$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: ZO5AZq4spRZI3hMVwB6xHStedWN20BpMAS6SV5AXN6o= Subject key identifier: C6:C6:53:E4:D9:F2:54:5A:3F:78:5E:C2:E3:34:F0:B4:D6:2B:DB:32 Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 08C0 Signing time: Sat 18 May 2024 15:09:58 +0000 Manifest this update: Sat 18 May 2024 15:09:58 +0000 Manifest next update: Sat 25 May 2024 15:09:58 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 9i7i2FKmo3jBVnWyyY1BIof4MSrahYGcfZ4mzKsFcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: May 18 15:09:58 2024 GMT Not After : May 25 15:09:58 2024 GMT Subject: CN=6648c4c6-d149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:62:f5:65:ee:49:ab:6d:2d:ca:9d:d8:74: f2:c9:0e:48:e1:01:1d:3e:36:a7:d6:87:e9:a5:e7: fe:3b:2d:01:40:12:be:0b:20:3e:a6:b6:ec:d4:ec: e6:5f:5c:4b:9d:cc:25:03:c7:6e:14:fd:b3:c9:9b: 11:e0:56:9b:91:06:11:8b:39:ab:d3:da:ff:5d:ad: 58:0f:84:42:f0:df:cc:f0:b3:d4:46:1e:2a:70:d6: 4d:1f:c2:ce:88:0d:84:c9:32:c2:8b:5c:ee:22:f5: 91:71:ef:00:39:d8:b4:7c:29:9a:b1:dc:05:29:c5: 84:7d:c1:ac:b9:d8:34:09:ef:94:3b:d5:0d:e0:d0: d0:a7:d4:7d:77:05:51:16:ff:4b:e4:ac:02:8c:f8: 0f:61:e1:d7:17:12:a5:34:8d:a1:7f:98:c7:82:95: 84:f8:37:00:00:78:59:f9:28:79:bd:2d:7a:2e:bc: 30:f8:76:7a:1f:87:5d:5e:67:24:16:d1:5e:98:6f: 85:aa:b3:43:d9:2f:80:36:30:ae:d1:6b:5d:69:3d: 37:40:ea:3d:e8:62:a9:e7:ba:f1:56:7b:ab:6d:83: 47:05:93:c9:9f:ac:85:76:f2:1a:88:9f:dd:a7:fb: 75:35:d9:94:04:eb:df:e2:dc:8d:62:35:f2:79:cd: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C6:53:E4:D9:F2:54:5A:3F:78:5E:C2:E3:34:F0:B4:D6:2B:DB:32 X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:02:b0:8e:7a:87:5d:03:25:a4:49:2b:39:04:32:f8:34:67: 85:51:92:8b:c3:4f:e7:26:75:d7:de:05:73:d1:01:0a:10:17: 98:fd:07:3a:de:58:e2:9f:83:5e:f9:db:95:ac:d6:5c:60:db: dd:29:3e:93:cc:f1:86:9d:b7:82:2d:98:f5:2a:ed:ae:4e:ce: 6e:1d:63:62:55:73:a0:40:b8:0f:49:14:b9:16:92:d0:1e:9e: f9:0c:92:1d:1b:93:fe:ef:3f:aa:e6:84:82:e3:c6:ad:98:63: 04:c7:ea:52:38:b3:a2:ab:50:8d:2a:6b:84:6e:89:f5:66:8c: 91:8b:da:e1:65:20:f7:c7:65:21:a4:2a:4c:d6:3d:0e:c9:8c: 38:e1:1f:da:39:9b:0e:d7:80:26:6f:77:82:63:7d:5e:15:bb: 2c:89:30:03:35:6a:be:0b:0f:19:c7:13:92:15:cd:a9:7b:81: ca:5d:0d:43:0a:63:eb:31:da:0e:80:46:3a:d0:a9:c5:a6:07: 06:09:6b:eb:60:59:21:5b:74:a5:a4:b7:04:8c:7d:ba:35:36: 08:b0:fd:f3:cf:d5:e3:d0:5e:9f:af:77:81:7b:f1:3c:e9:16: 72:28:e8:3d:f7:f6:0b:07:47:3d:b0:3a:09:f4:ee:31:ad:d8: c8:22:88:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjQwNTE4MTUwOTU4WhcNMjQwNTI1MTUwOTU4WjAYMRYwFAYD VQQDEw02NjQ4YzRjNi1kMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPJi9WXuSattLcqd2HTyyQ5I4QEdPjan1ofppef+Oy0BQBK+CyA+prbs1Ozm X1xLncwlA8duFP2zyZsR4FabkQYRizmr09r/Xa1YD4RC8N/M8LPURh4qcNZNH8LO iA2EyTLCi1zuIvWRce8AOdi0fCmasdwFKcWEfcGsudg0Ce+UO9UN4NDQp9R9dwVR Fv9L5KwCjPgPYeHXFxKlNI2hf5jHgpWE+DcAAHhZ+Sh5vS16Lrww+HZ6H4ddXmck FtFemG+FqrND2S+ANjCu0WtdaT03QOo96GKp57rxVnurbYNHBZPJn6yFdvIaiJ/d p/t1NdmUBOvf4tyNYjXyec3z1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbGU+TZ 8lRaP3hewuM08LTWK9syMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZArCOeoddAyWkSSs5BDL4NGeFUZKLw0/nJnXX3gVz0QEKEBeY/Qc6 3ljin4Ne+duVrNZcYNvdKT6TzPGGnbeCLZj1Ku2uTs5uHWNiVXOgQLgPSRS5FpLQ Hp75DJIdG5P+7z+q5oSC48atmGMEx+pSOLOiq1CNKmuEbon1ZoyRi9rhZSD3x2Uh pCpM1j0OyYw44R/aOZsO14Amb3eCY31eFbssiTADNWq+Cw8ZxxOSFc2pe4HKXQ1D CmPrMdoOgEY60KnFpgcGCWvrYFkhW3SlpLcEjH26NTYIsP3zz9Xj0F6fr3eBe/E8 6RZyKOg99/YLB0c9sDoJ9O4xrdjIIogZ -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org