$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft File: CL0cxa7edJKy8iV6oZTbCFVa9vI.mft (raw, json) Hash identifier: Ifjyf+nHN3xjEejGf7inN4PESs0+oepprbNyBpuRP6Q= Subject key identifier: E4:EC:38:A7:28:F6:CF:17:CA:38:DF:CE:58:A0:78:44:2D:5F:48:E1 Authority key identifier: 08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2 Certificate issuer: /CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft Manifest number: 0BD3 Signing time: Sat 18 May 2024 19:24:18 +0000 Manifest this update: Sat 18 May 2024 19:24:17 +0000 Manifest next update: Sat 25 May 2024 19:24:17 +0000 Files and hashes: 1: CL0cxa7edJKy8iV6oZTbCFVa9vI.crl (hash: wao5g6gcE2dphIs9UJsjp0wvB28BcJt5Gp0f/uRwl/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4CF1/serialNumber=08BD1CC5AEDE7492B2F2257AA194DB08555AF6F2 Validity Not Before: May 18 19:24:17 2024 GMT Not After : May 25 19:24:17 2024 GMT Subject: CN=66490061-3a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:5f:be:94:b7:3a:08:3a:11:2d:71:05:2b: 88:99:95:5f:9e:da:68:fd:e6:d4:2e:17:a4:ef:5c: fa:0f:ec:81:87:89:93:2d:cb:62:7b:5e:fc:ad:ad: 7e:60:a4:3a:ba:3a:a5:b7:c4:b6:09:af:64:4f:f8: c1:31:1a:e3:d6:e3:db:3f:a3:79:00:46:b3:fe:bc: 8a:ba:8d:c2:1d:73:01:b6:c3:1f:b3:62:75:29:61: 1c:ce:50:40:55:28:87:64:9b:c1:95:0a:7e:ab:2b: ca:77:21:21:4c:18:65:8a:0a:bc:e5:f2:81:56:94: 8e:71:18:a9:6c:22:ff:f8:e3:01:e9:a6:c6:36:bd: 28:a1:57:8e:d0:f5:f4:12:1b:e2:8d:e3:42:6a:61: 26:45:b7:f9:f9:21:bc:e8:3e:6f:6c:23:63:81:1b: cf:19:6d:7c:0e:c4:2d:c6:af:69:9a:fa:ad:a8:69: 39:21:4f:0a:cb:90:4b:80:cf:75:c8:dd:f8:bd:4c: c1:0f:07:1a:da:d9:eb:69:53:61:7a:a2:93:17:8d: 19:0f:e9:89:c6:80:6d:9a:29:3b:ba:df:96:bb:a5: 5f:7d:99:63:97:e7:32:9c:fc:0a:be:2e:fa:a6:19: 90:e5:ee:d0:b0:4b:48:a7:d8:a8:27:77:64:6d:e2: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EC:38:A7:28:F6:CF:17:CA:38:DF:CE:58:A0:78:44:2D:5F:48:E1 X509v3 Authority Key Identifier: keyid:08:BD:1C:C5:AE:DE:74:92:B2:F2:25:7A:A1:94:DB:08:55:5A:F6:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CL0cxa7edJKy8iV6oZTbCFVa9vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4CF1/AD9046FE058611EA92E56552C4F9AE02/CL0cxa7edJKy8iV6oZTbCFVa9vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e3:0e:3c:c6:31:84:8e:2c:df:f0:18:92:84:4b:36:b8:4c: 0b:46:72:a8:94:43:25:ec:73:34:b5:f0:0f:e3:ac:84:1f:80: 5c:09:b2:ec:df:db:d3:d8:0d:38:59:2d:d7:23:42:49:6b:c5: 55:9f:e0:58:c4:6c:d9:ab:ce:26:e8:cd:8e:fc:b2:1a:97:d3: 0e:be:ec:95:a5:dd:bc:8e:d3:5b:c9:46:72:cc:58:70:39:a5: 87:3d:ab:90:10:d9:a9:27:e3:d7:8d:34:be:91:db:bf:df:d0: 24:0e:61:26:f8:da:69:c3:c1:bb:c5:19:24:f4:48:50:bc:a7: d7:33:0d:26:19:b4:99:cf:3c:4f:52:63:cf:fb:36:8e:da:a5: 2a:eb:36:5e:6e:08:0a:c0:13:e9:f7:86:a9:a4:f5:47:db:e9: 26:59:d7:3c:20:8b:f2:18:7c:fe:81:8c:19:c3:c7:15:cd:d0: 02:4e:f8:4d:a1:9c:c4:fd:96:c3:25:f6:cb:af:d9:ff:8b:97: 32:28:af:ba:da:ac:8f:0c:f3:94:15:c2:ca:a0:0d:15:76:06: dd:8f:32:bf:cc:37:a6:01:1a:bc:c2:e4:f6:58:8f:aa:8a:42: 33:38:9b:75:60:b9:0b:cb:1b:79:60:07:a2:9f:a8:27:dd:d8: b5:39:9c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDRjExMTAvBgNVBAUTKDA4QkQxQ0M1QUVERTc0OTJCMkYyMjU3QUExOTREQjA4 NTU1QUY2RjIwHhcNMjQwNTE4MTkyNDE3WhcNMjQwNTI1MTkyNDE3WjAYMRYwFAYD VQQDEw02NjQ5MDA2MS0zYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHxfvpS3Ogg6ES1xBSuImZVfntpo/ebULhek71z6D+yBh4mTLctie178ra1+ YKQ6ujqlt8S2Ca9kT/jBMRrj1uPbP6N5AEaz/ryKuo3CHXMBtsMfs2J1KWEczlBA VSiHZJvBlQp+qyvKdyEhTBhligq85fKBVpSOcRipbCL/+OMB6abGNr0ooVeO0PX0 EhvijeNCamEmRbf5+SG86D5vbCNjgRvPGW18DsQtxq9pmvqtqGk5IU8Ky5BLgM91 yN34vUzBDwca2tnraVNheqKTF40ZD+mJxoBtmik7ut+Wu6VffZljl+cynPwKvi76 phmQ5e7QsEtIp9ioJ3dkbeIo6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTsOKco 9s8XyjjfzligeEQtX0jhMB8GA1UdIwQYMBaAFAi9HMWu3nSSsvIleqGU2whVWvby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNENGMS9BRDkwNDZGRTA1 ODYxMUVBOTJFNTY1NTJDNEY5QUUwMi9DTDBjeGE3ZWRKS3k4aVY2b1pUYkNGVmE5 dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NMMGN4YTdlZEpLeThpVjZvWlRiQ0ZWYTl2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NENGMS9BRDkwNDZGRTA1ODYxMUVBOTJFNTY1NTJDNEY5QUUwMi9DTDBjeGE3ZWRK S3k4aVY2b1pUYkNGVmE5dkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4w48xjGEjizf8BiShEs2uEwLRnKolEMl7HM0tfAP46yEH4BcCbLs 39vT2A04WS3XI0JJa8VVn+BYxGzZq84m6M2O/LIal9MOvuyVpd28jtNbyUZyzFhw OaWHPauQENmpJ+PXjTS+kdu/39AkDmEm+Nppw8G7xRkk9EhQvKfXMw0mGbSZzzxP UmPP+zaO2qUq6zZebggKwBPp94appPVH2+kmWdc8IIvyGHz+gYwZw8cVzdACTvhN oZzE/ZbDJfbLr9n/i5cyKK+62qyPDPOUFcLKoA0VdgbdjzK/zDemARq8wuT2WI+q ikIzOJt1YLkLyxt5YAein6gn3di1OZz6 -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org