$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: B2adCzyW87TepuM7r+WLoCbzLA20OZLuoLuXAQmgvuU= Subject key identifier: 5B:0A:D9:40:86:BB:FB:20:87:C1:FF:3C:07:39:D9:4C:81:C0:18:83 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 06E2 Signing time: Tue 30 Apr 2024 23:12:04 +0000 Manifest this update: Tue 30 Apr 2024 23:12:04 +0000 Manifest next update: Tue 07 May 2024 23:12:04 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: S87aUKFKXoimb5Qu5iAyjuOVDVcEwj3xrvv4Wa9dr6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Apr 30 23:12:04 2024 GMT Not After : May 7 23:12:04 2024 GMT Subject: CN=66317ac4-6164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:13:02:99:83:31:e0:92:fb:5c:f0:83:7b: 98:c2:85:e8:d0:68:59:f8:08:d2:4c:5a:6d:02:9f: 81:23:ed:15:ae:86:d4:11:08:72:e6:fb:e8:79:70: d1:01:68:af:a0:4c:1c:66:e0:ba:f5:4d:42:f5:15: 23:f4:c8:52:2b:c4:df:e4:db:97:ad:ad:9a:29:f6: 91:a2:e7:ec:c0:5c:a9:1c:14:3e:96:2d:f6:58:64: ac:cd:2f:ed:5f:41:6d:e3:9a:66:1b:5e:f7:68:35: 4d:00:a6:26:18:5e:9d:92:66:bb:17:1f:61:3f:bf: 90:df:e6:a1:1d:8a:9c:f1:d7:b6:97:da:de:ad:58: 68:78:5c:42:37:1b:91:11:33:6f:6d:cd:22:f3:8f: 23:21:d7:ca:60:cd:59:f8:59:b4:9f:3b:f2:15:51: 29:97:6c:7b:44:ad:6a:be:76:d5:40:2b:a7:e8:16: 1d:2e:45:1d:db:92:7a:b7:c0:8f:1c:63:c7:61:31: 8d:11:1c:f0:42:d1:2f:94:b2:67:60:20:9e:dd:09: 88:29:6c:fc:f9:10:cb:7a:59:de:98:22:90:ed:d4: db:50:52:7a:d2:2c:f6:67:2f:62:92:fb:a6:2a:78: 9f:bc:9f:ac:6f:2f:6d:e9:ad:67:3f:40:8b:d2:e9: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:D9:40:86:BB:FB:20:87:C1:FF:3C:07:39:D9:4C:81:C0:18:83 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8d:fc:a9:9d:22:d8:ca:04:4e:aa:0d:d3:ee:e1:17:cf:8b: d6:87:26:ea:24:df:de:2d:d7:92:96:19:e0:35:2f:db:7c:3e: c8:b0:6a:64:29:ba:8b:68:dd:ff:14:a2:d0:73:dc:6c:93:38: 22:9f:bf:de:15:35:f4:fa:b5:ef:63:ee:ce:f0:d5:68:33:96: 2e:b9:0c:3d:82:69:58:17:4f:0d:fe:1a:c5:c3:3e:2e:01:af: 3a:5e:fd:e9:3b:94:aa:31:f6:bc:1d:a7:c9:1f:18:c3:10:a1: a2:80:fe:51:6e:4f:06:f5:d8:90:27:3a:9b:25:f4:be:e7:bd: 93:32:d7:0f:9f:77:95:6f:d3:d2:f0:35:c9:a0:0b:7b:d6:31: 95:b5:0e:b7:38:94:3b:0d:33:6a:d8:67:b2:43:db:7f:cf:8d: 3b:cc:27:58:9c:35:f7:37:7f:32:df:9f:3d:e5:2c:f6:49:6e: 57:5f:30:e2:5c:42:f6:92:3d:8a:19:38:46:0c:2a:73:bc:f0: fc:d7:87:e1:e7:48:13:a4:42:fb:fd:c0:ab:35:e3:9e:5c:bb: 0a:19:21:65:49:52:7a:fe:43:4f:b0:81:98:6e:df:85:d0:3f: 78:d4:89:a2:a1:23:fa:03:16:2e:47:9e:bd:1f:d2:c4:dd:f9: 5e:8c:ca:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjQwNDMwMjMxMjA0WhcNMjQwNTA3MjMxMjA0WjAYMRYwFAYD VQQDEw02NjMxN2FjNC02MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aETApmDMeCS+1zwg3uYwoXo0GhZ+AjSTFptAp+BI+0VrobUEQhy5vvoeXDR AWivoEwcZuC69U1C9RUj9MhSK8Tf5NuXra2aKfaRoufswFypHBQ+li32WGSszS/t X0Ft45pmG173aDVNAKYmGF6dkma7Fx9hP7+Q3+ahHYqc8de2l9rerVhoeFxCNxuR ETNvbc0i848jIdfKYM1Z+Fm0nzvyFVEpl2x7RK1qvnbVQCun6BYdLkUd25J6t8CP HGPHYTGNERzwQtEvlLJnYCCe3QmIKWz8+RDLelnemCKQ7dTbUFJ60iz2Zy9ikvum KnifvJ+sby9t6a1nP0CL0unQfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsK2UCG u/sgh8H/PAc52UyBwBiDMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFjfypnSLYygROqg3T7uEXz4vWhybqJN/eLdeSlhngNS/bfD7IsGpk KbqLaN3/FKLQc9xskzgin7/eFTX0+rXvY+7O8NVoM5YuuQw9gmlYF08N/hrFwz4u Aa86Xv3pO5SqMfa8HafJHxjDEKGigP5Rbk8G9diQJzqbJfS+572TMtcPn3eVb9PS 8DXJoAt71jGVtQ63OJQ7DTNq2GeyQ9t/z407zCdYnDX3N38y35895Sz2SW5XXzDi XEL2kj2KGThGDCpzvPD814fh50gTpEL7/cCrNeOeXLsKGSFlSVJ6/kNPsIGYbt+F 0D941ImioSP6AxYuR569H9LE3flejMqN -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:13 2024 by rpki-client on console-fra.rpki-client.org