$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: BlSVqy64mNu9AMpXJ+L54ZuB+5o0wNdYixBfNDgrRN0= Subject key identifier: 7D:B9:05:58:28:B2:79:D4:43:51:C9:13:78:13:A1:A0:12:4C:53:6C Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: CC Signing time: Sun 19 May 2024 03:52:52 +0000 Manifest this update: Sun 19 May 2024 03:52:52 +0000 Manifest next update: Sun 26 May 2024 03:52:51 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: CSZjmk+bpcWkq1yLaHtS224rS8zzMFCrbRTijNUfwR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: May 19 03:52:52 2024 GMT Not After : May 26 03:52:51 2024 GMT Subject: CN=66497794-500e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:78:51:da:d9:a1:04:7c:70:b3:7d:04:5a: 37:49:9d:46:c2:74:73:91:a1:4a:bb:42:23:09:c1: 59:bf:c1:c1:f5:79:28:b8:50:4e:c8:c2:48:26:3b: 72:84:92:24:32:18:36:d1:1c:2d:a7:dc:b4:48:2d: 72:b2:db:82:d6:7e:f5:53:75:9a:f5:89:aa:ce:05: 44:a4:c1:33:77:46:d9:33:0c:e9:10:59:b4:59:99: 41:03:e9:06:3c:e8:47:7c:25:73:18:e0:b1:34:9f: 5b:9a:c7:f3:5a:f1:3e:17:f4:a4:2d:47:b6:13:41: 1e:8c:b3:1d:9f:df:3a:11:91:24:99:6e:0f:8b:7e: 58:4d:ba:d1:d9:7a:8a:3d:5b:6d:db:c7:d6:6b:9f: ad:13:4f:37:90:28:5e:71:65:3c:9d:a0:4b:30:95: 61:a9:3c:b8:76:a8:f8:d4:9e:9f:f2:87:6f:eb:a9: 0a:fc:78:de:27:85:b7:08:51:a0:07:99:1b:b7:00: c6:41:0f:74:3a:45:26:6d:a4:76:7e:ea:1b:f0:ce: ad:8f:3a:c4:50:7c:15:b9:30:c2:af:10:1a:66:5c: a5:d8:5f:f0:80:77:e4:e4:ae:01:85:87:c7:34:fa: 4e:19:60:1a:2d:1d:63:dc:d3:f3:b8:d4:02:ab:88: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B9:05:58:28:B2:79:D4:43:51:C9:13:78:13:A1:A0:12:4C:53:6C X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a0:53:c6:86:c4:7d:3b:61:09:ae:34:22:19:f2:29:39:9c: de:b2:af:ad:ef:79:c5:c5:85:ef:ef:f3:20:8a:41:11:0f:49: d5:e3:8e:03:04:0c:93:af:2a:a0:23:be:45:b6:e2:df:09:9d: 40:f0:15:6c:61:d1:ff:7f:6b:6c:b6:6a:f4:69:79:38:8a:a4: a2:37:bb:11:b1:eb:eb:23:b2:32:64:dd:ea:d9:8e:c4:86:a3: 2b:2e:f8:75:e6:23:98:0a:5d:60:b3:06:17:66:1b:70:84:c6: e4:d5:60:c7:a2:81:9d:ff:fa:7b:f4:51:96:ea:0c:69:6a:9a: d3:f3:ae:12:16:62:43:5e:d0:e2:d3:a0:57:b5:ea:1b:9a:77: 94:a3:36:d7:44:b8:fe:dd:cd:de:ed:c2:05:49:a9:bf:18:90: 4f:39:97:36:ec:56:e5:46:ae:f5:d3:e1:ae:63:02:22:16:42: c1:d1:97:45:8d:2c:53:1f:e5:d1:94:6c:4d:87:42:0b:e9:41: d3:6a:e9:91:02:5e:8a:9c:81:6b:41:74:34:b7:52:c9:8f:12: 95:75:42:84:4a:17:0f:76:2c:a4:b8:1f:46:9a:9e:6a:9b:7c: 4d:9a:cb:4c:dd:6c:31:55:90:c7:da:05:89:0b:fc:96:a7:9f: 12:1c:b0:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjQwNTE5MDM1MjUyWhcNMjQwNTI2MDM1MjUxWjAYMRYwFAYD VQQDEw02NjQ5Nzc5NC01MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoN4UdrZoQR8cLN9BFo3SZ1GwnRzkaFKu0IjCcFZv8HB9XkouFBOyMJIJjty hJIkMhg20Rwtp9y0SC1ystuC1n71U3Wa9YmqzgVEpMEzd0bZMwzpEFm0WZlBA+kG POhHfCVzGOCxNJ9bmsfzWvE+F/SkLUe2E0EejLMdn986EZEkmW4Pi35YTbrR2XqK PVtt28fWa5+tE083kChecWU8naBLMJVhqTy4dqj41J6f8odv66kK/HjeJ4W3CFGg B5kbtwDGQQ90OkUmbaR2fuob8M6tjzrEUHwVuTDCrxAaZlyl2F/wgHfk5K4BhYfH NPpOGWAaLR1j3NPzuNQCq4g+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH25BVgo snnUQ1HJE3gToaASTFNsMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSoFPGhsR9O2EJrjQiGfIpOZzesq+t73nFxYXv7/MgikERD0nV444D BAyTryqgI75FtuLfCZ1A8BVsYdH/f2tstmr0aXk4iqSiN7sRsevrI7IyZN3q2Y7E hqMrLvh15iOYCl1gswYXZhtwhMbk1WDHooGd//p79FGW6gxpaprT864SFmJDXtDi 06BXteobmneUozbXRLj+3c3e7cIFSam/GJBPOZc27FblRq710+GuYwIiFkLB0ZdF jSxTH+XRlGxNh0IL6UHTaumRAl6KnIFrQXQ0t1LJjxKVdUKEShcPdiykuB9Gmp5q m3xNmstM3WwxVZDH2gWJC/yWp58SHLD6 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org