$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: BeDNXKjLwLiWwSwupzgaZt6v5bu7Zp9NJSIhbRBm5I4= Subject key identifier: AB:1E:E0:6E:A9:6F:C5:3F:B7:93:7C:0E:63:9C:3E:64:55:29:20:AC Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0E86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 0F80 Signing time: Sat 04 May 2024 18:31:38 +0000 Manifest this update: Sat 04 May 2024 18:31:38 +0000 Manifest next update: Sat 11 May 2024 18:31:38 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: +ZNIFmTqOoC0rBSetx3MDxdgpxFYaNn3gYkKTaBuyd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3718 (0xe86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: May 4 18:31:38 2024 GMT Not After : May 11 18:31:38 2024 GMT Subject: CN=66367f0a-5730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:43:03:e7:b0:06:bc:a7:1c:0a:dd:54:37: 91:3c:84:c8:f4:98:37:32:5f:71:46:ec:2c:19:f7: 5d:ac:61:c4:11:91:d8:4c:8a:69:fb:c3:f2:4c:24: 14:e6:f3:a0:0e:a3:f7:83:8d:18:ef:80:e8:0b:fb: 59:83:7a:4f:e9:1b:c4:a6:b8:3c:ea:62:ae:c7:40: ab:e9:6d:7d:e0:66:f5:af:dd:d7:2c:bf:3c:af:c1: eb:08:81:c1:4c:89:b8:44:05:4d:18:42:5c:fb:f6: f3:eb:e3:5c:0d:71:60:a7:22:5b:bd:fa:db:71:c3: 93:a7:d0:45:c8:78:e2:8f:b5:82:d7:36:8a:62:2b: 74:23:eb:df:53:06:74:06:2b:9a:9c:b3:33:21:cd: 95:a8:cc:43:34:ad:e2:f0:75:94:7f:57:9a:39:b9: c8:08:df:b9:1c:2d:b1:a4:24:05:73:4b:c3:22:7d: f5:00:99:32:93:55:09:e7:e7:f4:4d:fb:63:9a:fb: e8:da:e6:7c:33:45:39:48:7c:55:96:07:26:ae:ad: c2:65:ae:5d:bf:3f:d6:52:51:b3:12:29:fc:7c:b3: 22:d0:1a:dc:7f:06:0d:b0:4c:18:f7:d6:2e:de:aa: fc:0e:d7:de:f0:95:c6:43:4f:11:d8:9e:07:f1:2b: 4b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:E0:6E:A9:6F:C5:3F:B7:93:7C:0E:63:9C:3E:64:55:29:20:AC X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d9:41:13:8d:75:45:8c:40:c5:69:fd:9a:c0:af:1c:45:88: 7a:f5:ee:35:93:75:40:b6:5a:5d:90:3f:04:ff:c3:cb:46:0a: da:00:9b:b0:d6:b3:4e:00:7e:7b:83:aa:29:0e:4b:4d:11:dc: d0:fa:bc:2d:52:4d:ae:33:0b:08:52:f9:8e:44:ac:26:f1:6d: 02:9d:f0:a2:c7:26:55:66:58:f0:44:9d:9e:b7:2b:cf:29:a1: ad:47:be:88:d0:89:b1:cc:bf:c1:7b:67:1d:69:ad:30:de:5f: 03:fe:87:bb:6a:d4:22:cf:b4:73:c6:ef:30:f9:1a:7d:c2:ae: 59:e1:b1:28:a3:a8:75:ef:99:d6:59:f1:dd:39:a4:06:a6:69: 22:63:a2:66:e0:47:c5:61:20:c1:64:ea:ec:f0:36:6b:0b:d8: 54:6a:56:c4:1a:e9:ec:e1:c7:68:1b:ae:6f:87:a3:d8:79:7a: b3:8c:fc:ee:78:a3:57:25:a0:54:99:73:6d:8f:45:7b:68:2f: 90:a1:9a:6d:99:ec:bd:13:44:c2:37:35:f4:29:88:df:59:87: db:8b:72:36:e5:82:fc:e6:0e:3f:ff:47:9a:b7:fa:04:32:ed: ed:e3:7b:e0:c9:2f:46:31:9b:de:82:4a:36:5a:55:6b:02:43: 92:c5:07:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjQwNTA0MTgzMTM4WhcNMjQwNTExMTgzMTM4WjAYMRYwFAYD VQQDEw02NjM2N2YwYS01NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IhDA+ewBrynHArdVDeRPITI9Jg3Ml9xRuwsGfddrGHEEZHYTIpp+8PyTCQU 5vOgDqP3g40Y74DoC/tZg3pP6RvEprg86mKux0Cr6W194Gb1r93XLL88r8HrCIHB TIm4RAVNGEJc+/bz6+NcDXFgpyJbvfrbccOTp9BFyHjij7WC1zaKYit0I+vfUwZ0 BiuanLMzIc2VqMxDNK3i8HWUf1eaObnICN+5HC2xpCQFc0vDIn31AJkyk1UJ5+f0 Tftjmvvo2uZ8M0U5SHxVlgcmrq3CZa5dvz/WUlGzEin8fLMi0BrcfwYNsEwY99Yu 3qr8Dtfe8JXGQ08R2J4H8StLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKse4G6p b8U/t5N8DmOcPmRVKSCsMB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2UETjXVFjEDFaf2awK8cRYh69e41k3VAtlpdkD8E/8PLRgraAJuw 1rNOAH57g6opDktNEdzQ+rwtUk2uMwsIUvmORKwm8W0CnfCixyZVZljwRJ2etyvP KaGtR76I0ImxzL/Be2cdaa0w3l8D/oe7atQiz7Rzxu8w+Rp9wq5Z4bEoo6h175nW WfHdOaQGpmkiY6Jm4EfFYSDBZOrs8DZrC9hUalbEGuns4cdoG65vh6PYeXqzjPzu eKNXJaBUmXNtj0V7aC+QoZptmey9E0TCNzX0KYjfWYfbi3I25YL85g4//0eat/oE Mu3t43vgyS9GMZvegko2WlVrAkOSxQfB -----END CERTIFICATE-----Generated at Sat May 4 20:37:04 2024 by rpki-client on console-fra.rpki-client.org