$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: /Vg53hUS3ixSFBtW+/TEoYg0rxCbx0qebj/ZM/2rvN4= Subject key identifier: 09:18:4D:C2:68:62:FA:21:75:3A:B7:14:A9:F6:A5:3E:B8:EC:6C:C4 Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 33D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 33D1 Signing time: Sat 18 May 2024 15:32:14 +0000 Manifest this update: Sat 18 May 2024 15:32:14 +0000 Manifest next update: Sat 25 May 2024 15:32:14 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: pMr6AaxaIN0ATJ4xCCM72r2v4upEIWWqj9LVvdepSHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13265 (0x33d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: May 18 15:32:14 2024 GMT Not After : May 25 15:32:14 2024 GMT Subject: CN=6648c9fe-f1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:04:0d:bf:58:86:ad:66:7b:8c:4b:fb:cf: 4d:58:4c:13:ef:8d:e6:07:0b:38:6b:15:60:a7:c4: 8e:7d:c4:0f:f9:0d:1f:e7:db:f7:38:66:1c:1e:f8: 48:ca:4b:d3:7e:26:70:e6:16:69:95:dc:f5:68:70: d1:cf:76:80:0c:16:4d:a6:35:fc:8a:1a:e4:5c:89: 8e:2b:03:e3:ad:37:cf:96:d7:a5:7b:ac:42:11:08: 18:1d:4d:2f:e4:15:ad:fe:7a:db:70:09:59:51:95: 46:8b:20:44:f1:88:eb:b3:ca:0a:52:5f:a8:cc:8f: 7f:a4:40:10:ef:64:e0:ee:79:81:60:c6:5f:c9:0a: 81:d8:4b:02:2e:df:9c:51:ab:c9:e5:a7:4d:ad:ce: ce:63:d9:a3:5e:c5:97:11:a5:30:83:a4:2a:e9:68: 79:61:58:64:1b:49:be:e1:fa:e2:34:b4:b4:b3:19: c5:83:5c:4a:a1:da:42:f4:e8:7c:fe:ba:08:72:66: 3f:c4:8d:87:a8:68:88:65:1b:ac:97:74:5e:ce:31: 58:1f:bd:94:56:6e:19:b1:68:41:2a:3a:38:88:40: ef:27:11:b5:b4:a5:9f:ec:3a:f2:d1:a5:cf:3e:86: bb:43:d8:cf:0d:ef:ea:8d:1b:42:aa:10:2a:08:55: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:4D:C2:68:62:FA:21:75:3A:B7:14:A9:F6:A5:3E:B8:EC:6C:C4 X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:e8:44:ca:73:1f:c6:34:57:c1:4d:b5:18:b2:b6:64:38: 5e:41:a5:3f:77:5d:5b:27:0b:43:e8:54:2e:76:a3:f9:66:a2: 94:ad:5a:d5:ce:b0:a4:53:32:1d:5d:df:2a:9b:a8:f6:43:e3: 06:d2:8a:62:50:1f:75:ec:62:cd:6d:14:e9:11:cd:7d:c5:c5: 04:da:f7:c5:0f:c0:64:ce:a5:72:74:9e:67:03:b0:35:09:0b: 94:2d:c9:c2:d2:ce:aa:9f:a2:cf:76:0c:3c:e2:7f:89:17:db: 5f:e8:90:f4:76:0a:cb:db:fc:f1:7e:20:c8:87:22:77:5c:73: a0:f4:bb:60:a9:49:09:e7:22:c8:f5:4f:ac:62:05:ba:d2:6e: 8c:bf:ef:bf:b2:9e:a5:42:ed:0d:b1:d2:1c:56:5a:50:9a:a1: 83:c6:38:88:6e:d6:92:a2:10:89:09:36:ce:79:01:58:57:c1: 89:ed:28:64:41:9e:9c:34:42:47:8b:f4:d0:62:35:3c:f0:f3: a7:92:4e:2b:31:f4:f6:c2:4f:cf:3f:ac:4f:c3:cb:13:5d:22: 45:9a:5b:1f:7b:a6:e9:3c:34:48:3b:5f:98:5d:b5:9e:30:84: ae:69:1a:66:49:62:a1:e6:81:e3:fb:27:88:42:bb:6f:52:9a: 14:2b:a2:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjQwNTE4MTUzMjE0WhcNMjQwNTI1MTUzMjE0WjAYMRYwFAYD VQQDEw02NjQ4YzlmZS1mMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktcEDb9Yhq1me4xL+89NWEwT743mBws4axVgp8SOfcQP+Q0f59v3OGYcHvhI ykvTfiZw5hZpldz1aHDRz3aADBZNpjX8ihrkXImOKwPjrTfPltele6xCEQgYHU0v 5BWt/nrbcAlZUZVGiyBE8Yjrs8oKUl+ozI9/pEAQ72Tg7nmBYMZfyQqB2EsCLt+c UavJ5adNrc7OY9mjXsWXEaUwg6Qq6Wh5YVhkG0m+4friNLS0sxnFg1xKodpC9Oh8 /roIcmY/xI2HqGiIZRusl3RezjFYH72UVm4ZsWhBKjo4iEDvJxG1tKWf7Dry0aXP Poa7Q9jPDe/qjRtCqhAqCFVp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkYTcJo YvohdTq3FKn2pT647GzEMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBINehEynMfxjRXwU21GLK2ZDheQaU/d11bJwtD6FQudqP5ZqKUrVrV zrCkUzIdXd8qm6j2Q+MG0opiUB917GLNbRTpEc19xcUE2vfFD8BkzqVydJ5nA7A1 CQuULcnC0s6qn6LPdgw84n+JF9tf6JD0dgrL2/zxfiDIhyJ3XHOg9LtgqUkJ5yLI 9U+sYgW60m6Mv++/sp6lQu0NsdIcVlpQmqGDxjiIbtaSohCJCTbOeQFYV8GJ7Shk QZ6cNEJHi/TQYjU88POnkk4rMfT2wk/PP6xPw8sTXSJFmlsfe6bpPDRIO1+YXbWe MISuaRpmSWKh5oHj+yeIQrtvUpoUK6Jm -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org