$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: pojIg5L/KuXv5jt8ziPqzfZirqk/CZlhDWr9UZPBc3M= Subject key identifier: 31:C6:8A:27:9D:D4:34:1D:04:77:09:29:47:EA:B1:D9:F3:62:5D:98 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 15:31:20 +0000 Manifest this update: Sat 18 May 2024 15:31:19 +0000 Manifest next update: Sat 25 May 2024 15:31:19 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: k1WWpGiShiyZYtTl03cJKKE2plGn3gIYKDap5uVX4zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: May 18 15:31:19 2024 GMT Not After : May 25 15:31:19 2024 GMT Subject: CN=6648c9c7-3e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:63:a7:2f:25:11:5a:bc:c0:f2:ef:ce:b3: c1:d9:34:f2:65:f8:7b:6d:47:9d:ab:9b:5a:fd:bd: 0d:3d:26:84:4b:98:17:36:73:46:d4:64:8e:60:d2: 12:b3:bd:70:33:b8:a0:2d:af:8e:6c:3b:48:1c:61: 2b:0b:50:e6:1a:aa:35:4b:7a:a4:4c:9f:d3:53:a7: d3:f8:0c:73:a7:4a:3b:15:45:09:06:0b:20:b0:b9: 84:26:d5:c0:0e:a4:d5:a8:d8:1b:83:47:8c:a4:6e: ce:34:23:19:6f:e7:61:25:90:b2:73:fa:78:b3:02: ae:fd:64:05:50:36:1c:a8:20:6b:c4:8c:18:76:92: b3:89:13:22:af:3b:3d:0c:56:ba:cd:70:eb:46:e7: f4:d4:a4:f8:c9:29:ec:b6:c4:fa:b7:c3:53:be:19: 38:70:79:29:77:74:e6:15:1a:e7:01:cd:f9:ad:53: 2d:d3:d0:10:15:64:c3:c0:31:2e:ba:98:99:d4:84: 6d:da:6e:02:1c:8a:40:3f:7e:b1:47:7a:06:84:ea: 46:44:d2:23:de:61:6d:1e:bc:67:6a:f6:09:61:a8: a0:3b:2e:ea:25:23:21:bd:1a:71:68:c5:6e:9a:af: 3a:8e:97:cd:f9:26:10:c2:ce:cd:46:75:c2:4f:46: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:8A:27:9D:D4:34:1D:04:77:09:29:47:EA:B1:D9:F3:62:5D:98 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:fc:aa:a3:bf:01:15:02:21:ad:cd:66:06:88:d1:e1:f6:fd: e0:5f:ce:e5:7e:01:ab:6b:10:6a:50:c7:e7:15:c8:fb:6d:3c: 81:19:9e:e9:f7:6e:6f:00:0a:b0:a0:10:dc:12:ef:be:39:ec: 63:c7:45:36:59:e1:20:95:1a:58:f6:30:71:7c:b3:44:36:1a: e3:26:fa:9d:3d:d6:41:2a:be:7a:e7:52:a7:5a:00:2e:fd:c9: e8:39:42:4c:0c:b9:bc:9a:7c:a4:73:cb:bd:01:f6:32:b3:a9: 70:e1:9d:f2:54:47:a6:f8:2e:0a:c9:c5:fe:b2:19:98:2b:d0: bf:3e:57:cd:cd:c1:04:e4:97:bd:de:a0:76:f5:df:ad:43:7c: d9:2d:2e:c8:b0:71:71:f7:d2:6c:60:06:ed:a1:94:78:88:3c: ca:7e:b8:ab:af:eb:e6:80:fc:2e:3d:d9:43:a5:1e:8f:49:38: 0c:90:c0:22:05:33:f6:20:4a:c6:61:d7:7f:97:f8:24:c9:8a: d1:2d:67:c1:84:dd:d2:7e:4b:8b:8b:b5:f3:a6:41:b2:22:46: 63:bb:bb:75:b4:ed:09:4b:54:57:4e:5f:c9:0d:3e:62:83:3b: 7d:ca:36:7d:6c:52:5a:4b:98:1d:26:82:8a:ef:19:14:08:a0: 8d:04:ed:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjQwNTE4MTUzMTE5WhcNMjQwNTI1MTUzMTE5WjAYMRYwFAYD VQQDEw02NjQ4YzljNy0zZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO1jpy8lEVq8wPLvzrPB2TTyZfh7bUedq5ta/b0NPSaES5gXNnNG1GSOYNIS s71wM7igLa+ObDtIHGErC1DmGqo1S3qkTJ/TU6fT+Axzp0o7FUUJBgsgsLmEJtXA DqTVqNgbg0eMpG7ONCMZb+dhJZCyc/p4swKu/WQFUDYcqCBrxIwYdpKziRMirzs9 DFa6zXDrRuf01KT4ySnstsT6t8NTvhk4cHkpd3TmFRrnAc35rVMt09AQFWTDwDEu upiZ1IRt2m4CHIpAP36xR3oGhOpGRNIj3mFtHrxnavYJYaigOy7qJSMhvRpxaMVu mq86jpfN+SYQws7NRnXCT0ZTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHGiied 1DQdBHcJKUfqsdnzYl2YMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx/KqjvwEVAiGtzWYGiNHh9v3gX87lfgGraxBqUMfnFcj7bTyBGZ7p 925vAAqwoBDcEu++Oexjx0U2WeEglRpY9jBxfLNENhrjJvqdPdZBKr5651KnWgAu /cnoOUJMDLm8mnykc8u9AfYys6lw4Z3yVEem+C4KycX+shmYK9C/PlfNzcEE5Je9 3qB29d+tQ3zZLS7IsHFx99JsYAbtoZR4iDzKfrirr+vmgPwuPdlDpR6PSTgMkMAi BTP2IErGYdd/l/gkyYrRLWfBhN3SfkuLi7XzpkGyIkZju7t1tO0JS1RXTl/JDT5i gzt9yjZ9bFJaS5gdJoKK7xkUCKCNBO1Q -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org