$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft File: pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json) Hash identifier: hAJCMIGs72RjpfbW7griJsiuR8KvNrBHdw6RBwxAwLk= Subject key identifier: 8F:66:F3:2F:DB:22:AA:67:73:C8:4B:F7:3B:57:D3:56:3A:06:B3:81 Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 Certificate issuer: /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft Manifest number: 0647 Signing time: Sat 18 May 2024 23:39:44 +0000 Manifest this update: Sat 18 May 2024 23:39:44 +0000 Manifest next update: Sat 25 May 2024 23:39:44 +0000 Files and hashes: 1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: vI1xgkv9OuhRlvOek17QD/AyOB92mQLaMfHCXEQIq50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Validity Not Before: May 18 23:39:44 2024 GMT Not After : May 25 23:39:44 2024 GMT Subject: CN=66493c40-df77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:af:57:17:f8:b0:c3:a4:55:46:4c:40:a5: 5c:95:5d:d4:40:9f:f5:4f:17:d9:21:c0:c5:82:af: eb:c5:f9:f1:a7:cb:4e:e5:f9:b0:7a:0a:4b:34:b4: c7:1d:5e:1a:0a:e4:90:c3:c5:70:6f:75:38:b3:b7: 58:63:05:5d:55:ef:f2:71:78:87:2c:16:82:5d:a7: 48:6a:5f:c1:aa:00:48:8a:19:32:0c:04:02:3d:48: c5:2a:0f:13:63:78:8a:21:82:5f:a9:70:86:d7:14: cb:f8:0a:ab:1b:45:e5:1b:84:4c:06:1c:ab:c3:07: 2f:a4:5a:ae:df:7f:f3:e9:bf:64:a0:b8:f5:f9:20: b2:f1:01:77:20:9a:81:cf:f8:cc:86:3a:58:fd:c0: 92:eb:ca:f3:83:5c:1e:4a:d0:b3:b4:13:20:f2:40: 8c:48:df:f8:8d:79:4a:83:51:8a:e8:74:14:7e:6e: fd:98:6b:ef:74:65:88:4d:17:e6:ef:89:d5:fd:61: 21:12:19:34:d5:0a:b5:15:12:41:c6:2d:4c:33:ec: 02:76:13:db:67:4b:22:de:28:70:7a:97:a5:e2:fa: 5b:12:05:4c:b1:f0:49:72:43:de:30:8c:d0:b3:47: 26:85:da:7f:63:88:8e:78:d0:bb:3a:99:65:07:6c: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:F3:2F:DB:22:AA:67:73:C8:4B:F7:3B:57:D3:56:3A:06:B3:81 X509v3 Authority Key Identifier: keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f5:a5:f5:53:ae:7d:2e:4f:c2:c3:63:f1:e0:6d:9b:26:e6: fb:16:61:06:10:38:0d:c4:19:1d:16:5a:c8:9f:e5:8e:aa:a0: 64:11:ab:eb:56:e2:b0:ff:c0:79:0b:1c:05:e5:7d:ed:19:e2: 1b:6c:41:ee:2a:13:13:4d:12:c4:40:3d:5d:a3:3d:aa:9b:23: ae:b0:15:8f:41:62:f3:23:56:fd:f9:35:82:49:3e:b8:63:b4: 22:2d:60:cb:9f:fd:5a:ab:83:51:c7:3a:fa:d3:64:83:76:a4: 5c:af:8f:64:37:9d:09:b8:4f:5a:60:6f:41:5e:8a:21:1f:ba: c9:62:b1:75:51:9a:5e:0a:7f:e6:95:43:a2:72:f6:d6:4c:7c: 93:2e:af:65:d1:8e:71:82:8f:ee:3c:be:ca:df:09:82:7c:e4: 10:6c:c4:b8:43:ea:8b:27:70:28:cd:a9:71:3a:ab:33:8e:14: 7c:9a:0e:2a:e7:28:d6:6c:e0:6f:f4:dc:c7:43:2a:94:04:bb: 25:fa:f1:40:94:29:1c:24:17:67:b0:ea:50:6e:1b:a9:bb:ce: 82:d7:01:02:0c:77:47:a5:83:4e:7d:6f:ec:65:a7:3c:06:73: b9:c4:f0:24:5d:13:79:c7:d1:58:f6:04:f8:f7:3f:5a:1a:8b: 54:26:84:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGQzYxMTAvBgNVBAUTKEE1NUE4RTc0QUZCRERBRTYyOTEwRDBDNjdCQTIyOUQ2 OUUxRUM5NzgwHhcNMjQwNTE4MjMzOTQ0WhcNMjQwNTI1MjMzOTQ0WjAYMRYwFAYD VQQDEw02NjQ5M2M0MC1kZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DCvVxf4sMOkVUZMQKVclV3UQJ/1TxfZIcDFgq/rxfnxp8tO5fmwegpLNLTH HV4aCuSQw8Vwb3U4s7dYYwVdVe/ycXiHLBaCXadIal/BqgBIihkyDAQCPUjFKg8T Y3iKIYJfqXCG1xTL+AqrG0XlG4RMBhyrwwcvpFqu33/z6b9koLj1+SCy8QF3IJqB z/jMhjpY/cCS68rzg1weStCztBMg8kCMSN/4jXlKg1GK6HQUfm79mGvvdGWITRfm 74nV/WEhEhk01Qq1FRJBxi1MM+wCdhPbZ0si3ihwepel4vpbEgVMsfBJckPeMIzQ s0cmhdp/Y4iOeNC7OpllB2y6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9m8y/b Iqpnc8hL9ztX01Y6BrOBMB8GA1UdIwQYMBaAFKVajnSvvdrmKRDQxnuiKdaeHsl4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZDNi8wMTlDMDI3RTNG NjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1WXBFTkRHZTZJcDFwNGV5 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWcU9kSy05MnVZcEVOREdlNklwMXA0ZXlYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZDNi8wMTlDMDI3RTNGNjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1 WXBFTkRHZTZJcDFwNGV5WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE9aX1U659Lk/Cw2Px4G2bJub7FmEGEDgNxBkdFlrIn+WOqqBkEavr VuKw/8B5CxwF5X3tGeIbbEHuKhMTTRLEQD1doz2qmyOusBWPQWLzI1b9+TWCST64 Y7QiLWDLn/1aq4NRxzr602SDdqRcr49kN50JuE9aYG9BXoohH7rJYrF1UZpeCn/m lUOicvbWTHyTLq9l0Y5xgo/uPL7K3wmCfOQQbMS4Q+qLJ3AozalxOqszjhR8mg4q 5yjWbOBv9NzHQyqUBLsl+vFAlCkcJBdnsOpQbhupu86C1wECDHdHpYNOfW/sZac8 BnO5xPAkXRN5x9FY9gT49z9aGotUJoQF -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org