$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: els8RhdjonzBVUaDzUQV/Mgv4ksh0FgEuBPDfhNkPmA= Subject key identifier: 94:43:2D:4B:3F:E8:14:02:9F:DB:2F:73:EB:BE:69:EA:B6:53:60:C4 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 07D1 Signing time: Sat 18 May 2024 22:00:38 +0000 Manifest this update: Sat 18 May 2024 22:00:38 +0000 Manifest next update: Sat 25 May 2024 22:00:38 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: ioy83j6/HoLP3VLlbJnoIkD5bi6rdpyF7mhpiCvfVBs=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: kEjhsheyDbIM2EcMESQDDEPLTz/Beye9fTIUh7y/Pco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: May 18 22:00:38 2024 GMT Not After : May 25 22:00:38 2024 GMT Subject: CN=66492506-4ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:08:c1:1c:53:ee:8b:b3:94:f9:cb:ae:bf: c2:97:7b:b0:89:9e:b8:17:16:cf:8a:1b:25:9c:44: 9b:b8:eb:30:19:89:38:b4:77:8a:c0:9e:29:31:c0: b6:8c:62:f7:ea:12:b7:29:cd:79:4f:60:f0:a7:17: da:7e:b3:e8:7f:bb:cd:ee:9f:fd:7b:cf:c8:9d:e0: 80:6f:89:47:05:37:41:3e:75:c0:20:99:d5:a1:b1: 1a:3d:36:49:95:f6:4f:e3:ce:b2:41:ce:06:f4:5e: ac:27:0d:6d:b5:49:8a:e2:e2:a4:12:e3:bc:b2:35: 0e:f4:c7:8b:3a:8a:f6:42:51:3a:46:d8:95:63:64: 32:da:53:25:c2:c0:b1:68:2c:a5:3c:11:a5:d1:d3: a6:b6:37:fd:f3:00:5e:9f:2a:c3:12:ed:68:6c:04: 89:4d:c6:06:b1:3b:36:83:fc:b7:a4:c6:9c:53:d7: 2a:ee:13:bf:db:f2:46:c1:ac:88:54:76:d8:81:41: 70:38:8e:97:86:15:b7:24:3d:ca:a7:1c:11:60:11: 1d:29:4d:ad:14:50:1c:3e:d6:7e:c4:3a:75:90:95: 35:44:16:23:7f:3a:3d:34:5b:fc:b2:e8:79:4b:f7: 1f:16:0f:f1:5c:fa:97:0b:ed:8d:1b:7d:1e:a7:58: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:2D:4B:3F:E8:14:02:9F:DB:2F:73:EB:BE:69:EA:B6:53:60:C4 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e0:06:bd:23:31:83:23:15:9c:0e:5a:46:40:d8:48:d1:cc: d8:8c:ba:7d:8d:2a:02:56:8c:51:bf:49:bb:13:02:b7:41:da: 71:c5:d8:57:94:f0:b9:aa:a8:50:d9:2c:c4:34:12:8c:91:dd: 92:ec:64:2c:c1:5e:d9:0e:90:c1:67:bc:33:91:c5:93:28:2e: 2c:7d:52:06:59:fd:74:0a:0c:7e:f0:05:bd:4b:2c:30:21:08: 78:93:0b:5b:97:20:d2:41:2e:b0:a7:63:44:3a:0f:91:3e:b6: ba:1b:f9:ab:87:ba:17:06:c9:81:61:db:bf:3a:97:e9:d4:b8: 14:ee:40:b0:be:77:7f:33:df:00:5f:1f:aa:c1:89:c6:97:b1: 53:b1:be:ee:04:2d:87:09:ab:b2:5e:61:52:dd:89:33:4c:36: ef:27:8d:4e:fc:1e:ad:77:15:fc:3c:da:ed:8a:68:d7:c0:09: 1e:f1:c7:35:3b:38:46:6a:26:41:4f:62:89:82:be:c2:3b:0a: a2:a1:98:f9:48:b2:7f:df:34:07:f8:ae:1a:83:74:86:b7:62: b0:73:3d:72:b9:a5:32:9b:c7:56:52:6c:42:c6:fd:6f:09:5e: 87:dc:bc:7d:56:a4:44:64:e8:11:97:a5:06:50:d0:2b:71:58: af:ad:90:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjQwNTE4MjIwMDM4WhcNMjQwNTI1MjIwMDM4WjAYMRYwFAYD VQQDEw02NjQ5MjUwNi00ZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEAIwRxT7ouzlPnLrr/Cl3uwiZ64FxbPihslnESbuOswGYk4tHeKwJ4pMcC2 jGL36hK3Kc15T2DwpxfafrPof7vN7p/9e8/IneCAb4lHBTdBPnXAIJnVobEaPTZJ lfZP486yQc4G9F6sJw1ttUmK4uKkEuO8sjUO9MeLOor2QlE6RtiVY2Qy2lMlwsCx aCylPBGl0dOmtjf98wBenyrDEu1obASJTcYGsTs2g/y3pMacU9cq7hO/2/JGwayI VHbYgUFwOI6XhhW3JD3KpxwRYBEdKU2tFFAcPtZ+xDp1kJU1RBYjfzo9NFv8suh5 S/cfFg/xXPqXC+2NG30ep1hJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRDLUs/ 6BQCn9svc+u+aeq2U2DEMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk4Aa9IzGDIxWcDlpGQNhI0czYjLp9jSoCVoxRv0m7EwK3QdpxxdhX lPC5qqhQ2SzENBKMkd2S7GQswV7ZDpDBZ7wzkcWTKC4sfVIGWf10Cgx+8AW9Syww IQh4kwtblyDSQS6wp2NEOg+RPra6G/mrh7oXBsmBYdu/Opfp1LgU7kCwvnd/M98A Xx+qwYnGl7FTsb7uBC2HCauyXmFS3YkzTDbvJ41O/B6tdxX8PNrtimjXwAke8cc1 OzhGaiZBT2KJgr7COwqioZj5SLJ/3zQH+K4ag3SGt2Kwcz1yuaUym8dWUmxCxv1v CV6H3Lx9VqREZOgRl6UGUNArcVivrZB3 -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org