$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft File: L-aHDoJAvxJ46pnCMRal4KjSCZA.mft (raw, json) Hash identifier: 6g6OcEKPCjw6cxLDuMnGQMcmyHix9Odf3hPTnjhIzoE= Subject key identifier: 24:A7:49:5D:48:E5:A4:47:24:71:5D:FA:F1:B3:97:92:08:AA:05:36 Authority key identifier: 2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 Certificate issuer: /CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft Manifest number: 34 Signing time: Fri 31 May 2024 09:17:32 +0000 Manifest this update: Fri 31 May 2024 09:17:31 +0000 Manifest next update: Fri 07 Jun 2024 09:17:31 +0000 Files and hashes: 1: L-aHDoJAvxJ46pnCMRal4KjSCZA.crl (hash: o7YRSQjOUStjGluKpoTI6G3QLxMOpnym+tiyh2lKz3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Validity Not Before: May 31 09:17:31 2024 GMT Not After : Jun 7 09:17:31 2024 GMT Subject: CN=665995ac-a6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:d5:76:f1:bc:a9:25:06:f3:ae:29:74:93: 71:8f:b0:f1:53:da:8d:4c:a7:4a:84:74:82:c3:b2: b8:89:f4:31:ad:f1:bd:b3:93:81:67:c9:13:a7:a4: 73:35:06:df:69:f6:8f:06:42:68:9e:66:39:d8:e1: 37:c2:00:a7:fa:6a:4f:8a:e3:98:ae:98:8c:05:70: ef:81:92:3b:46:5c:12:63:58:21:f3:ce:e6:1d:64: e7:4f:70:42:8f:7f:d5:de:43:94:fe:b8:cf:67:85: 07:43:15:c0:25:17:a5:f5:61:16:a1:bd:7c:7a:fd: 09:20:f9:14:af:6d:c1:3f:ed:4f:e2:e6:51:8b:5b: ae:bc:0f:7c:ed:0f:b3:c4:80:90:c7:cc:5f:69:1b: dd:31:57:67:f7:ed:c3:b1:94:71:0c:f4:b6:c5:2b: 9e:8e:60:1d:c7:ea:bd:15:77:8d:eb:9e:e5:50:90: 1a:38:5f:96:32:4b:d6:93:ee:46:34:59:cc:81:88: e5:6f:bf:18:02:dc:99:f7:12:10:b7:94:f5:99:3c: 9b:70:a1:fa:81:9c:25:38:99:b7:0c:0b:df:67:b9: b1:5a:c4:91:1a:44:85:af:31:63:38:e3:aa:37:1e: 44:f8:d8:1c:b2:de:e6:89:af:46:14:9b:d1:c5:2e: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:49:5D:48:E5:A4:47:24:71:5D:FA:F1:B3:97:92:08:AA:05:36 X509v3 Authority Key Identifier: keyid:2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:66:54:a4:df:33:93:a3:6e:06:a5:5f:21:4e:5f:83:3f:0d: 52:bd:cf:a3:c7:48:bd:21:3c:1c:dd:2e:46:d7:57:48:0a:a6: 9d:f2:6a:a1:d5:47:1c:7d:cc:77:ba:c1:4e:b2:65:c0:25:6d: 92:62:c3:c2:fa:a5:7e:75:8f:50:07:70:3a:12:ac:bc:1f:1d: 76:73:26:85:b0:1c:60:08:cd:fa:6e:d0:31:f6:ee:eb:76:8e: 54:17:8b:5f:e2:66:73:65:95:49:b4:7f:98:4b:aa:cc:68:8e: 46:ba:0a:b4:7e:7d:89:2e:27:e7:34:ac:af:ea:a0:ff:0e:c4: 66:55:fe:f5:74:98:c6:69:db:1b:1e:fa:3c:57:e8:74:35:0d: ea:44:b6:99:16:ec:5c:7e:29:02:98:2b:a3:7a:7f:8e:32:53: 68:7f:d2:d5:8d:9f:57:69:e4:4b:ae:86:1e:d9:36:b9:c5:f2: fb:15:85:ca:f4:3e:91:8c:22:b6:fc:8e:31:0b:bc:a0:fc:d7: e7:39:4a:a0:fa:a1:2a:9c:d9:bf:53:02:c9:b3:07:fc:4c:4d: 0e:84:9b:19:4e:d6:ad:ef:18:f5:57:1f:b8:91:6f:61:90:87: aa:e5:03:3d:4f:6d:b6:7d:b4:b0:91:47:0a:96:fd:1d:b2:fa: a5:1e:d2:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEIyQjExMC8GA1UEBRMoMkZFNjg3MEU4MjQwQkYxMjc4RUE5OUMyMzExNkE1RTBB OEQyMDk5MDAeFw0yNDA1MzEwOTE3MzFaFw0yNDA2MDcwOTE3MzFaMBgxFjAUBgNV BAMTDTY2NTk5NWFjLWE2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGFNV28bypJQbzril0k3GPsPFT2o1Mp0qEdILDsriJ9DGt8b2zk4FnyROnpHM1 Bt9p9o8GQmieZjnY4TfCAKf6ak+K45iumIwFcO+BkjtGXBJjWCHzzuYdZOdPcEKP f9XeQ5T+uM9nhQdDFcAlF6X1YRahvXx6/Qkg+RSvbcE/7U/i5lGLW668D3ztD7PE gJDHzF9pG90xV2f37cOxlHEM9LbFK56OYB3H6r0Vd43rnuVQkBo4X5YyS9aT7kY0 WcyBiOVvvxgC3Jn3EhC3lPWZPJtwofqBnCU4mbcMC99nubFaxJEaRIWvMWM446o3 HkT42Byy3uaJr0YUm9HFLi9vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJKdJXUjl pEckcV368bOXkgiqBTYwHwYDVR0jBBgwFoAUL+aHDoJAvxJ46pnCMRal4KjSCZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QjJCL0E0NjVBNDlBQ0Y5 QzExRUVBRjM0NDY1RkM0RjlBRTAyL0wtYUhEb0pBdnhKNDZwbkNNUmFsNEtqU0Na QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTC1hSERvSkF2eEo0NnBuQ01SYWw0S2pTQ1pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QjJCL0E0NjVBNDlBQ0Y5QzExRUVBRjM0NDY1RkM0RjlBRTAyL0wtYUhEb0pBdnhK NDZwbkNNUmFsNEtqU0NaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5mVKTfM5OjbgalXyFOX4M/DVK9z6PHSL0hPBzdLkbXV0gKpp3yaqHV Rxx9zHe6wU6yZcAlbZJiw8L6pX51j1AHcDoSrLwfHXZzJoWwHGAIzfpu0DH27ut2 jlQXi1/iZnNllUm0f5hLqsxojka6CrR+fYkuJ+c0rK/qoP8OxGZV/vV0mMZp2xse +jxX6HQ1DepEtpkW7Fx+KQKYK6N6f44yU2h/0tWNn1dp5Euuhh7ZNrnF8vsVhcr0 PpGMIrb8jjELvKD81+c5SqD6oSqc2b9TAsmzB/xMTQ6EmxlO1q3vGPVXH7iRb2GQ h6rlAz1PbbZ9tLCRRwqW/R2y+qUe0mk= -----END CERTIFICATE-----Generated at Fri May 31 10:02:44 2024 by rpki-client on console-ams.rpki-client.org