$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: QeQAdzxukqfb0RSNaehZSCSf7M1INwGvFejNuZEBp5g= Subject key identifier: 0C:35:CF:05:D9:DF:AC:87:36:FD:BC:C3:19:30:FE:01:DF:5F:70:1D Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0973 Signing time: Sat 18 May 2024 22:19:23 +0000 Manifest this update: Sat 18 May 2024 22:19:23 +0000 Manifest next update: Sat 25 May 2024 22:19:23 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: JIF3A72hI6PMXWaH+PiasLt5WLtszITJhXmhv5doOKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: May 18 22:19:23 2024 GMT Not After : May 25 22:19:23 2024 GMT Subject: CN=6649296b-3abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:fb:46:6e:45:42:65:0b:9f:75:1c:83:34: 39:12:46:74:5e:8e:7f:05:4e:01:fc:c6:b0:c2:b9: 02:65:04:97:53:8f:e8:47:d7:ae:49:6f:04:a6:4f: 8b:3f:34:ce:ff:66:d4:42:c4:25:7c:e4:90:35:07: 5d:98:99:29:c2:ba:08:75:0e:b6:c0:46:6c:1e:9f: a1:30:78:2e:7d:2d:62:ec:4f:55:86:35:42:0c:e6: 6f:76:cd:88:87:be:49:1c:cc:08:f9:1d:24:98:ae: f7:01:4c:66:f4:3c:f9:21:3d:3f:bc:03:29:34:b3: 97:cb:28:78:c1:31:a5:45:e9:87:41:cb:1f:c9:09: 7e:f0:e2:38:5e:56:2f:af:19:36:bb:bb:92:3c:5e: 31:19:d1:6e:b7:a5:6f:41:43:02:14:ef:5f:57:e7: 19:bd:28:82:47:d5:1d:f7:c1:71:65:78:5b:19:49: d7:40:04:7a:7b:27:b8:00:ae:9b:75:3b:3d:2e:ac: 7f:a7:cd:5c:aa:8f:a2:e0:59:d0:57:74:47:0f:8f: 0d:f8:7f:8e:62:ec:55:b3:ad:68:f1:ff:75:80:87: 2e:80:ef:37:98:11:e1:27:86:bf:c4:9d:6b:99:69: 3e:43:31:06:88:8f:b3:90:25:1b:58:1e:5c:d1:1e: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:35:CF:05:D9:DF:AC:87:36:FD:BC:C3:19:30:FE:01:DF:5F:70:1D X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e5:c1:75:4f:42:d5:7e:e9:10:ca:e0:f8:ff:bb:cc:f9:fd: 85:13:b1:2b:73:6c:51:27:31:dd:6b:01:10:75:52:ab:87:4e: 6e:c2:f4:0b:55:b7:dc:ed:6f:76:86:bb:6b:19:41:08:56:5d: 48:31:a7:04:5e:af:ad:fd:e6:f6:e1:8b:aa:f8:c5:0d:cf:20: fe:e1:38:23:eb:64:e4:a1:0b:15:4d:3b:45:a5:59:5d:38:f5: 51:25:80:c2:3f:1c:20:12:d8:2c:36:8a:b8:0b:09:b3:18:fb: 09:09:cb:3f:4e:40:12:3a:a2:fc:98:be:c9:55:62:a7:ac:27: a1:ad:4c:ad:a7:3a:97:05:b5:69:d4:df:c9:4f:51:b2:cd:99: 22:d3:2b:23:f2:e3:ca:97:83:7d:a0:a5:a9:5b:bd:2f:aa:7d: 19:9d:a2:79:43:f2:8b:d0:1b:98:87:72:3e:a2:80:cc:80:30: 31:e6:4a:8d:93:de:2d:38:5c:a9:7e:67:14:73:00:7a:d0:8b: 34:58:e8:72:ef:71:5e:22:8a:e2:17:06:0e:ba:25:82:b9:b1: 43:84:f6:59:9b:c1:e3:89:70:c2:85:95:e9:d6:49:2d:4a:e1: d6:0a:4e:db:e9:f7:16:29:99:91:d5:c4:68:48:31:de:b8:f5: ba:59:1c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjQwNTE4MjIxOTIzWhcNMjQwNTI1MjIxOTIzWjAYMRYwFAYD VQQDEw02NjQ5Mjk2Yi0zYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXT7Rm5FQmULn3UcgzQ5EkZ0Xo5/BU4B/MawwrkCZQSXU4/oR9euSW8Epk+L PzTO/2bUQsQlfOSQNQddmJkpwroIdQ62wEZsHp+hMHgufS1i7E9VhjVCDOZvds2I h75JHMwI+R0kmK73AUxm9Dz5IT0/vAMpNLOXyyh4wTGlRemHQcsfyQl+8OI4XlYv rxk2u7uSPF4xGdFut6VvQUMCFO9fV+cZvSiCR9Ud98FxZXhbGUnXQAR6eye4AK6b dTs9Lqx/p81cqo+i4FnQV3RHD48N+H+OYuxVs61o8f91gIcugO83mBHhJ4a/xJ1r mWk+QzEGiI+zkCUbWB5c0R7ymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw1zwXZ 36yHNv28wxkw/gHfX3AdMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd5cF1T0LVfukQyuD4/7vM+f2FE7Erc2xRJzHdawEQdVKrh05uwvQL Vbfc7W92hrtrGUEIVl1IMacEXq+t/eb24Yuq+MUNzyD+4Tgj62TkoQsVTTtFpVld OPVRJYDCPxwgEtgsNoq4CwmzGPsJCcs/TkASOqL8mL7JVWKnrCehrUytpzqXBbVp 1N/JT1GyzZki0ysj8uPKl4N9oKWpW70vqn0ZnaJ5Q/KL0BuYh3I+ooDMgDAx5kqN k94tOFypfmcUcwB60Is0WOhy73FeIoriFwYOuiWCubFDhPZZm8HjiXDChZXp1kkt SuHWCk7b6fcWKZmR1cRoSDHeuPW6WRxB -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org