$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json) Hash identifier: w6erV+CrCWxfT/l3r61Jwz8VVyurg5g1GGxOA6B27R8= Subject key identifier: 09:E7:68:A7:54:FA:0E:9C:80:37:79:3E:AF:9C:D2:0D:CF:C4:1A:4F Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft Manifest number: 0ABC Signing time: Sat 18 May 2024 22:15:19 +0000 Manifest this update: Sat 18 May 2024 22:15:18 +0000 Manifest next update: Sat 25 May 2024 22:15:18 +0000 Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: yvbzUQ13cBB1eAhq4nXDHRls/XcfaqSTn+/0NdMKG0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18 Validity Not Before: May 18 22:15:18 2024 GMT Not After : May 25 22:15:18 2024 GMT Subject: CN=66492877-8a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:15:06:d1:ef:05:11:b2:d2:f9:48:a7:ad: 07:d4:90:5b:7b:dc:55:54:77:9d:07:ad:4d:51:fb: 8a:ec:86:63:f2:3e:d3:e2:59:02:c1:c3:bd:e6:0f: fb:c2:3d:d1:d4:8a:3a:cf:ce:72:e8:63:9a:76:77: 1a:bb:6f:ca:70:92:e7:c5:39:7e:00:34:fe:f5:53: 8a:8b:ef:8f:d2:8a:b6:ad:ab:97:98:25:d6:64:ab: ed:2f:37:01:e7:fc:e8:c7:fa:87:b2:f1:fc:4c:77: 36:5c:63:c2:45:49:3d:cd:5c:45:15:fd:b0:02:1f: 51:bc:08:e6:c5:c3:f1:18:af:94:07:75:f2:ae:05: 00:f0:2c:c5:a3:20:86:cb:33:68:7b:46:bb:e4:b9: 4a:be:3e:15:f2:51:59:92:8f:09:87:b4:1a:2e:15: e1:23:a8:c1:d6:c2:15:86:b0:db:b3:03:a5:3a:c1: c6:d5:58:4f:47:d3:77:50:7c:4b:df:4f:70:32:a7: 51:bb:c9:90:b0:de:d3:8a:6f:56:45:06:9e:32:ee: 02:64:39:1d:09:3e:37:ae:d9:73:01:11:f0:51:29: 68:65:b7:29:80:4f:66:b7:49:07:33:c3:63:a6:9c: e7:d9:e8:b9:56:10:95:5b:91:d2:16:df:53:8c:cb: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E7:68:A7:54:FA:0E:9C:80:37:79:3E:AF:9C:D2:0D:CF:C4:1A:4F X509v3 Authority Key Identifier: keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:02:00:a3:b3:85:28:24:8f:e5:72:69:d9:20:fc:e2:38: 81:b8:75:d8:41:d5:16:2b:c1:18:3a:e6:3e:9b:77:49:48:73: 0d:7f:71:8c:f5:0a:35:88:ae:44:d1:bd:83:d9:18:be:fb:72: de:4d:11:91:72:39:cb:5e:75:5e:33:27:45:1b:90:74:25:fc: db:0f:19:40:f8:d3:df:0d:a4:89:3c:6d:b0:ff:7f:dd:95:0d: 41:22:db:36:f3:0b:36:81:0f:b0:ba:37:ae:e1:15:58:39:09: 71:bc:af:75:58:81:67:1c:f8:41:ec:55:d5:4e:2e:61:3d:4b: 4f:34:d7:37:57:cf:b4:44:2f:81:4c:10:23:ab:db:99:80:61: 86:f2:9e:26:93:a8:aa:5e:ac:08:16:60:95:44:81:77:38:ed: 71:a4:a2:ac:1f:1b:e1:20:95:78:dd:e8:8f:48:e4:2f:34:70: 7d:8a:9b:b7:c5:f7:a9:ed:22:d1:8f:37:ec:69:b0:6e:1d:d7: 4a:4d:fd:16:97:5a:6a:82:9d:55:89:04:ca:58:ff:19:a9:d1: 01:02:be:d7:fb:e5:8f:39:1a:97:f2:7c:02:f0:3e:23:19:ca: e5:da:f9:26:cf:6a:7a:b1:6a:a5:c6:37:65:fa:14:ec:4b:2f: 6a:6f:04:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDJBMUM3ODVDQkVCRTdDRDdCQUI1M0ExMjNCNjA1NTg2 MEY2MDdGMTgwHhcNMjQwNTE4MjIxNTE4WhcNMjQwNTI1MjIxNTE4WjAYMRYwFAYD VQQDEw02NjQ5Mjg3Ny04YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx28VBtHvBRGy0vlIp60H1JBbe9xVVHedB61NUfuK7IZj8j7T4lkCwcO95g/7 wj3R1Io6z85y6GOadncau2/KcJLnxTl+ADT+9VOKi++P0oq2rauXmCXWZKvtLzcB 5/zox/qHsvH8THc2XGPCRUk9zVxFFf2wAh9RvAjmxcPxGK+UB3XyrgUA8CzFoyCG yzNoe0a75LlKvj4V8lFZko8Jh7QaLhXhI6jB1sIVhrDbswOlOsHG1VhPR9N3UHxL 309wMqdRu8mQsN7Tim9WRQaeMu4CZDkdCT43rtlzARHwUSloZbcpgE9mt0kHM8Nj ppzn2ei5VhCVW5HSFt9TjMsfXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnnaKdU +g6cgDd5Pq+c0g3PxBpPMB8GA1UdIwQYMBaAFCoceFy+vnzXurU6EjtgVYYPYH8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZOZTZ0VG9TTzJCVmhnOWdm eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0toeDRYTDYtZk5lNnRUb1NPMkJWaGc5Z2Z4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9LaHg0WEw2LWZO ZTZ0VG9TTzJCVmhnOWdmeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2wIAo7OFKCSP5XJp2SD84jiBuHXYQdUWK8EYOuY+m3dJSHMNf3GM 9Qo1iK5E0b2D2Ri++3LeTRGRcjnLXnVeMydFG5B0JfzbDxlA+NPfDaSJPG2w/3/d lQ1BIts28ws2gQ+wujeu4RVYOQlxvK91WIFnHPhB7FXVTi5hPUtPNNc3V8+0RC+B TBAjq9uZgGGG8p4mk6iqXqwIFmCVRIF3OO1xpKKsHxvhIJV43eiPSOQvNHB9ipu3 xfep7SLRjzfsabBuHddKTf0Wl1pqgp1ViQTKWP8ZqdEBAr7X++WPORqX8nwC8D4j Gcrl2vkmz2p6sWqlxjdl+hTsSy9qbwQU -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org