$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft File: aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json) Hash identifier: GkAmWeDjqKILKO5pCuDN5hQNp9AVMXT5JuFIkVmqtM0= Subject key identifier: C0:41:DF:03:BC:B2:68:C3:E4:47:4A:A9:60:E0:15:28:F5:79:70:A0 Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC Certificate issuer: /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 15:17:57 +0000 Manifest this update: Sat 18 May 2024 15:17:56 +0000 Manifest next update: Sat 25 May 2024 15:17:56 +0000 Files and hashes: 1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: FW974tI1kcdwq7yQcY6Hkp5cHDjrbMNu2KyDK57fbQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Validity Not Before: May 18 15:17:56 2024 GMT Not After : May 25 15:17:56 2024 GMT Subject: CN=6648c6a4-66dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:72:b0:cb:ba:30:80:bf:99:bf:73:fb:b8: 60:33:71:20:ce:57:75:34:8b:71:13:99:7f:8e:18: 9b:63:63:69:07:7d:ed:de:b8:ad:78:1c:5d:4a:b1: 54:3b:7e:6e:e4:64:be:33:7c:9b:95:53:98:0b:b5: c8:b1:11:37:dd:54:2d:79:84:0f:e8:42:2d:7b:68: 98:00:30:3d:f1:b3:6c:d1:7c:f5:7d:84:36:ce:24: 20:61:7e:57:24:98:02:8d:4e:c2:67:57:91:de:fc: 3d:1e:9a:81:7f:34:c5:a9:42:6f:b1:6f:c9:0d:fa: c7:a0:19:4f:e3:f9:de:8f:64:9e:9f:3d:d4:e7:c3: 22:6a:bc:00:e1:2c:ab:b6:63:10:36:1b:e8:87:5f: 2a:ad:b3:0c:27:25:37:25:95:07:2a:65:60:19:d8: ef:bd:ff:d9:96:74:d1:75:e8:92:ec:ca:22:e9:14: 10:49:0c:81:11:79:21:ce:65:df:67:de:55:e9:5c: 45:13:93:bb:12:90:28:b5:2f:23:43:69:ff:59:83: 90:2f:f1:86:43:d1:e8:2f:9b:b5:44:58:d7:83:c4: 06:8b:6c:08:b8:ac:90:a9:71:40:bb:a8:56:0a:da: c8:32:9e:5b:b0:6d:58:67:23:42:3d:f2:b8:4f:a5: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:41:DF:03:BC:B2:68:C3:E4:47:4A:A9:60:E0:15:28:F5:79:70:A0 X509v3 Authority Key Identifier: keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:bc:21:eb:7a:2c:d6:c6:a9:fe:f9:f0:38:bd:53:05:22: ad:51:6b:16:e6:39:5c:82:37:a4:84:75:3c:60:cd:58:6b:ad: 78:b4:75:8a:9e:3c:27:c8:33:34:fd:f7:15:3e:63:88:4b:2d: e3:8d:35:f5:69:b5:71:42:85:87:aa:b9:f0:a4:c1:82:1a:2b: 6a:42:88:0e:31:1f:8f:36:62:87:7e:8d:28:ee:7c:2b:24:e2: 46:fd:c4:b5:cb:dc:75:e0:34:21:49:a2:c8:b4:b6:fa:a9:00: b9:13:b8:11:27:8b:73:cf:f9:92:54:99:a9:77:57:d7:e3:3e: ae:21:d9:9f:fb:a5:f5:d6:44:43:25:89:76:88:0b:90:d8:ae: 99:93:a1:bd:cf:6c:58:d5:f1:2a:e7:ce:05:fa:e3:76:73:8b: b9:39:ec:ec:ec:3e:ac:7a:8e:57:bd:a9:ed:ca:2c:3a:ff:e6: 02:37:6f:ab:37:a0:55:5f:5e:1c:69:d3:52:91:85:25:04:55: 00:7a:3e:09:b0:60:d2:b3:0d:b2:f6:46:33:c8:f5:ab:e0:20: d0:b9:45:31:39:85:1c:f2:f5:3a:be:e6:d5:6b:49:9c:7c:b3: 8d:ba:2b:9d:57:da:ba:08:e0:7f:bb:54:29:8f:d4:d4:7c:fa: d3:24:9b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MjYxMTAvBgNVBAUTKDY5NEJBMDcwQjYyNkUxNjg1OEQ2NjBGMjEyMEU3NEI2 RkMzRjcyRUMwHhcNMjQwNTE4MTUxNzU2WhcNMjQwNTI1MTUxNzU2WjAYMRYwFAYD VQQDEw02NjQ4YzZhNC02NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66dysMu6MIC/mb9z+7hgM3Egzld1NItxE5l/jhibY2NpB33t3riteBxdSrFU O35u5GS+M3yblVOYC7XIsRE33VQteYQP6EIte2iYADA98bNs0Xz1fYQ2ziQgYX5X JJgCjU7CZ1eR3vw9HpqBfzTFqUJvsW/JDfrHoBlP4/nej2Senz3U58MiarwA4Syr tmMQNhvoh18qrbMMJyU3JZUHKmVgGdjvvf/ZlnTRdeiS7Moi6RQQSQyBEXkhzmXf Z95V6VxFE5O7EpAotS8jQ2n/WYOQL/GGQ9HoL5u1RFjXg8QGi2wIuKyQqXFAu6hW CtrIMp5bsG1YZyNCPfK4T6VWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBB3wO8 smjD5EdKqWDgFSj1eXCgMB8GA1UdIwQYMBaAFGlLoHC2JuFoWNZg8hIOdLb8P3Ls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQyNi8yMTI4Nzk2QzFE QTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRXaFkxbUR5RWc1MHR2d19j dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVdWdjTFltNFdoWTFtRHlFZzUwdHZ3X2N1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQyNi8yMTI4Nzk2QzFEQTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRX aFkxbUR5RWc1MHR2d19jdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuBbwh63os1sap/vnwOL1TBSKtUWsW5jlcgjekhHU8YM1Ya614tHWK njwnyDM0/fcVPmOISy3jjTX1abVxQoWHqrnwpMGCGitqQogOMR+PNmKHfo0o7nwr JOJG/cS1y9x14DQhSaLItLb6qQC5E7gRJ4tzz/mSVJmpd1fX4z6uIdmf+6X11kRD JYl2iAuQ2K6Zk6G9z2xY1fEq584F+uN2c4u5Oezs7D6seo5Xvantyiw6/+YCN2+r N6BVX14cadNSkYUlBFUAej4JsGDSsw2y9kYzyPWr4CDQuUUxOYUc8vU6vubVa0mc fLONuiudV9q6COB/u1Qpj9TUfPrTJJvF -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org