$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json) Hash identifier: qscLctElAllGDu5KsgNe5plR9UATc3+2nSQo17xoLCc= Subject key identifier: BF:F4:04:C5:4D:2B:BC:6E:A1:F7:6A:11:EB:4D:54:84:32:13:45:96 Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Certificate serial: 33B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft Manifest number: 33B7 Signing time: Fri 26 Apr 2024 15:02:11 +0000 Manifest this update: Fri 26 Apr 2024 15:02:10 +0000 Manifest next update: Fri 03 May 2024 15:02:10 +0000 Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: ca4DvZkJFzJYYrEFVx1tJv2JudgFWq/VaXrwdtH0pPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13239 (0x33b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Validity Not Before: Apr 26 15:02:10 2024 GMT Not After : May 3 15:02:10 2024 GMT Subject: CN=662bc1f3-6788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:a9:51:fe:e2:1e:c9:c6:ad:bf:bd:cb:c2: 50:40:08:71:4d:66:59:a4:97:7f:fa:b6:62:41:9a: 87:91:49:b7:90:bb:4c:c3:ab:14:ba:7f:3f:00:5c: e0:a9:d6:08:4a:0b:4f:8b:31:f6:2d:0c:34:f2:44: 3a:b9:46:d7:ba:80:55:73:bd:d2:79:60:f3:31:23: 45:14:20:d7:4b:51:a5:65:25:e8:cb:97:73:a2:2c: 67:cb:32:65:5f:0c:73:5f:c0:4d:3e:d7:68:63:01: 60:c1:fc:3c:c2:2d:c7:f9:d6:40:0d:05:6a:d9:8b: d7:35:9c:13:3e:62:d7:1c:21:a1:8a:f4:3e:8f:1b: 88:ca:95:7f:8d:1c:cc:cf:1f:ec:75:b0:04:f8:c1: 55:c2:d3:a4:99:cd:1d:bb:3a:91:9c:0f:91:0a:bc: e9:da:b3:bc:60:5d:a5:28:ab:fd:99:35:15:bf:0a: 08:de:f1:7f:58:c1:44:76:01:8f:cb:2f:97:67:f1: 2f:0c:4d:15:82:a6:d6:ea:03:24:f3:4e:31:00:05: 05:71:19:d7:ee:d7:89:e7:84:9e:12:0a:37:8f:8c: f0:68:26:f6:e4:eb:0f:26:13:a5:d2:4b:84:87:2c: b6:23:d4:c7:1c:f0:90:2a:0b:1b:40:ed:e1:db:84: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:04:C5:4D:2B:BC:6E:A1:F7:6A:11:EB:4D:54:84:32:13:45:96 X509v3 Authority Key Identifier: keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e6:08:2f:c4:84:45:17:85:3c:a2:3e:16:95:c4:81:5c:b8: be:9f:14:eb:19:b8:3d:53:75:b2:44:ff:91:df:7f:40:0d:f7: 1f:5a:50:2c:6a:3f:3d:2f:53:5f:39:f0:a1:46:8a:20:27:41: 42:0e:f4:16:a2:69:01:a2:18:dc:6a:c1:b8:d7:e9:6c:b6:46: ad:05:f9:ba:7c:22:28:f3:60:b8:44:28:95:3d:3b:8b:bf:54: be:3b:61:8c:fa:f1:91:eb:e5:2f:78:22:5c:55:e3:a2:13:c7: a5:a9:df:e2:37:1a:8c:e9:7b:8f:28:fd:4a:77:50:57:65:1b: 35:36:21:1d:6b:05:69:0c:0a:34:84:f1:c8:81:2b:6e:03:3b: c8:56:3f:2f:a4:3a:7a:7d:1f:c9:83:b0:3a:a3:2e:9f:f5:08: c7:c5:44:76:f0:84:0e:a6:7b:6b:00:de:bc:f6:a5:96:ee:e9: 52:73:d4:80:cb:ed:f5:b6:97:23:45:b6:90:7f:bd:72:02:3f: b8:2f:20:61:50:b0:96:30:a2:dd:a0:2e:9f:4c:74:69:81:d2: b9:60:6e:be:52:c8:fa:b2:76:de:e6:07:5d:04:ee:21:77:e9: 2f:e8:09:80:8e:67:33:ce:0b:ed:90:86:24:46:a8:8a:f6:ec: f1:e8:e4:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE MUU5N0RFMkUwHhcNMjQwNDI2MTUwMjEwWhcNMjQwNTAzMTUwMjEwWjAYMRYwFAYD VQQDEw02NjJiYzFmMy02Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU+pUf7iHsnGrb+9y8JQQAhxTWZZpJd/+rZiQZqHkUm3kLtMw6sUun8/AFzg qdYISgtPizH2LQw08kQ6uUbXuoBVc73SeWDzMSNFFCDXS1GlZSXoy5dzoixnyzJl XwxzX8BNPtdoYwFgwfw8wi3H+dZADQVq2YvXNZwTPmLXHCGhivQ+jxuIypV/jRzM zx/sdbAE+MFVwtOkmc0duzqRnA+RCrzp2rO8YF2lKKv9mTUVvwoI3vF/WMFEdgGP yy+XZ/EvDE0VgqbW6gMk804xAAUFcRnX7teJ54SeEgo3j4zwaCb25OsPJhOl0kuE hyy2I9THHPCQKgsbQO3h24R6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/0BMVN K7xuofdqEetNVIQyE0WWMB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96 VDFlWmdxTVhtMjNSNlgzaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA25ggvxIRFF4U8oj4WlcSBXLi+nxTrGbg9U3WyRP+R339ADfcfWlAs aj89L1NfOfChRoogJ0FCDvQWomkBohjcasG41+lstkatBfm6fCIo82C4RCiVPTuL v1S+O2GM+vGR6+UveCJcVeOiE8elqd/iNxqM6XuPKP1Kd1BXZRs1NiEdawVpDAo0 hPHIgStuAzvIVj8vpDp6fR/Jg7A6oy6f9QjHxUR28IQOpntrAN689qWW7ulSc9SA y+31tpcjRbaQf71yAj+4LyBhULCWMKLdoC6fTHRpgdK5YG6+Usj6snbe5gddBO4h d+kv6AmAjmczzgvtkIYkRqiK9uzx6OQU -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:38 2024 by rpki-client on console-ams.rpki-client.org