$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: +U/0MQkcgSQH9su69kuD7nl2wOIuaXS3D6alVJrvMUc= Subject key identifier: B0:21:BC:02:FD:4A:71:4F:FA:EA:AC:A4:71:55:A0:45:D6:8A:F5:0B Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 33DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 45AA Signing time: Sat 18 May 2024 14:22:26 +0000 Manifest this update: Sat 18 May 2024 14:22:26 +0000 Manifest next update: Sat 25 May 2024 14:22:26 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: 9duPVYhHtkSiwMdowIgaLnEueRQC0k/VmJiqZp7Si74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13279 (0x33df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: May 18 14:22:26 2024 GMT Not After : May 25 14:22:26 2024 GMT Subject: CN=6648b9a2-28a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:ce:d3:37:9b:ed:f2:fd:2a:17:0a:db:90: c3:3a:3e:32:7b:6b:f6:4d:97:d4:0f:32:75:aa:a0: 62:f1:15:a7:b3:da:ee:a4:a1:b8:93:ab:3e:b9:a0: 96:be:2b:19:86:c3:e4:70:20:d6:22:8b:7b:f4:ae: 51:a6:07:e1:98:98:df:dd:c0:2a:89:0f:51:90:cf: ed:7d:f7:f2:d0:3b:54:bc:8b:75:a6:53:4a:66:6e: ab:26:f2:18:31:ac:3f:ee:03:23:f2:76:ab:8f:7e: 4e:32:1e:0d:0e:d9:6f:fb:50:9a:3c:8c:df:8a:9c: 5e:b9:10:b6:dc:04:ed:c4:85:90:d3:9c:cb:b4:e3: d7:6c:f7:ea:cb:96:12:81:ac:56:00:17:8d:01:80: c5:ec:2a:67:2a:8f:9c:29:ad:25:dc:55:f4:76:11: f6:6b:b2:e6:48:dd:3f:9c:8d:64:f4:23:61:aa:cc: 49:71:d7:45:2e:8c:99:55:3c:c8:0a:93:8e:95:16: 4f:cd:ab:73:a9:7e:13:cf:d8:40:96:ae:16:32:f8: 88:22:7e:ce:39:c9:a5:93:3a:fd:c0:27:81:96:b2: 6d:ad:08:fc:47:c5:da:e2:5c:94:aa:d7:90:61:73: e6:c5:36:6c:81:b6:49:69:9d:37:df:54:42:80:7a: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:21:BC:02:FD:4A:71:4F:FA:EA:AC:A4:71:55:A0:45:D6:8A:F5:0B X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d4:b5:40:dd:6e:c5:1b:ba:b4:ab:78:cc:f9:9e:dc:e2:d4: 99:8d:e8:05:19:75:61:fb:88:dd:74:d6:0c:f2:64:a0:e2:7e: be:60:2f:01:ed:98:6e:19:fd:20:cd:42:68:ab:ae:a6:e6:84: 1e:92:6e:ab:55:86:bb:bf:e3:ff:63:1c:b3:29:d5:91:f5:e0: fb:ee:5a:d0:f0:45:4a:bf:8d:28:08:28:07:c8:e1:2d:2b:a9: 08:c6:f8:f1:c8:da:f9:2a:5b:21:04:70:78:d3:af:43:db:34: 89:bc:d5:6b:d1:4c:c1:68:7d:1c:92:da:2c:dd:1d:33:44:23: cc:18:21:3c:ed:99:dd:1e:57:e4:69:fb:82:b4:70:55:57:24: d4:a4:e3:73:81:a2:d8:46:f9:7e:cb:59:17:b3:3f:19:fe:a3: fb:88:86:ba:1c:d0:22:1a:dd:38:af:ff:a4:cb:1b:c7:48:41: 22:1d:98:60:bb:3e:ae:ad:a4:8e:ba:dc:a3:73:c3:1d:48:1c: b5:80:61:06:07:80:b5:34:a7:7f:fe:3f:ea:2b:cc:42:5a:b7: f7:7b:08:ed:86:25:de:e8:64:41:75:ad:07:0b:ec:3e:7b:a2: be:d5:c9:3c:03:ae:35:d2:75:da:e9:e5:7f:18:e8:a9:21:c7: 93:4b:17:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjQwNTE4MTQyMjI2WhcNMjQwNTI1MTQyMjI2WjAYMRYwFAYD VQQDEw02NjQ4YjlhMi0yOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUrO0zeb7fL9KhcK25DDOj4ye2v2TZfUDzJ1qqBi8RWns9rupKG4k6s+uaCW visZhsPkcCDWIot79K5RpgfhmJjf3cAqiQ9RkM/tfffy0DtUvIt1plNKZm6rJvIY Maw/7gMj8narj35OMh4NDtlv+1CaPIzfipxeuRC23ATtxIWQ05zLtOPXbPfqy5YS gaxWABeNAYDF7CpnKo+cKa0l3FX0dhH2a7LmSN0/nI1k9CNhqsxJcddFLoyZVTzI CpOOlRZPzatzqX4Tz9hAlq4WMviIIn7OOcmlkzr9wCeBlrJtrQj8R8Xa4lyUqteQ YXPmxTZsgbZJaZ0331RCgHqFEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAhvAL9 SnFP+uqspHFVoEXWivULMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs1LVA3W7FG7q0q3jM+Z7c4tSZjegFGXVh+4jddNYM8mSg4n6+YC8B 7ZhuGf0gzUJoq66m5oQekm6rVYa7v+P/YxyzKdWR9eD77lrQ8EVKv40oCCgHyOEt K6kIxvjxyNr5KlshBHB4069D2zSJvNVr0UzBaH0cktos3R0zRCPMGCE87ZndHlfk afuCtHBVVyTUpONzgaLYRvl+y1kXsz8Z/qP7iIa6HNAiGt04r/+kyxvHSEEiHZhg uz6uraSOutyjc8MdSBy1gGEGB4C1NKd//j/qK8xCWrf3ewjthiXe6GRBda0HC+w+ e6K+1ck8A6410nXa6eV/GOipIceTSxcr -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org