$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft File: NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft (raw, json) Hash identifier: d3hej68pr9eoeF7FTqeYYi5gw1fydQ3baxLdnHb9kmo= Subject key identifier: 0C:DF:88:BF:8F:D5:E6:0F:26:0C:07:EA:5B:8A:1D:2D:D8:97:93:FD Authority key identifier: 36:26:11:51:78:44:9D:79:9A:40:D5:89:E3:ED:6A:1C:24:19:E9:25 Certificate issuer: /CN=A91B8274/serialNumber=3626115178449D799A40D589E3ED6A1C2419E925 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft Manifest number: 91 Signing time: Sun 19 May 2024 06:58:13 +0000 Manifest this update: Sun 19 May 2024 06:58:13 +0000 Manifest next update: Sun 26 May 2024 06:58:13 +0000 Files and hashes: 1: NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.crl (hash: 7wxEjPhfo/DDUTBoe0P/5/xhalMJkcgDCFlgp6X53Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.crl rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8274/serialNumber=3626115178449D799A40D589E3ED6A1C2419E925 Validity Not Before: May 19 06:58:13 2024 GMT Not After : May 26 06:58:13 2024 GMT Subject: CN=6649a305-aebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:40:51:da:44:7b:e7:11:e8:97:82:82:ed: d8:2f:04:b7:bc:f9:7f:aa:bb:c1:00:f2:88:35:07: 6b:2e:e7:f6:98:64:84:31:a9:19:86:ba:4a:0e:36: e6:bc:e5:29:35:8c:e1:61:e1:21:a0:0d:45:9e:bf: 2c:39:c6:d5:c3:2f:6d:c8:52:12:8c:62:72:1b:e2: 10:25:99:8a:33:d2:92:ba:e3:19:dd:b3:50:7f:09: 85:ba:30:f5:25:2b:60:d6:79:73:95:fd:a6:e0:09: 96:fb:07:7b:34:ca:5c:b1:3a:06:56:9c:72:4a:42: 32:e6:e9:a5:06:9a:fb:26:3f:5d:03:ed:c9:9c:7f: b8:bd:12:c2:f5:a2:b9:fa:2c:9c:46:38:92:f0:86: 98:c8:f3:e8:5d:82:e4:ef:9d:71:da:3b:c9:47:03: 58:85:44:9d:0b:5e:d1:5a:b5:e4:ac:2f:3c:b1:17: 35:c4:63:fe:a6:50:ff:8c:fc:6a:8c:7c:35:ef:f3: b8:df:5d:8f:c9:34:df:1d:14:3d:80:3f:cb:8d:eb: 66:8b:61:9d:0f:9f:f2:77:e4:ef:ea:29:1d:25:78: f7:c4:a5:25:1e:4b:0a:01:43:fe:64:38:6d:3c:e6: fa:b1:0e:27:7d:e5:5f:21:c2:3b:34:15:f7:59:0b: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DF:88:BF:8F:D5:E6:0F:26:0C:07:EA:5B:8A:1D:2D:D8:97:93:FD X509v3 Authority Key Identifier: keyid:36:26:11:51:78:44:9D:79:9A:40:D5:89:E3:ED:6A:1C:24:19:E9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8274/1559789236AB11EE9C890A6FC4F9AE02/NiYRUXhEnXmaQNWJ4-1qHCQZ6SU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:af:98:a3:b4:23:1d:9c:2e:d4:46:32:b0:4c:e2:61:9d:6d: 1f:17:f3:01:ce:a8:8c:5a:22:f0:44:2b:ca:90:96:e6:71:c7: bc:54:10:66:f7:a0:a4:5f:79:cc:92:89:2d:46:a1:7b:6e:d8: 79:d9:7b:73:a7:f9:54:37:29:2c:d0:55:67:d8:3a:ff:f4:55: b8:53:2e:1d:51:97:ce:53:6a:f5:db:07:00:e6:eb:ac:a9:e5: 6e:45:5f:58:37:c4:99:17:73:5b:1e:31:17:61:b0:3f:d4:93: 2b:be:12:2c:84:a9:8a:af:80:c5:23:2a:9a:2a:4d:06:fc:18: 20:ff:5d:68:96:ed:ae:fc:98:97:b1:32:a3:5f:05:55:dc:cd: 17:ac:c0:02:05:59:08:e0:03:ed:99:4e:23:72:41:aa:dd:23: 9d:94:54:18:1c:30:d9:b0:8c:c2:8b:d8:01:a8:62:78:0c:8a: 08:14:bf:ad:3b:fb:4f:b6:f5:57:95:c1:d5:31:1a:f4:49:99: d1:fb:9a:9a:57:c5:7c:eb:84:6a:d5:50:a8:f3:10:7f:d1:20: 77:af:1f:a6:ff:33:7e:e3:94:ba:06:53:5e:9e:2c:d2:54:f9: 18:6e:23:0a:b8:1c:a3:71:1d:e2:81:0e:c5:7a:1b:e6:44:66: 4b:fd:00:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNzQxMTAvBgNVBAUTKDM2MjYxMTUxNzg0NDlENzk5QTQwRDU4OUUzRUQ2QTFD MjQxOUU5MjUwHhcNMjQwNTE5MDY1ODEzWhcNMjQwNTI2MDY1ODEzWjAYMRYwFAYD VQQDEw02NjQ5YTMwNS1hZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhdAUdpEe+cR6JeCgu3YLwS3vPl/qrvBAPKINQdrLuf2mGSEMakZhrpKDjbm vOUpNYzhYeEhoA1Fnr8sOcbVwy9tyFISjGJyG+IQJZmKM9KSuuMZ3bNQfwmFujD1 JStg1nlzlf2m4AmW+wd7NMpcsToGVpxySkIy5umlBpr7Jj9dA+3JnH+4vRLC9aK5 +iycRjiS8IaYyPPoXYLk751x2jvJRwNYhUSdC17RWrXkrC88sRc1xGP+plD/jPxq jHw17/O4312PyTTfHRQ9gD/Ljetmi2GdD5/yd+Tv6ikdJXj3xKUlHksKAUP+ZDht POb6sQ4nfeVfIcI7NBX3WQtGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzfiL+P 1eYPJgwH6luKHS3Yl5P9MB8GA1UdIwQYMBaAFDYmEVF4RJ15mkDViePtahwkGekl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI3NC8xNTU5Nzg5MjM2 QUIxMUVFOUM4OTBBNkZDNEY5QUUwMi9OaVlSVVhoRW5YbWFRTldKNC0xcUhDUVo2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05pWVJVWGhFblhtYVFOV0o0LTFxSENRWjZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI3NC8xNTU5Nzg5MjM2QUIxMUVFOUM4OTBBNkZDNEY5QUUwMi9OaVlSVVhoRW5Y bWFRTldKNC0xcUhDUVo2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzr5ijtCMdnC7URjKwTOJhnW0fF/MBzqiMWiLwRCvKkJbmcce8VBBm 96CkX3nMkoktRqF7bth52Xtzp/lUNyks0FVn2Dr/9FW4Uy4dUZfOU2r12wcA5uus qeVuRV9YN8SZF3NbHjEXYbA/1JMrvhIshKmKr4DFIyqaKk0G/Bgg/11olu2u/JiX sTKjXwVV3M0XrMACBVkI4APtmU4jckGq3SOdlFQYHDDZsIzCi9gBqGJ4DIoIFL+t O/tPtvVXlcHVMRr0SZnR+5qaV8V864Rq1VCo8xB/0SB3rx+m/zN+45S6BlNenizS VPkYbiMKuByjcR3igQ7FehvmRGZL/QA+ -----END CERTIFICATE-----Generated at Sun May 19 07:40:44 2024 by rpki-client on console-fra.rpki-client.org