$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: ceErh4ESE+neFT/gHEx6HIPCOu+I9o9knmKBbQPTt14= Subject key identifier: CE:09:83:5E:C1:48:C1:DE:34:D7:4A:FE:60:D5:54:D7:D7:E7:4D:8A Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 11B4 Signing time: Thu 16 May 2024 20:24:40 +0000 Manifest this update: Thu 16 May 2024 20:24:40 +0000 Manifest next update: Thu 23 May 2024 20:24:40 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: CCQyf7yHeM1/Dtb0wVbxeO12fS4TkmKzG6r18NetIU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: May 16 20:24:40 2024 GMT Not After : May 23 20:24:40 2024 GMT Subject: CN=66466b88-e7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:e7:29:58:15:b1:b4:ef:c5:8a:aa:9e:e3: e4:0b:4e:ed:47:60:ab:8a:97:e0:a8:4d:5f:9d:8b: 4c:e7:fa:99:fb:58:08:92:84:24:a8:3f:c6:0c:19: 4d:15:de:af:c1:d6:3a:74:c3:e3:50:0d:fc:b3:ca: a3:fb:d7:92:0d:eb:c9:e2:90:c5:cd:0f:e2:51:2e: e9:af:32:66:7d:c8:2e:d6:a3:a4:ef:38:5c:4b:30: 95:32:5b:63:68:4a:d8:74:ea:3b:e5:87:65:7f:3d: 4d:36:f8:39:e6:94:0d:6a:63:57:f8:96:01:d4:82: ac:71:d4:00:ba:10:dc:3f:6f:8a:10:e8:cc:2f:6c: cf:3e:17:89:08:0c:fe:f5:ca:f9:4a:15:d2:ff:12: 82:99:8c:05:68:b8:36:ad:6d:81:02:8b:0e:a5:49: 0d:70:42:43:f4:d2:ad:70:48:c7:08:68:4b:79:40: e9:2a:c3:2a:6f:9b:5d:f1:3f:4f:08:58:ba:ae:0c: 78:2d:2b:14:10:95:a7:4c:2c:3a:7a:75:4a:8a:95: e8:88:9b:e7:09:a1:1e:8e:97:bb:68:92:18:32:27: e3:db:6b:12:09:35:57:2c:88:48:96:32:74:de:41: 40:13:af:5e:3c:49:ac:c3:7c:bc:ff:b7:fe:70:e8: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:83:5E:C1:48:C1:DE:34:D7:4A:FE:60:D5:54:D7:D7:E7:4D:8A X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:29:f1:cc:c6:92:fe:73:df:91:de:b9:f3:a4:97:6b:8d:9d: 55:81:99:bd:54:46:55:37:f3:8d:8f:9b:6c:4a:51:23:c0:f5: 1a:6d:f8:35:f8:47:c7:38:92:07:b9:26:2e:1f:ae:dd:35:7b: 63:a6:34:45:9a:68:14:23:1f:98:11:4f:86:6a:89:a4:73:ad: c4:bc:ce:e2:57:8e:0f:e1:a0:c9:4c:db:6c:05:87:c9:c1:30: 53:5e:11:24:64:8c:65:74:9c:2e:b8:11:d3:17:dc:8c:cc:b9: a4:8b:95:40:31:c0:aa:b0:06:5f:40:5e:5c:2d:97:86:a3:6c: ad:ef:ba:e3:89:42:a0:53:fb:ec:74:ab:2e:d9:13:00:c1:ca: f6:22:b1:a6:52:8d:dd:b9:0d:5d:cd:48:d6:c6:9b:6c:69:7f: 2d:98:22:5a:74:1c:79:fc:eb:38:35:05:9b:b2:46:1a:2d:fb: 65:ec:3f:b2:0c:68:67:28:cd:87:a1:64:34:64:eb:38:8f:e0: 5f:73:a8:e6:f8:7b:b7:f7:7a:d7:af:d0:fb:29:55:05:51:f3: 4d:59:fc:3f:45:8f:b3:be:98:f6:d5:2e:64:0c:71:84:50:f7: 76:f1:36:81:0d:4b:70:5f:b9:b0:12:92:e4:8b:a6:d2:2a:db: 49:6a:24:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjQwNTE2MjAyNDQwWhcNMjQwNTIzMjAyNDQwWjAYMRYwFAYD VQQDEw02NjQ2NmI4OC1lN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qjnKVgVsbTvxYqqnuPkC07tR2CripfgqE1fnYtM5/qZ+1gIkoQkqD/GDBlN Fd6vwdY6dMPjUA38s8qj+9eSDevJ4pDFzQ/iUS7przJmfcgu1qOk7zhcSzCVMltj aErYdOo75Ydlfz1NNvg55pQNamNX+JYB1IKscdQAuhDcP2+KEOjML2zPPheJCAz+ 9cr5ShXS/xKCmYwFaLg2rW2BAosOpUkNcEJD9NKtcEjHCGhLeUDpKsMqb5td8T9P CFi6rgx4LSsUEJWnTCw6enVKipXoiJvnCaEejpe7aJIYMifj22sSCTVXLIhIljJ0 3kFAE69ePEmsw3y8/7f+cOiKeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4Jg17B SMHeNNdK/mDVVNfX502KMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+KfHMxpL+c9+R3rnzpJdrjZ1VgZm9VEZVN/ONj5tsSlEjwPUabfg1 +EfHOJIHuSYuH67dNXtjpjRFmmgUIx+YEU+Gaomkc63EvM7iV44P4aDJTNtsBYfJ wTBTXhEkZIxldJwuuBHTF9yMzLmki5VAMcCqsAZfQF5cLZeGo2yt77rjiUKgU/vs dKsu2RMAwcr2IrGmUo3duQ1dzUjWxptsaX8tmCJadBx5/Os4NQWbskYaLftl7D+y DGhnKM2HoWQ0ZOs4j+Bfc6jm+Hu393rXr9D7KVUFUfNNWfw/RY+zvpj21S5kDHGE UPd28TaBDUtwX7mwEpLki6bSKttJaiQD -----END CERTIFICATE-----Generated at Thu May 16 22:34:46 2024 by rpki-client on console-ams.rpki-client.org