$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json) Hash identifier: EhRuwqX0FmZPoEpWz1cR8JOWSx7GP7+0QIuBDq/DDQM= Subject key identifier: 4E:30:CF:2D:93:9B:EB:C9:1B:70:8B:9B:0A:14:58:48:98:AE:0B:BE Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Certificate serial: 16AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft Manifest number: 19E7 Signing time: Sat 18 May 2024 17:07:15 +0000 Manifest this update: Sat 18 May 2024 17:07:15 +0000 Manifest next update: Sat 25 May 2024 17:07:15 +0000 Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: XZOGR2PMf9XglSSQ6On8L0SPgBCqq8z0VGlmVP2LbNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5802 (0x16aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D Validity Not Before: May 18 17:07:15 2024 GMT Not After : May 25 17:07:15 2024 GMT Subject: CN=6648e043-d89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:13:5c:db:d0:87:0c:e4:6a:64:6e:fb:b2: c1:93:0b:f2:46:7e:d7:7e:1e:6d:c8:49:b1:70:ea: b2:44:b4:ab:72:97:e9:88:12:3c:89:fb:78:06:28: e6:84:30:6d:4c:fc:16:d6:c0:03:91:c2:d5:55:c2: 11:2b:c0:ad:41:a3:2a:05:88:75:ce:2f:b0:63:21: 3d:f1:0f:7d:bf:cf:c8:f1:88:e3:79:3a:72:b3:ca: b1:e7:7e:f5:3d:98:18:c1:39:cc:10:54:10:5f:d6: 6a:2a:fa:59:0e:2d:52:26:9c:de:33:8a:40:5b:8c: 72:30:ac:37:e2:57:69:ae:2b:0e:a0:ae:bc:19:93: 43:eb:8c:d8:d9:e0:30:d4:80:69:7a:25:3a:2a:cd: d2:53:b9:16:ae:ae:0e:7d:10:7f:f9:c8:7e:31:14: 99:d0:07:c8:e3:94:9c:b6:fb:4e:8c:20:02:a6:30: 8c:60:51:a8:da:cf:e0:c6:5d:81:50:bb:22:03:17: e3:6a:26:b8:85:70:00:fc:e4:0b:68:c1:d2:a0:92: dd:7b:e8:9c:af:c8:05:af:31:65:90:ad:78:ac:c9: 53:ce:4d:13:6f:01:f8:91:e8:3c:58:5f:8a:0d:58: 78:7d:61:69:7a:d1:cb:85:cb:ce:76:f9:b9:55:93: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:CF:2D:93:9B:EB:C9:1B:70:8B:9B:0A:14:58:48:98:AE:0B:BE X509v3 Authority Key Identifier: keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a6:7d:6a:19:f6:90:ec:96:f5:b8:e2:a2:f3:d5:fb:de:80: 0e:8d:91:d3:47:c4:38:1d:9a:94:1b:ae:2a:7a:bb:fb:62:5a: 4d:6f:9c:3f:39:c9:8b:da:8f:3a:23:db:8a:6e:33:5b:c0:81: 02:06:4a:1d:f8:34:89:f8:fb:1f:0f:34:fd:13:87:1d:29:00: 0a:9e:d3:a5:af:5b:cf:09:ee:f7:95:3f:0e:8a:6e:a6:15:f6: d7:6d:1c:66:99:44:36:3e:5f:fc:89:c1:c6:42:6e:18:84:bb: 1e:22:94:28:6d:26:f1:75:8d:9b:2b:3b:27:62:dd:8c:fe:6d: 4f:f5:8c:23:ef:74:5f:09:ff:a5:c3:a7:94:44:02:99:57:4a: 52:04:18:ad:95:11:2f:bc:9b:af:43:0a:f6:da:a3:fa:bf:df: 81:0f:00:8b:73:e8:a9:be:cc:4b:7d:d2:2e:96:ef:4f:ff:15: a2:cc:41:a8:bb:95:5a:c2:bd:f1:f5:31:80:5d:6e:e1:70:9a: 93:3e:b0:6e:9a:f1:0b:99:cb:5f:98:fa:ad:d9:87:22:ef:7b: 5e:f5:fe:d4:ca:24:3b:e0:3d:f3:e9:1a:b2:6b:4c:c2:0f:e1: e2:f7:f0:04:88:66:08:b5:36:43:db:b0:9c:d1:6f:9a:49:9f: 02:52:6e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKDk5REUyQzM3RDFBNjJCQThCOTdCNUExQ0ZEMkNEMjk0 MEIwRDREMEQwHhcNMjQwNTE4MTcwNzE1WhcNMjQwNTI1MTcwNzE1WjAYMRYwFAYD VQQDEw02NjQ4ZTA0My1kODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ngTXNvQhwzkamRu+7LBkwvyRn7Xfh5tyEmxcOqyRLSrcpfpiBI8ift4Bijm hDBtTPwW1sADkcLVVcIRK8CtQaMqBYh1zi+wYyE98Q99v8/I8YjjeTpys8qx5371 PZgYwTnMEFQQX9ZqKvpZDi1SJpzeM4pAW4xyMKw34ldprisOoK68GZND64zY2eAw 1IBpeiU6Ks3SU7kWrq4OfRB/+ch+MRSZ0AfI45SctvtOjCACpjCMYFGo2s/gxl2B ULsiAxfjaia4hXAA/OQLaMHSoJLde+icr8gFrzFlkK14rMlTzk0TbwH4keg8WF+K DVh4fWFpetHLhcvOdvm5VZNKNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4wzy2T m+vJG3CLmwoUWEiYrgu+MB8GA1UdIwQYMBaAFJneLDfRpiuouXtaHP0s0pQLDU0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2aTVlMW9jX1N6U2xBc05U UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kNHNOOUdtSzZpNWUxb2NfU3pTbEFzTlRRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi9tZDRzTjlHbUs2 aTVlMW9jX1N6U2xBc05UUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9pn1qGfaQ7Jb1uOKi89X73oAOjZHTR8Q4HZqUG64qerv7YlpNb5w/ OcmL2o86I9uKbjNbwIECBkod+DSJ+PsfDzT9E4cdKQAKntOlr1vPCe73lT8Oim6m FfbXbRxmmUQ2Pl/8icHGQm4YhLseIpQobSbxdY2bKzsnYt2M/m1P9Ywj73RfCf+l w6eURAKZV0pSBBitlREvvJuvQwr22qP6v9+BDwCLc+ipvsxLfdIulu9P/xWizEGo u5Vawr3x9TGAXW7hcJqTPrBumvELmctfmPqt2Yci73te9f7UyiQ74D3z6Rqya0zC D+Hi9/AEiGYItTZD27Cc0W+aSZ8CUm4r -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org