$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: f427M94QPcYjCC0qEcIZkbiknL8BhE2vMfagNSWAphw= Subject key identifier: 4B:0E:37:E9:11:9F:8A:2A:D9:14:4D:57:7B:95:EA:F0:50:9C:26:2E Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0C27 Signing time: Sat 18 May 2024 18:58:50 +0000 Manifest this update: Sat 18 May 2024 18:58:50 +0000 Manifest next update: Sat 25 May 2024 18:58:50 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: RYVXfPJeeLsRIAyzSRUM3u/2FRfI7QwT55h8blNm8w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: May 18 18:58:50 2024 GMT Not After : May 25 18:58:50 2024 GMT Subject: CN=6648fa6a-090a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:e5:9c:3f:89:b0:5f:25:e7:97:3e:b8:04: 49:36:10:7f:4a:30:15:ea:88:8f:58:16:01:f3:8b: aa:a5:2a:7f:9e:1e:08:79:c3:7c:e6:d7:c4:fd:ff: e5:fb:d7:ca:a9:83:6b:a3:eb:83:24:a5:36:d7:0d: 6b:ab:94:78:03:eb:56:b8:2f:c7:f9:92:0f:c1:e2: 97:68:fd:84:9b:19:75:01:81:49:54:52:69:48:2d: 91:e2:ed:d7:bb:7c:61:12:88:b9:1d:ae:29:f8:33: 97:da:cb:1a:7f:08:b1:d6:ec:e3:5d:e2:ce:08:a0: 0c:d0:1f:d2:a5:3c:b0:46:f0:a2:c7:68:ab:f5:39: 49:80:31:03:8c:64:93:96:13:42:21:09:f7:1d:3a: 7c:81:9a:ab:0b:ef:c6:75:f6:67:00:eb:7c:32:f5: f8:05:ce:a1:d8:58:58:41:5f:cb:ab:51:a3:00:2f: 31:c1:f6:64:09:4d:a3:a9:89:a4:17:58:fa:ac:b8: 16:b5:05:99:59:b8:00:e1:cc:11:bf:7f:3b:14:2f: 68:7b:c3:3e:fa:1e:2f:36:d3:45:cb:be:e8:82:45: 5f:7d:c5:bc:d3:1c:1b:3a:10:a4:cd:be:ff:70:2e: b5:54:53:30:14:17:f9:a6:20:02:77:5b:a4:6f:26: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0E:37:E9:11:9F:8A:2A:D9:14:4D:57:7B:95:EA:F0:50:9C:26:2E X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:70:24:14:30:2b:e2:d3:54:78:fa:42:81:86:79:97:4e:ef: f3:74:53:ed:67:9d:7f:87:d3:ea:be:b2:d7:58:37:6e:23:ee: 2e:fe:13:e5:ca:4c:e3:11:1e:96:fc:d8:59:53:f1:66:e3:59: 4a:a4:57:60:77:f4:5e:94:b9:90:2e:10:50:3c:b2:c9:c4:ed: b6:d6:8e:1c:ab:d6:c4:1f:27:07:8f:ad:7c:f7:66:cd:f1:c5: 54:b6:e2:fe:83:3d:ab:f5:af:f3:d5:41:8e:c9:8d:c6:69:0d: d9:87:ba:bd:c4:28:73:a1:8a:6a:4e:5e:1f:4f:e3:ea:30:39: 5a:36:58:b2:43:9c:fd:7c:fd:40:fd:9d:d3:cb:e7:fe:b7:cc: f0:4e:4b:71:23:84:75:f1:de:84:67:7f:9d:ac:4f:75:1c:7b: 6e:02:15:e7:29:dd:eb:5e:2d:1d:e2:e6:97:29:d8:24:b2:1f: 84:46:84:43:15:e1:7f:2d:a8:2c:1d:8c:b4:96:da:ee:22:7c: 3c:16:0d:fc:4f:cf:62:c0:ad:41:a1:2d:fb:27:6b:59:38:49: a7:84:e9:8e:cb:dd:93:fc:68:cc:3a:6e:bf:57:0e:d8:a6:b3: c6:b1:c3:70:ce:6e:cb:d6:b0:65:c1:27:d9:d0:79:e5:e5:f8: a6:05:23:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjQwNTE4MTg1ODUwWhcNMjQwNTI1MTg1ODUwWjAYMRYwFAYD VQQDEw02NjQ4ZmE2YS0wOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmXlnD+JsF8l55c+uARJNhB/SjAV6oiPWBYB84uqpSp/nh4IecN85tfE/f/l +9fKqYNro+uDJKU21w1rq5R4A+tWuC/H+ZIPweKXaP2Emxl1AYFJVFJpSC2R4u3X u3xhEoi5Ha4p+DOX2ssafwix1uzjXeLOCKAM0B/SpTywRvCix2ir9TlJgDEDjGST lhNCIQn3HTp8gZqrC+/GdfZnAOt8MvX4Bc6h2FhYQV/Lq1GjAC8xwfZkCU2jqYmk F1j6rLgWtQWZWbgA4cwRv387FC9oe8M++h4vNtNFy77ogkVffcW80xwbOhCkzb7/ cC61VFMwFBf5piACd1ukbyZKSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsON+kR n4oq2RRNV3uV6vBQnCYuMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAucCQUMCvi01R4+kKBhnmXTu/zdFPtZ51/h9PqvrLXWDduI+4u/hPl ykzjER6W/NhZU/Fm41lKpFdgd/RelLmQLhBQPLLJxO221o4cq9bEHycHj61892bN 8cVUtuL+gz2r9a/z1UGOyY3GaQ3Zh7q9xChzoYpqTl4fT+PqMDlaNliyQ5z9fP1A /Z3Ty+f+t8zwTktxI4R18d6EZ3+drE91HHtuAhXnKd3rXi0d4uaXKdgksh+ERoRD FeF/LagsHYy0ltruInw8Fg38T89iwK1BoS37J2tZOEmnhOmOy92T/GjMOm6/Vw7Y prPGscNwzm7L1rBlwSfZ0Hnl5fimBSMg -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org