$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: kQyejc3mxMfh8CWAJhbrTmu8Ru/ATdgA2T4EyZD4FeQ= Subject key identifier: AB:19:E5:F7:F9:64:6C:0B:49:C6:82:30:52:FF:2C:85:B4:B6:45:B7 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:21:28 +0000 Manifest this update: Sun 19 May 2024 08:21:28 +0000 Manifest next update: Sun 26 May 2024 08:21:28 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: +ySHYBybQgV8aWl152K599o6N72+440yHKsEE1GAIW8=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: UFiTb7vhui76peaVMGbguSnGf17GrZx8kd1IOsd8hbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: May 19 08:21:28 2024 GMT Not After : May 26 08:21:28 2024 GMT Subject: CN=6649b688-8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:09:46:a3:42:37:ef:0d:7e:3b:e0:15:0f: aa:f1:2c:b9:c6:7d:85:af:f8:e6:dc:36:d6:25:8b: db:0f:31:9b:9a:8b:f8:97:6c:a9:53:4e:8f:8b:74: 85:97:e6:c4:41:34:03:1e:53:cf:2c:5c:b8:ba:9a: a7:01:ce:38:1e:07:e9:81:42:6f:7b:78:d5:2a:8e: c4:e4:df:b4:72:da:56:31:83:9d:39:43:6b:61:7b: 01:71:0e:2b:9c:44:f5:48:23:b2:a9:66:67:05:7c: ca:d6:ee:9d:c5:60:96:25:ed:ce:88:b0:41:52:b2: da:3e:50:b4:65:05:75:2d:37:6c:f2:31:04:0a:39: 54:37:d9:fc:4d:aa:3e:df:a3:50:e6:9b:ae:4d:c0: 32:3f:1a:9f:15:9a:43:52:91:a5:a1:61:13:9a:8f: 54:50:ea:f6:d2:e2:bc:fb:e0:7d:dd:bc:a3:96:83: 79:69:31:f4:b6:f7:4e:ea:35:b0:05:aa:8b:7f:42: 28:5c:03:16:8b:70:fc:97:38:fe:25:47:25:db:2b: ad:e4:ac:74:15:83:6c:17:6f:c2:49:ef:9d:b3:69: 7d:d3:80:f1:e1:b2:3d:36:22:86:ff:af:9a:e1:97: 3d:36:88:a7:a9:2d:c9:53:25:86:21:44:9d:e6:bd: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:19:E5:F7:F9:64:6C:0B:49:C6:82:30:52:FF:2C:85:B4:B6:45:B7 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:a5:d7:78:22:6b:81:42:32:59:ed:a6:4a:6b:9b:a2:33: 6e:7c:f3:9a:c6:d7:37:19:1e:65:ab:37:a8:2b:fb:ac:d9:de: c3:45:d9:30:11:6b:b2:c8:af:fb:08:62:f1:ca:84:42:db:b7: e1:c9:31:3a:d4:9e:6a:39:ae:ba:04:98:de:eb:19:5e:22:ac: 00:ba:6a:d7:3e:ac:56:a7:49:1e:b9:3c:33:3d:58:c3:2d:90: db:31:48:f4:17:cc:eb:2e:0f:2e:c0:32:06:c5:46:15:d7:6f: 80:ac:89:53:5f:fa:4b:29:39:b8:56:20:39:69:4f:1b:63:0e: 2c:77:70:44:3f:9e:15:9c:3d:34:fb:6e:53:2a:b6:49:bf:cb: c0:b7:ca:c6:41:5e:67:c9:38:91:b8:d2:3b:38:a5:0b:7f:64: 0c:8d:5c:d5:7d:f3:cd:6a:6e:f4:a7:e6:94:94:1c:41:e9:a9: 09:ab:ff:a8:cb:a4:0a:80:ea:63:81:89:cb:6b:f1:63:ca:85: 97:0d:ea:e6:15:55:08:71:bb:18:d6:66:0c:43:8b:c4:6a:c8: ed:b7:2f:48:ba:ff:73:ea:58:b6:4f:5f:17:cc:2f:c1:3a:ea: fd:66:05:f5:4a:2c:01:7d:ec:25:18:83:c2:1a:ff:70:f2:8d: 5c:63:45:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTg4NTExMC8GA1UEBRMoQUU1OEUzRjMyNEQ5NDZDNjgzRjRBMzhGOEQ0RTFDRDcy NTc0ODMwQTAeFw0yNDA1MTkwODIxMjhaFw0yNDA1MjYwODIxMjhaMBgxFjAUBgNV BAMTDTY2NDliNjg4LThjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/awlGo0I37w1+O+AVD6rxLLnGfYWv+ObcNtYli9sPMZuai/iXbKlTTo+LdIWX 5sRBNAMeU88sXLi6mqcBzjgeB+mBQm97eNUqjsTk37Ry2lYxg505Q2thewFxDiuc RPVII7KpZmcFfMrW7p3FYJYl7c6IsEFSsto+ULRlBXUtN2zyMQQKOVQ32fxNqj7f o1Dmm65NwDI/Gp8VmkNSkaWhYROaj1RQ6vbS4rz74H3dvKOWg3lpMfS2907qNbAF qot/QihcAxaLcPyXOP4lRyXbK63krHQVg2wXb8JJ752zaX3TgPHhsj02Iob/r5rh lz02iKepLclTJYYhRJ3mva7XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqxnl9/lk bAtJxoIwUv8shbS2RbcwHwYDVR0jBBgwFoAUrljj8yTZRsaD9KOPjU4c1yV0gwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxODg1L0RGQTA0MDc4QzlG RDExRUVBNjc3NzkzQkM0RjlBRTAyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmxqajh5VFpSc2FEOUtPUGpVNGMxeVYwZ3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx ODg1L0RGQTA0MDc4QzlGRDExRUVBNjc3NzkzQkM0RjlBRTAyL3Jsamo4eVRaUnNh RDlLT1BqVTRjMXlWMGd3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH98pdd4ImuBQjJZ7aZKa5uiM25885rG1zcZHmWrN6gr+6zZ3sNF2TAR a7LIr/sIYvHKhELbt+HJMTrUnmo5rroEmN7rGV4irAC6atc+rFanSR65PDM9WMMt kNsxSPQXzOsuDy7AMgbFRhXXb4CsiVNf+kspObhWIDlpTxtjDix3cEQ/nhWcPTT7 blMqtkm/y8C3ysZBXmfJOJG40js4pQt/ZAyNXNV9881qbvSn5pSUHEHpqQmr/6jL pAqA6mOBictr8WPKhZcN6uYVVQhxuxjWZgxDi8RqyO23L0i6/3PqWLZPXxfML8E6 6v1mBfVKLAF97CUYg8Ia/3DyjVxjRYY= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org