$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: K5l7gN9g08xpqe5ztLLO20iGlmRk0RjpJQSlut7KaZg= Subject key identifier: B0:05:27:4F:AD:E4:30:64:59:D4:E9:37:66:7F:07:CB:22:10:B8:D7 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0C7E Signing time: Sat 18 May 2024 19:01:03 +0000 Manifest this update: Sat 18 May 2024 19:01:03 +0000 Manifest next update: Sat 25 May 2024 19:01:03 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: O7bdSn5YlTgycIQ+QKKAZtJLRlhYHMGctlnyCWBZF3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: May 18 19:01:03 2024 GMT Not After : May 25 19:01:03 2024 GMT Subject: CN=6648faef-d3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:4f:64:b4:4b:d3:f4:d2:ea:52:a9:ad:e7: fc:31:f6:96:01:58:b6:4f:4f:92:81:84:50:02:d9: 33:ff:db:34:3f:59:0b:fe:a2:56:dc:62:5a:60:d4: 79:65:c9:42:23:70:4d:3c:27:5f:1f:ac:60:64:2c: 7a:dd:8a:cb:78:df:3b:ee:08:f9:45:10:c4:1a:57: 81:97:09:0f:a8:2c:46:a2:c3:3c:cf:1a:7e:78:a4: ba:cb:2c:39:7c:2b:61:72:74:88:4d:85:7d:45:25: b8:e7:f7:92:82:23:91:cf:27:a8:d5:93:0d:f1:e9: 26:94:f1:46:18:da:7a:4b:fc:2f:a7:33:c9:21:86: 3e:d3:3b:49:9c:3a:7b:d1:86:87:c4:77:4e:53:2e: 81:70:a3:52:de:f3:17:a6:bc:cc:96:25:c4:2e:4c: 38:10:4b:f4:99:b0:4d:86:49:a9:d5:b2:8c:86:6a: 29:f5:91:98:79:da:6b:8f:fa:61:7b:d0:da:eb:0e: a0:16:7e:c9:0e:09:e6:4f:78:ae:0c:7b:e8:fa:5e: d5:37:47:48:bf:3c:39:cc:5f:42:63:56:b4:a1:41: 11:a7:f5:be:5f:1f:53:d2:cb:46:50:b5:59:53:55: 34:2e:3e:b7:00:74:a0:34:a3:70:3b:32:6e:63:2d: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:27:4F:AD:E4:30:64:59:D4:E9:37:66:7F:07:CB:22:10:B8:D7 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c3:88:78:94:f8:5a:dd:5b:d9:42:30:86:8b:07:68:82:f6: 09:5d:bc:9e:2d:c6:f8:f4:d2:72:b1:27:cb:e0:03:a4:d9:58: 26:64:d0:c9:68:0f:68:27:1b:fa:cf:ef:c8:31:0c:db:37:15: 2f:9a:94:18:74:c3:5b:59:09:04:4f:65:e9:2f:a4:ad:f5:a2: ec:84:25:52:9b:ab:d5:21:71:5f:a9:77:f3:b2:fc:1b:9b:f9: 84:ae:03:6e:45:59:8e:22:2f:65:02:6d:39:79:ac:d6:33:48: a6:97:7b:0a:98:70:3a:c7:ec:b9:7a:4d:f1:de:4d:5d:84:aa: 3a:d3:96:13:c5:f4:a1:2c:f3:67:76:5b:29:d8:e6:50:3f:96: 1c:d2:ab:a6:fa:ff:d7:86:03:82:fc:62:2a:2f:0f:53:a9:ba: 25:af:bb:2d:0b:19:59:b3:81:12:9b:e1:1f:0f:9a:65:09:61: 1a:b8:8b:51:cc:25:ca:2c:8b:fc:0e:6b:85:ff:47:83:55:c6: a8:32:d9:9e:a5:d0:18:8d:8f:62:e6:b5:93:61:1d:28:b3:a6: b9:a4:a5:d2:70:6b:c3:a2:b4:a5:ab:f0:8b:a4:7e:b8:e2:e6: fe:ec:6c:88:4e:ae:03:2c:55:31:2a:36:ec:93:12:6e:f8:3b: 61:eb:ad:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjQwNTE4MTkwMTAzWhcNMjQwNTI1MTkwMTAzWjAYMRYwFAYD VQQDEw02NjQ4ZmFlZi1kM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMtPZLRL0/TS6lKpref8MfaWAVi2T0+SgYRQAtkz/9s0P1kL/qJW3GJaYNR5 ZclCI3BNPCdfH6xgZCx63YrLeN877gj5RRDEGleBlwkPqCxGosM8zxp+eKS6yyw5 fCthcnSITYV9RSW45/eSgiORzyeo1ZMN8ekmlPFGGNp6S/wvpzPJIYY+0ztJnDp7 0YaHxHdOUy6BcKNS3vMXprzMliXELkw4EEv0mbBNhkmp1bKMhmop9ZGYedprj/ph e9Da6w6gFn7JDgnmT3iuDHvo+l7VN0dIvzw5zF9CY1a0oUERp/W+Xx9T0stGULVZ U1U0Lj63AHSgNKNwOzJuYy1WMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAFJ0+t 5DBkWdTpN2Z/B8siELjXMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOw4h4lPha3VvZQjCGiwdogvYJXbyeLcb49NJysSfL4AOk2VgmZNDJ aA9oJxv6z+/IMQzbNxUvmpQYdMNbWQkET2XpL6St9aLshCVSm6vVIXFfqXfzsvwb m/mErgNuRVmOIi9lAm05eazWM0iml3sKmHA6x+y5ek3x3k1dhKo605YTxfShLPNn dlsp2OZQP5Yc0qum+v/XhgOC/GIqLw9Tqbolr7stCxlZs4ESm+EfD5plCWEauItR zCXKLIv8DmuF/0eDVcaoMtmepdAYjY9i5rWTYR0os6a5pKXScGvDorSlq/CLpH64 4ub+7GyITq4DLFUxKjbskxJu+Dth661O -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org