$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json) Hash identifier: 03M6ke5pgefx58txbqCQhKOM2oRzwUhsIMbrW3tVYWo= Subject key identifier: DF:89:0A:88:32:ED:8A:6D:76:12:29:4F:33:D4:31:7D:A2:3D:AD:49 Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft Manifest number: 58 Signing time: Fri 31 May 2024 08:44:37 +0000 Manifest this update: Fri 31 May 2024 08:44:36 +0000 Manifest next update: Fri 07 Jun 2024 08:44:36 +0000 Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: TTN08q/pzxiYwT5XtuL+8pUAADzCXEHTfi1uMB98Fl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Validity Not Before: May 31 08:44:36 2024 GMT Not After : Jun 7 08:44:36 2024 GMT Subject: CN=66598df5-5a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:12:81:42:a0:a6:22:91:6d:83:72:38:59: 75:f0:b7:12:5b:ea:38:c0:29:fe:17:30:ef:54:e9: 59:80:73:b1:30:18:d8:74:e1:cf:f2:0e:21:89:ce: 2b:95:1e:b8:27:bd:a3:58:28:1b:05:fd:1d:84:b1: f0:88:d8:c3:5b:70:87:de:cc:05:ad:3b:20:e5:01: ea:a4:e8:16:0c:bb:2f:8b:9b:30:9b:84:0f:ee:cf: 30:ea:a6:2a:62:8b:7e:ad:4c:91:06:40:e4:e7:80: 28:5e:b6:8b:9a:ae:cd:e9:14:f1:42:8d:36:3d:71: d7:9a:c5:4b:62:54:bc:65:a0:a8:ed:d2:c1:0b:77: fb:a7:3f:af:2e:18:46:5c:8f:d6:f5:70:c3:9c:7d: e3:48:3b:ca:1f:05:83:5a:fd:d6:bf:f5:b4:6e:18: a0:e4:df:98:3a:b4:7f:ca:0c:21:c4:a1:b6:b1:5f: d9:39:e5:a1:a3:bc:08:1f:ab:c1:73:d8:c8:dc:0d: 39:0a:5c:8e:1f:8b:6e:97:de:3b:e8:7a:cd:4a:af: f4:4f:8d:00:3a:4c:e0:21:18:1c:f4:cb:a5:f8:7e: aa:68:3e:3b:e9:94:78:8a:97:fe:79:59:2a:dd:5d: 1b:7c:11:64:75:8d:54:f4:91:99:95:aa:37:1b:f8: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:0A:88:32:ED:8A:6D:76:12:29:4F:33:D4:31:7D:A2:3D:AD:49 X509v3 Authority Key Identifier: keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:d0:c6:c5:18:4e:f1:0b:8a:ca:b9:cc:56:45:9b:d1:f5: d2:57:b6:a6:a2:a9:97:01:90:f2:6b:20:5e:9f:16:ef:4b:44: 78:51:c9:1b:58:b8:9f:06:f5:9c:da:92:6b:be:0a:4e:b5:eb: 32:06:4c:0a:14:b0:14:7e:3e:4b:cb:f1:cd:5c:7e:c0:ee:28: 08:7b:cf:61:94:2a:d6:90:bf:c0:be:d4:0b:a4:e0:e1:aa:01: bc:22:44:28:5a:87:2e:56:a8:4f:78:97:7b:3c:95:87:4d:26: d2:c6:7b:78:78:f8:36:3a:f3:db:bc:e8:aa:73:c2:92:01:41: 46:79:e1:24:bb:b9:46:c8:be:3f:e4:f0:8a:55:76:42:15:01: 25:45:b4:11:eb:71:6d:7a:30:4d:bd:d6:07:9e:49:b6:1f:0f: 4d:82:04:77:8b:e2:86:d3:c9:f9:f6:56:c8:4b:3d:81:e3:09: 8b:74:df:bf:30:11:1f:ec:77:17:4b:2b:91:72:ba:ca:38:09: 59:7e:a6:bd:6f:25:0f:c5:f6:70:69:ac:55:17:1c:fe:92:37: 3d:a1:8b:26:26:62:22:fd:6f:75:12:a8:8f:52:b2:77:5c:6d: 9c:dc:d9:8c:c1:07:91:89:bb:02:5d:57:44:f3:ae:ff:92:43: c4:32:82:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkNFMjExMC8GA1UEBRMoNDgyRDQ4RTNCNjk2MUYxMjA4QzA2NzE1MjRFMDhFOTAz Mzk1RjY1OTAeFw0yNDA1MzEwODQ0MzZaFw0yNDA2MDcwODQ0MzZaMBgxFjAUBgNV BAMTDTY2NTk4ZGY1LTVhMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPUBKBQqCmIpFtg3I4WXXwtxJb6jjAKf4XMO9U6VmAc7EwGNh04c/yDiGJziuV HrgnvaNYKBsF/R2EsfCI2MNbcIfezAWtOyDlAeqk6BYMuy+LmzCbhA/uzzDqpipi i36tTJEGQOTngChetouars3pFPFCjTY9cdeaxUtiVLxloKjt0sELd/unP68uGEZc j9b1cMOcfeNIO8ofBYNa/da/9bRuGKDk35g6tH/KDCHEobaxX9k55aGjvAgfq8Fz 2MjcDTkKXI4fi26X3jvoes1Kr/RPjQA6TOAhGBz0y6X4fqpoPjvplHiKl/55WSrd XRt8EWR1jVT0kZmVqjcb+C/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU34kKiDLt im12EilPM9QxfaI9rUkwHwYDVR0jBBgwFoAUSC1I47aWHxIIwGcVJOCOkDOV9lkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQ0UyLzI0RjdFMjdFOTdD ODExRUU5MTAyODgwQUM0RjlBRTAyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0MxSTQ3YVdIeElJd0djVkpPQ09rRE9WOWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC Q0UyLzI0RjdFMjdFOTdDODExRUU5MTAyODgwQUM0RjlBRTAyL1NDMUk0N2FXSHhJ SXdHY1ZKT0NPa0RPVjlsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+Z0MbFGE7xC4rKucxWRZvR9dJXtqaiqZcBkPJrIF6fFu9LRHhRyRtY uJ8G9Zzakmu+Ck616zIGTAoUsBR+PkvL8c1cfsDuKAh7z2GUKtaQv8C+1Auk4OGq AbwiRChahy5WqE94l3s8lYdNJtLGe3h4+DY689u86KpzwpIBQUZ54SS7uUbIvj/k 8IpVdkIVASVFtBHrcW16ME291geeSbYfD02CBHeL4obTyfn2VshLPYHjCYt0378w ER/sdxdLK5Fyuso4CVl+pr1vJQ/F9nBprFUXHP6SNz2hiyYmYiL9b3USqI9Ssndc bZzc2YzBB5GJuwJdV0Tzrv+SQ8Qygtk= -----END CERTIFICATE-----Generated at Fri May 31 10:42:21 2024 by rpki-client on console-fra.rpki-client.org