$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: w6+RPranjj0to1SzcJ5uQ3Yk4uHbaTZeHcq5IX+RbOQ= Subject key identifier: CB:90:21:F1:2E:59:C9:07:9F:E8:13:47:D0:B2:8F:1E:E0:EC:60:F2 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 07EC Signing time: Sat 18 May 2024 21:55:35 +0000 Manifest this update: Sat 18 May 2024 21:55:35 +0000 Manifest next update: Sat 25 May 2024 21:55:35 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: RvuK1KAmVt4EeH1RPTISk7L3MjcX4WwbkyfOsq85sDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: May 18 21:55:35 2024 GMT Not After : May 25 21:55:35 2024 GMT Subject: CN=664923d7-3f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:55:11:0d:91:ba:48:9a:c9:b6:01:c9:97: 78:31:c1:71:74:5a:f7:1f:a8:d7:95:b9:91:cf:bf: aa:d4:83:04:f4:7c:71:fa:e5:04:5c:21:b3:7a:7e: 04:aa:94:6e:68:b6:ff:89:c8:eb:57:b7:aa:8a:0e: 0c:b6:60:c3:a0:7b:94:26:30:c5:39:af:df:a2:e1: 17:0c:20:b9:9a:ce:96:24:52:3b:48:f2:ff:15:42: b9:b4:49:5d:54:5d:20:9a:d9:55:80:84:62:03:12: 89:0f:2d:dd:bd:11:fd:3b:f5:a3:3d:c3:dd:01:fb: 20:73:c7:87:9b:c1:4c:48:63:a0:f9:e6:82:90:ae: 7a:c9:95:18:68:28:78:b3:3a:d4:c0:c0:6a:2c:79: e5:a8:1b:bf:9e:49:dc:85:0a:44:4b:82:7d:34:6b: 5f:67:7e:37:21:b8:f2:f1:ce:a7:58:71:65:f1:04: 13:b0:3b:c2:c8:23:d5:ac:e9:3d:81:56:8d:12:a3: fa:47:b1:20:d1:03:a2:52:9a:a9:51:76:50:ec:b6: c7:6a:78:3f:4a:a5:ec:69:c8:75:75:b8:fd:c9:43: ad:a6:27:b6:62:39:46:fd:c8:6c:a0:19:22:11:cf: 2e:2a:c2:9c:f5:a1:92:13:d1:af:6a:ba:41:ae:78: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:90:21:F1:2E:59:C9:07:9F:E8:13:47:D0:B2:8F:1E:E0:EC:60:F2 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:10:97:5e:dd:bd:09:5e:e5:2f:36:9f:d9:14:be:11:96:0e: e5:d7:44:cc:00:26:85:63:a5:20:09:fe:2b:9d:2c:03:53:26: 7a:65:14:0a:b5:64:b5:6d:8d:1f:9b:4b:28:c9:9e:39:f7:81: d5:4f:55:5c:63:90:83:03:d5:d3:ab:b7:a7:25:67:12:1a:0f: 12:aa:08:83:5d:30:50:8b:cb:b2:37:dc:7a:07:4f:b0:84:84: 3c:cd:88:ee:f4:b8:4e:11:50:cb:06:29:ba:29:7c:49:12:19: bb:79:06:47:d4:7d:80:12:5d:5a:44:39:c9:ea:44:5b:01:33: 5d:40:72:5c:a8:ff:e0:9f:b9:4d:29:c1:15:48:8c:3f:66:d2: c0:ce:17:bc:4c:48:55:3b:16:44:6f:a3:d0:e6:78:fa:07:9f: 6a:d6:5d:ff:e7:be:4a:35:bb:f8:a9:1f:35:4e:76:d8:3c:37: 13:4b:b5:24:88:1a:d0:92:60:35:4b:f2:23:dc:ed:a6:82:6d: 48:14:0f:08:38:e1:c5:55:a8:8e:fc:17:db:a6:98:db:eb:60: f8:1e:7b:e9:bd:7d:cd:44:f0:44:9a:9b:56:c4:70:6c:07:3c: c4:ab:9a:29:75:5d:e7:52:09:2a:e2:11:c6:4c:fc:ac:73:aa: fe:b8:88:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjQwNTE4MjE1NTM1WhcNMjQwNTI1MjE1NTM1WjAYMRYwFAYD VQQDEw02NjQ5MjNkNy0zZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnflVEQ2RukiaybYByZd4McFxdFr3H6jXlbmRz7+q1IME9Hxx+uUEXCGzen4E qpRuaLb/icjrV7eqig4MtmDDoHuUJjDFOa/fouEXDCC5ms6WJFI7SPL/FUK5tEld VF0gmtlVgIRiAxKJDy3dvRH9O/WjPcPdAfsgc8eHm8FMSGOg+eaCkK56yZUYaCh4 szrUwMBqLHnlqBu/nknchQpES4J9NGtfZ343Ibjy8c6nWHFl8QQTsDvCyCPVrOk9 gVaNEqP6R7Eg0QOiUpqpUXZQ7LbHang/SqXsach1dbj9yUOtpie2YjlG/chsoBki Ec8uKsKc9aGSE9GvarpBrnjepwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuQIfEu WckHn+gTR9Cyjx7g7GDyMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEJde3b0JXuUvNp/ZFL4Rlg7l10TMACaFY6UgCf4rnSwDUyZ6ZRQK tWS1bY0fm0soyZ4594HVT1VcY5CDA9XTq7enJWcSGg8SqgiDXTBQi8uyN9x6B0+w hIQ8zYju9LhOEVDLBim6KXxJEhm7eQZH1H2AEl1aRDnJ6kRbATNdQHJcqP/gn7lN KcEVSIw/ZtLAzhe8TEhVOxZEb6PQ5nj6B59q1l3/575KNbv4qR81TnbYPDcTS7Uk iBrQkmA1S/Ij3O2mgm1IFA8IOOHFVaiO/Bfbppjb62D4HnvpvX3NRPBEmptWxHBs BzzEq5opdV3nUgkq4hHGTPysc6r+uIhR -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org