$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json) Hash identifier: 4s0IVSYMf2TVJLpQ5+jKYCCHk4zIhe+RaB3c4fVsHAQ= Subject key identifier: 8F:6D:C6:57:97:70:BA:06:DE:56:03:05:68:26:24:0B:E6:37:7D:C1 Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48 Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft Manifest number: 293E Signing time: Sat 18 May 2024 17:23:48 +0000 Manifest this update: Sat 18 May 2024 17:23:48 +0000 Manifest next update: Sat 25 May 2024 17:23:48 +0000 Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: Cqkz5CiM5UKuaHyOu6c7aa7KDeEHxuVC3G+JEgII/X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948 Validity Not Before: May 18 17:23:48 2024 GMT Not After : May 25 17:23:48 2024 GMT Subject: CN=6648e424-24cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e2:5a:e8:ff:e0:25:74:27:f8:9e:ca:14:0a: 88:8b:32:05:94:cf:b3:45:0b:6e:84:d5:2d:21:e6: cd:82:1e:02:91:01:af:56:69:af:05:1f:a3:b0:d9: ab:64:28:00:dc:0d:d7:ca:d7:fe:68:6e:8a:46:1e: 38:d6:79:55:80:bb:32:ed:44:8d:24:94:5d:7e:78: d8:5a:7a:91:b4:29:5f:5a:47:fe:e8:b4:35:31:0b: 0b:74:18:92:4d:31:a5:f2:88:64:19:2b:df:08:f5: 9e:e2:d8:9d:e1:de:f3:d0:f3:63:23:be:e9:0d:c0: 92:d0:bb:76:63:ce:3a:ad:3c:e2:2c:92:e7:19:e6: 0b:9f:b2:6d:9b:62:b4:85:ba:c3:eb:11:2b:ab:b9: 4c:00:de:ea:a7:ca:51:7f:bd:bc:c5:61:6f:c2:eb: d8:22:aa:84:3c:e4:66:cf:be:38:d1:8c:d3:6f:c6: 12:64:c4:c4:12:87:72:31:1d:9a:92:4b:29:e4:a8: c4:04:d1:b0:bf:68:e5:bf:da:12:ae:e2:33:bf:0f: 0f:e9:8a:b9:d1:c2:f0:ff:78:16:e7:fe:b1:ad:23: 00:92:20:ae:2f:a6:61:b4:f6:3e:16:73:31:7d:b1: 3b:70:86:5f:4e:6d:5f:da:34:fc:20:84:d4:c4:dd: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6D:C6:57:97:70:BA:06:DE:56:03:05:68:26:24:0B:E6:37:7D:C1 X509v3 Authority Key Identifier: keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:47:55:87:0f:67:07:40:77:9f:31:a5:c7:28:ef:37:92: ba:d8:6f:63:dc:00:80:96:c8:6e:8c:19:6c:01:a2:0d:72:16: 52:11:14:1a:de:6b:4c:db:3d:ec:a3:f3:bc:f3:01:e3:d4:78: 2b:d7:5a:30:14:b6:41:84:b3:f9:ff:f5:1a:d0:b0:ad:ae:7d: 17:18:b5:45:0f:b5:14:c0:f7:fe:05:be:1b:2e:f0:66:51:04: 28:70:fc:76:ec:0d:af:2e:aa:2c:82:f9:8a:3a:d2:95:1c:fb: 34:cd:98:cc:71:3c:c0:34:c8:33:e1:1e:69:07:d6:c6:7f:39: 56:e7:eb:26:c4:fb:d7:80:af:8c:8a:72:e3:93:ee:96:84:86: 60:ed:58:e8:5a:38:d0:d7:1d:ad:48:3c:27:0d:f7:4c:b4:e8: 11:9c:a6:ca:df:78:53:96:ff:8d:99:e8:ae:fa:ed:44:66:fc: 9e:50:44:a8:40:bf:a1:99:df:b3:70:8f:b8:69:16:0a:5c:ab: 5f:0b:89:aa:61:99:bf:6a:0a:5a:77:46:0d:b0:fe:bb:ab:c4: 5c:7e:a3:29:00:13:b1:14:7b:03:eb:4b:d0:31:22:ca:5c:ed: 24:ab:c5:0c:57:04:54:d5:ef:91:33:36:a2:73:4f:a1:9d:97: 8e:a6:35:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKEI0MDBFMjFBQjNEMzI1NzQyREI4Nzc4MzBFQkM0NDA3 NkRGNzA5NDgwHhcNMjQwNTE4MTcyMzQ4WhcNMjQwNTI1MTcyMzQ4WjAYMRYwFAYD VQQDEw02NjQ4ZTQyNC0yNGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+Ja6P/gJXQn+J7KFAqIizIFlM+zRQtuhNUtIebNgh4CkQGvVmmvBR+jsNmr ZCgA3A3Xytf+aG6KRh441nlVgLsy7USNJJRdfnjYWnqRtClfWkf+6LQ1MQsLdBiS TTGl8ohkGSvfCPWe4tid4d7z0PNjI77pDcCS0Lt2Y846rTziLJLnGeYLn7Jtm2K0 hbrD6xErq7lMAN7qp8pRf728xWFvwuvYIqqEPORmz7440YzTb8YSZMTEEodyMR2a kksp5KjEBNGwv2jlv9oSruIzvw8P6Yq50cLw/3gW5/6xrSMAkiCuL6ZhtPY+FnMx fbE7cIZfTm1f2jT8IITUxN3v0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9txleX cLoG3lYDBWgmJAvmN33BMB8GA1UdIwQYMBaAFLQA4hqz0yV0Lbh3gw68RAdt9wlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi90QURpR3JQVEpYUXR1SGVERHJ4RUIyMzND VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBRGlHclBUSlhRdHVIZUREcnhFQjIzM0NVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi90QURpR3JQVEpY UXR1SGVERHJ4RUIyMzNDVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi8EdVhw9nB0B3nzGlxyjvN5K62G9j3ACAlshujBlsAaINchZSERQa 3mtM2z3so/O88wHj1Hgr11owFLZBhLP5//Ua0LCtrn0XGLVFD7UUwPf+Bb4bLvBm UQQocPx27A2vLqosgvmKOtKVHPs0zZjMcTzANMgz4R5pB9bGfzlW5+smxPvXgK+M inLjk+6WhIZg7VjoWjjQ1x2tSDwnDfdMtOgRnKbK33hTlv+Nmeiu+u1EZvyeUESo QL+hmd+zcI+4aRYKXKtfC4mqYZm/agpad0YNsP67q8RcfqMpABOxFHsD60vQMSLK XO0kq8UMVwRU1e+RMzaic0+hnZeOpjVB -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org