$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: YacBNZTGI60Y7Dj4zxQdF51xN4XXikM9giq2+Pz9+b0= Subject key identifier: C9:D5:96:3C:E7:D1:5E:56:8B:AF:81:6F:7C:07:45:42:45:80:06:BA Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 3409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 45FA Signing time: Sat 18 May 2024 14:22:21 +0000 Manifest this update: Sat 18 May 2024 14:22:21 +0000 Manifest next update: Sat 25 May 2024 14:22:21 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: /pNibhQ40bvrZJ3aJEE8CUG1DeYX14LZkpzJI0J2yvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13321 (0x3409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: May 18 14:22:21 2024 GMT Not After : May 25 14:22:21 2024 GMT Subject: CN=6648b99d-4829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:9b:f7:19:12:ae:03:c2:b3:3c:81:36:0d: 90:bf:24:43:63:62:86:a7:c0:fb:f7:16:81:0b:48: 8c:87:7f:ba:00:38:59:f8:98:48:04:9d:e3:50:f3: 53:b9:62:cb:68:88:e4:0d:c4:8b:96:28:59:84:07: 5d:b5:be:5f:12:49:ef:4e:a2:60:fb:20:28:0b:39: 77:98:48:03:20:63:a0:0b:67:65:69:09:4b:d0:72: 88:eb:52:3d:21:92:d8:9a:3a:c1:8d:c4:7d:1c:4e: 93:3d:62:1b:0d:f5:dd:4a:ef:07:04:fb:81:8e:63: 19:ab:74:e6:44:d4:c3:35:58:72:a4:86:e1:7d:2a: 98:fe:89:11:ce:76:21:1c:88:90:b1:24:6b:b4:9a: ca:30:ae:76:c3:f2:1a:d6:8a:8c:5d:eb:da:9b:d8: af:cf:3d:12:d5:e1:e1:cd:4c:12:1a:3f:0b:b2:14: 54:b0:07:4b:ae:e1:12:7c:74:a7:9c:0c:20:ca:05: 03:3c:5c:76:e1:27:18:42:c8:07:9e:04:da:7c:df: 72:1e:a4:60:5b:5f:b6:ae:4d:77:ec:c7:54:04:f2: d2:79:78:aa:1f:80:29:9d:46:f6:47:34:59:68:82: 31:7f:a8:c2:0b:64:d4:38:21:d9:dc:5f:b1:0b:b7: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:96:3C:E7:D1:5E:56:8B:AF:81:6F:7C:07:45:42:45:80:06:BA X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8f:92:3c:f4:23:ee:1c:62:15:74:3c:38:99:43:c7:ca:dc: c7:45:b6:af:f1:4d:0b:a3:44:56:22:75:32:3b:53:9f:d6:81: ea:7d:1e:8a:7d:aa:17:0f:0f:4c:6c:15:8e:25:f7:49:94:fc: b3:39:e4:f3:53:ab:97:02:84:47:56:67:a6:2a:02:6e:f5:2b: 86:c2:07:09:44:b8:8a:8d:23:93:88:01:11:d1:43:19:37:d3: 51:c9:0a:83:67:66:2c:88:61:fe:0d:90:ab:77:04:5f:a1:87: 45:65:d5:0a:e2:bd:e4:c8:58:c0:0c:94:bc:0c:49:49:47:4f: 04:a3:b8:e2:6e:ae:ea:75:de:8a:10:f4:77:ba:45:ae:f7:c2: 55:6f:ed:f8:53:e6:8b:27:e4:13:6e:59:8e:1f:55:ae:59:df: 89:91:ed:00:e3:51:a7:b7:07:80:ca:5d:4b:90:e3:08:a6:12: b6:83:83:42:e6:0e:24:c5:68:f0:df:8c:29:f7:56:f8:f8:de: 79:8f:aa:25:99:83:62:57:da:a2:ed:7b:4f:91:15:ad:c0:ad: 5d:a3:0f:79:af:a4:82:38:84:7a:95:46:f4:2d:d3:5b:f2:4b: 72:00:a5:f9:5d:69:62:11:18:ab:9f:af:0c:5c:f2:bc:0e:63: d8:f7:80:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjQwNTE4MTQyMjIxWhcNMjQwNTI1MTQyMjIxWjAYMRYwFAYD VQQDEw02NjQ4Yjk5ZC00ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRab9xkSrgPCszyBNg2QvyRDY2KGp8D79xaBC0iMh3+6ADhZ+JhIBJ3jUPNT uWLLaIjkDcSLlihZhAddtb5fEknvTqJg+yAoCzl3mEgDIGOgC2dlaQlL0HKI61I9 IZLYmjrBjcR9HE6TPWIbDfXdSu8HBPuBjmMZq3TmRNTDNVhypIbhfSqY/okRznYh HIiQsSRrtJrKMK52w/Ia1oqMXevam9ivzz0S1eHhzUwSGj8LshRUsAdLruESfHSn nAwgygUDPFx24ScYQsgHngTafN9yHqRgW1+2rk137MdUBPLSeXiqH4ApnUb2RzRZ aIIxf6jCC2TUOCHZ3F+xC7fVZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnVljzn 0V5Wi6+Bb3wHRUJFgAa6MB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWj5I89CPuHGIVdDw4mUPHytzHRbav8U0Lo0RWInUyO1Of1oHqfR6K faoXDw9MbBWOJfdJlPyzOeTzU6uXAoRHVmemKgJu9SuGwgcJRLiKjSOTiAER0UMZ N9NRyQqDZ2YsiGH+DZCrdwRfoYdFZdUK4r3kyFjADJS8DElJR08Eo7jibq7qdd6K EPR3ukWu98JVb+34U+aLJ+QTblmOH1WuWd+Jke0A41GntweAyl1LkOMIphK2g4NC 5g4kxWjw34wp91b4+N55j6olmYNiV9qi7XtPkRWtwK1dow95r6SCOIR6lUb0LdNb 8ktyAKX5XWliERirn68MXPK8DmPY94DH -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org