22:f4:d7:c4:8f:c7:ea:ac:43: 49:bf:30:48:f3:55:a0:1a:26:50:f2:b7:25:11:b9:ee:12:0c: fc:b0:90:ca:79:2c:04:9d:e1:f6:c9:fb:d9:19:32:9c:aa:d8: 2a:46:0c:17:f7:a3:e3:31:ba:51:be:ff:a7:4d:ab:ec:28:b0: 74:81:e8:e5:73:52:e8:fe:79:00:c4:32:a0:41:95:33:03:a9: d9:a3:18:d6:78:d2:e3:8d:6c:a7:17:b8:46:49:40:85:e1:8a: fc:ce:20:2b:56:8e:c3:f2:1b:c1:2d:49:fe:2c:db:da:6f:fd: 9c:d3:04:12:9f:d6:53:4e:e3:e5:d8:4f:3a:0b:9e:a5:6c:20: 2a:df:27:d4:68:50:92:54:c4:41:f5:1c:e3:25:32:de:ec:99: b9:51:c7:52:66:b1:ae:09:fe:3b:bf:1d:fc:9d:bb:d1:5f:e2: 03:b9:7e:9f:5d:ca:c3:ff:f3:f4:0b:6c:80:29:fa:7a:7f:01: 3e:53:49:93:d8:12:4c:77:b5:42:08:7b:f9:83:16:5e:ce:87: 0d:3b:e4:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDY1NzExMC8GA1UEBRMoOTM5NjYxMDIxNkY3NTE1QjNBNURBRTIyMUY3QkU0Nzc3 Mjg3QTMyMDAeFw0yNDA1MTgyMDI3MjZaFw0yNDA1MjUyMDI3MjZaMBgxFjAUBgNV BAMTDTY2NDkwZjJlLTg1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCua1ZppqJi05w0nUMvbvOC2LKTvOLEoyWc2kMwgxVTl/V9ks8/OBFsmKWrmfKY uSYyGFAQT4lycFeMrOrWw/v/XpyEGY9oh6V26MVAJBp8NnAl8wKxdu20WCeuQCpo 33QXsXh4Z2jOcPIVHPeUZJ6SEY0zpy+FbPhqe0l/BI2LcGT5Q+ij0Fl5D5iYj3t4 L8Ln1/yHydSJM2Zq5TzrV7sGBCGtNgor57epz68nwi+lIQVk1IHNSB9Ob+kk0W8i 3Y1+TZwdql+z9D96O5eh73x58GJlTezy63wLzbZIhNoqzjDbdppCkIjhjgxPnEaE VefNu3y1/cBfXXWZdDlKSDqFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBAYrbOGd gdru9vWyU8P56TSwwmAwHwYDVR0jBBgwFoAUk5ZhAhb3UVs6Xa4iH3vkd3KHoyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENjU3LzU4ODk4MTg2QjRD NjExRUVCMUU4NzgwQkM0RjlBRTAyL2s1WmhBaGIzVVZzNlhhNGlIM3ZrZDNLSG95 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvazVaaEFoYjNVVnM2WGE0aUgzdmtkM0tIb3lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE NjU3LzU4ODk4MTg2QjRDNjExRUVCMUU4NzgwQkM0RjlBRTAyL2s1WmhBaGIzVVZz NlhhNGlIM3ZrZDNLSG95QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHh0JtaBjtBrhersXa/uQu6r27JjFhhXD8/U3HVLl3tyjfODtCR6+C8H l7jggiL018SPx+qsQ0m/MEjzVaAaJlDytyURue4SDPywkMp5LASd4fbJ+9kZMpyq 2CpGDBf3o+MxulG+/6dNq+wosHSB6OVzUuj+eQDEMqBBlTMDqdmjGNZ40uONbKcX uEZJQIXhivzOICtWjsPyG8EtSf4s29pv/ZzTBBKf1lNO4+XYTzoLnqVsICrfJ9Ro UJJUxEH1HOMlMt7smblRx1Jmsa4J/ju/Hfydu9Ff4gO5fp9dysP/8/QLbIAp+np/ AT5TSZPYEkx3tUIIe/mDFl7Ohw075E8= -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org