$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: HlszvBxJkPFbqCSGP1iU4U8OjPB9C8pugNm0LC/rocE= Subject key identifier: F6:11:CC:6D:10:7B:87:3F:94:C8:9F:E5:91:5A:95:00:AF:54:4E:9D Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 38 Signing time: Wed 15 May 2024 08:26:24 +0000 Manifest this update: Wed 15 May 2024 08:26:24 +0000 Manifest next update: Wed 22 May 2024 08:26:24 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: Z3NoFkABXDH1BWaJQHN28qrdwEFzBvOAXD9Ow4ItSAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: May 15 08:26:24 2024 GMT Not After : May 22 08:26:24 2024 GMT Subject: CN=664471b0-3d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:4f:cb:2b:7a:aa:89:cf:a7:9f:2c:f7:1f: ce:fb:d2:e0:19:51:42:81:62:a3:2d:fc:0c:fd:29: eb:f6:69:3a:9d:99:87:77:d8:23:0f:36:7f:c5:13: bf:01:d8:a1:53:3c:c3:9e:2c:4f:4c:0a:4c:57:26: ea:95:f6:2f:b0:c7:f8:25:92:b7:31:bd:73:f8:53: 38:4e:bc:33:f5:4f:b1:e2:0e:0f:1c:8d:6c:10:4b: 94:81:c2:16:e6:47:10:39:cd:69:05:e3:9d:60:b6: 60:11:be:65:ab:e0:52:cd:18:d1:69:f6:30:76:f5: f8:76:ff:29:c5:17:64:80:39:64:a3:14:8a:71:1c: 33:62:8b:c2:1a:a6:7a:7f:07:40:1b:79:fb:58:63: 8d:81:11:67:1a:90:20:70:03:5e:ff:aa:45:e7:cd: 5a:53:97:79:20:0d:aa:91:70:c8:bf:f2:88:75:17: c4:d4:17:b7:cf:46:3a:f3:74:e5:5a:fd:b4:ad:c9: a8:ff:31:ca:f9:f7:f8:f8:1f:5a:76:21:4f:22:02: cc:4e:ac:76:6c:12:70:56:21:30:5d:04:09:b9:5e: cc:79:6d:e6:c2:4e:75:19:ca:ff:52:b2:eb:fb:ce: ac:fd:b6:fd:e8:11:8f:e4:fd:21:88:d3:cc:3c:0b: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:CC:6D:10:7B:87:3F:94:C8:9F:E5:91:5A:95:00:AF:54:4E:9D X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bc:69:dc:a7:e8:52:a2:03:c0:9e:58:0a:ab:bc:c9:c6:7d: fe:d4:2f:d9:1e:54:bc:21:a8:44:5c:f6:74:4e:eb:11:c5:31: 52:ea:a0:25:95:ea:f1:b4:7f:dc:9f:5c:c7:3c:ba:d7:81:08: 47:91:3a:9b:5e:1e:33:15:24:b5:6e:ac:0a:23:48:f7:6a:f3: 8b:5d:e2:99:30:20:71:ce:a0:40:45:88:05:e3:35:97:06:f7: e0:70:65:37:79:72:91:26:f3:52:5f:fe:fb:62:8a:fd:d3:3b: 2f:b8:52:3e:e6:94:bd:68:74:9a:ff:a4:8e:44:da:82:b3:76: ec:a2:7a:5f:a7:48:17:d6:64:f4:85:1b:2e:13:e7:0b:bc:7d: 8d:df:6c:c8:07:c1:82:94:ab:d1:cb:5c:ab:a5:08:a2:a9:a3: b9:a4:91:53:eb:9d:6c:62:5a:0b:ea:55:2a:2e:c9:fa:aa:ae: 6c:cb:31:b6:05:54:f9:85:90:6c:c8:8e:71:10:cf:e6:6d:e4: 2b:9c:64:1e:57:fd:2c:72:56:5e:44:cb:ea:75:70:c0:26:0e: 51:9c:2a:fe:41:ab:71:e6:18:54:df:00:ac:16:23:ab:a6:a2: 06:1c:59:da:ba:2f:7f:ce:05:92:2a:fe:df:42:66:b0:d8:6a: d6:a9:59:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBCNjExMC8GA1UEBRMoRTAxOTRBQTUzQjU4MjFCOUJEMEM1QzdCODM1MkJCMTM4 MTg1M0Y5RDAeFw0yNDA1MTUwODI2MjRaFw0yNDA1MjIwODI2MjRaMBgxFjAUBgNV BAMTDTY2NDQ3MWIwLTNkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhm0/LK3qqic+nnyz3H8770uAZUUKBYqMt/Az9Kev2aTqdmYd32CMPNn/FE78B 2KFTPMOeLE9MCkxXJuqV9i+wx/glkrcxvXP4UzhOvDP1T7HiDg8cjWwQS5SBwhbm RxA5zWkF451gtmARvmWr4FLNGNFp9jB29fh2/ynFF2SAOWSjFIpxHDNii8Iapnp/ B0AbeftYY42BEWcakCBwA17/qkXnzVpTl3kgDaqRcMi/8oh1F8TUF7fPRjrzdOVa /bStyaj/Mcr59/j4H1p2IU8iAsxOrHZsEnBWITBdBAm5Xsx5bebCTnUZyv9Ssuv7 zqz9tv3oEY/k/SGI08w8C04zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9hHMbRB7 hz+UyJ/lkVqVAK9UTp0wHwYDVR0jBBgwFoAU4BlKpTtYIbm9DFx7g1K7E4GFP50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEI2LzY5NTZBRTNFQkYz MDExRUVCRTRGM0MxRUM0RjlBRTAyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEJsS3BUdFlJYm05REZ4N2cxSzdFNEdGUDUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEI2LzY5NTZBRTNFQkYzMDExRUVCRTRGM0MxRUM0RjlBRTAyLzRCbEtwVHRZSWJt OURGeDdnMUs3RTRHRlA1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu8adyn6FKiA8CeWAqrvMnGff7UL9keVLwhqERc9nRO6xHFMVLqoCWV 6vG0f9yfXMc8uteBCEeROpteHjMVJLVurAojSPdq84td4pkwIHHOoEBFiAXjNZcG 9+BwZTd5cpEm81Jf/vtiiv3TOy+4Uj7mlL1odJr/pI5E2oKzduyiel+nSBfWZPSF Gy4T5wu8fY3fbMgHwYKUq9HLXKulCKKpo7mkkVPrnWxiWgvqVSouyfqqrmzLMbYF VPmFkGzIjnEQz+Zt5CucZB5X/SxyVl5Ey+p1cMAmDlGcKv5Bq3HmGFTfAKwWI6um ogYcWdq6L3/OBZIq/t9CZrDYatapWYg= -----END CERTIFICATE-----Generated at Wed May 15 09:27:31 2024 by rpki-client on console-fra.rpki-client.org