$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: ++xAAO7z93qTg1/CS5vIxlwCFxS8TlMQ5hE3vyK9OWg= Subject key identifier: 62:CA:94:E2:96:16:D9:09:20:C9:19:58:7B:17:33:6B:54:6C:CD:97 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2005 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 29BB Signing time: Sat 18 May 2024 16:19:40 +0000 Manifest this update: Sat 18 May 2024 16:19:40 +0000 Manifest next update: Sat 25 May 2024 16:19:40 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: cm8st+y5tA5Q0d6fIyvIf7z8URrVDpYMKkNr6bADEBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8197 (0x2005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: May 18 16:19:40 2024 GMT Not After : May 25 16:19:40 2024 GMT Subject: CN=6648d51c-d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:e3:c6:b0:f2:e4:42:93:85:89:2b:da:59: 66:7f:d6:2e:69:16:b9:a0:ba:6b:89:ee:2a:ed:29: f4:9d:7f:d9:8f:7f:ea:49:a4:c2:44:b5:9d:e4:4c: 5d:f4:5d:9e:b5:8b:1a:f2:82:eb:07:f5:e9:a2:4f: a9:16:57:dc:c5:f9:95:e5:63:8e:6e:66:98:7e:1d: e0:b8:47:ea:d6:41:de:d3:41:28:14:f3:37:06:6d: 66:c7:4b:da:cd:37:f4:3e:fa:9e:08:d1:f9:c2:5c: 09:d3:a2:d2:c7:3b:b8:2b:1c:23:09:d4:f1:b5:0c: fc:20:36:c8:9d:2c:38:75:56:c7:e0:86:37:57:4e: 91:4e:c7:e4:48:11:ff:35:7a:f8:77:72:fb:11:f1: f6:ba:8e:08:0a:4b:d0:35:ec:66:a1:c9:82:48:ac: ad:87:50:ec:9b:b4:d7:a5:c0:52:e9:b0:ab:15:bd: 3e:32:ca:a2:f6:0a:11:9e:65:cf:3f:1b:93:d3:c0: ae:75:dd:48:ac:4d:6e:bb:04:44:79:44:69:61:7a: 33:f3:2a:eb:b0:60:56:cb:00:f9:5a:52:1d:ef:63: 8a:17:7d:18:81:d2:45:7c:bc:eb:a9:40:61:50:f8: 3d:f0:04:1e:2a:cf:d5:21:82:54:83:33:a5:16:e5: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CA:94:E2:96:16:D9:09:20:C9:19:58:7B:17:33:6B:54:6C:CD:97 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9d:51:4d:02:97:63:ed:16:3a:56:b6:66:6d:62:07:28:95: 8b:20:e6:49:a8:dc:16:3e:db:ac:84:d6:69:5e:da:e4:b2:d9: 2f:f7:90:65:cc:c7:c1:1d:1a:16:94:4d:a1:8f:82:23:e0:78: cb:a3:f7:d5:75:2f:ca:c2:29:cb:12:24:d3:50:57:04:e4:7c: f1:b4:b9:09:bf:a0:98:e5:c4:70:7b:a1:19:73:ac:94:ab:e8: 6d:ec:5e:de:91:1d:08:d6:f1:ea:65:eb:3a:73:51:f0:c5:09: 0e:b4:e7:95:f6:6c:0c:a7:90:a7:cb:27:c5:a5:75:e1:d9:0e: 69:cb:08:d3:41:99:d3:4c:bf:f4:1c:f4:4f:7c:7d:4e:5b:f9: 00:45:eb:06:67:73:9c:8c:d8:40:3f:2f:ac:df:68:20:2d:3d: df:37:43:6b:39:d1:e1:fc:d5:cb:ee:3f:46:91:4e:53:b7:f2: e2:f5:5b:80:91:51:db:01:3d:8b:2b:84:33:a4:ae:9f:e3:47: 9f:20:80:73:ec:de:55:c4:93:d8:90:78:ce:d0:bb:e7:ed:8c: 6a:6f:f9:4f:4f:6d:15:38:cf:ef:12:1e:ea:70:da:94:d7:bc: f5:87:c1:01:ab:e5:50:32:3d:ec:f0:95:7e:c7:05:50:fb:d7: 15:e0:7f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjQwNTE4MTYxOTQwWhcNMjQwNTI1MTYxOTQwWjAYMRYwFAYD VQQDEw02NjQ4ZDUxYy1kM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs/jxrDy5EKThYkr2llmf9YuaRa5oLprie4q7Sn0nX/Zj3/qSaTCRLWd5Exd 9F2etYsa8oLrB/Xpok+pFlfcxfmV5WOObmaYfh3guEfq1kHe00EoFPM3Bm1mx0va zTf0PvqeCNH5wlwJ06LSxzu4KxwjCdTxtQz8IDbInSw4dVbH4IY3V06RTsfkSBH/ NXr4d3L7EfH2uo4ICkvQNexmocmCSKyth1Dsm7TXpcBS6bCrFb0+Msqi9goRnmXP PxuT08Cudd1IrE1uuwREeURpYXoz8yrrsGBWywD5WlId72OKF30YgdJFfLzrqUBh UPg98AQeKs/VIYJUgzOlFuUGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLKlOKW FtkJIMkZWHsXM2tUbM2XMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8nVFNApdj7RY6VrZmbWIHKJWLIOZJqNwWPtushNZpXtrkstkv95Bl zMfBHRoWlE2hj4Ij4HjLo/fVdS/KwinLEiTTUFcE5HzxtLkJv6CY5cRwe6EZc6yU q+ht7F7ekR0I1vHqZes6c1HwxQkOtOeV9mwMp5CnyyfFpXXh2Q5pywjTQZnTTL/0 HPRPfH1OW/kAResGZ3OcjNhAPy+s32ggLT3fN0NrOdHh/NXL7j9GkU5Tt/Li9VuA kVHbAT2LK4QzpK6f40efIIBz7N5VxJPYkHjO0Lvn7Yxqb/lPT20VOM/vEh7qcNqU 17z1h8EBq+VQMj3s8JV+xwVQ+9cV4H+T -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org