$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: Qa7clBqXlg/6bx6o+H6NhHOxJjdH8xSco7ju8NluBb0= Subject key identifier: 0A:43:A7:3F:ED:BA:18:78:60:00:2B:38:21:81:E7:5D:B1:5C:E4:AF Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 1867 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 1867 Signing time: Sat 18 May 2024 16:54:11 +0000 Manifest this update: Sat 18 May 2024 16:54:11 +0000 Manifest next update: Sat 25 May 2024 16:54:11 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: 5Xq0Mr0l0dM8FSaonumfmxK3Wo8Sosao4A8qB8LPK6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6247 (0x1867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: May 18 16:54:11 2024 GMT Not After : May 25 16:54:11 2024 GMT Subject: CN=6648dd33-ef56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:b3:6f:82:7d:26:0e:9e:2d:e3:99:6c:92: 33:72:54:37:53:74:e6:a2:e3:c2:a2:a8:ec:f9:a5: 87:86:0c:fa:0e:17:34:b4:f2:84:c7:fd:14:ed:03: 65:ff:cf:1a:56:32:a5:6d:8a:45:8e:ab:b3:3f:b8: ff:63:6a:5d:be:25:ae:a3:76:08:6d:d3:6e:52:13: 0f:ef:4f:71:80:5b:88:1c:6a:c8:dc:9d:ca:c5:84: 4b:9f:b8:36:e2:0c:c6:8f:d7:75:3e:cc:05:14:fa: 03:c1:59:d5:42:e0:cd:c3:85:35:a9:ab:e9:9a:13: f7:1e:76:de:c9:ee:74:11:14:35:09:75:4d:e5:77: aa:98:f1:06:e3:71:25:5a:54:a4:a2:2b:d7:4d:ab: 6f:27:58:9e:82:2b:1e:49:c6:d6:34:8d:8b:ef:cb: 8b:16:03:35:b5:bd:50:4b:f8:e8:2b:86:d5:2e:60: a8:5c:4f:66:57:3d:37:a7:11:63:01:54:36:96:76: 36:47:8c:79:28:f0:59:47:db:d1:91:db:fb:3a:42: 42:fe:41:6f:b5:9e:66:9e:e5:6f:6b:6b:84:31:25: c1:ef:b0:fb:cc:4d:ab:3c:dd:c1:23:fe:97:8f:81: be:cd:53:70:73:25:c9:5e:77:59:94:d4:92:e3:af: d6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:43:A7:3F:ED:BA:18:78:60:00:2B:38:21:81:E7:5D:B1:5C:E4:AF X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:89:59:c8:6d:6a:55:c6:41:3f:56:34:88:8e:f6:7c:ba:c9: b6:7c:08:34:21:62:03:ee:ee:36:05:bc:0b:51:12:9f:b0:2b: b4:7a:d8:b8:65:7e:3e:b2:3e:d8:da:cf:7b:2b:5e:1e:a9:d6: d4:14:0b:6c:aa:1a:18:58:6a:04:25:42:1f:83:bc:4b:8d:7e: 38:d7:93:b1:ee:eb:7d:03:e6:68:87:37:bd:5a:f8:05:7c:9f: dc:a6:07:7c:ae:19:1f:d9:58:6e:b7:15:63:57:8e:7c:9a:5b: 55:b8:48:3f:84:f3:02:70:1d:7b:01:dd:83:25:4c:c4:9e:85: c0:6b:8f:72:41:fa:74:bc:bc:c2:3a:35:c7:58:ad:d6:00:3e: 18:58:9a:03:d5:fe:25:c1:f2:04:d4:63:75:94:d3:53:18:39: 02:da:43:9d:83:4b:79:ac:f8:64:a4:a3:0e:05:21:a5:da:06: 23:76:b8:f5:fb:45:40:6f:fc:4f:1e:52:d1:71:ef:6d:36:55: e7:fc:65:8d:6a:95:a9:e7:27:4f:db:42:a1:10:96:01:e2:f2: 43:4d:13:ae:52:c8:ff:82:e7:81:f6:f2:26:05:79:af:c9:39: fa:c1:71:cd:f1:d8:cc:86:8f:78:24:37:d8:ad:1e:8a:75:06: 5f:4d:61:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjQwNTE4MTY1NDExWhcNMjQwNTI1MTY1NDExWjAYMRYwFAYD VQQDEw02NjQ4ZGQzMy1lZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6Ozb4J9Jg6eLeOZbJIzclQ3U3TmouPCoqjs+aWHhgz6Dhc0tPKEx/0U7QNl /88aVjKlbYpFjquzP7j/Y2pdviWuo3YIbdNuUhMP709xgFuIHGrI3J3KxYRLn7g2 4gzGj9d1PswFFPoDwVnVQuDNw4U1qavpmhP3Hnbeye50ERQ1CXVN5XeqmPEG43El WlSkoivXTatvJ1iegiseScbWNI2L78uLFgM1tb1QS/joK4bVLmCoXE9mVz03pxFj AVQ2lnY2R4x5KPBZR9vRkdv7OkJC/kFvtZ5mnuVva2uEMSXB77D7zE2rPN3BI/6X j4G+zVNwcyXJXndZlNSS46/WUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApDpz/t uhh4YAArOCGB512xXOSvMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCviVnIbWpVxkE/VjSIjvZ8usm2fAg0IWID7u42BbwLURKfsCu0eti4 ZX4+sj7Y2s97K14eqdbUFAtsqhoYWGoEJUIfg7xLjX4415Ox7ut9A+Zohze9WvgF fJ/cpgd8rhkf2VhutxVjV458mltVuEg/hPMCcB17Ad2DJUzEnoXAa49yQfp0vLzC OjXHWK3WAD4YWJoD1f4lwfIE1GN1lNNTGDkC2kOdg0t5rPhkpKMOBSGl2gYjdrj1 +0VAb/xPHlLRce9tNlXn/GWNapWp5ydP20KhEJYB4vJDTROuUsj/gueB9vImBXmv yTn6wXHN8djMho94JDfYrR6KdQZfTWHz -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org