$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json) Hash identifier: Y/aIA4EB/Uy8aqK/DAmjNkPZ2hTwg5JOy7MuOF1uSSA= Subject key identifier: 39:9A:9B:30:8D:B8:4C:12:3D:D9:36:3C:64:3C:EA:5B:26:D2:E6:C3 Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Certificate serial: 16A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft Manifest number: 5027 Signing time: Sat 04 May 2024 15:17:37 +0000 Manifest this update: Sat 04 May 2024 15:17:37 +0000 Manifest next update: Sat 11 May 2024 15:17:37 +0000 Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: ohbrJlSl3MN5A48QT3HczfzLFcczQhI37NIB1PkqCww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5795 (0x16a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61 Validity Not Before: May 4 15:17:37 2024 GMT Not After : May 11 15:17:37 2024 GMT Subject: CN=66365191-81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:0d:88:ee:d3:19:b9:24:66:71:f6:0a:29: 50:21:7d:a1:0c:bd:fd:60:ef:e3:f2:0e:fc:ad:16: 4d:5c:5e:d0:69:b2:62:56:04:17:b2:ba:16:4d:45: 67:06:1c:0b:de:7a:eb:a9:4b:7b:49:1f:79:a2:4f: 95:75:db:02:f8:f5:0f:50:58:41:d7:1f:68:74:da: 47:93:ef:1d:b0:bd:08:66:d9:87:3d:cb:85:d7:e8: 20:0b:03:4b:21:76:3e:a6:7b:b1:d9:a7:95:bd:ec: 9c:e0:41:1d:59:6c:dd:2e:e2:49:0e:a1:da:12:0a: 35:22:ba:90:b5:e8:7e:eb:c2:ca:fe:3e:e6:bd:04: 8a:62:70:43:f7:bd:bd:73:18:5b:4d:d0:3a:46:a7: 90:e1:dd:46:79:fb:01:84:ba:72:0e:88:66:ee:17: ca:77:af:61:c1:86:37:6a:34:b2:7d:58:14:92:92: 9f:cd:43:80:1c:69:b2:6d:29:4c:91:54:59:2e:6d: cf:b1:88:72:2d:f4:d4:e0:3d:00:e5:8f:d7:6a:7e: bf:70:e8:d1:70:22:a0:bc:9f:0f:a9:4d:16:f6:45: 3c:73:7e:5e:f7:23:c3:e0:e9:7b:38:ee:8f:2b:a8: d5:be:f7:85:42:a3:c7:e6:e9:93:f7:22:b0:4d:59: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:9B:30:8D:B8:4C:12:3D:D9:36:3C:64:3C:EA:5B:26:D2:E6:C3 X509v3 Authority Key Identifier: keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:82:fe:18:c3:58:09:96:dc:1e:a5:3d:72:89:85:5d:08:43: d4:7d:03:56:c8:3f:7d:60:3f:5b:2d:06:0e:64:6f:f6:8e:0f: 16:cd:e0:2a:cf:0e:09:0a:5c:ea:9b:66:6f:43:0d:6d:b7:bb: e1:a5:dc:1d:3a:13:50:38:2e:df:f1:cf:68:2d:76:f0:45:3c: da:92:63:01:83:13:a5:c5:10:3a:dc:62:83:bf:15:44:9a:cf: da:5c:99:1a:2b:eb:e6:31:9b:d0:d2:c5:22:f2:d4:aa:fa:d7: 24:35:73:fd:a5:39:b3:c4:7d:ce:e4:27:44:18:88:aa:7e:70: 34:58:97:f2:4f:43:16:db:85:d4:36:42:f9:8a:96:3c:09:8c: e9:f5:76:5b:93:e8:f1:6e:71:4c:84:85:79:fd:4e:57:3c:81: c0:72:7b:19:9a:e4:e9:64:1b:e1:74:61:d4:ae:b4:f3:e7:98: f4:e2:d3:05:f7:09:02:44:7a:94:d5:a9:fa:4c:59:0f:63:af: 8d:69:45:6e:62:e8:d8:36:1d:3f:41:19:81:df:fc:6f:b8:85: a1:fd:5d:2d:f3:73:e4:8a:08:4f:31:3b:15:e4:a4:2c:3e:17: de:c7:f9:87:47:b1:ad:39:bd:37:bf:90:49:2f:52:e5:5e:1b: 19:7f:95:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF RDI0MkVGNjEwHhcNMjQwNTA0MTUxNzM3WhcNMjQwNTExMTUxNzM3WjAYMRYwFAYD VQQDEw02NjM2NTE5MS04MWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18cNiO7TGbkkZnH2CilQIX2hDL39YO/j8g78rRZNXF7QabJiVgQXsroWTUVn BhwL3nrrqUt7SR95ok+VddsC+PUPUFhB1x9odNpHk+8dsL0IZtmHPcuF1+ggCwNL IXY+pnux2aeVveyc4EEdWWzdLuJJDqHaEgo1IrqQteh+68LK/j7mvQSKYnBD9729 cxhbTdA6RqeQ4d1GefsBhLpyDohm7hfKd69hwYY3ajSyfVgUkpKfzUOAHGmybSlM kVRZLm3PsYhyLfTU4D0A5Y/Xan6/cOjRcCKgvJ8PqU0W9kU8c35e9yPD4Ol7OO6P K6jVvveFQqPH5umT9yKwTVkeRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmamzCN uEwSPdk2PGQ86lsm0ubDMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5 YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAegv4Yw1gJltwepT1yiYVdCEPUfQNWyD99YD9bLQYOZG/2jg8WzeAq zw4JClzqm2ZvQw1tt7vhpdwdOhNQOC7f8c9oLXbwRTzakmMBgxOlxRA63GKDvxVE ms/aXJkaK+vmMZvQ0sUi8tSq+tckNXP9pTmzxH3O5CdEGIiqfnA0WJfyT0MW24XU NkL5ipY8CYzp9XZbk+jxbnFMhIV5/U5XPIHAcnsZmuTpZBvhdGHUrrTz55j04tMF 9wkCRHqU1an6TFkPY6+NaUVuYujYNh0/QRmB3/xvuIWh/V0t83PkighPMTsV5KQs Phfex/mHR7GtOb03v5BJL1LlXhsZf5VK -----END CERTIFICATE-----Generated at Sat May 4 15:45:49 2024 by rpki-client on console-fra.rpki-client.org