$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: iBQ4PdIZnOoCTFCNF7dm69jnhY9Cr04eZdByHUWSB2g= Subject key identifier: DB:D9:86:97:17:C1:D3:35:BA:BF:C7:E3:9F:34:63:E9:C8:19:80:03 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 1532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 1532 Signing time: Sat 18 May 2024 17:18:53 +0000 Manifest this update: Sat 18 May 2024 17:18:52 +0000 Manifest next update: Sat 25 May 2024 17:18:52 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: 2Q9quxioQduGWrIY/WuJY1pCp3xmdhoQhmpp3uFfalA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5426 (0x1532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: May 18 17:18:52 2024 GMT Not After : May 25 17:18:52 2024 GMT Subject: CN=6648e2fc-0030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:84:f5:9b:67:f5:93:fb:05:98:04:3c:22: d8:cd:af:c1:16:ed:b2:f1:a5:f6:c8:f0:1e:9d:78: 12:73:76:01:e5:5f:cf:35:83:50:16:7d:25:ba:a9: cd:4c:b1:11:b8:31:48:63:6f:1d:81:fc:fc:97:e1: 85:32:29:f3:4a:1c:22:94:92:c1:2f:35:d2:e6:8c: dc:5e:f0:a7:74:d3:95:1f:26:81:6e:c9:01:b2:f2: da:27:b2:9c:f0:8d:78:dc:f0:7b:12:07:98:2a:16: 86:53:40:a6:79:7c:8c:0e:e5:6b:97:ad:f7:35:f1: ae:2e:42:d9:a4:18:8c:72:47:6f:a3:fa:f3:8c:d3: 2f:98:3c:37:fd:62:a7:a8:c2:7e:7d:8e:a8:85:28: 1c:74:7f:4c:4a:81:98:ee:10:a8:4a:8e:58:6a:20: b7:d9:57:70:f4:f6:f0:f6:dd:06:3d:09:30:83:0b: 7c:da:63:f5:2f:8f:f0:09:46:c3:d1:8b:ed:9a:05: 53:28:60:2b:94:7c:3d:56:2b:ec:d5:12:9a:74:84: ad:3b:eb:a5:d3:65:92:8a:9d:af:a9:a1:3e:30:62: cd:96:d1:e4:28:b8:f2:db:c7:d4:a6:a8:b0:48:ee: ef:80:2b:74:52:c2:8c:4d:48:82:8a:85:ad:2e:ea: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D9:86:97:17:C1:D3:35:BA:BF:C7:E3:9F:34:63:E9:C8:19:80:03 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e9:2d:ed:1a:ee:1e:7f:7f:aa:2b:b3:c6:0e:d5:f3:14:98: e4:54:01:f1:17:b1:c2:a2:8d:f6:77:8b:b6:ac:be:a4:47:80: 54:19:6b:3a:24:d5:37:5d:8d:41:2d:fb:70:59:40:17:e8:31: 82:a1:58:d8:f7:a8:9a:e2:77:82:b1:0f:52:e9:6d:3c:f8:f0: ee:01:75:6f:bb:29:27:dd:89:c0:c9:ff:df:83:09:c4:8c:d5: 30:62:09:d3:6e:01:f5:5e:9d:ef:8e:41:65:68:48:95:c0:d2: 7c:39:17:d9:16:75:ec:d2:52:7d:09:24:88:4e:44:40:80:91: 00:2c:00:c6:a4:18:df:89:82:43:31:a8:ab:8c:dc:80:23:f2: 55:c1:7c:d2:41:7e:d2:cd:80:57:7d:4d:5f:e1:51:48:7f:f3: 33:d1:27:9b:47:37:88:67:fd:76:02:a4:30:3a:f8:68:8f:08: 3c:36:60:d8:17:74:1f:6c:04:db:17:af:5d:70:ce:4a:47:98: 75:37:06:9f:57:55:16:d0:32:23:fb:14:fd:b5:e4:19:df:5f: dd:18:f9:61:57:15:6a:40:a3:28:ab:61:08:24:88:94:78:6a: a3:ab:9e:8e:31:b9:16:c2:7b:5f:3c:b9:98:19:2c:5c:61:19: d0:9b:34:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjQwNTE4MTcxODUyWhcNMjQwNTI1MTcxODUyWjAYMRYwFAYD VQQDEw02NjQ4ZTJmYy0wMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvKE9Ztn9ZP7BZgEPCLYza/BFu2y8aX2yPAenXgSc3YB5V/PNYNQFn0luqnN TLERuDFIY28dgfz8l+GFMinzShwilJLBLzXS5ozcXvCndNOVHyaBbskBsvLaJ7Kc 8I143PB7EgeYKhaGU0CmeXyMDuVrl633NfGuLkLZpBiMckdvo/rzjNMvmDw3/WKn qMJ+fY6ohSgcdH9MSoGY7hCoSo5YaiC32Vdw9Pbw9t0GPQkwgwt82mP1L4/wCUbD 0YvtmgVTKGArlHw9Vivs1RKadIStO+ul02WSip2vqaE+MGLNltHkKLjy28fUpqiw SO7vgCt0UsKMTUiCioWtLup0ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvZhpcX wdM1ur/H4580Y+nIGYADMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf6S3tGu4ef3+qK7PGDtXzFJjkVAHxF7HCoo32d4u2rL6kR4BUGWs6 JNU3XY1BLftwWUAX6DGCoVjY96ia4neCsQ9S6W08+PDuAXVvuykn3YnAyf/fgwnE jNUwYgnTbgH1Xp3vjkFlaEiVwNJ8ORfZFnXs0lJ9CSSITkRAgJEALADGpBjfiYJD MairjNyAI/JVwXzSQX7SzYBXfU1f4VFIf/Mz0SebRzeIZ/12AqQwOvhojwg8NmDY F3QfbATbF69dcM5KR5h1NwafV1UW0DIj+xT9teQZ31/dGPlhVxVqQKMoq2EIJIiU eGqjq56OMbkWwntfPLmYGSxcYRnQmzTc -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org