$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: q8xWpSXtYtOnrRNajtt5neIam4sA6HU4Z+SGmAqkbIc= Subject key identifier: 4B:69:9F:F6:64:9D:4B:91:66:B5:4C:67:44:5E:63:B9:4F:C4:C9:34 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9C32 Signing time: Sat 18 May 2024 14:33:27 +0000 Manifest this update: Sat 18 May 2024 14:33:26 +0000 Manifest next update: Sat 25 May 2024 14:33:26 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: tBDg7Z2HgrYZ61INpJGmz8OK8M3mls2BjCtOmg7VOf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10823 (0x2a47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: May 18 14:33:26 2024 GMT Not After : May 25 14:33:26 2024 GMT Subject: CN=6648bc36-7e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:9f:8f:d3:b9:b0:01:01:bf:8b:25:9c:26: 1b:22:55:b2:98:cd:3d:d3:78:e0:3a:e2:77:cb:d8: 79:6b:a8:c5:46:04:28:68:24:2e:d7:a9:2b:8d:53: 01:9a:c9:6f:ce:05:68:2f:da:4b:e6:dc:cd:75:02: 7f:41:ab:5e:0a:c5:ed:fd:bd:cb:2f:66:af:e8:c4: bc:0b:f1:62:9f:1e:d9:43:8e:ef:8b:54:78:46:85: 11:e1:e9:04:a3:80:b0:39:d4:85:72:81:a2:b3:98: ac:b3:d6:ca:16:99:4f:46:b7:b1:d1:f8:73:6b:45: 21:03:a9:3b:2f:a8:68:7a:fa:86:dc:18:3f:95:99: 5a:72:aa:08:96:4c:90:0b:24:77:6b:59:f8:08:65: f7:73:ed:87:f3:a5:ab:a4:1f:ce:0d:55:93:94:f7: 89:79:6e:42:3c:0d:3f:83:89:f8:1e:c9:a0:e0:e6: a0:ad:0b:6a:43:cf:69:e5:01:86:3a:bc:66:20:93: 57:db:ec:04:fc:f5:66:0d:ff:1c:7e:30:36:7e:56: 83:e8:f8:0b:87:36:fc:c5:c4:03:76:94:75:dc:05: c1:94:6b:7d:2c:a6:1e:98:51:03:9e:9c:0d:6c:d6: f4:b6:b1:f2:3e:f3:17:d7:fb:45:47:99:6f:ba:7b: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:9F:F6:64:9D:4B:91:66:B5:4C:67:44:5E:63:B9:4F:C4:C9:34 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4d:a6:14:5f:35:d9:a0:aa:38:b1:7a:d5:88:09:f0:dc:3c: ac:7d:6e:32:74:9a:28:17:61:0c:8a:c6:e8:91:2d:df:e5:66: da:55:0e:b3:8e:2e:3d:a3:e1:29:a3:9b:74:58:43:bb:2a:59: dd:eb:ee:e9:65:4b:00:b9:35:ed:f5:80:2a:0d:76:3d:3d:e9: ba:0f:52:6d:6e:e8:64:40:f9:40:3f:13:1c:55:50:59:b7:e7: 49:9e:25:c6:cf:9f:ab:07:9d:3e:ad:fc:c5:3e:ce:ad:6a:ee: 99:be:9b:77:2b:c9:97:f6:42:4a:8c:7a:b8:30:3a:9f:06:68: f5:5f:4c:3c:be:1d:bb:1a:1a:91:03:2c:19:61:6c:45:60:9d: 47:5d:0e:e2:de:38:bf:c3:4e:3d:ce:cc:3f:c5:e4:8d:f5:93: cb:1b:6e:19:23:54:de:f4:49:c3:81:5f:df:3c:6e:c0:84:f6: c3:03:a1:89:65:b7:4f:0a:13:3b:4a:11:67:20:de:82:f4:be: ea:8c:32:39:0a:07:4f:c4:91:08:a9:e8:ad:6e:59:7c:37:25: 02:17:37:83:de:2b:55:5c:c8:ef:6a:f7:98:ea:0d:a4:a0:b6: 2f:80:82:f8:5e:e6:9c:09:fa:fd:bb:e7:22:46:31:a8:91:58: 47:70:e7:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjQwNTE4MTQzMzI2WhcNMjQwNTI1MTQzMzI2WjAYMRYwFAYD VQQDEw02NjQ4YmMzNi03ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVqfj9O5sAEBv4slnCYbIlWymM0903jgOuJ3y9h5a6jFRgQoaCQu16krjVMB mslvzgVoL9pL5tzNdQJ/QateCsXt/b3LL2av6MS8C/Finx7ZQ47vi1R4RoUR4ekE o4CwOdSFcoGis5iss9bKFplPRrex0fhza0UhA6k7L6hoevqG3Bg/lZlacqoIlkyQ CyR3a1n4CGX3c+2H86WrpB/ODVWTlPeJeW5CPA0/g4n4Hsmg4OagrQtqQ89p5QGG OrxmIJNX2+wE/PVmDf8cfjA2flaD6PgLhzb8xcQDdpR13AXBlGt9LKYemFEDnpwN bNb0trHyPvMX1/tFR5lvunvJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtpn/Zk nUuRZrVMZ0ReY7lPxMk0MB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmTaYUXzXZoKo4sXrViAnw3DysfW4ydJooF2EMisbokS3f5WbaVQ6z ji49o+Epo5t0WEO7Klnd6+7pZUsAuTXt9YAqDXY9Pem6D1JtbuhkQPlAPxMcVVBZ t+dJniXGz5+rB50+rfzFPs6tau6Zvpt3K8mX9kJKjHq4MDqfBmj1X0w8vh27GhqR AywZYWxFYJ1HXQ7i3ji/w049zsw/xeSN9ZPLG24ZI1Te9EnDgV/fPG7AhPbDA6GJ ZbdPChM7ShFnIN6C9L7qjDI5CgdPxJEIqeitbll8NyUCFzeD3itVXMjvaveY6g2k oLYvgIL4XuacCfr9u+ciRjGokVhHcOcj -----END CERTIFICATE-----Generated at Sun May 19 10:28:17 2024 by rpki-client on console-ams.rpki-client.org