$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json) Hash identifier: IERHHV2KtFkKRFyALNgfpfEXNH21tDXxLvxJHhD72Wk= Subject key identifier: E5:CC:97:97:04:05:97:94:3A:99:51:83:6C:51:33:E0:BF:99:8A:6F Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft Manifest number: 2B Signing time: Fri 31 May 2024 09:24:20 +0000 Manifest this update: Fri 31 May 2024 09:24:20 +0000 Manifest next update: Fri 07 Jun 2024 09:24:20 +0000 Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: CLTUVkY8S/nuY8bSwvFCI9gBEapfBpkNi6/Dlf1x/EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Validity Not Before: May 31 09:24:20 2024 GMT Not After : Jun 7 09:24:20 2024 GMT Subject: CN=66599744-6c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:c9:19:9f:28:3e:6d:39:dc:fe:df:2e:4c: 15:c7:e1:38:6a:92:7b:d1:88:44:ae:94:d8:70:c8: 6c:c5:59:8d:24:a0:68:7f:29:99:ed:c7:1e:2f:b4: 58:d0:04:3e:27:f1:3e:d1:e3:0f:af:59:49:e2:f2: 57:b6:e6:2c:59:78:32:f4:bc:6c:36:42:db:74:89: 05:3c:40:66:69:2d:26:c9:03:3f:a6:a5:d3:33:a0: 46:42:09:2b:36:85:6b:99:95:e1:75:74:46:8b:1f: 10:3e:1b:eb:5d:a0:3e:8f:db:e3:a5:67:26:ea:91: 2a:54:28:60:06:02:23:eb:7d:51:77:ce:bd:e5:8e: 54:2f:18:80:dc:0f:39:c7:ab:ab:a4:bc:07:78:e7: 1c:8c:9d:1b:d4:35:73:39:60:3d:5d:68:36:97:27: e0:90:55:9d:e3:61:22:70:82:14:e4:9c:6f:11:ea: 64:37:ed:aa:c2:bc:af:9b:c6:b1:e5:11:54:ba:13: e5:c8:38:27:3c:9e:56:8b:2c:69:e5:34:73:de:92: 92:a8:14:72:5f:1f:a3:46:dd:88:ba:db:61:8e:6b: 77:be:57:ac:f1:ee:63:56:dd:74:b3:92:a3:f3:11: ec:15:98:ea:7d:5b:bc:da:2b:4d:90:cd:d9:3c:c8: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:97:97:04:05:97:94:3A:99:51:83:6C:51:33:E0:BF:99:8A:6F X509v3 Authority Key Identifier: keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:2b:ea:7f:8b:b1:8d:a4:6a:8d:f4:7e:24:85:e0:1b:09: 36:ed:a9:42:28:33:c2:4d:17:62:83:4c:a0:19:f6:2f:8c:53: d1:b7:c4:d1:db:5d:60:64:76:63:4e:79:bd:39:40:08:1e:26: 69:14:9c:c0:d2:b5:72:a3:c6:d4:dd:7a:66:7c:8b:11:fc:57: 30:54:45:47:ec:0a:8d:25:6d:d2:cf:e6:6d:8b:38:2b:e0:76: 44:a3:c8:09:66:3b:2e:0c:c1:4d:6d:68:18:32:06:67:fe:06: e0:06:c0:40:a3:9b:73:5b:7a:4e:fb:8b:cc:1c:81:72:84:d9: e1:a7:60:0e:da:47:20:31:02:0e:11:83:d5:f6:6e:a6:74:50: c3:a5:aa:1f:c7:0b:01:e0:2c:d7:3c:af:40:02:2a:3d:22:bf: 99:ea:f6:fb:15:32:20:d6:c5:b4:b4:d4:e3:87:c7:30:2e:f1: 2a:88:f9:5c:0a:59:03:f5:58:10:b8:30:34:d6:b4:a5:8e:61: 1d:5c:20:11:df:a3:47:28:fa:31:88:6b:d6:e2:69:53:2e:80: 4b:3a:fc:a5:cf:93:79:65:7f:c2:5b:f0:ab:80:5d:0c:a6:58: e3:4e:aa:1f:5f:10:6d:ab:39:57:76:e6:61:c7:6b:dd:a7:1d: b0:3b:ad:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0NERDExMC8GA1UEBRMoOUQ0NjA0NDA2MEZBOTZFOTRBMjMxRTAzMEEzMEUzRDY1 NEY0MTFBRTAeFw0yNDA1MzEwOTI0MjBaFw0yNDA2MDcwOTI0MjBaMBgxFjAUBgNV BAMTDTY2NTk5NzQ0LTZjMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB28kZnyg+bTnc/t8uTBXH4ThqknvRiESulNhwyGzFWY0koGh/KZntxx4vtFjQ BD4n8T7R4w+vWUni8le25ixZeDL0vGw2Qtt0iQU8QGZpLSbJAz+mpdMzoEZCCSs2 hWuZleF1dEaLHxA+G+tdoD6P2+OlZybqkSpUKGAGAiPrfVF3zr3ljlQvGIDcDznH q6ukvAd45xyMnRvUNXM5YD1daDaXJ+CQVZ3jYSJwghTknG8R6mQ37arCvK+bxrHl EVS6E+XIOCc8nlaLLGnlNHPekpKoFHJfH6NG3Yi622GOa3e+V6zx7mNW3XSzkqPz EewVmOp9W7zaK02Qzdk8yNeZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5cyXlwQF l5Q6mVGDbFEz4L+Zim8wHwYDVR0jBBgwFoAUnUYEQGD6lulKIx4DCjDj1lT0Ea4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3Q0RELzkzNkIzMUUwREQw RDExRUU5RDI5MkQ2QUM0RjlBRTAyL25VWUVRR0Q2bHVsS0l4NERDakRqMWxUMEVh NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblVZRVFHRDZsdWxLSXg0RENqRGoxbFQwRWE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 Q0RELzkzNkIzMUUwREQwRDExRUU5RDI5MkQ2QUM0RjlBRTAyL25VWUVRR0Q2bHVs S0l4NERDakRqMWxUMEVhNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABbKK+p/i7GNpGqN9H4kheAbCTbtqUIoM8JNF2KDTKAZ9i+MU9G3xNHb XWBkdmNOeb05QAgeJmkUnMDStXKjxtTdemZ8ixH8VzBURUfsCo0lbdLP5m2LOCvg dkSjyAlmOy4MwU1taBgyBmf+BuAGwECjm3Nbek77i8wcgXKE2eGnYA7aRyAxAg4R g9X2bqZ0UMOlqh/HCwHgLNc8r0ACKj0iv5nq9vsVMiDWxbS01OOHxzAu8SqI+VwK WQP1WBC4MDTWtKWOYR1cIBHfo0co+jGIa9biaVMugEs6/KXPk3llf8Jb8KuAXQym WONOqh9fEG2rOVd25mHHa92nHbA7rYw= -----END CERTIFICATE-----Generated at Fri May 31 10:02:40 2024 by rpki-client on console-ams.rpki-client.org