$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: oRQG9qk+CvIO1a01DXQbUZ65UmrXNzYHdQDjyvom0bg= Subject key identifier: 77:D5:4A:FA:B3:E0:25:00:61:85:76:ED:FC:E5:DD:2B:64:27:DB:F3 Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 33D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3B5A Signing time: Sat 18 May 2024 15:26:24 +0000 Manifest this update: Sat 18 May 2024 15:26:23 +0000 Manifest next update: Sat 25 May 2024 15:26:23 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: i80d344C1mrVLBEZqX1BZcR320tSdas1yixP08i9FBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13272 (0x33d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: May 18 15:26:23 2024 GMT Not After : May 25 15:26:23 2024 GMT Subject: CN=6648c89f-fddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:4a:fd:4d:ca:f5:c3:2a:35:2d:07:2d:4d: 38:db:b0:c9:5b:08:91:bf:55:4b:17:41:33:68:54: c7:9c:59:0a:1b:2d:27:89:9a:26:6b:48:e2:fe:99: 4f:6c:b6:47:1b:17:4e:5e:4f:84:d1:e3:1d:35:4e: 5c:e2:b4:58:13:34:f3:93:1a:3c:22:d9:f4:dd:94: 60:d4:a8:c2:67:7f:78:16:09:7b:06:f6:6e:ec:56: 1f:c3:3e:42:13:b9:08:1b:eb:4f:9e:e1:37:cd:88: 5e:3f:c9:5c:35:c4:e9:54:8a:f9:f3:d2:cf:80:e6: 4d:01:c3:95:7a:69:1b:3b:08:3e:89:d2:3c:d0:2d: 32:b5:44:32:71:94:77:a6:9b:4b:48:02:b4:62:74: 75:a8:01:a0:51:a2:4d:7c:cc:7d:0a:05:7f:68:da: 23:b1:37:2c:13:7e:7b:95:28:04:ff:17:ee:08:20: 63:4e:ee:e7:97:87:ca:3f:5e:25:e5:89:4c:a1:87: 35:1e:94:14:ab:93:f3:c0:54:6f:40:66:35:d1:d9: 73:f4:35:cc:d5:4e:e1:da:60:bb:df:0c:39:d9:cb: 30:3d:86:51:23:b9:69:70:5a:b6:8e:5c:c3:f3:52: 1c:3e:83:62:20:d2:8f:3f:70:3c:2c:00:68:11:3d: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D5:4A:FA:B3:E0:25:00:61:85:76:ED:FC:E5:DD:2B:64:27:DB:F3 X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:41:09:e0:54:e4:1d:4e:39:7b:a5:7e:cc:ed:cb:ec:00: 58:52:86:4d:5c:97:c2:f6:e7:f9:e8:fb:5b:bf:dd:0a:7e:dd: ad:4f:8d:c7:27:70:e7:e5:67:cf:90:4e:d0:96:9a:97:8b:8b: 54:0a:12:0d:86:5a:b1:aa:7c:5f:74:3d:86:69:b2:87:2c:83: a0:f6:45:f8:52:46:8f:ee:f5:a1:21:0d:da:b8:68:52:1d:de: 6d:46:77:58:96:f4:56:3f:9d:ed:59:0e:16:18:ac:57:a8:c7: 47:85:8e:07:c5:d8:b5:6e:32:af:17:62:2a:66:9d:b1:3c:47: 44:1f:64:99:4e:bf:d5:43:22:fb:72:ca:e5:84:1e:ff:84:62: 07:8c:29:b4:64:da:36:7e:c2:54:45:c2:04:62:b6:77:bb:f1: 84:11:70:1e:18:e3:c8:31:c0:e2:c2:c7:23:55:30:16:d8:73: 6d:9d:a5:1a:2e:3d:a2:bd:cc:6a:2e:69:43:ad:5f:98:ae:c4: f2:5f:7f:9e:b7:e2:88:9f:11:31:e3:b8:74:2c:a3:2a:d6:45: ce:7a:c8:55:2d:ab:6a:42:ed:39:05:1f:d3:0b:1b:40:52:50: f5:e5:bd:a8:46:cf:6e:4e:6e:4b:84:af:7a:91:bb:17:24:e2: f1:df:56:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjQwNTE4MTUyNjIzWhcNMjQwNTI1MTUyNjIzWjAYMRYwFAYD VQQDEw02NjQ4Yzg5Zi1mZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA081K/U3K9cMqNS0HLU0427DJWwiRv1VLF0EzaFTHnFkKGy0niZoma0ji/plP bLZHGxdOXk+E0eMdNU5c4rRYEzTzkxo8Itn03ZRg1KjCZ394Fgl7BvZu7FYfwz5C E7kIG+tPnuE3zYheP8lcNcTpVIr589LPgOZNAcOVemkbOwg+idI80C0ytUQycZR3 pptLSAK0YnR1qAGgUaJNfMx9CgV/aNojsTcsE357lSgE/xfuCCBjTu7nl4fKP14l 5YlMoYc1HpQUq5PzwFRvQGY10dlz9DXM1U7h2mC73ww52cswPYZRI7lpcFq2jlzD 81IcPoNiINKPP3A8LABoET3G8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfVSvqz 4CUAYYV27fzl3StkJ9vzMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADaEEJ4FTkHU45e6V+zO3L7ABYUoZNXJfC9uf56Ptbv90Kft2tT43H J3Dn5WfPkE7QlpqXi4tUChINhlqxqnxfdD2GabKHLIOg9kX4UkaP7vWhIQ3auGhS Hd5tRndYlvRWP53tWQ4WGKxXqMdHhY4Hxdi1bjKvF2IqZp2xPEdEH2SZTr/VQyL7 csrlhB7/hGIHjCm0ZNo2fsJURcIEYrZ3u/GEEXAeGOPIMcDiwscjVTAW2HNtnaUa Lj2ivcxqLmlDrV+YrsTyX3+et+KInxEx47h0LKMq1kXOeshVLatqQu05BR/TCxtA UlD15b2oRs9uTm5LhK96kbsXJOLx31Z/ -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org