$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: RiE3mY9F1NUqsdJ3UoJEATOHoi1MZmfW3KrERbSI9t8= Subject key identifier: BC:B0:12:CD:80:9F:6E:93:80:99:EB:FB:E8:04:0D:4F:1C:06:0C:73 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1AFE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1AFC Signing time: Wed 24 Apr 2024 16:41:58 +0000 Manifest this update: Wed 24 Apr 2024 16:41:58 +0000 Manifest next update: Wed 01 May 2024 16:41:58 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: EUWaPE/FkY9e6fuxrEc6dSK6f6zSoZ6A/mCow9AEAus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6910 (0x1afe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Apr 24 16:41:58 2024 GMT Not After : May 1 16:41:58 2024 GMT Subject: CN=66293656-60ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:34:f0:24:c5:69:33:a6:fa:ef:fc:30:3d: b8:c7:a9:6e:f3:e0:0a:f1:3e:ba:ef:56:ad:7b:04: f5:39:5a:93:df:f6:da:36:3a:78:fc:ff:22:db:97: 77:6c:1e:af:0a:61:0f:e2:27:a3:94:82:0b:4b:c2: 05:cf:43:58:ba:93:0d:e4:8e:af:e1:17:20:19:dd: f8:b3:29:59:11:78:45:5d:c5:24:b8:ff:46:d7:14: 68:8e:cc:b7:c4:fb:e9:29:a4:ca:61:f7:02:a6:b7: e0:2c:59:d3:be:c8:11:1e:74:22:31:03:97:b4:04: 76:4a:c2:f5:fa:12:9d:a3:79:23:8b:3a:11:e7:12: 77:74:31:a3:b8:66:c2:80:a2:d2:2a:51:6e:ac:a6: ed:56:cd:09:90:90:94:fe:13:bf:2b:88:e8:fc:33: ee:5e:2b:30:d3:d3:8b:1c:6b:f3:c9:5e:60:3d:81: 5a:e2:30:9f:0e:35:0d:f8:9f:49:6f:ff:fe:fa:1a: da:04:c3:21:1a:7c:34:a3:18:47:3c:72:14:3b:3d: 0e:4f:e5:0d:c6:c9:1a:d7:65:65:74:8f:7b:81:8a: 75:cb:fd:c2:ba:1a:e1:7a:93:1c:2a:24:d6:86:50: 88:3d:76:bf:02:d4:f6:14:ee:50:90:1c:7e:2b:d4: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:12:CD:80:9F:6E:93:80:99:EB:FB:E8:04:0D:4F:1C:06:0C:73 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a2:4c:14:4d:7d:b3:93:03:58:89:66:db:d5:82:88:20:3b: a2:40:89:79:93:c6:56:f8:2e:23:c8:38:6e:72:2b:1b:18:97: 2e:71:32:bf:da:55:d1:0e:35:a0:33:2d:21:5f:db:fa:ff:55: 4d:af:72:dc:f0:28:f7:35:d6:16:8f:28:b5:dc:5e:e0:60:6d: c7:12:c7:95:a2:99:c1:8c:fd:8d:dc:57:94:9e:b8:7d:04:f1: 12:2a:a5:9c:2f:fe:52:1e:c0:d4:c0:8f:8b:30:16:19:0b:d8: 4e:a1:96:67:ae:ab:98:55:97:27:fa:7b:bd:a2:78:6e:88:81: e9:cc:78:dd:99:a8:95:e6:f5:19:75:fc:e3:2b:f5:25:5b:9d: c6:45:29:82:c6:2e:34:ff:4e:7d:96:47:2e:9b:d2:e3:6a:89: a0:fa:46:68:6e:2c:35:fe:32:de:16:5e:c7:39:7f:98:28:15: fb:42:ae:c1:1b:c4:2a:a5:7c:3f:60:84:79:d7:4d:1d:5a:1a: 09:0f:e8:b4:e6:45:89:7a:ed:bc:4e:b9:dc:b3:05:ac:8b:43: 93:93:53:60:54:28:56:a2:31:46:37:49:b0:16:3c:ed:79:5c: 02:15:fd:96:f2:fc:69:09:68:d0:95:63:ef:01:7e:41:80:25: e4:5b:a5:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjQwNDI0MTY0MTU4WhcNMjQwNTAxMTY0MTU4WjAYMRYwFAYD VQQDEw02NjI5MzY1Ni02MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFM08CTFaTOm+u/8MD24x6lu8+AK8T6671atewT1OVqT3/baNjp4/P8i25d3 bB6vCmEP4iejlIILS8IFz0NYupMN5I6v4RcgGd34sylZEXhFXcUkuP9G1xRojsy3 xPvpKaTKYfcCprfgLFnTvsgRHnQiMQOXtAR2SsL1+hKdo3kjizoR5xJ3dDGjuGbC gKLSKlFurKbtVs0JkJCU/hO/K4jo/DPuXisw09OLHGvzyV5gPYFa4jCfDjUN+J9J b//++hraBMMhGnw0oxhHPHIUOz0OT+UNxska12VldI97gYp1y/3CuhrhepMcKiTW hlCIPXa/AtT2FO5QkBx+K9Qu5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLywEs2A n26TgJnr++gEDU8cBgxzMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2okwUTX2zkwNYiWbb1YKIIDuiQIl5k8ZW+C4jyDhucisbGJcucTK/ 2lXRDjWgMy0hX9v6/1VNr3Lc8Cj3NdYWjyi13F7gYG3HEseVopnBjP2N3FeUnrh9 BPESKqWcL/5SHsDUwI+LMBYZC9hOoZZnrquYVZcn+nu9onhuiIHpzHjdmaiV5vUZ dfzjK/UlW53GRSmCxi40/059lkcum9Ljaomg+kZobiw1/jLeFl7HOX+YKBX7Qq7B G8QqpXw/YIR5100dWhoJD+i05kWJeu28TrncswWsi0OTk1NgVChWojFGN0mwFjzt eVwCFf2W8vxpCWjQlWPvAX5BgCXkW6W9 -----END CERTIFICATE-----Generated at Wed Apr 24 18:30:59 2024 by rpki-client on console-fra.rpki-client.org