$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: U5sgTudUDVglNM77pynASu2SdCln9qUMWUoGos8IsVc= Subject key identifier: 28:96:03:23:2C:9B:B9:B4:06:FF:B5:1A:EF:80:E8:0C:A9:73:FA:C5 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 090D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 08EB Signing time: Sat 18 May 2024 21:25:20 +0000 Manifest this update: Sat 18 May 2024 21:25:19 +0000 Manifest next update: Sat 25 May 2024 21:25:19 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: Wbqh5nK0WyiJmQzAj6F7jLxethzVPFogJk2whvtmngw=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: cCIvso01WQ3DuqA+TVS+HW7aQip9CyB/L+BtQt59yW0=) 3: B7106404ED4711EEBD5DD584C4F9AE02.roa (hash: uq4/mU6YnOlGTmcbmQoEHpGmVXeSRNgZUS3CsRbJs/Y=) 4: C61F947E024611EF8332F228C4F9AE02.roa (hash: kox9WG4L/JjVelXMfpehPJBrUD0g+RXTFOlBoOFN1YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: May 18 21:25:19 2024 GMT Not After : May 25 21:25:19 2024 GMT Subject: CN=66491cbf-fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:da:c7:21:72:e7:83:16:fc:66:e0:54:7b: ab:a7:96:f6:7b:ea:83:8b:1d:53:a9:dc:cd:58:61: c4:03:c7:17:f7:9d:3c:84:3a:ef:b3:29:28:ac:03: bb:7d:ea:aa:c1:6e:0f:6a:96:f9:66:44:d9:b6:44: 42:24:ff:46:27:3b:ae:51:33:ec:e4:9e:b8:af:3b: ba:46:cf:c5:8e:57:59:7f:26:d2:44:46:90:eb:77: 87:b2:9d:e3:30:93:54:18:d5:b6:4e:11:7b:ad:94: 19:50:79:37:ff:70:57:cc:d3:01:9c:80:f4:03:37: 50:da:a7:cc:f6:2e:87:ca:d7:05:2f:c1:7e:08:c0: 78:ff:9b:9e:cf:1a:cf:90:b6:8e:56:2a:f6:36:dd: 5b:78:a2:b8:77:ce:f9:99:d0:ee:1d:bb:52:df:c6: 02:f2:8e:ee:81:83:41:b8:94:90:44:6d:46:ef:a8: f5:74:8a:5c:39:16:eb:b9:08:05:f2:92:c7:b3:a4: 4f:9a:70:13:3e:f9:a0:3f:cb:c1:7d:1f:5a:37:7e: 54:09:9b:dd:90:2a:5b:b7:24:4f:19:91:34:4b:7f: 52:7d:96:2d:05:45:89:59:78:5e:cc:63:30:64:7e: 6e:d8:2c:79:83:bd:3f:99:ac:ee:d8:1e:7e:71:6c: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:03:23:2C:9B:B9:B4:06:FF:B5:1A:EF:80:E8:0C:A9:73:FA:C5 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7d:9d:cf:b7:26:79:5e:8d:62:8e:7b:86:9c:08:6c:32:0f: 89:47:74:8f:b5:eb:cb:0e:14:95:33:60:38:2f:40:b4:a6:03: eb:83:73:6f:aa:6e:f5:65:61:35:52:3e:2a:80:5a:d2:60:33: 2e:94:16:88:92:b0:61:a7:bc:5a:53:4e:0a:a0:42:8f:f9:09: 2d:a6:b5:5e:cd:ea:df:03:74:ef:67:87:f1:d6:48:83:f3:0f: e5:3f:2b:d4:b0:05:0f:80:86:c6:52:8e:b2:9e:99:ae:29:2d: bf:11:cd:8c:e3:82:ed:ec:6f:46:de:81:5f:92:cc:f8:73:87: 79:31:9f:4f:d6:a7:9a:b8:ac:4c:72:fe:e2:40:08:b4:5d:e4: b9:36:cc:a2:8e:8d:6c:64:28:e2:90:b6:9c:27:f5:21:94:2c: dc:b1:9d:00:a3:4a:8a:7b:b3:1f:d1:db:8e:e1:e9:79:b1:8b: 03:3c:30:6c:44:8a:73:1c:ee:17:40:2c:9d:55:db:2b:d5:66: e5:15:31:fb:89:cd:3f:ae:5d:4a:eb:41:59:a3:ad:88:51:b4: db:29:a4:8f:52:ee:c9:32:f7:67:11:9d:1d:77:1c:cc:46:85: 8a:bf:24:84:86:0f:49:1c:23:e2:f1:58:44:63:5d:39:05:19: e1:13:4a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjQwNTE4MjEyNTE5WhcNMjQwNTI1MjEyNTE5WjAYMRYwFAYD VQQDEw02NjQ5MWNiZi1mYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pPaxyFy54MW/GbgVHurp5b2e+qDix1TqdzNWGHEA8cX9508hDrvsykorAO7 feqqwW4Papb5ZkTZtkRCJP9GJzuuUTPs5J64rzu6Rs/FjldZfybSREaQ63eHsp3j MJNUGNW2ThF7rZQZUHk3/3BXzNMBnID0AzdQ2qfM9i6HytcFL8F+CMB4/5uezxrP kLaOVir2Nt1beKK4d875mdDuHbtS38YC8o7ugYNBuJSQRG1G76j1dIpcORbruQgF 8pLHs6RPmnATPvmgP8vBfR9aN35UCZvdkCpbtyRPGZE0S39SfZYtBUWJWXhezGMw ZH5u2Cx5g70/mazu2B5+cWyDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiWAyMs m7m0Bv+1Gu+A6Aypc/rFMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZfZ3PtyZ5Xo1ijnuGnAhsMg+JR3SPtevLDhSVM2A4L0C0pgPrg3Nv qm71ZWE1Uj4qgFrSYDMulBaIkrBhp7xaU04KoEKP+QktprVezerfA3TvZ4fx1kiD 8w/lPyvUsAUPgIbGUo6ynpmuKS2/Ec2M44Lt7G9G3oFfksz4c4d5MZ9P1qeauKxM cv7iQAi0XeS5Nsyijo1sZCjikLacJ/UhlCzcsZ0Ao0qKe7Mf0duO4el5sYsDPDBs RIpzHO4XQCydVdsr1WblFTH7ic0/rl1K60FZo62IUbTbKaSPUu7JMvdnEZ0ddxzM RoWKvySEhg9JHCPi8VhEY105BRnhE0pg -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org