$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json) Hash identifier: 9c4CDIA8wyU6eDgYmT+yM+jmQza+NwkNVYgCyhlj1yA= Subject key identifier: 15:5F:18:7F:10:DB:E4:86:3E:79:7E:56:65:32:76:56:E0:C3:46:EA Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft Manifest number: 33C4 Signing time: Sat 18 May 2024 15:17:21 +0000 Manifest this update: Sat 18 May 2024 15:17:21 +0000 Manifest next update: Sat 25 May 2024 15:17:21 +0000 Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: LJvUDo/DX8ddSVXAt8t8NOowvPpfbUHIHbH7iV9EGWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Validity Not Before: May 18 15:17:21 2024 GMT Not After : May 25 15:17:21 2024 GMT Subject: CN=6648c681-19bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:51:75:0b:be:a7:fa:81:ff:a3:28:47:54: 86:0f:c8:01:d6:fb:98:5c:32:9c:69:7f:c6:7e:5e: 4a:57:19:64:57:6c:ef:12:52:1d:f1:a2:46:9b:cf: 16:65:bf:bc:a6:86:8d:a8:0b:a9:ba:42:09:51:c9: d9:4e:ef:0d:b8:66:22:15:e3:bc:8b:e4:fc:88:53: 2f:4a:76:a6:95:0f:79:08:3f:9d:49:9b:20:97:bd: d5:1c:3a:11:db:77:df:6f:db:97:c1:bd:b8:53:86: 53:b9:b3:1c:0b:86:38:c1:98:4b:b1:a0:79:da:89: 9a:04:44:bf:5a:cd:23:a2:cf:de:9d:90:42:9b:f5: d7:26:bf:33:79:b4:1e:f0:39:9a:d1:46:42:e4:d1: 5b:76:1b:2d:39:25:93:75:aa:a6:d5:66:41:68:d4: b9:ab:26:0b:5d:ec:92:cb:35:b3:9a:23:37:26:06: dd:1e:01:7f:6a:74:c3:d9:06:0d:98:b8:14:a9:46: bb:41:10:e1:94:1c:56:24:54:e1:a2:c5:7d:41:2e: aa:84:2b:6f:69:c6:7c:e5:80:36:82:8e:eb:9d:38: d9:74:71:56:fe:08:01:5d:f5:35:ce:34:ff:40:13: 86:25:38:e9:a1:1f:f0:21:de:e6:19:2a:94:9a:95: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5F:18:7F:10:DB:E4:86:3E:79:7E:56:65:32:76:56:E0:C3:46:EA X509v3 Authority Key Identifier: keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d6:06:ee:44:9f:d5:35:2f:60:88:6c:e6:bf:98:f3:86:6d: 88:35:d7:65:cc:9e:63:b3:b0:48:2e:00:04:c4:57:ca:2b:35: e0:46:0f:28:12:f0:3f:0b:29:9b:7a:29:dc:d6:bd:20:ec:74: dd:c9:91:a0:5c:a0:83:5e:63:c7:5c:a9:c3:fe:f3:8e:37:94: fd:e5:fd:b1:57:09:6b:5c:1d:e8:e8:e2:fb:88:e8:1a:9f:f4: 9e:e3:3b:fc:ba:99:e4:ff:d3:ab:4a:27:7c:9d:06:e3:0c:0e: fb:a5:2b:27:c0:68:2a:8a:de:d5:b5:c9:5d:0e:ad:15:d6:ad: 32:42:d3:4c:09:5b:46:82:2b:0c:14:b9:13:2a:75:76:cc:82: c3:ff:8e:aa:4f:18:4b:4c:11:e7:0f:73:7c:95:2e:46:e1:a3: 41:0c:df:74:c6:44:8e:05:15:92:99:2d:01:3a:18:bf:dd:12: b8:e2:60:ba:25:b5:aa:82:b4:66:31:82:54:44:d5:d7:ad:c2: 45:4b:3c:b1:56:8f:45:ce:7c:c0:0d:b1:61:32:d0:c0:6a:d6: 17:5c:94:2e:25:50:81:6d:fc:07:2b:88:43:f2:2c:41:c7:39: 2b:97:99:38:da:ba:a3:73:59:cc:de:64:7d:ba:aa:53:98:45: 82:3c:a0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUyNDdGMERGRjBD Rjk4N0YxQzIwHhcNMjQwNTE4MTUxNzIxWhcNMjQwNTI1MTUxNzIxWjAYMRYwFAYD VQQDEw02NjQ4YzY4MS0xOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymBRdQu+p/qB/6MoR1SGD8gB1vuYXDKcaX/Gfl5KVxlkV2zvElId8aJGm88W Zb+8poaNqAupukIJUcnZTu8NuGYiFeO8i+T8iFMvSnamlQ95CD+dSZsgl73VHDoR 23ffb9uXwb24U4ZTubMcC4Y4wZhLsaB52omaBES/Ws0jos/enZBCm/XXJr8zebQe 8Dma0UZC5NFbdhstOSWTdaqm1WZBaNS5qyYLXeySyzWzmiM3JgbdHgF/anTD2QYN mLgUqUa7QRDhlBxWJFThosV9QS6qhCtvacZ85YA2go7rnTjZdHFW/ggBXfU1zjT/ QBOGJTjpoR/wId7mGSqUmpVf7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVfGH8Q 2+SGPnl+VmUydlbgw0bqMB8GA1UdIwQYMBaAFH/8WinnX56+B50FJH8N/wz5h/HC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEM2Ny9CRjNGQzJGQTFE QTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5yNEhuUVVrZnczX0RQbUg4 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeGFLZWRmbnI0SG5RVWtmdzNfRFBtSDhjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5y NEhuUVVrZnczX0RQbUg4Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC81gbuRJ/VNS9giGzmv5jzhm2INddlzJ5js7BILgAExFfKKzXgRg8o EvA/Cymbeinc1r0g7HTdyZGgXKCDXmPHXKnD/vOON5T95f2xVwlrXB3o6OL7iOga n/Se4zv8upnk/9OrSid8nQbjDA77pSsnwGgqit7VtcldDq0V1q0yQtNMCVtGgisM FLkTKnV2zILD/46qTxhLTBHnD3N8lS5G4aNBDN90xkSOBRWSmS0BOhi/3RK44mC6 JbWqgrRmMYJURNXXrcJFSzyxVo9FznzADbFhMtDAatYXXJQuJVCBbfwHK4hD8ixB xzkrl5k42rqjc1nM3mR9uqpTmEWCPKAD -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org