$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: CYegWmGIlsc9ewjazbjFV164VFmhwnvxdTvq/4ou8gY= Subject key identifier: 27:9C:1F:45:1C:5D:A2:40:7F:B9:D1:A0:7C:ED:06:59:04:CF:11:C0 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 33B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 33B7 Signing time: Tue 30 Apr 2024 15:20:47 +0000 Manifest this update: Tue 30 Apr 2024 15:20:46 +0000 Manifest next update: Tue 07 May 2024 15:20:46 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: vBMaAshLuZlfRdJfb4G0YeP0xsDwQxrCLQtTFSRxUuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13239 (0x33b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Apr 30 15:20:46 2024 GMT Not After : May 7 15:20:46 2024 GMT Subject: CN=66310c4e-06b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:4d:d9:41:9c:2d:39:01:89:1c:8f:27:53: a2:04:53:b6:7c:58:58:3e:1b:af:2d:40:e3:22:23: 62:0f:be:bc:92:1c:76:de:84:be:13:ec:30:30:15: d8:04:d1:6d:c7:79:bf:fe:e5:09:77:97:b8:98:fb: a7:73:0c:23:ce:12:05:01:2d:13:c8:1a:66:a7:b6: 8f:48:fd:37:bf:98:e9:35:c3:57:ed:e2:87:02:77: 9b:4e:4f:30:ca:9f:8a:59:b2:f2:a5:46:b0:f3:5a: 91:91:a5:07:3e:f7:c9:c0:73:40:5d:e7:d9:cb:6d: 02:ad:2e:e8:46:fd:05:f8:20:af:a1:5b:7c:50:29: 6c:ef:53:39:c8:a0:fc:82:6e:89:88:dd:e5:a3:bb: bb:ab:f1:b2:d8:fe:5e:bc:cd:c9:27:f5:a0:64:1f: d5:16:87:43:e6:45:c9:98:ce:7a:41:d5:cd:a2:bb: 9e:e5:5b:ab:5b:eb:f5:a7:5b:91:34:1c:8e:e4:9c: 1b:6c:a8:20:dd:b2:15:77:af:50:c7:02:1f:db:b9: cc:de:91:11:7a:17:3a:ca:13:65:80:56:08:cd:ed: 6d:9b:ab:f1:ac:42:95:f2:10:75:e7:44:47:9c:84: 7c:1c:c5:fe:07:01:11:a2:e5:28:70:82:b3:79:4c: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9C:1F:45:1C:5D:A2:40:7F:B9:D1:A0:7C:ED:06:59:04:CF:11:C0 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:cf:3e:4c:05:91:0e:60:16:f0:b8:02:0c:cb:24:4b:57:58: e2:f8:16:ce:85:fd:a6:73:79:04:23:70:28:ff:8d:4f:04:73: c8:5f:9d:c3:40:b5:10:6a:47:8d:f6:1a:12:32:7d:5d:f1:44: 8c:b1:ef:19:e8:e3:4c:69:cf:af:cb:ef:6c:2b:a8:0d:b4:f2: 2a:a9:ed:3f:86:0d:03:59:14:2d:86:92:a6:1b:aa:04:f1:01: fb:a1:1a:b1:08:e3:49:3a:57:e1:2c:e7:d5:9b:40:c3:0d:6e: 5c:68:a3:2e:66:83:7a:d7:dd:9e:d3:e8:4b:0b:d7:ab:de:97: d5:93:2c:69:5a:6d:62:e2:dd:11:46:51:f9:46:1d:76:f6:be: 44:52:4a:b3:73:40:83:b4:fd:13:cb:06:f6:d5:94:a5:80:a2: f5:3f:33:cb:e9:19:24:9b:94:b7:5d:64:eb:d5:a5:b5:6e:08: a8:4e:a3:73:50:d8:b4:93:48:78:73:d4:5a:c3:3b:bd:8e:2d: d0:ec:7f:c6:c5:fc:7b:6d:a3:1d:84:52:3c:0b:ad:9d:f0:3d: a9:de:0c:04:5f:2e:90:e2:6f:01:d8:36:27:6d:ce:07:19:cb: a0:c4:bb:d1:4d:34:24:08:9f:0d:31:9d:3b:18:da:c8:5c:7c: 59:5f:b6:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjQwNDMwMTUyMDQ2WhcNMjQwNTA3MTUyMDQ2WjAYMRYwFAYD VQQDEw02NjMxMGM0ZS0wNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZlN2UGcLTkBiRyPJ1OiBFO2fFhYPhuvLUDjIiNiD768khx23oS+E+wwMBXY BNFtx3m//uUJd5e4mPuncwwjzhIFAS0TyBpmp7aPSP03v5jpNcNX7eKHAnebTk8w yp+KWbLypUaw81qRkaUHPvfJwHNAXefZy20CrS7oRv0F+CCvoVt8UCls71M5yKD8 gm6JiN3lo7u7q/Gy2P5evM3JJ/WgZB/VFodD5kXJmM56QdXNorue5VurW+v1p1uR NByO5JwbbKgg3bIVd69QxwIf27nM3pERehc6yhNlgFYIze1tm6vxrEKV8hB150RH nIR8HMX+BwERouUocIKzeUyE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCecH0Uc XaJAf7nRoHztBlkEzxHAMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkzz5MBZEOYBbwuAIMyyRLV1ji+BbOhf2mc3kEI3Ao/41PBHPIX53D QLUQakeN9hoSMn1d8USMse8Z6ONMac+vy+9sK6gNtPIqqe0/hg0DWRQthpKmG6oE 8QH7oRqxCONJOlfhLOfVm0DDDW5caKMuZoN6192e0+hLC9er3pfVkyxpWm1i4t0R RlH5Rh129r5EUkqzc0CDtP0Tywb21ZSlgKL1PzPL6Rkkm5S3XWTr1aW1bgioTqNz UNi0k0h4c9Rawzu9ji3Q7H/Gxfx7baMdhFI8C62d8D2p3gwEXy6Q4m8B2DYnbc4H GcugxLvRTTQkCJ8NMZ07GNrIXHxZX7ZH -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:32 2024 by rpki-client on console-ams.rpki-client.org