$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: UmL190HCH9o37wrvEbDlVRF3gABQifeJjTlJJmQhfu4= Subject key identifier: 9A:19:17:15:9D:D8:CC:E4:48:7D:78:E1:50:FB:79:8F:FB:53:8F:DF Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 04E6 Signing time: Thu 25 Apr 2024 01:18:26 +0000 Manifest this update: Thu 25 Apr 2024 01:18:26 +0000 Manifest next update: Thu 02 May 2024 01:18:26 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: 1Hc9O+l3Mme1EZxxrGQXb/ngWwUzuRFZV5AWvpgfUWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: Apr 25 01:18:26 2024 GMT Not After : May 2 01:18:26 2024 GMT Subject: CN=6629af62-8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:a2:e9:29:87:f1:35:f4:be:a5:41:31:1d: 01:08:c3:43:5c:8b:fc:73:1e:0b:7b:3e:af:bf:e3: 2b:e2:a5:ff:ba:a6:86:07:b3:94:cd:15:40:9d:34: 34:d8:1a:e0:66:e9:dc:17:c6:c5:bc:02:0b:91:90: 4b:cd:4b:aa:38:70:25:dd:c8:fa:e7:5f:56:41:76: 6f:3a:df:25:a8:28:dc:44:6c:7d:36:8f:be:87:68: 7c:6c:be:26:0e:73:50:83:3e:6f:82:4a:e5:9a:43: a1:8f:d0:85:40:a5:7c:68:ab:5e:1a:e6:8e:f2:21: b4:10:2c:ee:4a:37:07:eb:d4:ae:08:6c:79:be:66: 39:04:a8:c5:83:5a:dd:2c:3b:c1:bf:ec:60:e8:92: 4c:19:89:b7:c6:0f:ba:92:15:12:8e:47:e1:e2:8c: 2d:36:bc:af:2f:ec:3f:f8:4d:9e:f5:13:24:7f:49: 59:a2:31:41:e6:6e:73:ec:84:5e:88:e9:39:ee:d1: de:e1:39:58:f6:40:a3:e3:c0:f9:6d:d3:6b:74:85: 57:95:5a:75:e4:7e:f7:45:da:44:7d:bd:d8:1d:e3: 1c:71:e9:6d:28:be:ce:82:8a:b0:1c:15:00:5f:c9: 01:00:31:e8:b3:d9:b6:40:98:17:d2:f8:47:2b:95: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:17:15:9D:D8:CC:E4:48:7D:78:E1:50:FB:79:8F:FB:53:8F:DF X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:68:5c:3e:f5:f2:66:cf:ec:b1:1c:51:6b:a8:2c:4b:2c:34: 20:d5:e1:8b:b9:06:ae:41:bb:86:4c:5f:3c:a0:52:15:4d:7b: 8f:77:7e:f5:fd:cc:cf:ac:81:b3:a7:33:82:3f:8c:a8:26:08: c4:13:b0:fa:e5:a2:25:73:a0:24:4b:98:23:c5:1b:89:15:55: 20:21:ed:2a:51:27:15:8d:01:e0:11:0b:94:f0:c4:cd:d0:dc: db:74:3e:ab:62:7d:0e:16:b9:59:3f:87:39:e3:ba:20:52:4c: 72:5a:ab:02:a3:1b:93:ab:c0:54:7a:6e:2b:9f:69:c3:a9:59: a5:1f:af:83:25:0f:87:eb:2b:ef:6b:1a:e1:c0:e9:5a:87:2c: fe:e7:d5:ab:91:01:44:f4:01:04:6a:cb:02:c9:cc:54:e1:0f: a0:b8:bb:e7:bb:02:36:8c:83:ed:04:7f:a1:dc:e7:e3:b2:a0: f2:ff:67:5e:6b:8a:e4:22:6d:95:54:12:2a:d4:63:2c:16:1f: b2:96:64:47:99:d2:48:1b:4a:59:55:0f:bb:47:5b:f7:7a:3e: 6e:3d:2a:5f:6d:fd:04:4a:ed:94:66:27:8d:05:c9:7b:32:c3: f9:c2:db:30:7e:24:86:c7:68:31:d3:f3:1a:3b:dc:29:b5:88: f8:a6:e0:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjQwNDI1MDExODI2WhcNMjQwNTAyMDExODI2WjAYMRYwFAYD VQQDEw02NjI5YWY2Mi04MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Iii6SmH8TX0vqVBMR0BCMNDXIv8cx4Lez6vv+Mr4qX/uqaGB7OUzRVAnTQ0 2BrgZuncF8bFvAILkZBLzUuqOHAl3cj6519WQXZvOt8lqCjcRGx9No++h2h8bL4m DnNQgz5vgkrlmkOhj9CFQKV8aKteGuaO8iG0ECzuSjcH69SuCGx5vmY5BKjFg1rd LDvBv+xg6JJMGYm3xg+6khUSjkfh4owtNryvL+w/+E2e9RMkf0lZojFB5m5z7IRe iOk57tHe4TlY9kCj48D5bdNrdIVXlVp15H73RdpEfb3YHeMcceltKL7OgoqwHBUA X8kBADHos9m2QJgX0vhHK5VSQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoZFxWd 2MzkSH144VD7eY/7U4/fMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUaFw+9fJmz+yxHFFrqCxLLDQg1eGLuQauQbuGTF88oFIVTXuPd371 /czPrIGzpzOCP4yoJgjEE7D65aIlc6AkS5gjxRuJFVUgIe0qUScVjQHgEQuU8MTN 0NzbdD6rYn0OFrlZP4c547ogUkxyWqsCoxuTq8BUem4rn2nDqVmlH6+DJQ+H6yvv axrhwOlahyz+59WrkQFE9AEEassCycxU4Q+guLvnuwI2jIPtBH+h3OfjsqDy/2de a4rkIm2VVBIq1GMsFh+ylmRHmdJIG0pZVQ+7R1v3ej5uPSpfbf0ESu2UZieNBcl7 MsP5wtswfiSGx2gx0/MaO9wptYj4puA6 -----END CERTIFICATE-----Generated at Thu Apr 25 02:01:30 2024 by rpki-client on console-ams.rpki-client.org