$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: zIyRzMj9/dGQqTe80KOHb35qEUfVuYifZk/Os4EHrdI= Subject key identifier: 0E:0A:21:BE:EA:F9:16:80:2E:FC:0E:3E:ED:2B:06:39:D5:53:B4:F8 Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 04F1 Signing time: Sun 19 May 2024 01:17:32 +0000 Manifest this update: Sun 19 May 2024 01:17:32 +0000 Manifest next update: Sun 26 May 2024 01:17:32 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: jxehVapWbdFBg8goEvPi18P4rEvQn0p4gBLPNkyZmAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: May 19 01:17:32 2024 GMT Not After : May 26 01:17:32 2024 GMT Subject: CN=6649532c-1dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:1e:ab:7c:e8:d2:e7:d6:7f:4e:42:17:a1: 82:c2:04:98:4f:c9:ba:43:f8:55:c7:67:60:48:47: 70:70:1a:5e:39:30:4c:ef:c6:78:a6:13:5b:ab:23: 9d:c8:5f:80:49:f4:e7:24:33:e3:97:1c:3b:13:1b: 8b:19:74:0f:f2:c3:e2:7c:b1:5d:d3:0e:73:4c:4f: 41:9e:2f:9a:5c:d9:03:6b:86:04:04:18:35:e7:a5: c2:80:7c:eb:e7:bb:91:4d:42:ca:7b:f9:bf:5b:a0: 28:6d:96:9c:99:7b:d1:f8:38:63:b9:20:17:f0:f3: 1c:37:d3:8c:43:9c:33:c5:64:c5:bf:72:51:9a:e6: 22:db:c4:43:c5:ae:d2:58:c5:4c:1a:f8:e8:16:f1: 5b:81:29:e6:be:96:09:6e:02:92:64:6a:6b:87:89: e3:76:ed:35:f5:f8:65:2b:b7:83:00:b2:7b:f0:b9: 0c:6f:3f:bb:9f:6a:2c:9c:5f:d0:5d:41:42:71:2c: 56:d9:12:f0:ea:83:cc:8a:58:38:71:8b:ee:7c:a5: 39:50:d4:b0:cf:b7:a2:62:f4:e3:41:8e:7a:c1:db: a3:97:b5:e2:95:23:c3:79:f0:f0:dc:dd:49:81:60: a3:eb:d1:75:d7:0f:2a:77:7a:0b:4c:93:d1:90:38: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:21:BE:EA:F9:16:80:2E:FC:0E:3E:ED:2B:06:39:D5:53:B4:F8 X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d9:2f:03:f4:46:5f:0c:c3:60:71:94:05:3a:48:c3:58:7a: 82:d3:57:7e:ce:35:7b:f3:f1:78:59:ac:fe:45:96:ff:ac:a9: ec:09:17:aa:d5:98:e1:c3:89:e0:ae:82:be:a9:4f:fb:8e:1e: fe:54:64:c4:dc:af:eb:58:52:80:f4:9e:70:29:2b:5e:79:ae: 37:21:4e:a4:02:b3:59:d9:25:4d:a9:41:ed:43:fe:ef:02:e3: 22:ac:4d:60:cf:23:bf:51:98:d4:6c:1e:0b:fb:ac:64:54:e9: 17:ac:80:89:15:db:51:42:0d:be:fd:fe:04:16:8b:fb:cf:7c: 84:6c:59:b1:6c:91:be:60:0d:4d:93:51:61:84:f7:f1:a4:9d: 97:45:8c:b9:09:2b:db:49:5d:dd:44:09:4a:68:2a:2c:f4:95: 7f:f7:b2:41:83:4e:7d:76:f0:c0:25:a0:58:d0:9b:a7:cf:46: 0f:e7:cf:b4:09:20:a5:ed:32:38:d6:f4:e4:c7:4d:0a:ed:67: 2a:32:a9:b3:2b:5b:db:09:75:9d:09:f0:00:67:a2:e0:cb:52: 6a:6b:f8:16:94:ab:22:cf:e9:70:65:aa:16:8d:17:af:02:88: fd:bb:01:3d:06:59:e8:f7:f7:20:94:90:a5:b5:02:1e:10:b7: 81:91:0c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjQwNTE5MDExNzMyWhcNMjQwNTI2MDExNzMyWjAYMRYwFAYD VQQDEw02NjQ5NTMyYy0xZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nAeq3zo0ufWf05CF6GCwgSYT8m6Q/hVx2dgSEdwcBpeOTBM78Z4phNbqyOd yF+ASfTnJDPjlxw7ExuLGXQP8sPifLFd0w5zTE9Bni+aXNkDa4YEBBg156XCgHzr 57uRTULKe/m/W6AobZacmXvR+DhjuSAX8PMcN9OMQ5wzxWTFv3JRmuYi28RDxa7S WMVMGvjoFvFbgSnmvpYJbgKSZGprh4njdu019fhlK7eDALJ78LkMbz+7n2osnF/Q XUFCcSxW2RLw6oPMilg4cYvufKU5UNSwz7eiYvTjQY56wdujl7XilSPDefDw3N1J gWCj69F11w8qd3oLTJPRkDh2xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4KIb7q +RaALvwOPu0rBjnVU7T4MB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA92S8D9EZfDMNgcZQFOkjDWHqC01d+zjV78/F4Waz+RZb/rKnsCReq 1Zjhw4ngroK+qU/7jh7+VGTE3K/rWFKA9J5wKSteea43IU6kArNZ2SVNqUHtQ/7v AuMirE1gzyO/UZjUbB4L+6xkVOkXrICJFdtRQg2+/f4EFov7z3yEbFmxbJG+YA1N k1FhhPfxpJ2XRYy5CSvbSV3dRAlKaCos9JV/97JBg059dvDAJaBY0Junz0YP58+0 CSCl7TI41vTkx00K7WcqMqmzK1vbCXWdCfAAZ6Lgy1Jqa/gWlKsiz+lwZaoWjRev Aoj9uwE9Blno9/cglJCltQIeELeBkQzf -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org