$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: kGjplPkxS0BrJqCZdNipJi9R9lH21FqoZlhzPbPSTUQ= Subject key identifier: E1:3C:04:83:42:F5:B4:94:34:25:7F:82:9A:77:49:62:A0:17:7A:52 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 33C9 Signing time: Sun 02 Jun 2024 15:35:14 +0000 Manifest this update: Sun 02 Jun 2024 15:35:13 +0000 Manifest next update: Sun 09 Jun 2024 15:35:13 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: ziCSF2adfILCnHfGEGe3ZwNSrzvqn2hXg8l5EYtdekw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 15:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Jun 2 15:35:13 2024 GMT Not After : Jun 9 15:35:13 2024 GMT Subject: CN=665c9131-9b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:56:3d:cb:3f:74:5a:d1:c1:e9:6e:b6:90:d2: 92:ac:e2:54:e0:27:66:e8:49:20:b6:de:0f:d9:1d: a5:f0:5a:fd:81:f7:e8:56:e7:8b:b4:67:87:a0:60: a7:52:cf:cb:9d:c4:be:9f:24:e9:38:a4:a1:2d:7b: fd:a7:2f:d9:9c:b2:60:ec:d8:4f:0e:0e:3c:32:26: 65:4c:ba:e1:7d:9f:93:c1:45:d7:ad:05:69:5f:49: 25:e2:0f:e7:7d:39:b1:34:66:9e:ec:39:db:08:67: e8:3a:7e:36:42:48:3f:71:d6:e2:35:c1:0e:ab:fd: 64:e5:c2:cc:ab:7e:61:3b:0e:d5:06:d5:b5:a7:af: ae:52:50:fb:c8:1c:bb:16:76:40:26:fc:e8:a0:5e: 70:d3:4f:15:1e:54:31:43:f5:04:5c:f0:59:14:c1: 01:9e:78:1e:f9:01:01:dc:6e:fb:c3:1f:bf:85:5e: 76:91:7b:5e:ef:eb:91:c1:d1:b0:36:af:8b:7a:98: e1:bf:69:7c:6f:01:db:f7:d9:51:31:d2:c1:3f:8a: 30:01:db:79:b9:68:8a:82:1e:7c:4e:82:76:62:a7: df:75:45:ce:fc:cc:7a:da:47:51:ee:91:de:f2:ca: a4:3d:96:f6:c4:ed:e3:4a:aa:69:23:04:13:54:5e: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:04:83:42:F5:B4:94:34:25:7F:82:9A:77:49:62:A0:17:7A:52 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e0:9e:ce:f9:1d:3b:f5:28:da:a8:ad:c5:a3:0d:b6:58:4b: ae:5f:65:ca:3d:9d:ff:d2:50:c9:da:83:53:dc:25:08:a9:a5: 5d:09:34:07:54:d5:8d:e9:8b:f5:4c:70:69:34:aa:fa:8d:a3: a1:98:24:a1:c8:4c:e8:09:3a:b8:62:77:32:7f:ef:ab:3a:62: b8:1c:ad:19:24:f8:a9:af:63:0d:14:d7:2b:20:7a:6f:12:ae: 9d:53:cf:71:0e:3e:ad:9e:c3:fa:ac:09:b2:ae:77:81:1c:13: 9b:28:c6:7d:94:05:8b:bb:ac:80:0d:aa:66:77:ad:3e:20:f1: 23:a3:65:bc:56:94:5b:b7:39:99:21:d5:2c:dd:f3:ab:62:9f: 79:22:6d:b7:8d:fa:31:a4:19:db:c8:2f:14:10:56:a3:20:c6: ec:c3:2f:c8:c6:ea:f4:a0:91:d6:a7:5e:4d:a5:c0:d3:e9:f9: 36:34:4e:5a:7a:40:a9:df:a4:76:ec:dd:1d:ea:02:8a:3b:4c: 26:c9:22:03:b5:5b:ef:ca:10:5d:06:8a:d1:e2:76:5f:03:10: f6:74:d3:45:17:ea:f0:90:98:dd:6d:c3:6f:21:67:aa:44:ae: 78:9e:cf:47:6c:e8:0e:76:fb:5e:39:df:0d:ae:40:fb:85:0a: f0:2b:3f:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjQwNjAyMTUzNTEzWhcNMjQwNjA5MTUzNTEzWjAYMRYwFAYD VQQDEw02NjVjOTEzMS05YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+lY9yz90WtHB6W62kNKSrOJU4Cdm6Ekgtt4P2R2l8Fr9gffoVueLtGeHoGCn Us/LncS+nyTpOKShLXv9py/ZnLJg7NhPDg48MiZlTLrhfZ+TwUXXrQVpX0kl4g/n fTmxNGae7DnbCGfoOn42Qkg/cdbiNcEOq/1k5cLMq35hOw7VBtW1p6+uUlD7yBy7 FnZAJvzooF5w008VHlQxQ/UEXPBZFMEBnnge+QEB3G77wx+/hV52kXte7+uRwdGw Nq+Lepjhv2l8bwHb99lRMdLBP4owAdt5uWiKgh58ToJ2YqffdUXO/Mx62kdR7pHe 8sqkPZb2xO3jSqppIwQTVF7fQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE8BINC 9bSUNCV/gpp3SWKgF3pSMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF4J7O+R079SjaqK3Fow22WEuuX2XKPZ3/0lDJ2oNT3CUIqaVdCTQH VNWN6Yv1THBpNKr6jaOhmCShyEzoCTq4Yncyf++rOmK4HK0ZJPipr2MNFNcrIHpv Eq6dU89xDj6tnsP6rAmyrneBHBObKMZ9lAWLu6yADapmd60+IPEjo2W8VpRbtzmZ IdUs3fOrYp95Im23jfoxpBnbyC8UEFajIMbswy/Ixur0oJHWp15NpcDT6fk2NE5a ekCp36R27N0d6gKKO0wmySIDtVvvyhBdBorR4nZfAxD2dNNFF+rwkJjdbcNvIWeq RK54ns9HbOgOdvteOd8NrkD7hQrwKz98 -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:45 2024 by rpki-client on console-fra.rpki-client.org