$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft File: sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json) Hash identifier: iAkhnCr1A9Csxo/x7BssRTYN+PmNxuNkd+NXZR4Y5HA= Subject key identifier: 28:8A:62:95:34:3E:C5:AA:9B:59:72:C1:95:C3:28:6D:71:FB:25:9D Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 Certificate issuer: /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Certificate serial: 33C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft Manifest number: 33C8 Signing time: Fri 31 May 2024 15:20:24 +0000 Manifest this update: Fri 31 May 2024 15:20:23 +0000 Manifest next update: Fri 07 Jun 2024 15:20:23 +0000 Files and hashes: 1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: ga39Id6OpKVAQrDSzGfKoCTRGRIuLC8Cr5EZC26l7cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13256 (0x33c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140 Validity Not Before: May 31 15:20:23 2024 GMT Not After : Jun 7 15:20:23 2024 GMT Subject: CN=6659eab7-8a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:e6:b2:ed:b9:24:06:7c:47:e2:87:c9:95: ab:88:c5:83:bc:6e:7d:22:e8:f3:61:0c:2b:fb:1b: 8c:d5:d4:3f:4b:36:40:bc:1c:f6:25:08:fe:db:18: 46:33:e2:62:be:d5:22:3f:b4:29:a5:6f:07:a9:de: 39:2e:41:43:43:c9:4e:dc:35:b0:50:69:c6:ea:1a: a0:8a:95:79:f7:79:ad:2b:c5:04:c1:81:43:c5:c5: f9:70:1a:f1:c7:4b:87:76:73:b5:e7:53:e7:4f:9a: 1e:0c:8b:90:a4:e0:85:4c:22:11:72:f1:0d:f8:6c: 84:b4:86:8a:f5:7e:32:44:6e:95:02:4a:39:1d:8c: 6d:b4:79:55:a3:09:70:13:e4:d6:40:2e:83:f4:8d: 57:44:10:7e:4e:9b:4e:95:dc:67:5a:8f:35:eb:77: e1:fa:a1:69:8d:a6:b9:75:fb:0c:a3:a8:fe:a9:4b: 53:02:f2:de:6c:37:d7:29:fb:ef:29:63:00:0f:83: b4:a5:2a:d3:a0:75:d0:ed:2b:f6:b4:48:2f:ed:e6: e5:63:d0:34:44:2c:de:1d:ed:7d:dd:9e:07:35:00: 6f:fb:21:a4:87:d6:e2:04:3b:85:7a:da:31:5b:ff: f1:14:47:5c:30:af:e0:f6:74:2a:94:16:32:55:5d: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:62:95:34:3E:C5:AA:9B:59:72:C1:95:C3:28:6D:71:FB:25:9D X509v3 Authority Key Identifier: keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:07:64:1f:bf:f3:b7:c6:af:85:79:8d:34:3d:af:4c:5e:78: 69:72:19:5c:85:be:26:a5:a7:09:bd:24:c4:75:8b:17:7b:f2: 6f:1b:54:6d:b7:41:b2:37:da:fd:df:f5:e8:f5:e3:40:58:90: a3:12:69:99:dd:48:25:29:40:e9:e6:36:64:9f:9c:5d:ee:48: 8f:b7:9c:5c:3a:34:51:32:2f:88:55:8a:65:de:f2:9d:5f:00: a3:89:14:af:bf:ef:1b:e2:05:58:c0:40:21:fd:38:f9:00:ff: 59:0c:b1:ff:a4:a8:2a:45:ce:eb:06:da:d9:53:81:59:3a:6a: 2d:98:5d:b2:8e:00:0e:04:df:4b:67:c7:ef:79:3a:7e:c8:da: 6d:b5:a5:b2:10:87:e8:ac:cf:0f:46:45:f6:9d:2c:ab:ae:15: 8f:bf:6a:ae:aa:78:2d:93:33:f6:04:af:47:4f:e6:fc:90:f7: 03:ea:ef:d8:a9:df:19:23:15:bb:59:3d:25:d7:58:2d:50:8c: 34:34:03:4f:e6:68:61:60:54:88:9b:5a:9d:e0:76:d8:ce:7b: eb:fb:df:62:ac:0d:00:01:02:f0:fc:4f:80:a6:a6:cf:92:80: 08:70:77:fb:64:e4:f3:80:12:d3:fa:04:d1:e9:a0:11:50:39: aa:39:16:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQTkxMTAvBgNVBAUTKEIwQjg4RUVFOTEzQjJBQThEN0I1OTUzNzE1M0VGQ0Q4 NzAwQTkxNDAwHhcNMjQwNTMxMTUyMDIzWhcNMjQwNjA3MTUyMDIzWjAYMRYwFAYD VQQDEw02NjU5ZWFiNy04YTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbHmsu25JAZ8R+KHyZWriMWDvG59IujzYQwr+xuM1dQ/SzZAvBz2JQj+2xhG M+JivtUiP7QppW8Hqd45LkFDQ8lO3DWwUGnG6hqgipV593mtK8UEwYFDxcX5cBrx x0uHdnO151PnT5oeDIuQpOCFTCIRcvEN+GyEtIaK9X4yRG6VAko5HYxttHlVowlw E+TWQC6D9I1XRBB+TptOldxnWo8163fh+qFpjaa5dfsMo6j+qUtTAvLebDfXKfvv KWMAD4O0pSrToHXQ7Sv2tEgv7eblY9A0RCzeHe193Z4HNQBv+yGkh9biBDuFetox W//xFEdcMK/g9nQqlBYyVV1iWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiKYpU0 PsWqm1lywZXDKG1x+yWdMB8GA1UdIwQYMBaAFLC4ju6ROyqo17WVNxU+/NhwCpFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJBOS9ENzdGOTE0MjFE QTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0txalh0WlUzRlQ3ODJIQUtr VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMaU83cEU3S3FqWHRaVTNGVDc4MkhBS2tVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJBOS9ENzdGOTE0MjFEQTExMUUyQkZDQjMwOTQwOEIwMkNEMi9zTGlPN3BFN0tx alh0WlUzRlQ3ODJIQUtrVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5B2Qfv/O3xq+FeY00Pa9MXnhpchlchb4mpacJvSTEdYsXe/JvG1Rt t0GyN9r93/Xo9eNAWJCjEmmZ3UglKUDp5jZkn5xd7kiPt5xcOjRRMi+IVYpl3vKd XwCjiRSvv+8b4gVYwEAh/Tj5AP9ZDLH/pKgqRc7rBtrZU4FZOmotmF2yjgAOBN9L Z8fveTp+yNpttaWyEIforM8PRkX2nSyrrhWPv2quqngtkzP2BK9HT+b8kPcD6u/Y qd8ZIxW7WT0l11gtUIw0NANP5mhhYFSIm1qd4HbYznvr+99irA0AAQLw/E+ApqbP koAIcHf7ZOTzgBLT+gTR6aARUDmqORYc -----END CERTIFICATE-----Generated at Fri May 31 17:44:51 2024 by rpki-client on console-fra.rpki-client.org