$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft File: MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json) Hash identifier: t/lWDySxnTT2sPSvbcBGf0JNn/flC5xPvUzy+sA+nX4= Subject key identifier: 19:FF:AB:BC:AA:A7:E1:4D:7A:24:FD:89:B4:9F:DC:F8:FB:13:E4:85 Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 Certificate issuer: /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft Manifest number: 02C8 Signing time: Mon 29 Apr 2024 03:22:05 +0000 Manifest this update: Mon 29 Apr 2024 03:22:04 +0000 Manifest next update: Mon 06 May 2024 03:22:04 +0000 Files and hashes: 1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: zeHPrQmUksTKYuz9WTU86rF+krxZksTGJrWlIgUq0/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2 Validity Not Before: Apr 29 03:22:04 2024 GMT Not After : May 6 03:22:04 2024 GMT Subject: CN=662f125d-684c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:22:35:dc:48:87:0a:e8:1a:00:1a:3b:10: f1:49:81:79:95:09:3d:93:ae:2a:62:50:85:19:90: 09:cc:c4:69:7a:6d:52:b7:ad:ed:6c:9b:fa:9b:83: 15:2d:af:27:38:b5:06:ec:60:3c:26:20:ed:de:b1: 97:96:1e:b2:cd:e0:4a:e6:5e:1d:2d:3d:96:cd:82: da:97:71:da:1f:1e:14:86:16:3b:74:22:78:8c:bd: 2e:55:a2:4c:2d:5d:32:8d:a3:5f:e4:89:3e:53:ef: a3:38:e5:69:c2:e7:31:78:23:6d:28:70:25:30:14: 02:16:36:7b:a8:fc:12:5d:15:83:dd:24:52:bf:74: 00:16:e6:6d:90:84:67:29:30:e2:bf:2b:2c:2c:fb: 77:be:ee:97:26:b7:71:94:45:ad:a5:ec:1b:2c:15: 9f:2d:0b:80:74:9a:dc:d9:66:4d:5f:3a:fb:8c:1c: 13:e2:e9:54:5e:e6:91:c6:40:34:8f:52:59:23:e2: de:fd:e4:be:bb:0a:38:65:22:eb:9a:1c:51:d5:43: 38:eb:c9:06:06:ae:ec:f5:f4:37:b2:99:c5:3c:83: fd:33:fb:3e:48:5e:75:08:e2:3c:9a:be:af:c5:a1: 43:a6:e2:0d:90:c8:86:55:59:9a:3d:0c:35:d5:c4: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:AB:BC:AA:A7:E1:4D:7A:24:FD:89:B4:9F:DC:F8:FB:13:E4:85 X509v3 Authority Key Identifier: keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f7:a3:d2:39:fa:5d:4a:7d:b1:3b:f6:ae:b8:05:68:8e:ff: 6c:a4:f0:84:9b:4a:ae:7c:b0:f0:42:6e:38:81:de:a4:36:05: 82:3e:f5:7b:2c:ca:c0:0c:d1:a2:1c:b0:00:16:33:df:ff:18: b2:7e:41:cf:9a:c5:29:4f:6b:c1:45:43:43:82:a1:5e:69:56: 12:c8:e7:2d:e0:c3:04:96:cf:78:48:2b:06:28:ca:b8:b5:d8: 96:59:c5:70:1a:2f:b3:de:7b:fe:ad:4d:8d:70:ab:a3:14:8e: 4d:01:a9:25:9e:45:bd:ee:c5:9f:fc:5b:c3:f1:6d:2a:af:e9: f0:f8:cf:ae:c2:42:cd:44:5c:a1:ed:44:ca:17:92:02:9c:f9: a9:ac:8a:9a:6c:92:bb:90:a8:8c:44:21:8f:5f:70:6f:3e:2b: 1b:59:ba:e8:28:88:63:a3:9e:12:38:3f:46:33:af:c7:51:23: 9f:fe:2a:3d:97:18:eb:33:de:39:d0:39:2b:a9:be:f4:a6:1d: d1:b5:d0:60:d2:29:b0:42:9f:8f:4d:3f:fc:24:db:8c:e0:70: d8:b8:de:92:1d:70:ac:91:78:32:76:ee:a9:a4:d6:8b:74:98: 04:57:8e:f4:9c:43:66:de:0b:fc:df:db:fe:dc:15:fe:4a:75: e6:8e:f9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5NzkxMTAvBgNVBAUTKDMxMTUxMEI2MjBCNkUwQ0Q0MjJFMUMyQjZFOTUyQjYw NDhBNUYxRTIwHhcNMjQwNDI5MDMyMjA0WhcNMjQwNTA2MDMyMjA0WjAYMRYwFAYD VQQDEw02NjJmMTI1ZC02ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuewiNdxIhwroGgAaOxDxSYF5lQk9k64qYlCFGZAJzMRpem1St63tbJv6m4MV La8nOLUG7GA8JiDt3rGXlh6yzeBK5l4dLT2WzYLal3HaHx4UhhY7dCJ4jL0uVaJM LV0yjaNf5Ik+U++jOOVpwucxeCNtKHAlMBQCFjZ7qPwSXRWD3SRSv3QAFuZtkIRn KTDivyssLPt3vu6XJrdxlEWtpewbLBWfLQuAdJrc2WZNXzr7jBwT4ulUXuaRxkA0 j1JZI+Le/eS+uwo4ZSLrmhxR1UM468kGBq7s9fQ3spnFPIP9M/s+SF51COI8mr6v xaFDpuINkMiGVVmaPQw11cQyXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn/q7yq p+FNeiT9ibSf3Pj7E+SFMB8GA1UdIwQYMBaAFDEVELYgtuDNQi4cK26VK2BIpfHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjk3OS8xQjQ2NUFBNjlF RUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRNMUNMaHdyYnBVcllFaWw4 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SVVF0aUMyNE0xQ0xod3JicFVyWUVpbDhlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjk3OS8xQjQ2NUFBNjlFRUQxMUVDOTM4MURGMENDNEY5QUUwMi9NUlVRdGlDMjRN MUNMaHdyYnBVcllFaWw4ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO96PSOfpdSn2xO/auuAVojv9spPCEm0qufLDwQm44gd6kNgWCPvV7 LMrADNGiHLAAFjPf/xiyfkHPmsUpT2vBRUNDgqFeaVYSyOct4MMEls94SCsGKMq4 tdiWWcVwGi+z3nv+rU2NcKujFI5NAaklnkW97sWf/FvD8W0qr+nw+M+uwkLNRFyh 7UTKF5ICnPmprIqabJK7kKiMRCGPX3BvPisbWbroKIhjo54SOD9GM6/HUSOf/io9 lxjrM9450Dkrqb70ph3RtdBg0imwQp+PTT/8JNuM4HDYuN6SHXCskXgydu6ppNaL dJgEV470nENm3gv839v+3BX+SnXmjvmw -----END CERTIFICATE-----Generated at Mon Apr 29 04:55:53 2024 by rpki-client on console-fra.rpki-client.org