$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft File: voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json) Hash identifier: P62kEUNKJn0JgHXo1jLutjKxCsOpCfTGYSXWeDYmeXQ= Subject key identifier: F8:CC:5F:76:47:5D:89:56:E4:8E:BE:51:B4:9B:DD:E9:F6:AF:77:B0 Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F Certificate issuer: /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft Manifest number: 06DA Signing time: Fri 24 May 2024 15:32:14 +0000 Manifest this update: Fri 24 May 2024 15:32:13 +0000 Manifest next update: Fri 31 May 2024 15:32:13 +0000 Files and hashes: 1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: 8ZGvTJbwC9laA1D1oYk5tBH1x539zacaZji2MesGx0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Validity Not Before: May 24 15:32:13 2024 GMT Not After : May 31 15:32:13 2024 GMT Subject: CN=6650b2fe-cb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:46:5d:02:51:4b:96:75:7d:e2:0b:2a:fa: 32:e3:a0:88:55:cd:c4:a0:cf:24:41:7e:d8:f6:3e: dc:07:c0:89:05:56:29:8c:db:20:4b:b0:58:76:ac: 63:ff:f8:48:23:c2:8e:9e:36:46:9b:f5:13:5a:45: 8d:2e:07:2a:35:d9:70:66:61:65:45:d7:84:06:6e: 74:85:c9:b1:ff:e1:5d:c6:49:54:85:c3:25:4f:27: 56:5d:77:37:83:1a:f4:fb:a0:5b:75:39:0e:83:49: 78:17:e3:9f:0e:e7:0b:80:4b:c1:97:c0:78:a4:09: 43:4d:39:b7:a1:20:6c:7a:bb:7d:ed:ed:3c:d6:e9: 73:9a:f8:a7:35:cd:9a:81:fa:df:f2:8a:79:d4:12: 35:d9:d9:49:dc:69:71:18:c1:c9:1b:ea:be:99:31: 29:4c:7a:a5:a7:90:04:7f:cd:3f:3d:27:57:8c:e9: 30:1a:86:f1:59:23:d8:74:2f:7e:86:21:78:21:1d: 64:20:b4:7d:33:28:21:4e:e2:0a:09:bc:7f:52:31: 4c:a1:52:80:28:cc:3c:9a:f7:22:84:be:2a:ec:65: cb:f2:59:90:90:9e:5a:37:84:ad:e3:84:00:3f:db: cc:53:06:80:e1:96:68:b3:ca:20:55:51:03:0c:89: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:5F:76:47:5D:89:56:E4:8E:BE:51:B4:9B:DD:E9:F6:AF:77:B0 X509v3 Authority Key Identifier: keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:17:a0:da:0e:7d:1b:02:d9:c5:2c:c4:54:e5:07:4e:ce:e8: 33:ef:46:fb:e8:b5:98:e8:2d:0b:70:61:37:51:3c:08:2c:b7: 6c:dd:13:54:5d:79:8d:41:ea:9f:46:8e:4c:f5:0f:75:d4:52: ae:85:2b:4d:97:93:9d:08:b1:5e:97:96:2e:65:86:74:f2:13: 39:1d:0c:12:5b:74:ac:a1:e1:53:18:51:8f:b7:de:0a:a9:66: 1c:22:ff:90:ba:f1:38:5d:29:bb:79:09:e9:6d:b1:91:8a:fd: da:15:76:54:bb:3f:10:93:a1:c3:9a:24:97:af:a7:5e:5c:5d: f4:b1:b7:20:5c:8c:98:3b:63:8d:c8:36:67:e1:13:9b:7f:b9: 67:2d:6d:40:88:fd:62:6f:82:7b:5c:ea:99:f6:0a:18:f8:3f: d9:6a:e4:1d:b3:69:83:72:98:89:44:bc:3a:69:59:62:f6:45: b3:da:28:1c:66:f4:ea:a8:75:1f:38:01:7c:c3:68:7d:d9:66: 72:4e:6c:51:dd:79:0e:cb:c9:52:33:3f:77:66:27:bd:96:3b: 8f:9f:89:b7:36:4d:e7:89:80:b1:48:b8:74:a3:17:dd:4f:45: fd:c4:cf:b6:b5:3b:3f:21:a8:25:b4:90:d6:55:a7:61:c8:01: 81:b9:f9:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEJFODMxMzQ1OTEwQUM4MkMxOEE4ODMxQzJEODUwQUU1 QjM4RTUwMEYwHhcNMjQwNTI0MTUzMjEzWhcNMjQwNTMxMTUzMjEzWjAYMRYwFAYD VQQDEw02NjUwYjJmZS1jYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqBGXQJRS5Z1feILKvoy46CIVc3EoM8kQX7Y9j7cB8CJBVYpjNsgS7BYdqxj //hII8KOnjZGm/UTWkWNLgcqNdlwZmFlRdeEBm50hcmx/+FdxklUhcMlTydWXXc3 gxr0+6BbdTkOg0l4F+OfDucLgEvBl8B4pAlDTTm3oSBsert97e081ulzmvinNc2a gfrf8op51BI12dlJ3GlxGMHJG+q+mTEpTHqlp5AEf80/PSdXjOkwGobxWSPYdC9+ hiF4IR1kILR9MyghTuIKCbx/UjFMoVKAKMw8mvcihL4q7GXL8lmQkJ5aN4St44QA P9vMUwaA4ZZos8ogVVEDDIn29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjMX3ZH XYlW5I6+UbSb3en2r3ewMB8GA1UdIwQYMBaAFL6DE0WRCsgsGKiDHC2FCuWzjlAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9GODlDNEY2ODBE NjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lDd1lxSU1jTFlVSzViT09V QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3ZvTVRSWkVLeUN3WXFJTWNMWVVLNWJPT1VBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9GODlDNEY2ODBENjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lD d1lxSU1jTFlVSzViT09VQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOF6DaDn0bAtnFLMRU5QdOzugz70b76LWY6C0LcGE3UTwILLds3RNU XXmNQeqfRo5M9Q911FKuhStNl5OdCLFel5YuZYZ08hM5HQwSW3SsoeFTGFGPt94K qWYcIv+QuvE4XSm7eQnpbbGRiv3aFXZUuz8Qk6HDmiSXr6deXF30sbcgXIyYO2ON yDZn4RObf7lnLW1AiP1ib4J7XOqZ9goY+D/ZauQds2mDcpiJRLw6aVli9kWz2igc ZvTqqHUfOAF8w2h92WZyTmxR3XkOy8lSMz93Zie9ljuPn4m3Nk3niYCxSLh0oxfd T0X9xM+2tTs/IagltJDWVadhyAGBufmR -----END CERTIFICATE-----Generated at Fri May 24 18:23:59 2024 by rpki-client on console-ams.rpki-client.org