$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: LlBqi1zmRQWmYatD3HU8ScsFTGzBytVaA0QreHmUD8E= Subject key identifier: F8:16:76:98:9C:4A:40:B4:92:53:8C:C6:8F:7B:AD:81:D4:75:31:9A Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 73 Signing time: Wed 15 May 2024 07:31:03 +0000 Manifest this update: Wed 15 May 2024 07:31:02 +0000 Manifest next update: Wed 22 May 2024 07:31:02 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: TVFDI5sBlrSa/owlPI8ZMca9BAw/I+KbbJOzyhwG3xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Validity Not Before: May 15 07:31:02 2024 GMT Not After : May 22 07:31:02 2024 GMT Subject: CN=664464b7-06a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:50:70:04:fe:bc:55:73:54:fe:90:04:f6: 67:a1:c4:31:1a:70:20:c9:1f:d0:27:d6:3b:b1:e9: c2:5c:19:7f:28:0c:4f:d4:e2:76:aa:30:0e:11:6f: f1:1b:1f:73:f0:3b:e8:37:4c:ff:63:78:ab:13:1d: 35:98:f4:ea:97:cc:2c:21:17:30:3b:2c:67:7a:22: e2:7e:28:87:56:51:01:e1:94:4b:22:aa:3e:37:98: 4c:02:b7:a5:4e:c4:91:0f:4b:90:55:78:8a:f7:0e: bf:03:fe:ba:40:50:26:5d:04:c0:0f:90:9b:38:4c: f4:e8:49:c9:89:27:a5:7b:5a:ea:a1:f6:a8:69:19: 59:68:01:31:6a:f8:b2:6f:c5:d1:7d:b9:cc:70:59: 13:52:aa:dc:73:40:32:c9:ae:c4:8b:d8:71:0a:80: 00:c6:14:94:7c:35:d6:2c:f8:61:35:aa:60:59:38: 6e:92:4e:5e:9e:3d:61:7c:39:c1:d3:78:3a:21:eb: a9:3f:4e:d7:2f:94:6f:c7:c7:2d:d1:94:ab:9a:8a: 86:7c:18:fc:43:31:85:c1:da:83:5c:9d:5f:86:39: 45:65:3c:fc:e3:33:0c:21:bb:c8:ee:37:ce:2f:84: dc:e4:51:8d:38:4e:0c:e1:b8:27:d8:8f:72:b6:be: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:16:76:98:9C:4A:40:B4:92:53:8C:C6:8F:7B:AD:81:D4:75:31:9A X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:64:34:d4:d1:96:55:71:19:63:b2:0d:ad:bc:05:89:ab:f6: d1:2e:38:0f:c9:84:26:40:d7:cb:03:5d:9c:8f:a5:18:ed:d8: 8d:6c:1d:3c:1f:c4:84:15:1a:99:99:16:6c:f4:92:20:3b:1b: 2f:8b:df:88:b8:80:7c:7a:95:69:f0:c5:48:56:1e:29:4f:8f: 5f:6a:84:38:76:bc:e2:ae:77:99:8e:50:c3:0a:b1:6e:85:15: 39:83:64:0f:bd:4f:76:0c:85:b1:22:66:e7:07:21:07:10:0a: bb:e0:e4:17:e6:3c:36:c9:6a:b3:a9:4e:56:98:e2:c5:b9:2d: f3:09:38:08:52:dd:2b:6c:2a:be:cd:0c:ae:df:45:1c:57:31: 89:f1:76:b4:f6:a6:ef:ac:94:6a:81:f2:af:8f:c2:bc:07:0e: 68:4a:05:78:3e:2c:fe:c6:77:15:d0:09:ff:f5:3c:1c:10:df: 69:2a:6f:fc:1b:cc:6c:9e:df:58:ae:c3:6e:b7:59:67:5b:93: c1:14:b4:25:01:ec:3c:98:82:75:3e:62:70:da:b1:95:31:ae: 70:d9:49:55:2d:19:78:4f:97:bd:98:ad:fe:b6:3c:7e:90:5f: e9:6f:b8:42:b8:4a:23:4e:39:19:14:68:30:30:87:34:3d:d9: b0:cf:c9:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkQ4QjExMC8GA1UEBRMoOUFCNjg2RTNDMjk5QUE3RTQ0NTU0OTM0OTVCNDZCQTVB NzQ0MDk5RDAeFw0yNDA1MTUwNzMxMDJaFw0yNDA1MjIwNzMxMDJaMBgxFjAUBgNV BAMTDTY2NDQ2NGI3LTA2YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1KVBwBP68VXNU/pAE9mehxDEacCDJH9An1jux6cJcGX8oDE/U4naqMA4Rb/Eb H3PwO+g3TP9jeKsTHTWY9OqXzCwhFzA7LGd6IuJ+KIdWUQHhlEsiqj43mEwCt6VO xJEPS5BVeIr3Dr8D/rpAUCZdBMAPkJs4TPToScmJJ6V7Wuqh9qhpGVloATFq+LJv xdF9ucxwWRNSqtxzQDLJrsSL2HEKgADGFJR8NdYs+GE1qmBZOG6STl6ePWF8OcHT eDoh66k/TtcvlG/Hxy3RlKuaioZ8GPxDMYXB2oNcnV+GOUVlPPzjMwwhu8juN84v hNzkUY04TgzhuCfYj3K2vhoFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+BZ2mJxK QLSSU4zGj3utgdR1MZowHwYDVR0jBBgwFoAUmraG48KZqn5EVUk0lbRrpadECZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RDhCL0IyRjIzNUIyNjcy MDExRUVBMTQ2QzIyREM0RjlBRTAyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXJhRzQ4S1pxbjVFVlVrMGxiUnJwYWRFQ1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RDhCL0IyRjIzNUIyNjcyMDExRUVBMTQ2QzIyREM0RjlBRTAyL21yYUc0OEtacW41 RVZVazBsYlJycGFkRUNaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJkNNTRllVxGWOyDa28BYmr9tEuOA/JhCZA18sDXZyPpRjt2I1sHTwf xIQVGpmZFmz0kiA7Gy+L34i4gHx6lWnwxUhWHilPj19qhDh2vOKud5mOUMMKsW6F FTmDZA+9T3YMhbEiZucHIQcQCrvg5BfmPDbJarOpTlaY4sW5LfMJOAhS3StsKr7N DK7fRRxXMYnxdrT2pu+slGqB8q+PwrwHDmhKBXg+LP7GdxXQCf/1PBwQ32kqb/wb zGye31iuw263WWdbk8EUtCUB7DyYgnU+YnDasZUxrnDZSVUtGXhPl72Yrf62PH6Q X+lvuEK4SiNOORkUaDAwhzQ92bDPyUE= -----END CERTIFICATE-----Generated at Wed May 15 09:28:13 2024 by rpki-client on console-fra.rpki-client.org