$ rpki-client -vvf rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft File: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft (raw, json) Hash identifier: KcqV/QNE40b0VfoJ4OdXJVxVIHT6t7XRmPTuwgoTjzM= Subject key identifier: B1:98:AF:B0:7D:C5:E8:A9:8D:08:A6:05:A0:63:0E:EC:CD:7B:97:7F Authority key identifier: 98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 Certificate issuer: /CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft Manifest number: 4F0D Signing time: Thu 02 May 2024 16:57:05 +0000 Manifest this update: Thu 02 May 2024 16:57:05 +0000 Manifest next update: Thu 09 May 2024 16:57:05 +0000 Files and hashes: 1: mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl (hash: 5ZUxOfxt7sX3JoEqc+k91y/3Tc5GiGxvPcYkvGzxKkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536B7/serialNumber=981FA227A2A435C2B76E06C9C452D3EC751984D3 Validity Not Before: May 2 16:57:05 2024 GMT Not After : May 9 16:57:05 2024 GMT Subject: CN=6633c5e1-08c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:9a:3f:39:17:4e:16:22:2d:7f:39:60:70: 7d:bd:ca:ea:3c:1d:c7:0a:21:a6:6a:62:c9:e9:60: 09:a0:c0:27:58:bf:28:e1:71:14:90:b2:fb:b8:37: 4c:9e:27:af:5d:b6:5e:88:39:a8:95:4a:8f:ef:58: 51:46:39:38:d6:0a:67:ce:02:4d:09:2d:63:8b:97: a6:a4:02:68:7d:cd:45:30:6b:e7:5b:fc:26:a7:09: 86:47:dc:06:af:0d:ce:8b:75:d4:b0:b8:33:de:a9: 70:7c:e1:a0:5e:22:97:fb:0d:5a:25:38:bd:e9:dc: d1:b5:36:85:8a:61:78:e2:30:6b:31:83:5a:dd:e5: e1:3f:4f:68:b1:5f:99:d5:07:5a:e6:d3:6d:bd:de: c1:ea:16:8a:1f:6d:33:7d:c8:5d:67:07:8a:c2:42: 52:f8:6f:70:ad:22:2e:72:7c:4d:d4:e6:bc:1f:47: c5:f8:1e:2b:4f:da:1c:5c:13:20:f0:c3:93:5d:96: c4:c9:fa:f1:2e:85:6e:88:d7:3c:5e:c1:5f:7c:d2: 77:13:da:57:78:c9:84:d7:9e:65:6a:56:62:3c:6d: 02:8b:98:4b:46:b1:4d:b2:9f:ec:9e:4f:5b:e3:4e: d3:b6:24:8c:4f:c9:61:bc:ad:63:33:8e:c0:f5:95: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:98:AF:B0:7D:C5:E8:A9:8D:08:A6:05:A0:63:0E:EC:CD:7B:97:7F X509v3 Authority Key Identifier: keyid:98:1F:A2:27:A2:A4:35:C2:B7:6E:06:C9:C4:52:D3:EC:75:19:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536B7/F1CD27B473AD11E7ACBD025EC4F9AE02/mB-iJ6KkNcK3bgbJxFLT7HUZhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:28:48:da:02:9e:14:8d:1d:b7:87:b4:d8:43:bf:c0:0b:e1: f2:09:80:ca:2a:c6:10:b5:0e:6c:ad:95:f4:fe:88:fe:cf:b3: 9c:2f:d8:6f:24:75:d4:1b:62:5b:d5:e7:4d:7b:f6:ae:d5:af: 67:1f:d9:30:fc:fa:32:f4:84:4f:8b:24:86:e6:c4:54:88:60: 2f:9b:e9:76:fc:9e:3e:12:a3:bf:2e:13:c3:79:36:fe:04:c8: a3:b4:13:fc:c6:d3:a1:79:f8:73:0a:b7:f6:5f:69:fc:df:b8: d7:0d:5a:57:94:07:5f:b7:da:b9:2b:bc:11:54:0a:be:f1:8c: 5c:2b:e0:c7:1c:b6:64:99:c4:0e:2d:ee:30:36:73:9a:eb:cb: fa:80:fd:73:67:0d:1f:1b:c0:f6:0f:42:80:5f:e0:1a:ba:ee: 44:3e:65:4c:3b:f8:c0:ff:f2:f4:f7:6d:39:10:00:5d:a9:10: 5a:a3:bc:0d:72:82:25:e9:67:25:fb:3e:18:98:31:29:34:3b: fb:7c:e5:58:98:0d:df:be:ed:6a:1c:ab:e4:de:4e:98:0c:61: bf:e9:db:2c:3a:60:9e:89:d4:2e:d1:5a:22:36:a5:d5:66:3d: d7:3d:7f:3c:fe:c2:df:8e:bf:81:3e:fd:f7:ed:7b:39:69:7f: 02:54:9e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2QjcxMTAvBgNVBAUTKDk4MUZBMjI3QTJBNDM1QzJCNzZFMDZDOUM0NTJEM0VD NzUxOTg0RDMwHhcNMjQwNTAyMTY1NzA1WhcNMjQwNTA5MTY1NzA1WjAYMRYwFAYD VQQDEw02NjMzYzVlMS0wOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl6aPzkXThYiLX85YHB9vcrqPB3HCiGmamLJ6WAJoMAnWL8o4XEUkLL7uDdM nievXbZeiDmolUqP71hRRjk41gpnzgJNCS1ji5empAJofc1FMGvnW/wmpwmGR9wG rw3Oi3XUsLgz3qlwfOGgXiKX+w1aJTi96dzRtTaFimF44jBrMYNa3eXhP09osV+Z 1Qda5tNtvd7B6haKH20zfchdZweKwkJS+G9wrSIucnxN1Oa8H0fF+B4rT9ocXBMg 8MOTXZbEyfrxLoVuiNc8XsFffNJ3E9pXeMmE155lalZiPG0Ci5hLRrFNsp/snk9b 407TtiSMT8lhvK1jM47A9ZUTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGYr7B9 xeipjQimBaBjDuzNe5d/MB8GA1UdIwQYMBaAFJgfoieipDXCt24GycRS0+x1GYTT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZCNy9GMUNEMjdCNDcz QUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05jSzNiZ2JKeEZMVDdIVVpo Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CLWlKNktrTmNLM2JnYkp4RkxUN0hVWmhOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZCNy9GMUNEMjdCNDczQUQxMUU3QUNCRDAyNUVDNEY5QUUwMi9tQi1pSjZLa05j SzNiZ2JKeEZMVDdIVVpoTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJKEjaAp4UjR23h7TYQ7/AC+HyCYDKKsYQtQ5srZX0/oj+z7OcL9hv JHXUG2Jb1edNe/au1a9nH9kw/Poy9IRPiySG5sRUiGAvm+l2/J4+EqO/LhPDeTb+ BMijtBP8xtOhefhzCrf2X2n837jXDVpXlAdft9q5K7wRVAq+8YxcK+DHHLZkmcQO Le4wNnOa68v6gP1zZw0fG8D2D0KAX+Aauu5EPmVMO/jA//L09205EABdqRBao7wN coIl6Wcl+z4YmDEpNDv7fOVYmA3fvu1qHKvk3k6YDGG/6dssOmCeidQu0VoiNqXV Zj3XPX88/sLfjr+BPv337Xs5aX8CVJ5F -----END CERTIFICATE-----Generated at Thu May 2 17:43:07 2024 by rpki-client on console-fra.rpki-client.org