$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft File: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft (raw, json) Hash identifier: b7keLXG2RjpqcsCv74c8RVZeGHCrwZ4hZ25IqDpoiRs= Subject key identifier: 7E:64:0D:98:53:52:79:4C:35:16:9A:28:75:36:92:EF:F4:4B:A3:5E Authority key identifier: 3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 Certificate issuer: /CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft Manifest number: 31 Signing time: Sun 19 May 2024 05:56:49 +0000 Manifest this update: Sun 19 May 2024 05:56:48 +0000 Manifest next update: Sun 26 May 2024 05:56:48 +0000 Files and hashes: 1: O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl (hash: ZACAJediwGXuksIr/DTcjRyS4yU2wYxK70drrpMiLFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D/serialNumber=3BA48C4AFB00F7334224C05153AAC6F2686843B7 Validity Not Before: May 19 05:56:48 2024 GMT Not After : May 26 05:56:48 2024 GMT Subject: CN=664994a1-ac3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:43:0d:eb:90:b3:25:51:c6:2c:42:91:9c: b1:8f:c8:a9:36:d5:e6:21:9d:be:3c:6c:c3:34:be: c4:14:e5:e9:bc:ff:c0:46:86:6b:7f:1a:b5:5d:3c: ca:05:ba:c2:4e:dd:24:62:65:01:28:90:2e:77:50: 42:8e:0d:78:0f:b0:b5:c5:65:7d:8a:de:b6:3f:d1: 4c:30:b7:a7:17:40:82:9b:01:e3:ae:41:3b:c0:97: 2c:b1:56:0c:a9:f6:8d:08:36:ed:75:cf:ff:a0:5e: 3c:55:04:2e:1a:58:fb:23:88:ff:f1:ef:89:54:f4: 7b:d4:e4:60:f7:b0:98:bd:e0:15:8f:b2:34:15:5a: 5a:2d:63:90:9c:4a:23:05:aa:ef:86:82:c4:a6:25: 50:85:7f:4c:cf:84:b3:cf:0e:e2:e6:35:88:54:b9: d7:d9:ba:45:30:d4:76:3d:1c:99:ae:b8:e8:e9:18: 5f:e1:13:01:83:1a:fa:4e:08:9c:b4:06:33:a9:3e: 53:b3:d6:89:b1:82:26:d4:46:61:91:10:e1:d8:fe: a5:38:c4:b5:4f:79:0d:1e:b3:99:c8:d0:8d:18:04: f9:11:b0:da:9e:62:55:20:93:e0:82:0c:dc:cb:60: d0:a6:cf:cb:52:c2:25:44:0c:89:c3:72:19:2a:e8: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:64:0D:98:53:52:79:4C:35:16:9A:28:75:36:92:EF:F4:4B:A3:5E X509v3 Authority Key Identifier: keyid:3B:A4:8C:4A:FB:00:F7:33:42:24:C0:51:53:AA:C6:F2:68:68:43:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/80B8171ACED111EE8BF64B73C4F9AE02/O6SMSvsA9zNCJMBRU6rG8mhoQ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fb:46:cd:e0:84:57:4d:3f:bf:54:16:d1:48:0b:37:ab:4a: 00:1d:eb:75:6b:c2:07:6e:71:69:87:5e:24:54:97:23:fc:70: f9:58:d3:81:f4:fd:1b:45:04:5a:71:70:fb:4f:85:79:bf:fc: fd:85:56:2a:f9:2a:7f:51:17:49:a9:f4:82:fe:3c:18:b5:21: a7:c7:86:b2:96:84:31:73:cd:c5:ab:c3:5d:6e:22:2f:21:58: 87:97:48:ed:28:0a:19:a5:df:55:6f:61:5d:1e:13:1c:38:d1: 09:9b:78:28:73:c6:02:70:63:5a:82:97:e0:ff:7b:7c:f4:a3: 18:d8:da:20:0e:1a:c9:24:23:d6:29:c1:6d:c5:49:f9:61:11: df:66:e3:89:cd:36:ce:ee:97:f0:67:a9:0e:32:ab:7f:98:f8: ca:1b:b4:d9:ef:cb:0f:90:76:ea:78:26:23:00:d8:26:14:c7: c4:b7:29:ab:4c:7f:48:8c:21:e1:a3:0e:2d:89:26:a0:59:f1: 23:35:e4:56:a8:fa:f4:1e:5d:6d:98:3e:56:6a:c3:5a:38:c5: 1a:de:a0:ae:1f:20:f1:3d:36:a2:3d:67:cd:0a:32:65:fe:9a: 76:f0:59:26:a3:b9:81:3c:1c:22:db:78:01:57:d1:b5:f4:4e: 4a:8d:ed:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjkyRDExMC8GA1UEBRMoM0JBNDhDNEFGQjAwRjczMzQyMjRDMDUxNTNBQUM2RjI2 ODY4NDNCNzAeFw0yNDA1MTkwNTU2NDhaFw0yNDA1MjYwNTU2NDhaMBgxFjAUBgNV BAMTDTY2NDk5NGExLWFjM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7z0MN65CzJVHGLEKRnLGPyKk21eYhnb48bMM0vsQU5em8/8BGhmt/GrVdPMoF usJO3SRiZQEokC53UEKODXgPsLXFZX2K3rY/0Uwwt6cXQIKbAeOuQTvAlyyxVgyp 9o0INu11z/+gXjxVBC4aWPsjiP/x74lU9HvU5GD3sJi94BWPsjQVWlotY5CcSiMF qu+GgsSmJVCFf0zPhLPPDuLmNYhUudfZukUw1HY9HJmuuOjpGF/hEwGDGvpOCJy0 BjOpPlOz1omxgibURmGREOHY/qU4xLVPeQ0es5nI0I0YBPkRsNqeYlUgk+CCDNzL YNCmz8tSwiVEDInDchkq6AeJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfmQNmFNS eUw1FpoodTaS7/RLo14wHwYDVR0jBBgwFoAUO6SMSvsA9zNCJMBRU6rG8mhoQ7cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCOTJELzgwQjgxNzFBQ0VE MTExRUU4QkY2NEI3M0M0RjlBRTAyL082U01TdnNBOXpOQ0pNQlJVNnJHOG1ob1E3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzZTTVN2c0E5ek5DSk1CUlU2ckc4bWhvUTdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC OTJELzgwQjgxNzFBQ0VEMTExRUU4QkY2NEI3M0M0RjlBRTAyL082U01TdnNBOXpO Q0pNQlJVNnJHOG1ob1E3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ37Rs3ghFdNP79UFtFICzerSgAd63VrwgducWmHXiRUlyP8cPlY04H0 /RtFBFpxcPtPhXm//P2FVir5Kn9RF0mp9IL+PBi1IafHhrKWhDFzzcWrw11uIi8h WIeXSO0oChml31VvYV0eExw40QmbeChzxgJwY1qCl+D/e3z0oxjY2iAOGskkI9Yp wW3FSflhEd9m44nNNs7ul/BnqQ4yq3+Y+MobtNnvyw+Qdup4JiMA2CYUx8S3KatM f0iMIeGjDi2JJqBZ8SM15Fao+vQeXW2YPlZqw1o4xRreoK4fIPE9NqI9Z80KMmX+ mnbwWSajuYE8HCLbeAFX0bX0TkqN7Uk= -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org