$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: 2wCfN4yBHod06sD9QSTSPwCkRqjN0rNlMlGVEf/b+S4= Subject key identifier: AD:C7:DE:05:CC:FE:5A:C1:E8:9B:AA:D1:DA:89:DC:80:93:84:62:BA Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 33C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 33C0 Signing time: Sat 18 May 2024 15:20:34 +0000 Manifest this update: Sat 18 May 2024 15:20:33 +0000 Manifest next update: Sat 25 May 2024 15:20:33 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: HIty8+7cR19YO0XHeuoUzJqKf4UZ0ugRGooss0BTZgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13248 (0x33c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: May 18 15:20:33 2024 GMT Not After : May 25 15:20:33 2024 GMT Subject: CN=6648c742-01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:4e:30:14:d6:ef:46:8c:90:93:8a:ab:d5: 09:92:93:0d:33:64:f7:6c:54:15:39:81:09:4b:10: 97:ba:d9:52:86:7d:cd:1b:68:eb:c0:b5:98:65:07: 0c:89:ae:67:85:5d:ad:ef:e8:f2:0d:60:88:90:c8: de:57:58:0b:ac:8e:24:2b:cf:f1:1c:81:63:35:4e: 9c:2f:b9:53:b2:87:2e:82:72:4a:03:bb:86:f7:d9: b6:4e:f1:07:fd:e3:33:4b:f1:2c:96:8e:b5:73:d7: 71:30:59:e7:6b:95:20:fd:70:42:bb:e0:35:07:df: fd:f5:c4:dc:16:7c:9e:27:a8:61:7b:b1:19:5f:a4: 93:88:c3:df:96:dc:d8:41:be:41:0d:02:85:72:71: aa:78:e0:09:7e:95:3d:95:a7:a1:b8:16:1b:cf:5a: 9c:54:ea:29:03:96:35:a5:cf:d3:9f:a6:08:05:f2: b2:48:d7:e0:e3:90:3c:07:b2:f7:0f:fc:16:8f:3a: 94:93:85:c0:d0:b8:de:3b:a8:fd:99:b2:5f:73:62: 31:51:39:21:30:79:bd:15:3a:5d:34:7b:f0:73:01: 87:df:22:db:61:c9:f0:4d:27:4a:c1:f9:d0:94:33: e2:9d:b0:3a:d8:c7:aa:1e:50:15:b8:81:3a:77:e7: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C7:DE:05:CC:FE:5A:C1:E8:9B:AA:D1:DA:89:DC:80:93:84:62:BA X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:6f:7f:d1:54:ac:b7:40:18:e7:22:ca:ae:e5:2d:90:1a:ba: 07:47:42:e3:c1:dd:57:25:48:32:4d:cc:2f:ed:d4:33:16:cf: 2d:34:c1:54:c0:80:25:fe:f6:8d:f4:f6:a2:78:ea:b3:46:48: b2:4e:97:8a:b6:63:83:97:8c:75:76:ce:7d:90:ab:31:31:1d: 9c:fb:d5:2a:ed:85:03:a1:02:af:09:cb:92:dc:9f:e7:3c:3b: 7b:19:fd:b1:3f:29:69:58:25:95:7f:8e:9f:a9:fc:dd:e4:73: 20:fe:d0:89:28:f1:ff:42:7b:f9:8c:b8:e4:b6:ee:81:84:21: 4c:e2:b2:24:e2:50:ab:b9:ad:70:a9:14:d0:d4:e6:13:eb:03: 5c:92:44:83:83:44:84:f1:6a:a5:5a:1f:70:99:9c:3c:2d:7d: 5b:90:94:7d:b0:57:12:fc:cd:51:13:fa:b5:00:90:52:c3:41: 0c:18:28:ca:16:a8:f9:27:7e:3a:e2:d9:bd:61:86:eb:81:1c: 52:72:7f:21:fb:17:d2:4e:77:4c:bb:36:b2:c3:56:4a:f9:a4: a0:10:f2:e2:f9:e6:b4:4f:a1:dc:34:2b:5f:5e:8e:0e:68:45: 23:8c:96:74:de:65:89:61:fc:09:a4:a5:6a:66:60:c4:57:b0: ca:5c:6b:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjQwNTE4MTUyMDMzWhcNMjQwNTI1MTUyMDMzWjAYMRYwFAYD VQQDEw02NjQ4Yzc0Mi0wMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoxOMBTW70aMkJOKq9UJkpMNM2T3bFQVOYEJSxCXutlShn3NG2jrwLWYZQcM ia5nhV2t7+jyDWCIkMjeV1gLrI4kK8/xHIFjNU6cL7lTsocugnJKA7uG99m2TvEH /eMzS/Eslo61c9dxMFnna5Ug/XBCu+A1B9/99cTcFnyeJ6hhe7EZX6STiMPfltzY Qb5BDQKFcnGqeOAJfpU9laehuBYbz1qcVOopA5Y1pc/Tn6YIBfKySNfg45A8B7L3 D/wWjzqUk4XA0LjeO6j9mbJfc2IxUTkhMHm9FTpdNHvwcwGH3yLbYcnwTSdKwfnQ lDPinbA62MeqHlAVuIE6d+dqFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3H3gXM /lrB6Juq0dqJ3ICThGK6MB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCb3/RVKy3QBjnIsqu5S2QGroHR0Ljwd1XJUgyTcwv7dQzFs8tNMFU wIAl/vaN9PaieOqzRkiyTpeKtmODl4x1ds59kKsxMR2c+9Uq7YUDoQKvCcuS3J/n PDt7Gf2xPylpWCWVf46fqfzd5HMg/tCJKPH/Qnv5jLjktu6BhCFM4rIk4lCrua1w qRTQ1OYT6wNckkSDg0SE8WqlWh9wmZw8LX1bkJR9sFcS/M1RE/q1AJBSw0EMGCjK Fqj5J3464tm9YYbrgRxScn8h+xfSTndMuzayw1ZK+aSgEPLi+ea0T6HcNCtfXo4O aEUjjJZ03mWJYfwJpKVqZmDEV7DKXGs+ -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org