$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft File: S36_c0WWAv2-dyvz4uxQsutKf2E.mft (raw, json) Hash identifier: 5CqPtRx2xcUW2QdaLvScLwULbrmQcOn/kTkOycZgcQo= Subject key identifier: 1E:CB:78:E8:33:B2:C0:3C:B0:C0:D4:FA:F6:0E:63:34:14:C5:52:D3 Authority key identifier: 4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 Certificate issuer: /CN=A91754C0/serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft Manifest number: 36 Signing time: Fri 31 May 2024 09:15:34 +0000 Manifest this update: Fri 31 May 2024 09:15:34 +0000 Manifest next update: Fri 07 Jun 2024 09:15:33 +0000 Files and hashes: 1: S36_c0WWAv2-dyvz4uxQsutKf2E.crl (hash: u3Gdc8uypWW3dglwYh4g7IvygmFGzH5LMpAKufjVotk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0/serialNumber=4B7EBF73459602FDBE772BF3E2EC50B2EB4A7F61 Validity Not Before: May 31 09:15:34 2024 GMT Not After : Jun 7 09:15:33 2024 GMT Subject: CN=66599536-8866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:59:95:8d:9c:f4:d5:fa:0a:66:03:8d:41: 55:f9:75:fc:03:c4:1c:9f:28:f8:60:64:80:78:44: ef:7b:9a:17:33:fa:cf:df:a6:29:18:3d:27:8e:c2: be:51:e6:b8:39:7c:24:21:bd:36:af:90:bb:74:4b: de:6c:64:cf:f0:72:f2:03:0e:ee:6c:03:60:0a:ae: c8:a2:42:52:8c:78:b9:c4:d1:e9:cf:ad:0d:7d:a1: e3:48:e0:a4:41:bd:cc:eb:ae:5b:c0:11:4c:b7:03: ca:5d:3b:7f:18:f5:07:db:c3:8d:22:25:5b:7c:e6: 3e:c1:64:63:28:3e:08:3a:9c:52:51:b6:13:e7:4d: fb:57:38:f9:bb:07:79:7e:3d:54:2f:9d:47:6c:9a: 63:c9:68:83:8b:08:5f:f2:40:8f:ee:d2:bc:af:3d: 6e:47:15:1a:45:28:93:3c:86:b1:18:7f:4e:04:64: d7:21:b6:86:5b:ee:3e:0b:3c:3a:c7:ad:32:1f:ba: be:7f:88:74:a1:d0:12:b1:d3:ea:c9:23:5a:3a:21: f4:5c:16:20:cf:59:d9:b6:25:2f:5a:ed:71:4f:bb: cd:01:53:ea:fe:1a:db:ce:47:3e:70:a8:40:4f:66: ee:a9:2f:15:34:8e:b3:46:e4:06:90:e7:48:c6:5f: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CB:78:E8:33:B2:C0:3C:B0:C0:D4:FA:F6:0E:63:34:14:C5:52:D3 X509v3 Authority Key Identifier: keyid:4B:7E:BF:73:45:96:02:FD:BE:77:2B:F3:E2:EC:50:B2:EB:4A:7F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S36_c0WWAv2-dyvz4uxQsutKf2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/086C1C82CCBC11EE8A0F7748C4F9AE02/S36_c0WWAv2-dyvz4uxQsutKf2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5a:c8:e9:09:84:eb:44:f3:2c:8d:4f:cd:10:66:cd:9e:bf: 4a:bd:4e:4b:53:2a:2b:1d:d4:2e:8c:f9:f7:8d:d8:5f:28:a9: e6:cb:41:34:d3:53:8e:b2:2d:19:3d:28:c0:7b:7b:e7:ab:91: a1:f6:42:02:3e:90:f0:ce:59:6d:e3:3a:07:8f:15:bf:6c:8c: be:b5:b3:ef:f8:86:37:68:2b:34:34:b6:11:fb:f0:d2:bd:68: bb:08:77:56:65:27:2b:6c:74:03:2f:48:b8:5f:2b:a1:8e:12: 37:ef:0a:a6:8b:66:c8:08:fa:2c:3e:64:62:9a:21:91:51:8a: f0:23:05:bf:4f:bc:78:b2:8c:e8:ac:58:c4:93:e5:d4:cb:e7: 29:d4:05:47:9f:a7:15:b1:67:34:b6:31:f4:1a:fa:31:fd:2e: 3a:70:5a:13:3d:7e:42:64:b9:4c:82:45:f2:18:7d:1e:76:33: 03:b1:92:30:36:44:3a:fb:e3:f9:2e:00:b6:c2:af:2e:e4:a7: 09:e3:8b:65:f9:b3:05:70:aa:fe:ae:77:36:7b:59:ea:18:35: 8f:d0:07:9a:93:83:06:2f:2e:5c:4f:79:4b:e8:97:ab:fd:d9: f6:b1:ef:15:d1:f1:7a:2f:0d:1b:d7:34:f3:13:ce:28:b6:72: 3b:44:ea:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTRDMDExMC8GA1UEBRMoNEI3RUJGNzM0NTk2MDJGREJFNzcyQkYzRTJFQzUwQjJF QjRBN0Y2MTAeFw0yNDA1MzEwOTE1MzRaFw0yNDA2MDcwOTE1MzNaMBgxFjAUBgNV BAMTDTY2NTk5NTM2LTg4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxYFmVjZz01foKZgONQVX5dfwDxByfKPhgZIB4RO97mhcz+s/fpikYPSeOwr5R 5rg5fCQhvTavkLt0S95sZM/wcvIDDu5sA2AKrsiiQlKMeLnE0enPrQ19oeNI4KRB vczrrlvAEUy3A8pdO38Y9Qfbw40iJVt85j7BZGMoPgg6nFJRthPnTftXOPm7B3l+ PVQvnUdsmmPJaIOLCF/yQI/u0ryvPW5HFRpFKJM8hrEYf04EZNchtoZb7j4LPDrH rTIfur5/iHSh0BKx0+rJI1o6IfRcFiDPWdm2JS9a7XFPu80BU+r+GtvORz5wqEBP Zu6pLxU0jrNG5AaQ50jGXxUXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHst46DOy wDywwNT69g5jNBTFUtMwHwYDVR0jBBgwFoAUS36/c0WWAv2+dyvz4uxQsutKf2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NEMwLzA4NkMxQzgyQ0NC QzExRUU4QTBGNzc0OEM0RjlBRTAyL1MzNl9jMFdXQXYyLWR5dno0dXhRc3V0S2Yy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzM2X2MwV1dBdjItZHl2ejR1eFFzdXRLZjJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 NEMwLzA4NkMxQzgyQ0NCQzExRUU4QTBGNzc0OEM0RjlBRTAyL1MzNl9jMFdXQXYy LWR5dno0dXhRc3V0S2YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtayOkJhOtE8yyNT80QZs2ev0q9TktTKisd1C6M+feN2F8oqebLQTTT U46yLRk9KMB7e+erkaH2QgI+kPDOWW3jOgePFb9sjL61s+/4hjdoKzQ0thH78NK9 aLsId1ZlJytsdAMvSLhfK6GOEjfvCqaLZsgI+iw+ZGKaIZFRivAjBb9PvHiyjOis WMST5dTL5ynUBUefpxWxZzS2MfQa+jH9LjpwWhM9fkJkuUyCRfIYfR52MwOxkjA2 RDr74/kuALbCry7kpwnji2X5swVwqv6udzZ7WeoYNY/QB5qTgwYvLlxPeUvol6v9 2fax7xXR8XovDRvXNPMTzii2cjtE6qU= -----END CERTIFICATE-----Generated at Fri May 31 10:01:47 2024 by rpki-client on console-ams.rpki-client.org