$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: vctYVDpqmC0Fl34GwYR9PhfYqQ7v3itsIrJ8agt0eIU= Subject key identifier: 05:72:DC:7D:C4:34:1F:E1:A5:E1:E6:34:31:BE:66:0C:E1:8D:36:41 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2ADE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2ADE Signing time: Sat 04 May 2024 15:51:42 +0000 Manifest this update: Sat 04 May 2024 15:51:41 +0000 Manifest next update: Sat 11 May 2024 15:51:41 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: dyAsR3RvXxrpQjx5OR/URgLXgmAtc1+tf1Oxsi3nQyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10974 (0x2ade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: May 4 15:51:41 2024 GMT Not After : May 11 15:51:41 2024 GMT Subject: CN=6636598e-7440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:ae:3d:ad:3b:6f:c6:fc:ae:87:04:8d:f3: 4e:7c:55:99:2d:ae:41:d8:0e:06:9e:c4:e3:22:cf: 1c:be:31:2e:62:63:89:7f:d5:fb:ef:23:18:68:1a: 3b:f9:f7:b9:87:53:4a:8c:74:ec:9c:c7:2c:8b:7e: d0:2f:3d:45:c5:3d:cb:90:db:70:0b:2c:9e:9e:40: 27:84:34:93:9d:c6:31:97:ae:b9:fb:8c:b4:7c:ae: 8e:2d:3b:6d:87:77:39:91:76:14:e7:4f:34:fc:fe: 04:e7:24:53:3e:1e:e3:83:71:01:2d:52:ea:21:81: 89:76:17:09:6a:c8:b0:69:3c:27:e2:06:28:a7:47: 98:5a:3d:57:06:26:0a:96:5d:bb:80:6d:82:35:5a: 20:b7:4f:41:15:84:c6:ea:54:37:bf:f7:f9:21:39: c0:f6:6d:b0:5a:22:96:9a:eb:65:8e:7e:ec:00:d4: 8e:9a:e3:e1:cb:e7:df:79:b9:c7:bf:82:69:a9:6e: db:b5:48:61:14:ce:21:f3:08:42:7c:32:6b:98:29: bd:d4:50:02:45:61:67:10:a0:63:d2:52:33:9f:83: 7f:15:f8:3f:e9:8e:86:94:0c:47:bd:33:90:d6:f8: 29:a2:9d:e6:70:e9:31:72:d5:5c:ac:eb:ce:01:e3: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:DC:7D:C4:34:1F:E1:A5:E1:E6:34:31:BE:66:0C:E1:8D:36:41 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:06:94:11:2e:f5:a7:7c:2a:38:86:50:d3:c2:5a:9f:9e: 9e:15:9a:ea:d6:eb:9a:7e:3f:d8:75:ee:71:90:50:ac:5c:8b: dd:95:d3:1c:1a:bd:13:1f:9b:62:33:14:a4:e9:5a:bf:33:67: 59:1b:40:4f:c0:44:fc:43:9e:f2:57:9a:1b:9c:78:da:40:54: b1:a3:06:cb:24:0b:43:35:f9:be:4e:b6:7c:f0:4f:58:e3:5e: 9a:02:b9:55:dd:2c:5d:48:fc:eb:7b:5e:41:c1:bb:43:d1:64: 80:7f:df:8b:08:50:63:52:e0:50:6f:c8:cb:f0:f7:08:3e:7b: 83:5b:49:01:17:a4:91:fb:3e:b9:ca:33:b6:1c:90:99:ac:82: 7a:3b:72:c6:87:27:ce:22:c0:4b:c6:b9:b3:29:4a:30:87:ab: 8b:c3:6c:b1:87:5c:bf:17:16:da:cf:5f:5a:42:2f:73:4e:31: 8f:7f:68:05:5a:e3:d9:f3:b3:85:ba:2e:15:52:3a:93:99:23: a6:84:5c:67:07:f0:ac:15:00:17:0f:14:af:c7:f8:46:03:df: d7:2d:33:4e:11:b0:f9:96:c3:93:46:8d:47:91:43:dd:cb:22: d2:ae:bc:b9:5b:16:1e:04:e9:d7:d0:4b:ea:6f:3e:71:fd:5f: a0:5e:9d:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjQwNTA0MTU1MTQxWhcNMjQwNTExMTU1MTQxWjAYMRYwFAYD VQQDEw02NjM2NTk4ZS03NDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtmuPa07b8b8rocEjfNOfFWZLa5B2A4GnsTjIs8cvjEuYmOJf9X77yMYaBo7 +fe5h1NKjHTsnMcsi37QLz1FxT3LkNtwCyyenkAnhDSTncYxl665+4y0fK6OLTtt h3c5kXYU5080/P4E5yRTPh7jg3EBLVLqIYGJdhcJasiwaTwn4gYop0eYWj1XBiYK ll27gG2CNVogt09BFYTG6lQ3v/f5ITnA9m2wWiKWmutljn7sANSOmuPhy+ffebnH v4JpqW7btUhhFM4h8whCfDJrmCm91FACRWFnEKBj0lIzn4N/Ffg/6Y6GlAxHvTOQ 1vgpop3mcOkxctVcrOvOAePS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVy3H3E NB/hpeHmNDG+ZgzhjTZBMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1gaUES71p3wqOIZQ08Jan56eFZrq1uuafj/Yde5xkFCsXIvdldMc Gr0TH5tiMxSk6Vq/M2dZG0BPwET8Q57yV5obnHjaQFSxowbLJAtDNfm+TrZ88E9Y 416aArlV3SxdSPzre15BwbtD0WSAf9+LCFBjUuBQb8jL8PcIPnuDW0kBF6SR+z65 yjO2HJCZrIJ6O3LGhyfOIsBLxrmzKUowh6uLw2yxh1y/Fxbaz19aQi9zTjGPf2gF WuPZ87OFui4VUjqTmSOmhFxnB/CsFQAXDxSvx/hGA9/XLTNOEbD5lsOTRo1HkUPd yyLSrry5WxYeBOnX0Evqbz5x/V+gXp3P -----END CERTIFICATE-----Generated at Sat May 4 16:33:54 2024 by rpki-client on console-fra.rpki-client.org