$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft File: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json) Hash identifier: iVcpaCjUDhgfDvJ9cn9NkoifH5A9hiK0sDiFf9Bu8Oo= Subject key identifier: 95:ED:CD:98:59:38:86:BD:E0:ED:2F:9F:AC:AB:F8:09:57:47:95:BB Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft Manifest number: 1F Signing time: Tue 21 May 2024 08:32:23 +0000 Manifest this update: Tue 21 May 2024 08:32:22 +0000 Manifest next update: Tue 28 May 2024 08:32:22 +0000 Files and hashes: 1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: 4V7pKLMzoghp1B7NUAHgThPvFoBnHXTBtLbRrwa/eh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Validity Not Before: May 21 08:32:22 2024 GMT Not After : May 28 08:32:22 2024 GMT Subject: CN=664c5c17-f12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:67:04:f9:9a:9a:f5:05:e9:98:0e:99:e2: 4e:bc:d7:76:5d:b5:07:bb:29:95:72:a8:5f:1d:74: bb:49:e6:8c:5b:60:82:22:51:8d:c9:da:f9:ea:26: bc:3b:7f:c8:99:49:67:c8:aa:7e:5f:6d:cf:e9:8d: b9:5e:2a:1a:a6:e0:73:e1:4f:72:a2:71:19:73:49: cf:7c:58:33:f2:0b:c3:56:0b:e7:20:0c:b0:6f:00: 82:4e:dd:29:ab:1f:28:63:c2:84:02:50:55:38:9a: 43:7e:b1:fe:f9:ce:fa:2b:91:65:70:51:09:91:11: cf:2f:bd:56:91:da:6f:c2:48:dc:6d:fd:cc:45:c0: 96:40:a6:c9:5d:5d:91:d3:88:2b:63:f5:d7:49:c8: b9:fd:cb:e3:0a:4e:5c:3e:b5:23:ef:92:84:1f:8b: 60:ee:c6:d8:f5:1f:65:e0:dc:58:a6:34:70:d5:1f: c1:53:e7:c9:9f:d8:b8:46:78:3f:83:60:bf:38:a4: c5:a6:7b:57:cd:b9:d9:a2:3d:52:4f:50:18:00:55: 0f:d2:29:51:c2:60:b2:44:06:34:aa:9a:2c:bd:76: 42:62:4d:d0:d0:f6:2c:e8:4c:76:bb:63:57:b4:b2: 88:4d:5e:29:da:2e:e6:e3:af:20:40:d8:2b:5c:75: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:CD:98:59:38:86:BD:E0:ED:2F:9F:AC:AB:F8:09:57:47:95:BB X509v3 Authority Key Identifier: keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:01:5c:85:6a:34:44:fc:16:47:bf:52:cf:33:23:95:54:c3: da:48:86:20:14:a8:30:bf:29:92:41:f3:46:30:d4:25:04:f9: 07:a0:69:02:34:e8:37:68:1e:e0:d9:95:ff:72:f4:d2:58:d5: 7d:a9:99:1c:d7:ba:44:fa:05:9b:c6:a6:19:71:8f:e9:93:a2: 6e:6d:8c:9b:7c:a5:b8:1e:b9:35:fc:5b:32:79:ad:50:b9:6a: 18:c8:b8:54:32:f5:8f:c7:8a:1b:8d:50:56:48:64:09:05:4c: f1:fa:1c:9e:58:69:31:1e:65:6e:0e:84:70:34:8b:aa:eb:7d: 52:b7:ef:45:67:54:68:32:e0:c8:c6:c9:27:ef:83:4d:cd:81: e8:32:67:79:a7:74:9e:5d:6b:84:b4:ba:17:82:71:7a:e2:64: 2e:3d:40:2b:bc:72:76:ee:27:2c:e1:19:84:27:6e:10:ef:c1: 16:54:b5:02:94:ed:0f:e7:fe:dc:db:c3:46:47:f2:da:bb:92: a7:fa:7b:de:07:47:35:3e:04:1a:fb:a1:03:9f:1a:7f:ee:22: 07:dc:20:d2:ac:a5:4c:10:c4:50:b2:b7:39:5a:2e:45:87:fa: 95:a3:77:7e:31:de:03:fb:88:ec:a8:c3:8e:7d:f2:09:86:92: 82:71:fb:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTQxQzExMC8GA1UEBRMoNzlENjMwNUZBMjJGRkRGN0UzNTEwNjc0OTc4NjJDNjRB MTY1NDcyRjAeFw0yNDA1MjEwODMyMjJaFw0yNDA1MjgwODMyMjJaMBgxFjAUBgNV BAMTDTY2NGM1YzE3LWYxMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL/2cE+Zqa9QXpmA6Z4k6813ZdtQe7KZVyqF8ddLtJ5oxbYIIiUY3J2vnqJrw7 f8iZSWfIqn5fbc/pjbleKhqm4HPhT3KicRlzSc98WDPyC8NWC+cgDLBvAIJO3Smr HyhjwoQCUFU4mkN+sf75zvorkWVwUQmREc8vvVaR2m/CSNxt/cxFwJZApsldXZHT iCtj9ddJyLn9y+MKTlw+tSPvkoQfi2Duxtj1H2Xg3FimNHDVH8FT58mf2LhGeD+D YL84pMWme1fNudmiPVJPUBgAVQ/SKVHCYLJEBjSqmiy9dkJiTdDQ9izoTHa7Y1e0 sohNXinaLubjryBA2CtcdYORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUle3NmFk4 hr3g7S+frKv4CVdHlbswHwYDVR0jBBgwFoAUedYwX6Iv/ffjUQZ0l4YsZKFlRy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NDFDLzUzQUFCNEU2RTcy RjExRUVCNzJDNkU2OEM0RjlBRTAyL2VkWXdYNkl2X2ZmalVRWjBsNFlzWktGbFJ5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZWRZd1g2SXZfZmZqVVFaMGw0WXNaS0ZsUnk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NDFDLzUzQUFCNEU2RTcyRjExRUVCNzJDNkU2OEM0RjlBRTAyL2VkWXdYNkl2X2Zm alVRWjBsNFlzWktGbFJ5OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYBXIVqNET8Fke/Us8zI5VUw9pIhiAUqDC/KZJB80Yw1CUE+QegaQI0 6DdoHuDZlf9y9NJY1X2pmRzXukT6BZvGphlxj+mTom5tjJt8pbgeuTX8WzJ5rVC5 ahjIuFQy9Y/HihuNUFZIZAkFTPH6HJ5YaTEeZW4OhHA0i6rrfVK370VnVGgy4MjG ySfvg03NgegyZ3mndJ5da4S0uheCcXriZC49QCu8cnbuJyzhGYQnbhDvwRZUtQKU 7Q/n/tzbw0ZH8tq7kqf6e94HRzU+BBr7oQOfGn/uIgfcINKspUwQxFCytzlaLkWH +pWjd34x3gP7iOyow4598gmGkoJx+zE= -----END CERTIFICATE-----Generated at Tue May 21 10:37:08 2024 by rpki-client on console-fra.rpki-client.org