$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: afSvfbi0xOwy/U1a8hMhYW+ow3DLpQlAKC81CYu/9f0= Subject key identifier: E9:F8:06:79:43:52:5F:6B:86:E4:60:B3:EF:35:28:38:83:18:40:BE Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 247F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9C50 Signing time: Fri 31 May 2024 14:33:43 +0000 Manifest this update: Fri 31 May 2024 14:33:43 +0000 Manifest next update: Fri 07 Jun 2024 14:33:43 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: yFAlfZ2oafxbi+YTxLz3dHnAvryAVMdo31msagApG8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9343 (0x247f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: May 31 14:33:43 2024 GMT Not After : Jun 7 14:33:43 2024 GMT Subject: CN=6659dfc7-6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:d8:35:cb:c8:7a:3c:89:3e:cf:d3:f5:41: 0e:b5:e6:e7:c1:1e:05:aa:3b:1a:6d:94:3d:9e:c0: 96:6b:84:73:35:04:ba:6c:3e:9f:90:de:61:0d:0f: 67:dc:a7:e5:a2:9d:e0:cf:0f:a4:07:26:79:3d:22: d5:dc:4f:2b:9f:f4:8f:7d:2a:42:83:e5:b3:53:a6: 76:c6:5a:48:79:3a:64:27:4e:61:84:bf:b0:42:37: 3f:e1:8c:d6:86:5f:6a:98:b3:e0:71:2b:c9:d0:47: 18:91:d2:2b:75:ea:5c:0f:d3:a5:57:8a:6b:ba:e0: c1:87:7b:27:4d:07:21:de:20:a0:28:da:47:9a:63: 01:19:9e:9b:a9:4a:9f:02:3d:16:5a:d0:10:95:49: 66:ac:f8:9e:07:3e:73:71:9e:49:f4:54:d2:f2:9b: 99:7c:88:52:96:48:92:69:e8:fa:da:06:4e:5e:ad: 26:62:12:fa:28:aa:5b:32:51:1e:8a:d9:4f:41:4d: 41:6b:7f:9e:30:b2:2e:ef:4e:7f:bc:da:3f:39:c3: 8b:62:af:b4:60:3f:df:8b:0c:09:c9:fe:b8:a5:5b: 7d:4a:ce:e7:db:bd:fb:04:f9:aa:29:ad:f0:15:54: 11:9e:ae:11:ed:ba:1f:e7:d0:c9:d2:84:2a:54:de: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F8:06:79:43:52:5F:6B:86:E4:60:B3:EF:35:28:38:83:18:40:BE X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:af:ca:5d:63:aa:7b:89:53:40:78:e3:af:a1:39:76:1e:e9: 6b:82:22:00:00:1d:2a:79:ae:42:89:65:51:f8:ac:1b:ba:da: b4:0e:1d:c4:9d:ce:f5:b9:c2:fc:d5:60:eb:03:21:a6:07:54: 76:9b:ff:50:30:c8:2a:c3:2d:6a:25:c8:35:10:0a:35:4a:c2: 72:e3:3c:48:fe:9e:ee:ae:a4:c6:7c:af:c7:4b:ae:6a:6c:76: 6d:93:56:04:7c:2f:e2:ec:30:09:7e:75:4f:71:7a:fa:16:d1: ca:15:18:f4:8c:bb:69:fd:7a:49:77:09:9b:70:bd:e7:45:98: 25:e1:86:74:68:30:1f:75:5c:9f:ea:ff:aa:71:13:ef:af:5d: 44:75:dd:0c:19:6a:ca:5b:12:f9:67:df:a0:de:24:5b:0c:de: 8f:53:5f:76:04:b4:bf:a6:31:9a:e1:2b:b0:ee:a6:19:37:cf: 3e:a0:5e:39:70:3c:f4:43:c5:c7:ee:ab:48:85:97:fd:6a:b8: 9c:b8:d9:78:8d:6e:a3:87:ff:68:4a:54:ba:07:07:a8:05:9f: 40:f6:a6:b7:3e:b4:5b:bd:76:80:30:71:00:55:9c:6a:0b:64: ec:1c:60:32:cf:13:f4:fb:6d:8a:2c:7f:b7:4c:05:cb:e1:c4: a3:8e:8e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjQwNTMxMTQzMzQzWhcNMjQwNjA3MTQzMzQzWjAYMRYwFAYD VQQDEw02NjU5ZGZjNy02MDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35jYNcvIejyJPs/T9UEOtebnwR4FqjsabZQ9nsCWa4RzNQS6bD6fkN5hDQ9n 3Kflop3gzw+kByZ5PSLV3E8rn/SPfSpCg+WzU6Z2xlpIeTpkJ05hhL+wQjc/4YzW hl9qmLPgcSvJ0EcYkdIrdepcD9OlV4pruuDBh3snTQch3iCgKNpHmmMBGZ6bqUqf Aj0WWtAQlUlmrPieBz5zcZ5J9FTS8puZfIhSlkiSaej62gZOXq0mYhL6KKpbMlEe itlPQU1Ba3+eMLIu705/vNo/OcOLYq+0YD/fiwwJyf64pVt9Ss7n2737BPmqKa3w FVQRnq4R7bof59DJ0oQqVN4qLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn4BnlD Ul9rhuRgs+81KDiDGEC+MB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8r8pdY6p7iVNAeOOvoTl2HulrgiIAAB0qea5CiWVR+Kwbutq0Dh3E nc71ucL81WDrAyGmB1R2m/9QMMgqwy1qJcg1EAo1SsJy4zxI/p7urqTGfK/HS65q bHZtk1YEfC/i7DAJfnVPcXr6FtHKFRj0jLtp/XpJdwmbcL3nRZgl4YZ0aDAfdVyf 6v+qcRPvr11Edd0MGWrKWxL5Z9+g3iRbDN6PU192BLS/pjGa4Suw7qYZN88+oF45 cDz0Q8XH7qtIhZf9aricuNl4jW6jh/9oSlS6BweoBZ9A9qa3PrRbvXaAMHEAVZxq C2TsHGAyzxP0+22KLH+3TAXL4cSjjo55 -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org