$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: YrMXO8r0n/toGa7GwR6yolw7057b24L4sHZ4E6nD90c= Subject key identifier: E0:21:C3:14:52:30:3C:62:02:A6:72:6E:E7:74:AA:98:64:BA:6F:E9 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 0375 Signing time: Sun 19 May 2024 02:45:35 +0000 Manifest this update: Sun 19 May 2024 02:45:34 +0000 Manifest next update: Sun 26 May 2024 02:45:34 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: dUgHTw25ckKLGnikYTlUB+OBfzzZEqruZediQGLLx1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: May 19 02:45:34 2024 GMT Not After : May 26 02:45:34 2024 GMT Subject: CN=664967cf-0c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:c7:03:4d:f9:6b:b3:cf:dd:18:99:9e:15: bd:1a:47:15:0c:44:c4:2e:35:d9:b2:0b:be:7a:22: 75:9a:2b:81:64:d2:37:05:7d:30:30:1c:05:a1:f1: d6:0e:dd:2a:13:fe:3b:8f:4d:71:64:96:7d:d1:72: 5d:76:7d:b0:0b:3c:d3:36:45:28:e8:ea:ee:89:e4: a0:40:31:2c:ee:69:bd:33:6d:91:18:aa:c6:b1:ee: 4e:ea:6b:b4:db:65:a2:38:ee:93:f3:30:86:f5:7c: e2:00:82:8e:01:7e:de:dc:bc:2b:65:1c:db:ac:2b: 61:2c:7a:86:23:39:4d:63:73:e4:69:cb:0c:c1:06: 7e:6e:93:9c:5f:ce:da:87:29:fc:b2:b6:c4:48:70: 7d:a3:8e:8a:7c:31:b5:9c:21:46:6c:32:9a:a1:ca: ab:59:f6:4f:6e:6a:66:25:5c:98:fd:81:d0:32:21: df:7e:45:24:3d:5f:8c:74:dc:33:41:e6:cf:ea:80: 4d:1b:a8:93:ea:9a:a5:48:d5:25:42:1a:c4:c9:f8: 1c:87:ad:40:9f:ac:66:88:6b:b6:b2:70:f8:3a:1b: 6a:77:6e:e5:bb:f3:2c:4e:43:4d:11:86:81:84:32: 56:fb:32:31:8c:95:cd:71:c1:f0:f8:69:0c:1f:be: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:C3:14:52:30:3C:62:02:A6:72:6E:E7:74:AA:98:64:BA:6F:E9 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:ec:39:c9:9c:da:3d:e7:10:56:d6:f2:f0:86:33:3c:11: 04:d9:d2:01:56:d1:94:15:c8:5d:7d:db:6b:b5:8d:39:cb:ff: 08:c5:00:2f:ff:28:fc:4a:16:0c:a0:b0:ab:8b:15:dd:3f:6a: 34:a1:e6:e0:de:47:ce:a4:6b:e0:e6:88:59:4e:d3:7e:ef:8d: 29:7b:63:e3:78:a9:4d:31:50:d1:e8:c3:53:87:83:6f:6b:82: 16:6b:77:85:47:fd:ce:d0:78:4a:d5:40:d1:da:06:6a:2f:c8: 69:d3:c7:e3:8d:0c:df:9e:1a:d5:47:bf:32:f7:0c:6a:2d:c4: 27:64:4c:8a:8c:bd:62:e5:b1:29:80:72:77:03:4f:34:2c:65: ef:60:56:c2:32:35:2c:e9:83:45:9a:b3:d5:a8:7a:1e:7b:11: 6f:86:60:54:49:1d:e2:ce:54:a5:67:f5:1e:c7:d3:1f:06:bc: 22:92:be:15:b1:cb:a5:71:4c:79:df:03:68:40:dc:ff:5f:cd: e8:a6:81:13:8e:8d:7f:e2:a0:54:e5:ab:4f:74:e4:67:ad:7a: b9:82:ab:ce:fd:91:4d:99:3f:f0:5a:47:eb:35:cc:de:75:f6: 6d:6b:26:32:f0:2c:a7:d1:9b:d6:af:4b:6b:1c:10:86:28:35: 28:7e:79:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjQwNTE5MDI0NTM0WhcNMjQwNTI2MDI0NTM0WjAYMRYwFAYD VQQDEw02NjQ5NjdjZi0wYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIjHA035a7PP3RiZnhW9GkcVDETELjXZsgu+eiJ1miuBZNI3BX0wMBwFofHW Dt0qE/47j01xZJZ90XJddn2wCzzTNkUo6OruieSgQDEs7mm9M22RGKrGse5O6mu0 22WiOO6T8zCG9XziAIKOAX7e3LwrZRzbrCthLHqGIzlNY3PkacsMwQZ+bpOcX87a hyn8srbESHB9o46KfDG1nCFGbDKaocqrWfZPbmpmJVyY/YHQMiHffkUkPV+MdNwz QebP6oBNG6iT6pqlSNUlQhrEyfgch61An6xmiGu2snD4Ohtqd27lu/MsTkNNEYaB hDJW+zIxjJXNccHw+GkMH74SMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAhwxRS MDxiAqZybud0qphkum/pMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIZew5yZzaPecQVtby8IYzPBEE2dIBVtGUFchdfdtrtY05y/8IxQAv /yj8ShYMoLCrixXdP2o0oebg3kfOpGvg5ohZTtN+740pe2PjeKlNMVDR6MNTh4Nv a4IWa3eFR/3O0HhK1UDR2gZqL8hp08fjjQzfnhrVR78y9wxqLcQnZEyKjL1i5bEp gHJ3A080LGXvYFbCMjUs6YNFmrPVqHoeexFvhmBUSR3izlSlZ/Uex9MfBrwikr4V sculcUx53wNoQNz/X83opoETjo1/4qBU5atPdORnrXq5gqvO/ZFNmT/wWkfrNcze dfZtayYy8Cyn0ZvWr0trHBCGKDUofnnb -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org