$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: 1XhC6y07AiAcMv05nLV13f/9CQuvatlbNrOqqJmW5s4= Subject key identifier: 33:29:60:93:DD:58:86:3D:E5:6A:DC:A6:19:30:50:0D:0B:44:33:09 Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 21E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 21D7 Signing time: Sat 18 May 2024 16:12:36 +0000 Manifest this update: Sat 18 May 2024 16:12:36 +0000 Manifest next update: Sat 25 May 2024 16:12:36 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: W2/9qiy2ACTutFGqzB8ws/0Un1icxoElKB5p2Tq6HYY=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: vliIpmgTB1HlCz+XfLtcjXrJa6gI3PEAORK2hHT7Frs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8676 (0x21e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: May 18 16:12:36 2024 GMT Not After : May 25 16:12:36 2024 GMT Subject: CN=6648d374-10df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:9c:13:8b:4d:71:36:e5:7d:89:5c:a0:63: 34:e0:31:d3:84:96:37:26:57:c2:5f:9d:f3:8c:1a: 35:f2:32:b6:3b:5c:db:70:d0:2e:20:28:eb:0e:9a: 74:d4:51:cc:a7:e6:84:d9:20:5a:0c:54:08:cc:8f: 92:9c:0f:86:83:a0:a0:fe:9d:c6:a1:34:c6:c5:30: 3d:e0:60:f9:d1:e1:77:43:2a:e3:71:1e:ee:bf:7a: c4:5a:1b:00:87:d1:a8:2e:25:aa:51:b8:dd:0f:ee: ad:d7:44:2a:bc:c9:a5:55:39:74:5e:32:e3:49:84: f7:b3:b8:cd:9f:14:9e:5a:70:ad:e3:93:73:ac:d4: 27:81:b3:5f:41:69:97:09:22:f4:1f:34:ce:66:63: 2d:78:cb:c1:8e:2b:16:04:de:36:b4:b0:f2:61:60: ec:5c:6d:fe:1d:a6:92:6b:87:a5:1d:b2:9b:71:22: c6:17:9c:03:05:d0:c5:d0:5d:bf:2f:8d:ca:fe:e0: ba:48:0d:18:8a:c3:bb:01:0f:f4:01:ee:b2:e3:18: 95:8f:25:d2:13:ee:7c:40:ae:c4:5c:c4:85:35:35: 09:bd:d2:e6:c2:e4:4a:16:d6:e4:ff:69:45:e0:c3: 9f:14:64:e8:4e:84:35:2d:60:8a:2c:aa:b9:74:75: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:29:60:93:DD:58:86:3D:E5:6A:DC:A6:19:30:50:0D:0B:44:33:09 X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ac:d7:2a:c4:db:6c:33:c0:04:85:7f:87:73:04:a3:61:54: 0f:4b:30:ad:f6:49:fc:09:52:87:10:48:30:95:0f:61:e5:7c: 3f:63:10:e1:b5:79:2c:96:eb:65:4a:ef:81:d2:d1:f0:4d:7d: e9:cc:92:39:a6:5d:6d:3d:bf:ca:9e:89:b3:b6:88:71:e9:fc: be:42:48:36:da:b7:7b:66:d6:7f:53:84:b3:cf:05:f4:e7:0a: a7:6f:be:4a:28:26:7a:ff:09:e3:b0:e0:c1:33:ce:61:b8:a4: 72:ad:16:77:31:9f:12:8a:12:a7:38:af:51:97:70:cb:be:a5: 4f:de:13:75:5b:8f:cd:03:70:91:0a:a8:c5:83:d6:2e:8f:e8: 5b:8d:35:cb:f8:a5:37:a5:67:48:d8:17:b7:3a:f3:c1:ce:94: 7d:f4:60:40:3c:ad:62:27:15:96:75:0a:72:dc:93:08:83:27: 62:0d:67:61:5e:ae:98:c7:4d:fd:ce:54:4e:0b:d1:6b:45:9c: ce:c4:3b:31:99:d5:7e:d3:1f:c5:72:ef:3f:22:c2:8b:07:24: b3:da:b1:fd:82:45:cd:15:a8:a7:8b:0c:2b:cf:b3:0b:60:10: fb:73:4d:2d:fc:67:18:4d:b4:39:ba:97:e9:bb:c8:54:11:30: 50:04:37:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjQwNTE4MTYxMjM2WhcNMjQwNTI1MTYxMjM2WjAYMRYwFAYD VQQDEw02NjQ4ZDM3NC0xMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfWcE4tNcTblfYlcoGM04DHThJY3JlfCX53zjBo18jK2O1zbcNAuICjrDpp0 1FHMp+aE2SBaDFQIzI+SnA+Gg6Cg/p3GoTTGxTA94GD50eF3QyrjcR7uv3rEWhsA h9GoLiWqUbjdD+6t10QqvMmlVTl0XjLjSYT3s7jNnxSeWnCt45NzrNQngbNfQWmX CSL0HzTOZmMteMvBjisWBN42tLDyYWDsXG3+HaaSa4elHbKbcSLGF5wDBdDF0F2/ L43K/uC6SA0YisO7AQ/0Ae6y4xiVjyXSE+58QK7EXMSFNTUJvdLmwuRKFtbk/2lF 4MOfFGToToQ1LWCKLKq5dHXXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMpYJPd WIY95WrcphkwUA0LRDMJMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdrNcqxNtsM8AEhX+HcwSjYVQPSzCt9kn8CVKHEEgwlQ9h5Xw/YxDh tXkslutlSu+B0tHwTX3pzJI5pl1tPb/Knomztohx6fy+Qkg22rd7ZtZ/U4SzzwX0 5wqnb75KKCZ6/wnjsODBM85huKRyrRZ3MZ8SihKnOK9Rl3DLvqVP3hN1W4/NA3CR CqjFg9Yuj+hbjTXL+KU3pWdI2Be3OvPBzpR99GBAPK1iJxWWdQpy3JMIgydiDWdh Xq6Yx039zlROC9FrRZzOxDsxmdV+0x/Fcu8/IsKLBySz2rH9gkXNFainiwwrz7ML YBD7c00t/GcYTbQ5upfpu8hUETBQBDfB -----END CERTIFICATE-----Generated at Sat May 18 16:57:55 2024 by rpki-client on console-fra.rpki-client.org