$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: 8E194WZ9qFCNc/u6cv66PTgfZBzapfmThna8lBEUs3E= Subject key identifier: 74:56:93:DE:DF:90:33:CE:F0:7B:09:3C:8C:69:85:C4:8A:9D:77:EB Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: 43 Signing time: Sun 19 May 2024 08:05:26 +0000 Manifest this update: Sun 19 May 2024 08:05:25 +0000 Manifest next update: Sun 26 May 2024 08:05:25 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: bWVASAwllA7oI19qPDVe9WuyPfplInJ42jBoZpeobvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: May 19 08:05:25 2024 GMT Not After : May 26 08:05:25 2024 GMT Subject: CN=6649b2c6-9b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c2:5a:b2:58:9a:e9:02:48:c4:41:ec:59:de: 90:b0:e9:3a:2c:1b:37:fc:e9:3b:69:4a:d7:7a:ab: fd:39:83:b5:27:23:2e:45:f3:1c:f6:88:18:90:f0: 57:52:9e:b4:da:e8:5d:f4:42:c2:ea:4e:1e:15:dc: 0b:38:59:c3:4d:f4:62:9c:42:03:ed:e7:d0:89:04: 67:b5:aa:5c:a7:dc:25:7d:d5:bf:12:6c:b9:40:26: 1a:a5:e0:03:0f:68:cd:a6:72:b3:2c:f6:0a:bb:90: 28:0d:a4:4f:cb:35:2d:25:04:55:93:46:d6:24:fe: 7b:55:b8:0b:63:7e:2a:64:02:51:b6:ef:77:f0:ba: 59:62:3e:49:42:5b:f2:53:72:a2:67:fb:82:25:00: 6f:e1:0c:2c:22:0d:c4:87:d3:77:9e:dc:b0:68:3e: 01:47:4f:83:21:c6:bb:91:0e:2b:a0:a7:8a:a3:bb: 6e:e7:8a:df:f7:b0:d6:85:01:94:6b:e0:a8:b0:af: 94:74:ca:26:b9:24:ae:20:e6:39:ce:37:a9:ea:0e: ca:54:db:59:58:5a:b4:e8:c0:b1:1c:48:68:c5:aa: 8f:17:b5:a1:d9:e7:70:5c:30:6e:d6:85:c3:b9:4c: 10:f9:51:82:2b:ec:06:50:5e:c3:ea:88:c2:a3:78: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:93:DE:DF:90:33:CE:F0:7B:09:3C:8C:69:85:C4:8A:9D:77:EB X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:97:97:36:78:58:57:1f:11:52:3d:03:dc:f3:a1:9b:2a:2e: 00:24:bc:ba:f5:eb:95:ea:5b:ac:c2:64:d3:e9:c2:e8:f2:7f: ea:d5:f2:8d:67:44:3f:59:99:32:9b:c1:cb:01:86:55:8b:6e: 4d:a5:f1:34:79:3c:07:f6:82:28:e8:ca:60:a1:31:83:39:d1: 91:71:6b:4f:76:0a:4e:ca:1a:8f:e7:3b:ea:ff:84:11:4a:cb: 25:f8:36:0c:b8:64:0a:93:9f:0f:7e:3a:0e:ba:8c:de:a3:18: 19:98:11:15:58:35:b3:d4:6d:c1:fb:09:c4:00:6c:81:bb:a8: 6e:39:80:c1:d8:90:8a:59:bb:6a:82:a1:e2:16:cb:b4:13:2a: 00:5c:5f:17:3e:e2:43:ef:08:33:63:87:25:77:ba:3f:f5:b3: 8c:d6:5d:8c:c9:2d:89:75:e9:6f:2e:ce:fb:a2:c4:a9:e8:ac: c2:f4:f6:60:18:e3:72:02:35:69:b0:70:ba:56:f3:8f:29:75: b4:5d:6e:a5:6f:93:ef:88:8d:74:5c:ca:6f:11:42:d7:e4:82: 2a:ab:7b:a1:72:04:cf:99:42:1c:4b:08:09:cd:5f:47:44:8f: ee:82:f9:16:a5:7e:ef:a2:7e:53:b0:9d:14:c1:1b:d4:9d:ee: 1b:91:29:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjMwQzExMC8GA1UEBRMoNTJCM0U4M0IxNjIxQUZCM0RDQ0YwQUNGNjdGMjdFRTBC MUQ2QzgzNjAeFw0yNDA1MTkwODA1MjVaFw0yNDA1MjYwODA1MjVaMBgxFjAUBgNV BAMTDTY2NDliMmM2LTliN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnwlqyWJrpAkjEQexZ3pCw6TosGzf86TtpStd6q/05g7UnIy5F8xz2iBiQ8FdS nrTa6F30QsLqTh4V3As4WcNN9GKcQgPt59CJBGe1qlyn3CV91b8SbLlAJhql4AMP aM2mcrMs9gq7kCgNpE/LNS0lBFWTRtYk/ntVuAtjfipkAlG273fwulliPklCW/JT cqJn+4IlAG/hDCwiDcSH03ee3LBoPgFHT4MhxruRDiugp4qju27nit/3sNaFAZRr 4Kiwr5R0yia5JK4g5jnON6nqDspU21lYWrTowLEcSGjFqo8XtaHZ53BcMG7WhcO5 TBD5UYIr7AZQXsPqiMKjeGfNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdFaT3t+Q M87wewk8jGmFxIqdd+swHwYDVR0jBBgwFoAUUrPoOxYhr7PczwrPZ/J+4LHWyDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCMzBDLzlBODc1NDNBQjA1 RTExRUU5N0M3OEI3NUM0RjlBRTAyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXJQb094WWhyN1BjendyUFpfSi00TEhXeURZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC MzBDLzlBODc1NDNBQjA1RTExRUU5N0M3OEI3NUM0RjlBRTAyL1VyUG9PeFlocjdQ Y3p3clBaX0otNExIV3lEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2XlzZ4WFcfEVI9A9zzoZsqLgAkvLr165XqW6zCZNPpwujyf+rV8o1n RD9ZmTKbwcsBhlWLbk2l8TR5PAf2gijoymChMYM50ZFxa092Ck7KGo/nO+r/hBFK yyX4Ngy4ZAqTnw9+Og66jN6jGBmYERVYNbPUbcH7CcQAbIG7qG45gMHYkIpZu2qC oeIWy7QTKgBcXxc+4kPvCDNjhyV3uj/1s4zWXYzJLYl16W8uzvuixKnorML09mAY 43ICNWmwcLpW848pdbRdbqVvk++IjXRcym8RQtfkgiqre6FyBM+ZQhxLCAnNX0dE j+6C+Ralfu+iflOwnRTBG9Sd7huRKfw= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org