$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: L/MxzkxDbbPBmG8pKiLRzzChkzUbx0BU3PnUahysPUQ= Subject key identifier: ED:01:9D:3F:C9:8C:1F:B6:FE:2A:70:A6:80:D6:AA:B3:E8:5F:E2:06 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 15:03:21 +0000 Manifest this update: Sat 18 May 2024 15:03:21 +0000 Manifest next update: Sat 25 May 2024 15:03:21 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: RWPBMIbCSLJsFGWpMMKfwZv1NjENg6ltJKsnRidi3vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: May 18 15:03:21 2024 GMT Not After : May 25 15:03:21 2024 GMT Subject: CN=6648c339-2599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:1e:be:f6:e8:f6:48:64:0f:62:28:3b:ea: 93:0d:e1:8b:25:c1:97:8a:1c:93:64:d8:8c:b1:04: 85:cd:38:83:de:d0:77:1a:01:7a:54:a2:90:1f:35: fa:cc:c2:c1:5e:18:a8:5d:93:f0:2e:5c:93:4d:7d: 45:46:ed:6f:20:ac:ac:93:00:a9:e7:6a:54:c9:30: a4:5c:ed:11:67:6b:36:c8:cb:3b:8c:81:1d:cf:f9: 15:6b:7d:64:ea:9c:12:57:fa:9e:7e:7e:47:8b:90: ce:c0:be:a3:c1:a1:aa:d5:fe:99:d2:db:6c:c9:c8: 4c:aa:98:0e:57:99:4e:2c:a0:4f:bd:c1:e8:24:33: 02:59:05:93:47:2d:49:d4:11:46:bd:99:b5:87:37: 2d:3e:a3:fb:47:aa:12:f9:76:05:93:c8:0b:f5:85: 36:8d:93:75:93:79:7c:04:d4:b3:69:c1:47:61:9f: b6:55:ee:90:ad:5c:04:e3:db:0e:33:9f:60:f2:f0: 18:d9:7c:b3:89:24:99:64:e9:ce:43:f2:e5:26:4e: 7b:50:c3:89:a4:34:e6:31:61:46:37:98:83:39:39: c7:04:f3:a6:65:69:2f:9d:62:71:93:ab:0c:ac:92: bf:46:2f:2f:02:a1:68:4e:3c:17:b9:d6:3a:59:1b: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:01:9D:3F:C9:8C:1F:B6:FE:2A:70:A6:80:D6:AA:B3:E8:5F:E2:06 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6c:fe:ba:be:4d:52:f3:bb:9e:0f:12:c5:bc:37:e7:84:39: 09:1a:37:30:ca:3e:95:88:53:4d:2a:84:ae:f0:29:93:0b:fd: 71:c1:c0:6b:36:c7:18:ee:0d:f5:31:fe:83:e4:43:d4:66:26: 7c:72:28:94:39:56:91:89:15:91:5b:2f:9d:aa:48:8f:e1:46: 4c:dc:77:a4:78:26:e2:21:48:e1:a1:d5:cb:b7:3d:43:b3:d2: 45:31:45:04:ff:79:62:39:fe:dd:7c:83:fe:4a:b3:0d:fb:b1: 45:91:29:dd:73:88:8a:dd:c2:d4:00:78:9d:98:13:56:ad:9e: 86:e4:42:e3:e8:0e:45:2f:9a:ae:38:f6:41:09:7a:a8:9b:5f: 33:79:20:3b:60:17:92:7c:ca:55:d9:0a:c3:84:b1:b2:18:7e: a5:b2:f4:06:6e:d7:4b:07:46:65:e0:68:8d:38:3d:4b:ba:fe: e2:5a:c6:15:5f:8c:ad:86:5c:e7:6b:56:09:fe:bb:01:f0:f5: fe:74:8e:f9:d0:ca:af:f7:0e:a7:5f:a5:44:69:20:df:51:38: ad:8b:26:46:29:45:d7:20:65:1f:6d:97:94:2f:a5:08:65:7b: 78:b4:fd:d5:3b:3d:b5:92:fb:88:e4:b5:ac:d9:49:71:3d:4a: fa:ea:26:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjQwNTE4MTUwMzIxWhcNMjQwNTI1MTUwMzIxWjAYMRYwFAYD VQQDEw02NjQ4YzMzOS0yNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeEevvbo9khkD2IoO+qTDeGLJcGXihyTZNiMsQSFzTiD3tB3GgF6VKKQHzX6 zMLBXhioXZPwLlyTTX1FRu1vIKyskwCp52pUyTCkXO0RZ2s2yMs7jIEdz/kVa31k 6pwSV/qefn5Hi5DOwL6jwaGq1f6Z0ttsychMqpgOV5lOLKBPvcHoJDMCWQWTRy1J 1BFGvZm1hzctPqP7R6oS+XYFk8gL9YU2jZN1k3l8BNSzacFHYZ+2Ve6QrVwE49sO M59g8vAY2XyziSSZZOnOQ/LlJk57UMOJpDTmMWFGN5iDOTnHBPOmZWkvnWJxk6sM rJK/Ri8vAqFoTjwXudY6WRvDSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0BnT/J jB+2/ipwpoDWqrPoX+IGMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGbP66vk1S87ueDxLFvDfnhDkJGjcwyj6ViFNNKoSu8CmTC/1xwcBr NscY7g31Mf6D5EPUZiZ8ciiUOVaRiRWRWy+dqkiP4UZM3HekeCbiIUjhodXLtz1D s9JFMUUE/3liOf7dfIP+SrMN+7FFkSndc4iK3cLUAHidmBNWrZ6G5ELj6A5FL5qu OPZBCXqom18zeSA7YBeSfMpV2QrDhLGyGH6lsvQGbtdLB0Zl4GiNOD1Luv7iWsYV X4ythlzna1YJ/rsB8PX+dI750Mqv9w6nX6VEaSDfUTitiyZGKUXXIGUfbZeUL6UI ZXt4tP3VOz21kvuI5LWs2UlxPUr66iaW -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org