$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: Ys2l59lhT+6wUyyDtducMyiQXk5xm7NN2Fe6xQQ/lJ0= Subject key identifier: 45:AC:7E:27:1F:E2:7D:EA:47:99:6B:A2:0A:2D:77:5C:55:DB:3F:A0 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: 14 Signing time: Mon 27 May 2024 03:48:09 +0000 Manifest this update: Mon 27 May 2024 03:48:09 +0000 Manifest next update: Mon 03 Jun 2024 03:48:09 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: IWbRhh+DB5tgqx4TwPyMPxNNCF06MU7k/N8nV2gKGdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: May 27 03:48:09 2024 GMT Not After : Jun 3 03:48:09 2024 GMT Subject: CN=66540279-5286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:8d:43:ad:a3:cf:9a:29:6f:33:13:9b:47: 95:f7:e0:57:ce:3f:ae:58:a1:d0:87:2e:90:e9:74: 23:a7:b2:3e:e4:2f:38:6d:d8:a8:b9:0b:80:1a:a9: 34:2a:f9:e8:2a:f0:31:e0:84:69:88:ac:07:64:d6: 6f:04:93:02:3b:5e:40:d8:4c:ea:1b:6b:21:dc:8e: 71:1b:13:e6:eb:e2:45:eb:04:f2:84:67:c1:a1:9e: c2:fc:d6:b0:a6:d7:11:d1:4a:a6:f1:57:80:57:79: 1a:8f:e6:65:8e:43:56:dc:a8:60:6d:86:86:f1:1b: 76:64:72:07:03:0a:e1:78:01:c2:e9:0b:ed:84:50: c5:48:84:e4:12:05:e3:25:e7:e8:8e:8d:4d:de:cd: b7:60:d1:ea:50:55:ae:7e:6e:e8:16:4f:50:f9:0f: d8:3c:6a:4a:c6:49:ee:6d:07:f7:99:ab:27:20:3a: 65:2b:59:f9:95:f8:98:77:cd:8b:1d:ee:55:d5:99: a1:01:06:58:04:a5:ca:42:14:3a:50:f1:e1:ff:91: 5a:df:13:a3:5b:93:d9:a3:8e:5b:1d:6c:23:ec:b2: e5:93:3e:f9:7e:4b:e7:4e:92:ac:a1:6d:a4:2b:0b: a6:3b:54:b1:75:f1:e1:9f:ab:aa:43:ff:f5:38:15: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:7E:27:1F:E2:7D:EA:47:99:6B:A2:0A:2D:77:5C:55:DB:3F:A0 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:be:0b:18:2b:67:07:74:31:11:89:c5:43:18:cd:f8:73:f2: 2e:a3:6a:9f:6e:0c:0a:d7:74:a2:31:6d:c6:77:f9:3d:f3:09: f4:9d:44:e2:10:58:77:5e:f9:9b:b1:0c:a3:26:ed:40:90:35: 96:c2:9d:7b:3e:ed:54:69:f7:b0:e1:c3:7d:d2:96:87:8b:34: 63:43:20:9d:b5:2b:c4:87:ec:2b:cf:e1:70:40:36:2d:ea:bf: 3d:1d:4c:02:b5:f7:1a:1b:71:ac:fc:db:8e:03:f1:72:52:6c: bb:85:d6:6b:14:c3:90:d2:73:b3:1e:cd:1a:13:80:12:6d:8d: 5b:96:bb:88:56:eb:62:df:98:17:9f:2e:68:59:e5:7f:5e:a1: a6:17:22:da:5b:63:bc:be:03:ad:a0:6d:b2:a4:e5:53:27:d6: 07:d8:51:00:04:d7:bd:af:60:3c:ee:c1:5c:1d:5b:21:8b:55: cc:bb:c2:c3:77:c3:db:ea:5b:f7:9d:07:1b:12:e4:2f:f9:0d: 46:1d:3b:3f:77:3b:64:fc:d6:75:07:7a:a2:dd:36:9d:91:e7: c2:55:6e:c1:de:e6:21:c9:f1:d5:3f:c1:64:e0:c6:97:55:f7: 8d:c8:cd:3f:f0:ed:a4:26:bb:b3:8c:c3:35:2b:bb:09:ed:f2: 20:75:3a:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzA0NjExMC8GA1UEBRMoMUVGRTgyOUYxNjAwNzhDMDZDOUExNTY5NjU0MjU3OTY4 NzQ1MEI3NDAeFw0yNDA1MjcwMzQ4MDlaFw0yNDA2MDMwMzQ4MDlaMBgxFjAUBgNV BAMTDTY2NTQwMjc5LTUyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz0o1DraPPmilvMxObR5X34FfOP65YodCHLpDpdCOnsj7kLzht2Ki5C4AaqTQq +egq8DHghGmIrAdk1m8EkwI7XkDYTOobayHcjnEbE+br4kXrBPKEZ8GhnsL81rCm 1xHRSqbxV4BXeRqP5mWOQ1bcqGBthobxG3ZkcgcDCuF4AcLpC+2EUMVIhOQSBeMl 5+iOjU3ezbdg0epQVa5+bugWT1D5D9g8akrGSe5tB/eZqycgOmUrWfmV+Jh3zYsd 7lXVmaEBBlgEpcpCFDpQ8eH/kVrfE6Nbk9mjjlsdbCPssuWTPvl+S+dOkqyhbaQr C6Y7VLF18eGfq6pD//U4FbXxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURax+Jx/i fepHmWuiCi13XFXbP6AwHwYDVR0jBBgwFoAUHv6CnxYAeMBsmhVpZUJXlodFC3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MDQ2L0EyMjAwM0QyRkRG QjExRUVBOTEwRDc4N0M0RjlBRTAyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHY2Q254WUFlTUJzbWhWcFpVSlhsb2RGQzNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MDQ2L0EyMjAwM0QyRkRGQjExRUVBOTEwRDc4N0M0RjlBRTAyL0h2NkNueFlBZU1C c21oVnBaVUpYbG9kRkMzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHK+CxgrZwd0MRGJxUMYzfhz8i6jap9uDArXdKIxbcZ3+T3zCfSdROIQ WHde+ZuxDKMm7UCQNZbCnXs+7VRp97Dhw33SloeLNGNDIJ21K8SH7CvP4XBANi3q vz0dTAK19xobcaz8244D8XJSbLuF1msUw5DSc7MezRoTgBJtjVuWu4hW62LfmBef LmhZ5X9eoaYXItpbY7y+A62gbbKk5VMn1gfYUQAE172vYDzuwVwdWyGLVcy7wsN3 w9vqW/edBxsS5C/5DUYdOz93O2T81nUHeqLdNp2R58JVbsHe5iHJ8dU/wWTgxpdV 943IzT/w7aQmu7OMwzUruwnt8iB1OjY= -----END CERTIFICATE-----Generated at Mon May 27 04:53:42 2024 by rpki-client on console-fra.rpki-client.org