$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: sjcz/P4LbxMdhRapbr8UH9QW6L3MHE/l9jAoMaWJkKQ= Subject key identifier: FE:D8:04:43:98:D5:02:FF:10:20:9A:96:6E:7E:B7:29:BF:84:79:19 Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 33C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 33C8 Signing time: Thu 02 May 2024 15:32:03 +0000 Manifest this update: Thu 02 May 2024 15:32:03 +0000 Manifest next update: Thu 09 May 2024 15:32:03 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: I5O3R1nXrwIi/dDkSyaDDdTL+NCE1lWbVUKpegB9sAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13256 (0x33c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: May 2 15:32:03 2024 GMT Not After : May 9 15:32:03 2024 GMT Subject: CN=6633b1f3-89ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:3a:e3:26:6c:22:ed:79:1c:8c:23:64:2b: 8d:09:a3:fa:10:9c:57:49:8c:f6:f3:52:2b:22:20: 6b:bb:35:0b:29:d1:35:76:22:50:19:0e:8e:af:ff: cd:4c:95:dd:db:de:bb:59:3a:e4:4d:71:5a:f6:2c: 63:79:06:fb:46:38:56:2a:54:1d:7d:13:04:87:76: ab:f5:a5:01:77:a5:df:3f:50:0e:df:b0:79:b9:d9: 35:19:8e:a0:0f:c3:22:ae:01:79:88:06:65:75:42: 6c:00:15:35:71:ad:3a:3e:cf:93:d0:6a:65:c7:3c: 45:74:2b:9a:a7:13:81:b6:f0:ce:b4:d1:3d:1d:5b: 9e:c8:1b:68:77:39:3f:c7:73:b0:5b:a3:00:7f:8c: 92:90:c6:68:56:0f:bd:d2:9d:08:bc:bd:f3:cb:ae: f4:95:be:b5:d1:f7:5c:ee:29:6d:7b:f7:b3:21:2a: 31:73:9b:ad:a9:3a:fa:29:36:7b:01:ee:a5:90:08: 5d:f7:bf:ef:51:28:e6:62:92:58:01:58:1c:32:b1: 0d:d2:41:b6:d9:b4:b7:ab:b6:24:44:0c:87:42:cd: fd:8e:5f:b2:93:f7:a7:12:47:66:6a:00:93:ef:52: 1a:8a:6f:a9:69:e0:a0:93:fe:fc:e8:ad:3f:bb:45: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:04:43:98:D5:02:FF:10:20:9A:96:6E:7E:B7:29:BF:84:79:19 X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b7:aa:d1:44:be:29:8e:07:0b:95:e9:f1:8f:6c:2b:98:35: b4:89:d3:01:93:89:85:87:30:b3:a1:5b:28:df:0f:ab:fd:96: b8:17:24:15:4e:bf:70:89:c8:b5:a9:af:2a:37:23:19:df:61: 58:02:50:ba:ba:db:25:9a:db:56:35:09:de:6f:65:15:c7:60: c2:e0:20:77:6d:ec:4c:81:04:3c:3a:8d:44:31:fb:09:24:a0: e2:16:a6:3f:41:45:d9:e9:f7:a1:17:0d:9c:01:92:4a:ea:6c: cb:96:ee:d3:91:37:7c:a1:e4:43:74:9c:3b:66:92:7a:b4:28: 50:b7:2a:83:a2:1d:41:8f:95:8f:fc:2f:d1:e6:c1:a6:ab:60: 79:4f:cc:c7:7e:1d:8c:c0:f0:68:06:26:1c:20:86:c9:cd:40: fa:c1:f9:81:5c:bf:c3:a5:d9:85:8b:30:0a:bd:63:26:a3:87: 5e:9c:31:93:4b:64:33:ff:2b:68:ff:ec:59:e5:cc:3c:45:00: a1:04:9a:28:91:6e:e7:76:08:84:96:49:6c:c2:fa:1c:c1:c0: 3a:13:69:71:98:6d:f5:6c:85:ca:2e:ab:17:cb:17:d4:1a:43: a5:a7:b1:46:4b:f3:e8:ca:30:2b:a6:0b:1c:e3:4f:80:b9:d0: ca:b4:5f:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjQwNTAyMTUzMjAzWhcNMjQwNTA5MTUzMjAzWjAYMRYwFAYD VQQDEw02NjMzYjFmMy04OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveQ64yZsIu15HIwjZCuNCaP6EJxXSYz281IrIiBruzULKdE1diJQGQ6Or//N TJXd2967WTrkTXFa9ixjeQb7RjhWKlQdfRMEh3ar9aUBd6XfP1AO37B5udk1GY6g D8MirgF5iAZldUJsABU1ca06Ps+T0GplxzxFdCuapxOBtvDOtNE9HVueyBtodzk/ x3OwW6MAf4ySkMZoVg+90p0IvL3zy670lb610fdc7ilte/ezISoxc5utqTr6KTZ7 Ae6lkAhd97/vUSjmYpJYAVgcMrEN0kG22bS3q7YkRAyHQs39jl+yk/enEkdmagCT 71Iaim+paeCgk/786K0/u0W2/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7YBEOY 1QL/ECCalm5+tym/hHkZMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6t6rRRL4pjgcLlenxj2wrmDW0idMBk4mFhzCzoVso3w+r/Za4FyQV Tr9wici1qa8qNyMZ32FYAlC6utslmttWNQneb2UVx2DC4CB3bexMgQQ8Oo1EMfsJ JKDiFqY/QUXZ6fehFw2cAZJK6mzLlu7TkTd8oeRDdJw7ZpJ6tChQtyqDoh1Bj5WP /C/R5sGmq2B5T8zHfh2MwPBoBiYcIIbJzUD6wfmBXL/DpdmFizAKvWMmo4denDGT S2Qz/yto/+xZ5cw8RQChBJookW7ndgiElklswvocwcA6E2lxmG31bIXKLqsXyxfU GkOlp7FGS/PoyjArpgsc40+AudDKtF8G -----END CERTIFICATE-----Generated at Thu May 2 17:43:49 2024 by rpki-client on console-fra.rpki-client.org