$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: ewBAYj3HT1UK5hROieTZ1ge63pg/RPRg4OnLkJFO26A= Subject key identifier: 37:86:CE:8A:AA:78:A4:48:5D:CA:6B:8C:90:FE:DB:1F:D1:5A:E4:2D Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 02D7 Signing time: Fri 31 May 2024 03:59:43 +0000 Manifest this update: Fri 31 May 2024 03:59:42 +0000 Manifest next update: Fri 07 Jun 2024 03:59:42 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: 3Qb/Uk5W3CB1u1vZhXIpV1tAG8AnRFSZe4uDi9zzaQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: May 31 03:59:42 2024 GMT Not After : Jun 7 03:59:42 2024 GMT Subject: CN=66594b2f-2129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:1f:66:6f:73:a0:b0:68:f3:56:ab:d0:bd: 06:ed:74:1e:19:2d:38:47:28:03:0b:47:cb:10:7d: 58:07:1f:d2:b8:6e:9b:c3:0e:4b:11:21:6a:73:a6: ce:2b:5c:26:72:f8:52:85:64:56:fe:13:b0:03:09: d7:0f:07:65:1c:69:6a:66:f0:83:4c:ae:2e:ff:d3: 97:7e:3e:46:ce:c4:f8:83:1f:cf:1c:17:2e:f6:cc: 95:9e:95:53:c7:ec:12:17:6d:a5:55:b3:83:45:98: 7b:ee:37:34:2b:56:cf:c6:db:93:22:46:b5:c9:27: d3:05:32:ce:aa:94:65:98:ae:ca:e2:9b:9c:36:76: 90:5a:b3:4f:62:d7:c8:9e:21:88:e3:26:a5:f6:56: 5d:2f:e9:fa:3e:f9:36:cd:97:ea:c0:f8:0f:e8:c7: a3:16:8a:52:a3:9b:32:de:bd:69:e3:70:1d:ea:73: 86:a3:d2:17:4d:2c:df:1a:d6:ee:dd:5e:6b:15:51: 1b:f2:86:c1:94:d2:92:d1:35:10:64:35:c3:52:fe: 4e:e8:29:07:bd:c1:5e:5b:08:a1:f5:46:9e:5c:af: 81:2f:86:83:6a:43:72:98:03:06:ef:f3:e8:9c:3a: 44:2c:5c:ab:83:43:50:a5:6f:e6:75:10:db:cc:99: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:86:CE:8A:AA:78:A4:48:5D:CA:6B:8C:90:FE:DB:1F:D1:5A:E4:2D X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e9:7b:88:7a:b9:40:5e:89:52:f1:47:10:12:28:05:40:3c: af:40:9c:c1:ef:99:24:be:61:45:b6:5b:79:91:33:95:e9:38: 1c:73:76:68:87:bf:07:52:e0:dc:c0:76:1b:9e:ec:81:81:ec: 5e:21:a2:32:67:4a:17:ce:17:e4:a7:56:a8:9d:c6:60:b5:99: 3b:00:1d:be:be:80:d7:23:a9:7f:b6:61:c2:a5:17:aa:1b:d9: 49:c1:7a:fe:7b:db:03:92:30:6f:e2:98:ce:59:82:ba:59:1e: e6:f7:21:95:a3:dd:24:b4:a1:76:63:5f:1e:d4:cb:aa:6c:a5: 06:f5:53:05:53:b7:ef:f8:e2:9e:90:e3:29:8c:6d:c8:b3:de: 92:ee:3d:5a:b1:e8:26:fd:96:a5:38:8d:ad:77:29:03:88:f0: 52:d0:7c:c6:0d:55:c1:ac:ca:da:5e:83:e3:11:c7:14:d4:c0: 76:e4:05:91:f4:09:65:e0:8f:fb:ff:a6:c6:f1:11:b5:84:04: ad:ed:8a:9a:1f:fa:db:59:71:67:ee:a0:a5:6a:b6:63:d4:1e: ae:6e:ed:6c:c4:a5:4a:50:1d:73:d7:73:e3:41:cb:63:2c:d8: d9:37:6e:44:77:fe:1c:0d:59:8e:51:e3:ba:6f:f9:89:d4:ee: 7f:fb:59:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjQwNTMxMDM1OTQyWhcNMjQwNjA3MDM1OTQyWjAYMRYwFAYD VQQDEw02NjU5NGIyZi0yMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaYfZm9zoLBo81ar0L0G7XQeGS04RygDC0fLEH1YBx/SuG6bww5LESFqc6bO K1wmcvhShWRW/hOwAwnXDwdlHGlqZvCDTK4u/9OXfj5GzsT4gx/PHBcu9syVnpVT x+wSF22lVbODRZh77jc0K1bPxtuTIka1ySfTBTLOqpRlmK7K4pucNnaQWrNPYtfI niGI4yal9lZdL+n6Pvk2zZfqwPgP6MejFopSo5sy3r1p43Ad6nOGo9IXTSzfGtbu 3V5rFVEb8obBlNKS0TUQZDXDUv5O6CkHvcFeWwih9UaeXK+BL4aDakNymAMG7/Po nDpELFyrg0NQpW/mdRDbzJlllQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeGzoqq eKRIXcprjJD+2x/RWuQtMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/6XuIerlAXolS8UcQEigFQDyvQJzB75kkvmFFtlt5kTOV6Tgcc3Zo h78HUuDcwHYbnuyBgexeIaIyZ0oXzhfkp1aoncZgtZk7AB2+voDXI6l/tmHCpReq G9lJwXr+e9sDkjBv4pjOWYK6WR7m9yGVo90ktKF2Y18e1MuqbKUG9VMFU7fv+OKe kOMpjG3Is96S7j1asegm/ZalOI2tdykDiPBS0HzGDVXBrMraXoPjEccU1MB25AWR 9All4I/7/6bG8RG1hASt7YqaH/rbWXFn7qClarZj1B6ubu1sxKVKUB1z13PjQctj LNjZN25Ed/4cDVmOUeO6b/mJ1O5/+1nP -----END CERTIFICATE-----Generated at Fri May 31 04:54:02 2024 by rpki-client on console-fra.rpki-client.org