$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json) Hash identifier: xF6JqCEIcnUrNQG9ASljVlTo/GDAuayaXrgxdVeAcek= Subject key identifier: A2:00:59:51:42:29:2A:4B:8E:DC:C0:67:10:53:2B:C5:71:32:08:47 Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Certificate serial: 16CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft Manifest number: 1E02 Signing time: Thu 16 May 2024 17:14:25 +0000 Manifest this update: Thu 16 May 2024 17:14:25 +0000 Manifest next update: Thu 23 May 2024 17:14:25 +0000 Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: 4Q4px9nqDiWGn4wUR8NwTXlkR5WC4E4qC98ufOOMeWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5839 (0x16cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Validity Not Before: May 16 17:14:25 2024 GMT Not After : May 23 17:14:25 2024 GMT Subject: CN=66463ef1-8aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:31:6b:e4:06:f1:ac:c6:e8:0e:04:c2:63: 8d:22:3f:95:1a:02:4b:ad:96:73:9c:cf:26:83:74: bb:64:18:7d:3a:a8:d6:f4:63:ab:61:13:42:8c:3d: 81:41:02:af:36:02:ac:1d:2b:fd:76:18:15:ba:ff: f0:a1:66:dd:bb:48:ff:87:9a:11:87:14:58:ff:cc: 79:7f:2d:12:6f:5b:a2:07:29:d0:f0:d9:96:98:9e: 5f:ed:2d:0c:d7:3c:af:8e:7f:b6:e7:05:7d:c6:af: 2c:76:88:42:b5:6b:53:88:99:01:cd:01:17:43:0e: 4d:5f:7f:d4:d6:1e:88:6a:c9:16:c5:2a:1c:eb:47: f7:09:fe:f9:fd:a3:99:87:30:8a:a7:f9:7d:77:78: ea:35:26:c0:08:1c:6f:60:fd:e2:ee:c5:4c:42:fa: 00:6c:18:44:fc:ae:26:be:cd:7d:05:c7:96:5f:e0: 8f:b8:bf:ef:38:3e:d5:d7:d4:93:66:89:82:15:7e: 7a:d5:f4:98:36:35:e4:6d:ad:88:26:d4:dd:e7:d1: 04:cf:e9:6c:d1:cf:8f:14:9e:4a:2f:9b:b8:3d:c0: 2d:0b:e6:52:7e:84:00:bb:79:a0:69:2b:6d:1e:78: 45:21:5d:88:04:d3:87:ac:ec:2b:db:1f:a3:04:47: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:59:51:42:29:2A:4B:8E:DC:C0:67:10:53:2B:C5:71:32:08:47 X509v3 Authority Key Identifier: keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fc:b3:15:48:64:53:2b:58:d3:3c:92:ce:03:68:61:5b:c8: 39:ba:36:18:a3:ba:4d:f0:0b:d8:ea:dc:86:26:e1:72:ef:78: 91:ea:27:6b:6a:96:99:19:f5:fe:1e:3d:2b:0d:77:7f:14:e6: 7a:9a:d3:fe:35:32:43:a7:88:b5:ac:d7:8f:20:99:09:d1:1e: 11:61:51:d3:d1:fe:f9:c7:a0:9a:57:b9:3c:63:df:f3:cd:94: fc:24:7d:12:47:ca:5e:b7:7f:18:20:80:42:15:1c:46:7d:14: 55:23:dd:66:f8:8e:fc:a0:cc:b8:ab:b3:11:3b:cb:eb:be:bf: 73:6d:e0:5c:c3:b0:5e:ef:81:cd:23:05:b4:17:fc:58:ce:85: a7:f9:22:23:86:ae:d4:65:d6:fb:f3:9e:82:fe:df:bc:9b:14: 89:ee:6f:37:37:22:0c:cc:bc:a6:6e:da:2e:48:35:f0:33:35: 62:87:5b:8e:c3:8f:b8:0e:3d:ae:45:d1:81:5d:07:8e:01:08: d4:e9:e1:3e:85:a9:85:c4:69:04:e7:da:20:15:57:0e:86:3e: f1:2f:3e:1c:05:f9:2f:53:cb:e6:31:e4:62:9a:3b:91:2b:b1: 85:19:8b:cb:85:2a:97:fa:cf:09:69:3a:8c:65:e7:17:87:7d: 72:44:4b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDk0M0I4MTQyRTE1NTNFQzk0NjI1QTQ3MjRFNTY5ODJB MTU1OEZFOUMwHhcNMjQwNTE2MTcxNDI1WhcNMjQwNTIzMTcxNDI1WjAYMRYwFAYD VQQDEw02NjQ2M2VmMS04YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAAxa+QG8azG6A4EwmONIj+VGgJLrZZznM8mg3S7ZBh9OqjW9GOrYRNCjD2B QQKvNgKsHSv9dhgVuv/woWbdu0j/h5oRhxRY/8x5fy0Sb1uiBynQ8NmWmJ5f7S0M 1zyvjn+25wV9xq8sdohCtWtTiJkBzQEXQw5NX3/U1h6IaskWxSoc60f3Cf75/aOZ hzCKp/l9d3jqNSbACBxvYP3i7sVMQvoAbBhE/K4mvs19BceWX+CPuL/vOD7V19ST ZomCFX561fSYNjXkba2IJtTd59EEz+ls0c+PFJ5KL5u4PcAtC+ZSfoQAu3mgaStt HnhFIV2IBNOHrOwr2x+jBEc3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIAWVFC KSpLjtzAZxBTK8VxMghHMB8GA1UdIwQYMBaAFJQ7gULhVT7JRiWkck5WmCoVWP6c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBzbEdKYVJ5VGxhWUtoVllf cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xEdUJRdUZWUHNsR0phUnlUbGFZS2hWWV9wdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBz bEdKYVJ5VGxhWUtoVllfcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY/LMVSGRTK1jTPJLOA2hhW8g5ujYYo7pN8AvY6tyGJuFy73iR6idr apaZGfX+Hj0rDXd/FOZ6mtP+NTJDp4i1rNePIJkJ0R4RYVHT0f75x6CaV7k8Y9/z zZT8JH0SR8pet38YIIBCFRxGfRRVI91m+I78oMy4q7MRO8vrvr9zbeBcw7Be74HN IwW0F/xYzoWn+SIjhq7UZdb7856C/t+8mxSJ7m83NyIMzLymbtouSDXwMzVih1uO w4+4Dj2uRdGBXQeOAQjU6eE+hamFxGkE59ogFVcOhj7xLz4cBfkvU8vmMeRimjuR K7GFGYvLhSqX+s8JaTqMZecXh31yREvB -----END CERTIFICATE-----Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org