$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: gf9E00MtScU3UaXtYLabr4z26zVS+O3pehw5kxEEc60= Subject key identifier: 4B:C6:6F:25:37:D4:9C:13:A9:31:14:04:BA:1C:19:56:D2:E7:02:B0 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 012B Signing time: Sun 19 May 2024 05:02:41 +0000 Manifest this update: Sun 19 May 2024 05:02:41 +0000 Manifest next update: Sun 26 May 2024 05:02:41 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: f7DGVSfDlRNPmDzly5g0BFyBEG/eDtdQ+GyVvXxNJ+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: May 19 05:02:41 2024 GMT Not After : May 26 05:02:41 2024 GMT Subject: CN=664987f1-9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:5b:e9:be:f1:c5:ff:05:1f:7a:f6:21:24: 23:5e:eb:5d:b7:fa:63:a4:b7:fd:16:b3:18:24:98: 69:29:b7:94:4b:b7:8d:54:6b:15:36:e5:4b:68:3f: 2a:00:96:4b:c1:28:65:8b:d6:aa:f1:91:87:8c:d5: ee:05:04:cf:83:30:90:18:47:4f:34:ab:d9:04:c3: 7d:da:4d:85:19:cd:cc:71:45:3d:32:bf:ef:32:a0: 68:32:17:99:78:a9:b8:3b:07:a6:54:aa:0d:34:9f: 5c:ab:d4:85:f0:3d:1a:a8:5c:a5:91:1a:9a:08:b1: d0:2e:0a:a2:bf:ba:3a:82:da:56:77:1a:72:fe:db: 0e:4d:bb:46:1a:77:59:ef:f9:0f:9b:e9:83:60:ab: ae:d0:e5:36:50:fd:93:30:60:63:af:f9:fd:9e:44: 56:af:39:f2:af:15:2c:e3:95:7d:71:61:88:65:b1: 55:e0:01:a5:94:20:ad:b8:17:2f:cb:67:c1:79:3a: 95:c0:ef:38:9a:27:1b:18:32:d0:96:75:de:54:a4: 18:91:0c:1a:14:2e:31:90:97:11:bd:33:fa:55:b3: 6c:a6:e9:e5:e8:ba:4b:ff:90:56:37:18:d1:b5:ae: 26:ee:d0:7b:5d:c2:99:16:dd:51:f7:e2:c3:a9:8b: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:6F:25:37:D4:9C:13:A9:31:14:04:BA:1C:19:56:D2:E7:02:B0 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c8:41:52:bd:ef:8c:33:d8:a7:52:40:24:11:ce:61:35:e5: 02:dd:30:02:3a:b8:f1:d2:fe:de:c0:e4:34:68:89:13:2d:a6: 3b:27:30:e9:a7:63:77:c6:81:2f:e1:0f:ba:82:66:82:d5:39: 21:40:d7:5d:fe:1b:91:24:07:7b:76:fa:cc:ce:60:36:86:fd: 36:3f:f0:42:c8:49:11:e2:e1:12:94:86:b7:69:23:03:25:e9: 6b:49:f0:3e:00:3f:2e:3b:17:91:b3:e7:ef:a8:54:da:1a:16: 08:80:0e:1f:8f:c5:c9:a3:1f:7f:e1:9a:b6:a1:c5:38:da:cc: 4a:b3:5d:8d:73:ba:dd:07:a1:99:c6:1a:9a:14:af:f4:22:67: dd:3a:f0:23:67:42:89:54:3e:e6:fe:43:0c:f3:81:3c:74:43: 2a:d8:eb:00:90:f9:82:6c:a4:43:e3:92:62:eb:c4:cf:45:94: ca:8a:d5:6a:57:aa:1f:9b:02:9f:ee:64:f5:24:6c:85:6d:65: 63:f6:ad:83:05:05:cf:ec:30:91:f3:3f:bf:97:f6:fe:1f:27: ff:cd:95:04:a0:66:49:ef:9c:7e:2a:4e:5b:2c:89:1c:41:cf: 64:5b:a0:99:54:14:7b:a5:1e:05:30:b3:6b:af:29:9d:9a:2e: 2f:5d:73:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjQwNTE5MDUwMjQxWhcNMjQwNTI2MDUwMjQxWjAYMRYwFAYD VQQDEw02NjQ5ODdmMS05YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqtb6b7xxf8FH3r2ISQjXutdt/pjpLf9FrMYJJhpKbeUS7eNVGsVNuVLaD8q AJZLwShli9aq8ZGHjNXuBQTPgzCQGEdPNKvZBMN92k2FGc3McUU9Mr/vMqBoMheZ eKm4OwemVKoNNJ9cq9SF8D0aqFylkRqaCLHQLgqiv7o6gtpWdxpy/tsOTbtGGndZ 7/kPm+mDYKuu0OU2UP2TMGBjr/n9nkRWrznyrxUs45V9cWGIZbFV4AGllCCtuBcv y2fBeTqVwO84micbGDLQlnXeVKQYkQwaFC4xkJcRvTP6VbNspunl6LpL/5BWNxjR ta4m7tB7XcKZFt1R9+LDqYs9OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvGbyU3 1JwTqTEUBLocGVbS5wKwMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWyEFSve+MM9inUkAkEc5hNeUC3TACOrjx0v7ewOQ0aIkTLaY7JzDp p2N3xoEv4Q+6gmaC1TkhQNdd/huRJAd7dvrMzmA2hv02P/BCyEkR4uESlIa3aSMD JelrSfA+AD8uOxeRs+fvqFTaGhYIgA4fj8XJox9/4Zq2ocU42sxKs12Nc7rdB6GZ xhqaFK/0ImfdOvAjZ0KJVD7m/kMM84E8dEMq2OsAkPmCbKRD45Ji68TPRZTKitVq V6ofmwKf7mT1JGyFbWVj9q2DBQXP7DCR8z+/l/b+Hyf/zZUEoGZJ75x+Kk5bLIkc Qc9kW6CZVBR7pR4FMLNrrymdmi4vXXMq -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org