$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: AbNJsROks6ITYyZWyxYNQCJZjv48elFKws6txY5fdtg= Subject key identifier: C0:76:C5:AF:21:45:85:E4:C7:1E:CF:40:78:71:45:3A:CE:20:16:C4 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0967 Signing time: Sat 18 May 2024 21:00:30 +0000 Manifest this update: Sat 18 May 2024 21:00:29 +0000 Manifest next update: Sat 25 May 2024 21:00:29 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: e3mUGYJm4D7tFECrMt6B2AHJoYuC22M2XUJepqpVV9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: May 18 21:00:29 2024 GMT Not After : May 25 21:00:29 2024 GMT Subject: CN=664916ee-d1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:95:35:9b:83:02:d9:bc:0e:ca:b6:a4:5e: 40:c4:5d:63:d8:4f:42:3c:a5:dd:e7:a9:9d:fc:8f: 82:46:35:13:c6:ed:8a:42:3a:ae:06:2c:62:f2:e8: 61:7e:c1:d9:2b:f4:70:00:7b:44:93:7b:6d:fa:e5: 3f:e9:ca:4b:ba:70:16:77:ff:ec:29:4a:f0:a9:9a: 8d:16:06:8a:5a:b3:df:90:6e:c2:62:6e:b6:5b:5e: 28:10:d6:72:10:67:24:a8:42:a2:ca:a9:90:55:6c: 53:c9:3f:ef:2c:12:06:21:74:cd:97:be:c9:5d:ea: 04:14:0e:98:b1:96:c1:f1:54:53:3b:e6:61:50:a8: cf:f5:4d:65:2a:64:25:79:2a:11:cb:64:55:95:6c: 21:b0:20:25:cf:74:ed:3b:2d:98:83:75:ee:4e:46: 4d:54:5b:63:2e:6f:62:95:a5:de:3f:d9:f4:02:11: ab:bc:02:71:07:62:d4:68:37:b5:61:6d:2a:0a:7e: 1b:25:ff:84:23:52:ae:54:ff:c7:8c:27:33:95:90: c8:a3:1e:ff:44:c9:63:d3:65:2a:7f:b7:30:71:1a: 79:78:6d:5a:4e:b9:0b:57:6d:0b:23:ca:34:ed:40: 04:53:7a:0e:c7:37:15:e0:81:fb:5c:c5:bd:80:b1: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:C5:AF:21:45:85:E4:C7:1E:CF:40:78:71:45:3A:CE:20:16:C4 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e3:b8:39:0a:99:0c:41:fd:7c:eb:8f:83:79:dc:46:31:33: f7:ab:f3:40:0c:f2:f8:a0:59:a6:27:00:c9:8f:44:ea:10:7e: af:d5:d0:71:50:d7:0b:1a:e8:f2:f3:ae:43:57:50:87:35:37: c3:e4:11:98:11:04:c5:66:1a:27:e2:00:46:33:5f:e5:8b:c2: ec:17:af:cf:e6:18:cf:99:b9:f9:93:cd:cb:92:0a:0e:c9:66: 87:c6:58:18:a1:6c:fe:89:58:21:53:d4:47:9d:8e:4d:da:20: 17:ad:34:76:9e:da:b9:96:17:7a:0f:03:d1:a1:37:9e:5b:63: 9a:f1:34:bb:86:ee:fb:d2:19:77:2e:51:af:d7:20:10:52:4f: f0:e8:89:13:78:0b:e8:68:8f:84:4a:d2:87:82:53:33:43:3d: 54:bf:30:ab:b7:89:f7:cb:88:ec:17:56:fc:56:b2:bc:26:32: a6:3b:c4:b9:93:ce:91:15:a8:44:50:ec:52:7e:27:68:32:83: a6:c9:15:e6:77:2b:86:2a:32:79:64:72:2e:00:a6:2e:37:ad: c1:3d:c7:2d:2d:ff:7f:fa:df:2b:81:16:8c:f7:ea:c1:19:33: d0:17:73:de:7e:b9:73:55:e3:45:49:a7:92:40:7a:ba:e1:a8: 8a:74:38:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjQwNTE4MjEwMDI5WhcNMjQwNTI1MjEwMDI5WjAYMRYwFAYD VQQDEw02NjQ5MTZlZS1kMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+CVNZuDAtm8Dsq2pF5AxF1j2E9CPKXd56md/I+CRjUTxu2KQjquBixi8uhh fsHZK/RwAHtEk3tt+uU/6cpLunAWd//sKUrwqZqNFgaKWrPfkG7CYm62W14oENZy EGckqEKiyqmQVWxTyT/vLBIGIXTNl77JXeoEFA6YsZbB8VRTO+ZhUKjP9U1lKmQl eSoRy2RVlWwhsCAlz3TtOy2Yg3XuTkZNVFtjLm9ilaXeP9n0AhGrvAJxB2LUaDe1 YW0qCn4bJf+EI1KuVP/HjCczlZDIox7/RMlj02Uqf7cwcRp5eG1aTrkLV20LI8o0 7UAEU3oOxzcV4IH7XMW9gLFFnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB2xa8h RYXkxx7PQHhxRTrOIBbEMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG47g5CpkMQf1864+DedxGMTP3q/NADPL4oFmmJwDJj0TqEH6v1dBx UNcLGujy865DV1CHNTfD5BGYEQTFZhon4gBGM1/li8LsF6/P5hjPmbn5k83LkgoO yWaHxlgYoWz+iVghU9RHnY5N2iAXrTR2ntq5lhd6DwPRoTeeW2Oa8TS7hu770hl3 LlGv1yAQUk/w6IkTeAvoaI+EStKHglMzQz1UvzCrt4n3y4jsF1b8VrK8JjKmO8S5 k86RFahEUOxSfidoMoOmyRXmdyuGKjJ5ZHIuAKYuN63BPcctLf9/+t8rgRaM9+rB GTPQF3PefrlzVeNFSaeSQHq64aiKdDgo -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org