$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: iLp1FZo1WTl1Qv+L44FoX+vzwikIvLLqFWPD4aCYb0M= Subject key identifier: DA:00:47:53:CF:83:D0:CA:03:05:78:B4:A3:21:70:37:D5:EB:7F:A2 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 033B Signing time: Sun 19 May 2024 02:56:55 +0000 Manifest this update: Sun 19 May 2024 02:56:55 +0000 Manifest next update: Sun 26 May 2024 02:56:55 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: GcNIQN5Klrv0fPm2cvXDJBCo6C7+gI6qKqJaWqwMYJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: May 19 02:56:55 2024 GMT Not After : May 26 02:56:55 2024 GMT Subject: CN=66496a77-5c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:3d:09:dc:02:c5:dc:f2:f4:b1:ba:68:a2: b0:1e:67:9e:5b:c0:a7:da:43:ae:4b:41:c2:ca:c0: ab:ed:5f:1d:bc:53:6e:af:37:9f:d2:38:83:c6:35: 26:a7:a8:7d:fc:d0:0d:7d:25:01:c5:73:c3:97:c2: 7d:ca:64:af:b4:fe:29:9b:7f:89:7b:f4:7a:50:97: 0c:98:65:e4:5e:1a:c6:c6:aa:db:1a:d7:f1:3f:d3: 54:5b:92:17:6e:e1:d9:54:4d:77:7d:8b:ff:36:0e: 17:91:04:58:c7:98:f8:92:65:9e:40:eb:62:6a:0c: 36:87:28:5a:ef:04:ef:e4:4a:57:ff:d6:46:1e:7a: 63:71:bd:ca:cf:1c:bf:16:59:3c:6c:23:ae:18:3c: 63:2c:e3:95:b2:56:e2:30:3b:33:06:37:78:64:f5: 26:60:21:b1:5d:5c:e7:c1:30:40:1a:9c:fa:89:e1: f6:81:80:5c:cb:ad:8e:a5:fa:72:3d:06:cc:1b:bf: 38:14:3d:5d:92:46:d3:4f:11:d6:e1:e6:9f:58:73: e3:e8:fe:74:d1:fd:1a:1d:fd:e4:3b:69:8a:33:ff: 3a:e7:a6:4f:5a:f2:55:a2:36:f2:47:22:6f:f6:fe: 11:88:dd:af:50:1f:18:61:e1:61:99:c7:5d:fa:b1: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:47:53:CF:83:D0:CA:03:05:78:B4:A3:21:70:37:D5:EB:7F:A2 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:88:cc:6b:ff:0c:22:9b:23:de:3a:12:da:5b:5e:ec:48:c4: b8:25:bf:ff:0d:74:6f:db:29:8b:12:91:2c:aa:d9:d9:33:30: 6b:5c:fb:34:93:e3:45:55:82:e8:da:ce:58:6b:52:62:13:32: e6:e9:53:05:f5:d2:1b:01:85:18:25:00:d0:d5:49:9d:c9:be: ee:29:76:7e:9e:90:91:67:22:00:04:7a:96:b2:3e:63:a4:b4: 73:d0:b7:9d:a9:9b:0f:55:ae:5a:d9:71:18:05:07:54:4f:7e: e6:a3:9a:de:08:71:0a:6f:ab:0b:38:af:1a:e3:b4:ea:e7:b7: b5:7d:20:ba:b4:ed:3d:42:02:4b:11:05:30:e7:d4:d9:87:5d: 1e:4e:e1:d1:4c:a0:cb:b4:9c:7c:8d:b0:be:7e:10:48:6d:ba: c8:b1:11:46:47:eb:ac:dc:a6:e3:31:2c:f8:6e:29:a2:a5:7d: 9f:f7:b1:00:3e:78:83:97:e2:69:11:a6:5c:a6:f4:1c:3b:79: 6e:08:0c:1a:37:52:28:52:e1:00:06:5a:07:c7:5b:c4:74:52: 80:45:4f:8d:49:cb:21:73:5a:3b:c7:f2:4f:4d:c0:fb:4f:a6: 3f:9c:f6:0a:53:ca:10:31:aa:4b:23:4f:8b:5b:be:a3:76:75: fc:17:0b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjQwNTE5MDI1NjU1WhcNMjQwNTI2MDI1NjU1WjAYMRYwFAYD VQQDEw02NjQ5NmE3Ny01YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbc9CdwCxdzy9LG6aKKwHmeeW8Cn2kOuS0HCysCr7V8dvFNurzef0jiDxjUm p6h9/NANfSUBxXPDl8J9ymSvtP4pm3+Je/R6UJcMmGXkXhrGxqrbGtfxP9NUW5IX buHZVE13fYv/Ng4XkQRYx5j4kmWeQOtiagw2hyha7wTv5EpX/9ZGHnpjcb3Kzxy/ Flk8bCOuGDxjLOOVslbiMDszBjd4ZPUmYCGxXVznwTBAGpz6ieH2gYBcy62Opfpy PQbMG784FD1dkkbTTxHW4eafWHPj6P500f0aHf3kO2mKM/8656ZPWvJVojbyRyJv 9v4RiN2vUB8YYeFhmcdd+rGqeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoAR1PP g9DKAwV4tKMhcDfV63+iMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1iMxr/wwimyPeOhLaW17sSMS4Jb//DXRv2ymLEpEsqtnZMzBrXPs0 k+NFVYLo2s5Ya1JiEzLm6VMF9dIbAYUYJQDQ1Umdyb7uKXZ+npCRZyIABHqWsj5j pLRz0LedqZsPVa5a2XEYBQdUT37mo5reCHEKb6sLOK8a47Tq57e1fSC6tO09QgJL EQUw59TZh10eTuHRTKDLtJx8jbC+fhBIbbrIsRFGR+us3KbjMSz4bimipX2f97EA PniDl+JpEaZcpvQcO3luCAwaN1IoUuEABloHx1vEdFKARU+NScshc1o7x/JPTcD7 T6Y/nPYKU8oQMapLI0+LW76jdnX8Fwsy -----END CERTIFICATE-----Generated at Sun May 19 03:48:53 2024 by rpki-client on console-fra.rpki-client.org