$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json) Hash identifier: s4u4fQc+90/QLvq9eDnuAg9v/sLuXPnz5COW0aViYfw= Subject key identifier: 13:2E:C2:4C:41:29:3B:CD:E5:5A:D2:DB:20:0F:90:51:9D:E6:74:B6 Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 Certificate issuer: /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft Manifest number: 04D2 Signing time: Wed 01 May 2024 03:25:24 +0000 Manifest this update: Wed 01 May 2024 03:25:24 +0000 Manifest next update: Wed 08 May 2024 03:25:24 +0000 Files and hashes: 1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: Oj/FlKWzGNkoHh7CfHT2ZhoGdO7WfhxXViaae/SW/QM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Validity Not Before: May 1 03:25:24 2024 GMT Not After : May 8 03:25:24 2024 GMT Subject: CN=6631b624-35f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:02:83:a5:bb:ae:ca:c9:05:01:dc:f8:3d: 86:fc:90:b5:e8:77:b7:c0:7f:67:0b:c2:dc:00:7d: f4:98:6a:fe:3d:90:94:02:96:00:32:57:93:cb:84: de:c7:15:bb:74:5d:1d:4b:7f:d5:33:88:4e:75:8f: 7d:04:9c:15:0c:bb:74:09:6a:b5:70:56:ab:c3:79: 6e:73:bd:0d:2d:71:4e:2d:e5:7f:84:d9:83:6e:0d: f2:6e:c4:3f:00:ad:aa:a4:80:03:f7:78:e1:c7:d4: e1:26:6e:d3:26:cf:01:3a:b5:c1:28:06:f6:52:c4: 7f:e5:22:c5:43:77:c5:e6:30:30:09:3b:a5:c0:1b: 3d:c7:ba:f7:3b:d9:07:4a:12:70:31:34:31:fd:a6: aa:d0:7b:5f:4d:05:9e:59:4a:60:ed:cc:89:47:b4: 69:c6:80:43:e3:37:26:e2:3c:b9:8f:3e:e5:88:cb: d8:20:05:35:17:a5:c6:ec:9e:28:71:fc:8c:86:9d: c4:66:42:43:ec:ac:ef:86:3a:cd:61:3c:60:91:14: 55:5e:c7:84:e4:a3:d9:63:f6:98:76:69:d1:ed:1e: d1:96:1f:93:39:d8:ba:9e:70:4c:25:ba:9c:b6:df: c8:73:eb:56:bf:16:bb:06:d4:31:a0:a2:8c:b6:ab: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:C2:4C:41:29:3B:CD:E5:5A:D2:DB:20:0F:90:51:9D:E6:74:B6 X509v3 Authority Key Identifier: keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f2:30:d1:f9:7d:18:e4:08:b0:c2:42:ab:32:eb:a4:ba:ee: ac:47:da:0b:3e:9a:b4:67:77:20:2f:f4:5a:9b:6e:93:cf:41: 12:dd:4b:40:22:9b:c3:3a:a2:c3:fe:35:a2:e7:61:c7:53:68: e0:b0:b6:67:c2:31:2b:09:42:76:7f:f6:eb:09:4e:23:29:e5: 3a:4e:c2:cd:19:a6:eb:00:95:ba:bc:e1:4e:ae:25:38:43:16: fe:0a:a5:13:ec:a2:13:1a:82:32:7d:68:36:eb:8f:73:b3:6d: 68:b4:90:88:64:5b:36:97:0d:16:83:0f:d1:e0:17:fb:26:a9: 20:20:c4:db:bf:55:c8:c0:0e:e9:97:80:1e:c9:54:08:bf:da: fd:62:99:d8:05:db:ee:57:f2:99:2b:1a:ff:00:39:76:7d:19: ed:d5:5e:ce:50:79:89:6c:87:50:df:78:34:28:17:18:cf:4e: 79:f7:e9:73:d0:57:2e:00:7b:01:18:64:cb:b6:ef:cd:12:4c: e9:4d:f6:db:3a:c3:38:6b:13:ec:9c:19:55:9c:8b:8c:40:e0: fe:0a:49:2c:17:e2:be:d7:ca:85:c5:bd:84:cf:85:c1:d8:2d: b8:3b:ab:b6:8a:e1:cb:b6:b8:7b:00:73:ff:4f:e8:bc:e5:5c: 05:46:eb:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURDQkIwMjJDRTZG MzNCRTBCMDYwHhcNMjQwNTAxMDMyNTI0WhcNMjQwNTA4MDMyNTI0WjAYMRYwFAYD VQQDEw02NjMxYjYyNC0zNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IMCg6W7rsrJBQHc+D2G/JC16He3wH9nC8LcAH30mGr+PZCUApYAMleTy4Te xxW7dF0dS3/VM4hOdY99BJwVDLt0CWq1cFarw3luc70NLXFOLeV/hNmDbg3ybsQ/ AK2qpIAD93jhx9ThJm7TJs8BOrXBKAb2UsR/5SLFQ3fF5jAwCTulwBs9x7r3O9kH ShJwMTQx/aaq0HtfTQWeWUpg7cyJR7RpxoBD4zcm4jy5jz7liMvYIAU1F6XG7J4o cfyMhp3EZkJD7KzvhjrNYTxgkRRVXseE5KPZY/aYdmnR7R7Rlh+TOdi6nnBMJbqc tt/Ic+tWvxa7BtQxoKKMtqvKMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMuwkxB KTvN5VrS2yAPkFGd5nS2MB8GA1UdIwQYMBaAFOzdJldD6SEbzgqty7Aizm8zvgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElSdk9DcTNMc0NMT2J6Ty1D d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOMG1WMFBwSVJ2T0NxM0xzQ0xPYnpPLUN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElS dk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8jDR+X0Y5AiwwkKrMuukuu6sR9oLPpq0Z3cgL/Ram26Tz0ES3UtA IpvDOqLD/jWi52HHU2jgsLZnwjErCUJ2f/brCU4jKeU6TsLNGabrAJW6vOFOriU4 Qxb+CqUT7KITGoIyfWg2649zs21otJCIZFs2lw0Wgw/R4Bf7JqkgIMTbv1XIwA7p l4AeyVQIv9r9YpnYBdvuV/KZKxr/ADl2fRnt1V7OUHmJbIdQ33g0KBcYz0559+lz 0FcuAHsBGGTLtu/NEkzpTfbbOsM4axPsnBlVnIuMQOD+CkksF+K+18qFxb2Ez4XB 2C24O6u2iuHLtrh7AHP/T+i85VwFRutG -----END CERTIFICATE-----Generated at Wed May 1 05:59:11 2024 by rpki-client on console-fra.rpki-client.org