$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: VRWjQxsh6Yahcq9ryn1M780z+volB7zmi1B+4cR52CU= Subject key identifier: DA:F6:88:03:1F:80:B5:1D:73:FB:E7:EA:99:D6:38:D9:CE:97:70:8A Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 33D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3B4A Signing time: Thu 02 May 2024 15:26:13 +0000 Manifest this update: Thu 02 May 2024 15:26:13 +0000 Manifest next update: Thu 09 May 2024 15:26:13 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: RLqpjegIzTC5y4Z3DPShAdhVmiOLb4Nx6xFYDTEJhgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13264 (0x33d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: May 2 15:26:13 2024 GMT Not After : May 9 15:26:13 2024 GMT Subject: CN=6633b095-383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a6:c9:d9:40:b3:c1:2e:b8:e7:12:d0:7b:1e: 43:10:aa:00:2d:c7:d5:ad:70:9e:cb:3e:14:76:ec: 32:22:91:ad:6d:22:09:4a:a9:eb:ea:89:27:60:4f: 18:18:65:e7:a9:8a:4d:ea:0e:1c:0c:d5:10:2f:50: b4:2a:10:7a:ab:43:21:4f:05:07:2c:f9:46:d1:04: b3:03:d3:fe:9a:cf:a9:4c:8b:9f:ae:29:8b:3b:52: 79:9f:84:84:81:10:38:30:43:ad:4d:e2:37:8e:8c: 66:3e:08:d1:09:3b:b5:9b:4a:be:cf:13:20:69:5c: ec:e4:12:68:a1:43:5e:2e:1c:b6:a4:17:69:52:a3: 3a:62:a1:29:c8:85:c6:a8:d6:bd:d4:21:3d:f4:e2: 3b:19:b7:5e:05:5b:47:ba:89:40:5f:ac:61:00:ae: 00:19:35:e1:6c:8f:fc:ff:c1:0d:37:cb:1f:ca:35: 5b:8f:5f:68:80:b2:16:e5:0f:40:e5:d7:30:2d:3f: c9:7d:df:3d:90:90:a3:0a:67:ac:06:b8:76:d3:35: 5e:f2:fe:ed:36:f4:66:49:be:53:44:9d:e7:cd:5f: 03:7b:58:e9:ef:49:1d:eb:e8:e3:6e:16:4b:28:d5: e6:d7:e6:9b:e0:b9:1b:78:d4:99:f3:53:7d:34:a6: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F6:88:03:1F:80:B5:1D:73:FB:E7:EA:99:D6:38:D9:CE:97:70:8A X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:f2:d2:36:76:76:60:ba:3f:75:80:7e:d2:94:05:01:17: da:89:2a:b0:a0:72:b4:58:f7:29:fb:7c:d8:1a:74:d7:4c:7b: 17:d8:fd:35:c2:f0:5d:82:bd:a4:01:dc:d2:34:03:f8:72:dd: 05:a6:74:03:8c:af:e0:17:f3:83:1b:75:66:dc:5b:57:b8:89: de:96:c3:e0:0f:0c:4c:32:9f:9e:32:b0:dc:21:98:1f:c3:5c: 45:ee:e4:48:f6:62:8c:e7:e0:85:fa:d9:ad:95:60:93:5a:8a: c5:24:a6:38:13:7b:ac:87:a9:d3:18:cc:5c:d6:e8:9b:37:59: 59:5b:95:58:6b:a1:60:f6:6f:56:1c:db:07:d2:05:6b:e6:9b: c6:67:fa:64:99:46:ce:0d:53:36:4b:64:26:aa:d2:ef:b8:0c: 63:a5:62:eb:56:65:26:63:7e:92:77:eb:8c:62:58:e9:a6:9b: 06:de:4a:ed:81:52:7f:c9:04:8c:d8:c9:1b:b8:d6:b1:f2:a2: b7:dc:c3:86:36:62:d3:dc:56:27:f4:42:94:18:94:98:98:85: b8:27:0a:1a:ab:4d:1e:41:8a:a9:67:a3:70:08:4e:1a:8a:ac: cf:71:71:26:74:6d:6a:ba:ba:ab:5d:e9:d2:1a:14:1e:8f:35: 51:60:ce:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjQwNTAyMTUyNjEzWhcNMjQwNTA5MTUyNjEzWjAYMRYwFAYD VQQDEw02NjMzYjA5NS0zODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8abJ2UCzwS645xLQex5DEKoALcfVrXCeyz4UduwyIpGtbSIJSqnr6oknYE8Y GGXnqYpN6g4cDNUQL1C0KhB6q0MhTwUHLPlG0QSzA9P+ms+pTIufrimLO1J5n4SE gRA4MEOtTeI3joxmPgjRCTu1m0q+zxMgaVzs5BJooUNeLhy2pBdpUqM6YqEpyIXG qNa91CE99OI7GbdeBVtHuolAX6xhAK4AGTXhbI/8/8ENN8sfyjVbj19ogLIW5Q9A 5dcwLT/Jfd89kJCjCmesBrh20zVe8v7tNvRmSb5TRJ3nzV8De1jp70kd6+jjbhZL KNXm1+ab4LkbeNSZ81N9NKZNgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNr2iAMf gLUdc/vn6pnWONnOl3CKMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv1/LSNnZ2YLo/dYB+0pQFARfaiSqwoHK0WPcp+3zYGnTXTHsX2P01 wvBdgr2kAdzSNAP4ct0FpnQDjK/gF/ODG3Vm3FtXuInelsPgDwxMMp+eMrDcIZgf w1xF7uRI9mKM5+CF+tmtlWCTWorFJKY4E3ush6nTGMxc1uibN1lZW5VYa6Fg9m9W HNsH0gVr5pvGZ/pkmUbODVM2S2QmqtLvuAxjpWLrVmUmY36Sd+uMYljpppsG3krt gVJ/yQSM2MkbuNax8qK33MOGNmLT3FYn9EKUGJSYmIW4Jwoaq00eQYqpZ6NwCE4a iqzPcXEmdG1qurqrXenSGhQejzVRYM4T -----END CERTIFICATE-----Generated at Thu May 2 17:43:48 2024 by rpki-client on console-fra.rpki-client.org