$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft File: 9lv88f3YSSS6iXQmzBvPX6hvnQM.mft (raw, json) Hash identifier: B73qARRH/y679gQUSHy0iM1ZBEKEsWFda+TuoR8Qd38= Subject key identifier: F7:A3:CC:56:E4:59:22:6F:13:C4:B0:44:CC:16:7F:A9:05:74:F1:00 Authority key identifier: F6:5B:FC:F1:FD:D8:49:24:BA:89:74:26:CC:1B:CF:5F:A8:6F:9D:03 Certificate issuer: /CN=A91B0BAB/serialNumber=F65BFCF1FDD84924BA897426CC1BCF5FA86F9D03 Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lv88f3YSSS6iXQmzBvPX6hvnQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft Manifest number: 0F4C Signing time: Thu 02 May 2024 21:18:45 +0000 Manifest this update: Thu 02 May 2024 21:18:44 +0000 Manifest next update: Thu 09 May 2024 21:18:44 +0000 Files and hashes: 1: 9lv88f3YSSS6iXQmzBvPX6hvnQM.crl (hash: r52t+CPfTXfRei1gVXeEHoM67OW3OFOk3347urfEhjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.crl rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lv88f3YSSS6iXQmzBvPX6hvnQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BAB/serialNumber=F65BFCF1FDD84924BA897426CC1BCF5FA86F9D03 Validity Not Before: May 2 21:18:44 2024 GMT Not After : May 9 21:18:44 2024 GMT Subject: CN=66340334-ff18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:4a:10:60:41:dc:6f:5b:12:25:6b:1e:7f: 9e:d0:be:3c:63:5d:96:de:2d:98:75:88:86:54:30: a4:fd:bd:2b:db:50:b7:a0:c7:67:6a:8f:1d:4f:c7: c5:86:b5:5e:39:7c:ad:4e:3f:72:17:1b:ef:c5:b0: 47:88:80:64:a5:7e:f9:03:2b:fc:16:b2:e5:71:3e: 58:4e:ac:9d:b7:93:42:f5:73:4f:c6:99:9c:46:95: d3:12:f2:d7:4d:70:ac:52:cf:2b:7a:24:2c:6d:2f: ea:93:16:84:9d:63:90:e6:e3:6c:27:9e:50:0d:8a: f0:9a:2b:c3:45:8a:9b:c9:d0:c7:98:ec:02:c7:64: 97:58:76:cd:99:9a:c8:fb:5e:97:af:d4:f7:41:e7: 92:d1:05:64:a6:77:67:94:1b:3c:96:dd:18:dd:8c: 71:01:cf:c6:0a:a6:de:68:f8:15:25:b7:28:93:76: d0:8a:f3:84:51:0c:27:64:6f:13:e5:e1:f0:79:e3: 16:f5:d5:24:44:62:c0:0a:6b:8f:30:6f:dc:42:45: 41:b6:f4:2e:c6:fb:a0:0d:5e:68:75:b4:1d:69:18: 8b:c4:14:03:c7:77:6f:5f:4b:89:0d:c2:7a:79:fd: b7:a8:97:8d:a0:8e:6e:5f:24:67:20:95:b6:cb:bf: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A3:CC:56:E4:59:22:6F:13:C4:B0:44:CC:16:7F:A9:05:74:F1:00 X509v3 Authority Key Identifier: keyid:F6:5B:FC:F1:FD:D8:49:24:BA:89:74:26:CC:1B:CF:5F:A8:6F:9D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lv88f3YSSS6iXQmzBvPX6hvnQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3b:4c:ca:e6:2b:28:be:4b:0e:65:3f:ec:78:e1:37:2e:27: 07:7b:3c:76:5f:db:e3:20:b9:93:76:bf:6b:92:f9:48:f8:ae: 70:21:bb:78:85:cc:1b:37:9f:33:6d:e7:a6:84:5b:89:37:27: fc:cc:78:3a:27:d9:2f:9a:4b:11:7d:4c:0c:81:7d:e1:0c:2a: 6d:e5:51:44:67:ea:2b:18:67:4f:4f:a0:4c:70:f6:7b:b2:d7: 78:33:6d:10:63:0c:96:13:af:3b:89:f0:a6:01:bc:1b:dd:f9: 63:e6:65:35:fe:2a:8e:b4:a0:a0:ca:3a:44:e8:a8:6c:6c:b6: 24:90:50:fe:18:cf:11:24:04:d5:32:ee:ba:6d:0d:30:44:c3: 0c:86:cd:cd:92:58:ec:c0:da:13:b9:d2:38:28:b1:11:0a:51: 20:b4:81:07:b9:b1:44:09:a5:ef:79:2d:03:d2:ab:91:d8:a2: 31:09:64:e9:23:17:16:92:3d:e0:8d:fd:ce:1b:b8:df:cf:9e: 48:dc:82:90:12:4d:68:9f:b5:8d:13:f7:9b:a0:51:f5:35:b5: 3e:20:42:44:f2:f9:5f:bc:e5:6e:bf:83:03:69:ed:75:cf:2d: 89:68:15:dd:29:61:c6:15:16:00:71:6b:fa:da:2a:7b:b4:33: 41:7b:44:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQUIxMTAvBgNVBAUTKEY2NUJGQ0YxRkREODQ5MjRCQTg5NzQyNkNDMUJDRjVG QTg2RjlEMDMwHhcNMjQwNTAyMjExODQ0WhcNMjQwNTA5MjExODQ0WjAYMRYwFAYD VQQDEw02NjM0MDMzNC1mZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFRKEGBB3G9bEiVrHn+e0L48Y12W3i2YdYiGVDCk/b0r21C3oMdnao8dT8fF hrVeOXytTj9yFxvvxbBHiIBkpX75Ayv8FrLlcT5YTqydt5NC9XNPxpmcRpXTEvLX TXCsUs8reiQsbS/qkxaEnWOQ5uNsJ55QDYrwmivDRYqbydDHmOwCx2SXWHbNmZrI +16Xr9T3QeeS0QVkpndnlBs8lt0Y3YxxAc/GCqbeaPgVJbcok3bQivOEUQwnZG8T 5eHweeMW9dUkRGLACmuPMG/cQkVBtvQuxvugDV5odbQdaRiLxBQDx3dvX0uJDcJ6 ef23qJeNoI5uXyRnIJW2y7+XywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPejzFbk WSJvE8SwRMwWf6kFdPEAMB8GA1UdIwQYMBaAFPZb/PH92Ekkuol0Jswbz1+ob50D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBQi82MDJDNjY1NDdC MTUxMUVBQTVBNEE4NjlDNEY5QUUwMi85bHY4OGYzWVNTUzZpWFFtekJ2UFg2aHZu UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlsdjg4ZjNZU1NTNmlYUW16QnZQWDZodm5RTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBQi82MDJDNjY1NDdCMTUxMUVBQTVBNEE4NjlDNEY5QUUwMi85bHY4OGYzWVNT UzZpWFFtekJ2UFg2aHZuUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlO0zK5isovksOZT/seOE3LicHezx2X9vjILmTdr9rkvlI+K5wIbt4 hcwbN58zbeemhFuJNyf8zHg6J9kvmksRfUwMgX3hDCpt5VFEZ+orGGdPT6BMcPZ7 std4M20QYwyWE687ifCmAbwb3flj5mU1/iqOtKCgyjpE6KhsbLYkkFD+GM8RJATV Mu66bQ0wRMMMhs3NkljswNoTudI4KLERClEgtIEHubFECaXveS0D0quR2KIxCWTp IxcWkj3gjf3OG7jfz55I3IKQEk1on7WNE/eboFH1NbU+IEJE8vlfvOVuv4MDae11 zy2JaBXdKWHGFRYAcWv62ip7tDNBe0T2 -----END CERTIFICATE-----Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org