$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: 3GnTmiJR2IAAMQ9NGYayAH6b+SV19N0WUdeuaY77LrE= Subject key identifier: 62:35:2A:56:82:7F:C7:DD:B7:47:FA:2C:6F:45:03:4F:0F:EA:5E:2A Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0581 Signing time: Sun 19 May 2024 00:19:13 +0000 Manifest this update: Sun 19 May 2024 00:19:12 +0000 Manifest next update: Sun 26 May 2024 00:19:12 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: V76ms2avwIMPeAtX6N17j/cc5wYKGgdrPG7iNewX7Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: May 19 00:19:12 2024 GMT Not After : May 26 00:19:12 2024 GMT Subject: CN=66494581-a739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:9f:e6:08:4a:93:87:ab:c5:3b:da:a1:ba: 10:e6:38:e6:9b:39:c4:6b:0f:5c:87:57:dd:f8:cc: c0:5d:cf:6d:6b:e2:d4:8e:36:86:fa:ff:9a:74:42: d3:ed:93:d9:d8:40:e3:51:4b:7c:f8:c3:ba:58:85: b5:e0:79:ff:ee:cd:0a:70:82:72:57:5e:ff:d5:91: d0:45:f0:4f:04:6d:58:58:51:63:17:a0:b1:81:fc: 5e:db:1d:7b:37:a0:c4:35:d7:fa:6f:ce:78:4a:65: d5:30:33:db:88:9d:45:dd:de:e6:55:a9:b2:8e:6c: d8:14:88:9d:aa:c5:73:53:c2:c2:34:e7:62:73:93: 9c:77:85:08:fc:0b:c9:54:37:ab:72:32:12:ec:cd: 48:99:08:1d:20:97:04:95:88:e0:67:50:9d:3e:8a: 5c:49:19:40:59:ce:a6:48:f8:74:8a:3f:c5:30:37: 8d:6a:7d:e6:4d:89:10:1c:72:91:ac:1b:26:60:a8: 18:82:14:98:d3:3d:d4:ed:3a:63:ae:de:5c:86:f1: ad:08:d9:97:76:5d:25:bd:0b:bc:1f:ce:1a:94:c2: 30:de:e3:85:d0:8a:a3:99:79:be:c6:e4:53:33:84: af:93:ee:bf:21:9a:08:6c:8d:2a:83:64:38:44:04: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:2A:56:82:7F:C7:DD:B7:47:FA:2C:6F:45:03:4F:0F:EA:5E:2A X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:60:00:5b:57:89:6b:c4:7b:5a:80:13:a0:ae:de:26:c8:e9: 6e:95:87:33:1a:4d:12:fa:dc:1f:12:8c:43:10:e0:eb:54:8c: 9b:ba:ba:6d:2c:b7:a9:d9:4a:8d:61:fd:20:fc:8a:3f:a1:25: 7b:c6:85:7a:5d:a3:23:9a:e0:95:14:97:2b:60:18:58:cd:bf: 19:05:27:44:d6:e3:fb:fe:d8:34:01:83:20:68:ba:30:37:86: b0:0a:4d:17:ab:9f:d5:e7:3c:bb:65:79:15:dc:8e:38:ec:98: 3e:68:d9:3f:89:c4:d7:a0:06:60:5d:86:30:cf:80:a1:ed:45: 0d:b3:03:8b:86:2f:da:d8:94:80:7f:89:10:09:01:26:36:ee: a1:57:41:be:28:52:bc:01:4b:5e:83:1f:83:5b:9e:0a:64:0e: 59:64:1d:23:b0:d5:8d:31:0e:ca:b8:8f:02:e6:c8:5d:e4:00: cb:08:c7:5c:fd:33:5c:b1:43:fb:53:b2:8f:6c:33:8c:8c:46: 99:f6:54:c1:87:3a:fc:56:11:7d:c1:eb:54:27:20:a6:04:c7: 00:35:55:6c:36:49:7b:a0:d4:ea:cf:58:40:46:90:8e:04:03: 8e:51:46:ed:a0:b6:e0:a7:ed:d4:f3:c4:4d:21:d1:51:2f:cb: ca:83:7c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjQwNTE5MDAxOTEyWhcNMjQwNTI2MDAxOTEyWjAYMRYwFAYD VQQDEw02NjQ5NDU4MS1hNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmmf5ghKk4erxTvaoboQ5jjmmznEaw9ch1fd+MzAXc9ta+LUjjaG+v+adELT 7ZPZ2EDjUUt8+MO6WIW14Hn/7s0KcIJyV17/1ZHQRfBPBG1YWFFjF6Cxgfxe2x17 N6DENdf6b854SmXVMDPbiJ1F3d7mVamyjmzYFIidqsVzU8LCNOdic5Ocd4UI/AvJ VDercjIS7M1ImQgdIJcElYjgZ1CdPopcSRlAWc6mSPh0ij/FMDeNan3mTYkQHHKR rBsmYKgYghSY0z3U7Tpjrt5chvGtCNmXdl0lvQu8H84alMIw3uOF0IqjmXm+xuRT M4Svk+6/IZoIbI0qg2Q4RARjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI1KlaC f8fdt0f6LG9FA08P6l4qMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACYABbV4lrxHtagBOgrt4myOlulYczGk0S+twfEoxDEODrVIyburpt LLep2UqNYf0g/Io/oSV7xoV6XaMjmuCVFJcrYBhYzb8ZBSdE1uP7/tg0AYMgaLow N4awCk0Xq5/V5zy7ZXkV3I447Jg+aNk/icTXoAZgXYYwz4Ch7UUNswOLhi/a2JSA f4kQCQEmNu6hV0G+KFK8AUtegx+DW54KZA5ZZB0jsNWNMQ7KuI8C5shd5ADLCMdc /TNcsUP7U7KPbDOMjEaZ9lTBhzr8VhF9wetUJyCmBMcANVVsNkl7oNTqz1hARpCO BAOOUUbtoLbgp+3U88RNIdFRL8vKg3w7 -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org