$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json) Hash identifier: VgA7b6HPT+hRdhCO06263dzIAdb6vjq131c/0tQqxSs= Subject key identifier: 37:EF:A0:77:A3:A5:EE:1D:DC:B0:36:37:0F:7E:A4:4D:85:3F:E9:0B Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Certificate serial: 25C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft Manifest number: 25C5 Signing time: Sat 18 May 2024 15:59:20 +0000 Manifest this update: Sat 18 May 2024 15:59:20 +0000 Manifest next update: Sat 25 May 2024 15:59:20 +0000 Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: IpBXD1kdO0W4zpRwEnbI7plrfLe6nx/UqGLBPvrHJ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9669 (0x25c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523 Validity Not Before: May 18 15:59:20 2024 GMT Not After : May 25 15:59:20 2024 GMT Subject: CN=6648d058-3739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:62:b4:93:d6:82:d2:d2:df:55:69:73:54:0b: 3f:9e:d2:26:48:42:90:72:b7:d2:1a:f3:ee:a5:6c: cb:5e:5b:60:cc:8f:f2:e8:f5:8a:dd:db:7a:e5:e5: 35:24:ad:c5:8e:05:c7:5b:ec:87:4e:1f:0c:d2:5f: 21:f5:a5:81:c8:40:c1:82:89:b8:4e:42:6e:fb:44: a8:dd:0f:05:f7:bf:b6:02:f6:d0:82:ab:36:26:ba: 5b:85:36:19:79:fe:e4:29:79:ca:85:20:8f:08:c4: 4d:ca:e6:47:0d:0e:49:34:ab:80:94:ff:af:76:4f: 95:f0:c0:54:8b:22:59:96:8d:8c:35:1a:a8:34:a1: 4e:9c:47:b8:a8:ed:de:62:f9:af:73:d8:d5:3c:65: 48:34:60:52:b6:ec:d6:ed:f1:e2:13:93:c8:e2:3b: 43:15:61:95:61:29:17:31:9c:e5:6d:60:50:4f:41: 0f:b1:4e:b6:94:6c:ee:86:c2:fd:a8:71:51:d6:5e: 82:cc:4c:37:af:de:c0:49:cb:38:63:a2:8e:70:d7: ed:0a:a6:7b:a7:e8:6b:5d:0f:26:be:fc:c7:07:88: f2:33:1a:4e:95:38:ea:8d:87:eb:f7:37:3a:86:af: 00:e8:f1:d7:b7:1a:6e:3c:92:d0:27:30:38:7e:8a: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:A0:77:A3:A5:EE:1D:DC:B0:36:37:0F:7E:A4:4D:85:3F:E9:0B X509v3 Authority Key Identifier: keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e4:2a:16:ef:78:cd:02:72:9e:0b:2b:67:05:3f:d6:31:fb: d4:c3:60:aa:0f:08:2b:55:12:3d:f3:87:f6:4f:93:81:2e:19: 55:32:16:ce:cf:aa:f3:85:a6:b6:4e:3e:59:a8:fb:c8:cb:6e: 54:f8:15:d0:72:64:84:59:5e:73:24:07:fb:3f:27:8a:5c:f7: 0f:04:b2:dd:75:67:bb:ca:03:cd:05:f2:fe:94:63:ad:e9:8c: 91:05:dc:15:1e:72:f3:f8:51:26:fd:86:dc:77:d3:99:e5:d1: 5e:25:4a:57:28:ba:9f:ae:0c:90:5b:64:d9:28:50:80:cd:9f: 1e:07:7c:fe:fa:3f:ba:90:6b:75:a1:c8:e6:6f:f6:ae:f5:92: 65:ce:4a:67:55:2b:09:82:e4:a7:e5:b1:e6:27:3e:89:1e:01: 79:fe:e6:1a:df:be:3b:12:10:7f:70:6a:b1:ae:6f:48:9b:aa: fe:0e:45:11:f8:05:77:54:bc:d8:f6:2b:10:26:d9:60:ff:42: 50:67:46:22:7e:5b:ee:3a:fc:77:1e:34:a4:80:b8:84:8d:03: d1:29:2d:06:25:50:e2:01:cd:61:45:fd:b8:13:d8:07:a7:32: 3e:c2:13:ae:34:5d:59:69:5e:07:b1:21:59:5a:3a:07:d7:bd: 97:63:da:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz RENFRjQ1MjMwHhcNMjQwNTE4MTU1OTIwWhcNMjQwNTI1MTU1OTIwWjAYMRYwFAYD VQQDEw02NjQ4ZDA1OC0zNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/GK0k9aC0tLfVWlzVAs/ntImSEKQcrfSGvPupWzLXltgzI/y6PWK3dt65eU1 JK3FjgXHW+yHTh8M0l8h9aWByEDBgom4TkJu+0So3Q8F97+2AvbQgqs2JrpbhTYZ ef7kKXnKhSCPCMRNyuZHDQ5JNKuAlP+vdk+V8MBUiyJZlo2MNRqoNKFOnEe4qO3e Yvmvc9jVPGVINGBStuzW7fHiE5PI4jtDFWGVYSkXMZzlbWBQT0EPsU62lGzuhsL9 qHFR1l6CzEw3r97AScs4Y6KOcNftCqZ7p+hrXQ8mvvzHB4jyMxpOlTjqjYfr9zc6 hq8A6PHXtxpuPJLQJzA4foqf6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfvoHej pe4d3LA2Nw9+pE2FP+kLMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVFNi85NTcwQjJFNkRDRDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24x eS1NeHd1N1Zib2c5enZSU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP5CoW73jNAnKeCytnBT/WMfvUw2CqDwgrVRI984f2T5OBLhlVMhbO z6rzhaa2Tj5ZqPvIy25U+BXQcmSEWV5zJAf7PyeKXPcPBLLddWe7ygPNBfL+lGOt 6YyRBdwVHnLz+FEm/Ybcd9OZ5dFeJUpXKLqfrgyQW2TZKFCAzZ8eB3z++j+6kGt1 ocjmb/au9ZJlzkpnVSsJguSn5bHmJz6JHgF5/uYa3747EhB/cGqxrm9Im6r+DkUR +AV3VLzY9isQJtlg/0JQZ0YiflvuOvx3HjSkgLiEjQPRKS0GJVDiAc1hRf24E9gH pzI+whOuNF1ZaV4HsSFZWjoH172XY9rc -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org