$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft File: aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json) Hash identifier: qw25pH+30JAQ6QwFAlABSiVRkWdiBAIAEP1JqgNnAS4= Subject key identifier: BE:4B:E6:0D:D8:16:80:A6:8F:65:08:F5:FE:2A:A6:AE:52:3E:59:5E Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC Certificate issuer: /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Certificate serial: 33BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft Manifest number: 33BD Signing time: Wed 08 May 2024 15:17:53 +0000 Manifest this update: Wed 08 May 2024 15:17:53 +0000 Manifest next update: Wed 15 May 2024 15:17:53 +0000 Files and hashes: 1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: brbBhFfhkNv14G6oFXLZYMNrpvcIHqArJYRon57SBuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13245 (0x33bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC Validity Not Before: May 8 15:17:53 2024 GMT Not After : May 15 15:17:53 2024 GMT Subject: CN=663b97a1-76cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:fb:d5:1c:06:43:98:cd:0b:8d:84:a9:8d: eb:69:dd:e3:f0:fc:4a:84:6b:57:39:3e:8f:bf:39: 25:9c:5f:cd:e3:78:27:df:e0:fe:c6:eb:b4:d7:39: 7b:4c:74:43:98:6f:4c:0d:e5:73:65:c1:bf:a2:33: b5:7a:17:38:d4:1e:42:df:61:8d:a9:a2:0b:f3:17: d7:59:7a:a5:dd:e4:8a:42:d4:8c:fb:44:9e:49:92: 6c:76:2d:2c:c7:87:a6:72:46:69:18:15:ee:95:ba: 3d:9d:93:f0:87:0f:40:11:17:e5:52:ba:7e:75:b2: f3:07:08:0b:d4:b4:c7:aa:37:10:2f:2e:a5:82:90: e4:16:0e:e9:6d:10:08:d9:5e:52:16:b7:c6:b6:6f: 50:33:37:04:86:86:63:6c:17:c0:24:ea:9f:2c:55: a7:fe:63:0b:66:75:26:f1:7f:bd:ef:c6:e3:bd:8e: c1:31:c2:a2:00:ff:84:38:46:82:13:8e:72:c4:5c: 88:45:1e:2b:7d:f1:aa:1d:59:c9:45:18:30:8c:09: d7:2b:c7:b6:95:5f:b1:e3:cb:d2:57:f4:bc:87:a9: 94:8e:bc:9b:f9:f6:92:58:9f:3c:67:01:2e:fe:cb: b6:0b:ca:cb:b1:96:74:32:a9:5c:21:1d:b9:ad:43: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:E6:0D:D8:16:80:A6:8F:65:08:F5:FE:2A:A6:AE:52:3E:59:5E X509v3 Authority Key Identifier: keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ae:f9:3d:1a:04:ad:57:6c:6a:da:a5:3d:1d:e8:09:23:ab: 3a:10:53:c1:7d:b2:cd:1d:5f:ee:63:6a:d7:c9:34:0c:7f:4b: b5:80:b0:36:26:38:c1:e0:7a:c8:76:6b:e3:d3:5d:e5:7b:13: 6a:17:4c:c2:0d:a8:8b:0a:fc:f0:a0:cb:05:3e:0f:b5:34:26: 3a:f4:f6:62:ac:c5:f9:dc:f5:ce:2b:3b:7e:a8:57:96:54:96: 57:ef:fa:20:33:6c:e1:2f:4c:6b:04:62:c1:62:c2:f7:58:d5: 09:f7:e9:9f:53:25:06:0a:83:c6:39:16:f8:c1:9f:c7:15:00: 2d:75:8a:9a:05:f5:07:f2:db:3f:d6:75:06:43:bf:0d:b8:4f: a7:8e:c5:71:ac:ec:55:d5:54:38:88:f7:89:18:5d:e4:65:7f: 9c:44:c9:c6:85:b6:f1:de:28:ed:ed:a0:f5:4b:fe:91:f3:8b: 83:ff:12:c9:49:3d:d1:b5:d9:c0:71:d8:09:70:f2:b4:31:f4: 3f:fb:7f:1c:4c:15:fc:bd:8d:89:57:e0:d8:f4:48:6b:eb:47: 79:67:6c:47:21:69:90:2e:25:0e:d7:43:cb:cf:da:f5:d1:17: f4:e7:4f:90:82:22:b8:ba:6a:bf:10:b0:44:85:cc:00:89:7b: 7c:71:d2:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MjYxMTAvBgNVBAUTKDY5NEJBMDcwQjYyNkUxNjg1OEQ2NjBGMjEyMEU3NEI2 RkMzRjcyRUMwHhcNMjQwNTA4MTUxNzUzWhcNMjQwNTE1MTUxNzUzWjAYMRYwFAYD VQQDEw02NjNiOTdhMS03NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m771RwGQ5jNC42EqY3rad3j8PxKhGtXOT6PvzklnF/N43gn3+D+xuu01zl7 THRDmG9MDeVzZcG/ojO1ehc41B5C32GNqaIL8xfXWXql3eSKQtSM+0SeSZJsdi0s x4emckZpGBXulbo9nZPwhw9AERflUrp+dbLzBwgL1LTHqjcQLy6lgpDkFg7pbRAI 2V5SFrfGtm9QMzcEhoZjbBfAJOqfLFWn/mMLZnUm8X+978bjvY7BMcKiAP+EOEaC E45yxFyIRR4rffGqHVnJRRgwjAnXK8e2lV+x48vSV/S8h6mUjryb+faSWJ88ZwEu /su2C8rLsZZ0MqlcIR25rUO4fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5L5g3Y FoCmj2UI9f4qpq5SPlleMB8GA1UdIwQYMBaAFGlLoHC2JuFoWNZg8hIOdLb8P3Ls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQyNi8yMTI4Nzk2QzFE QTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRXaFkxbUR5RWc1MHR2d19j dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVdWdjTFltNFdoWTFtRHlFZzUwdHZ3X2N1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQyNi8yMTI4Nzk2QzFEQTIxMUUyOEY1MUQyOTQwOEIwMkNEMi9hVXVnY0xZbTRX aFkxbUR5RWc1MHR2d19jdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASrvk9GgStV2xq2qU9HegJI6s6EFPBfbLNHV/uY2rXyTQMf0u1gLA2 JjjB4HrIdmvj013lexNqF0zCDaiLCvzwoMsFPg+1NCY69PZirMX53PXOKzt+qFeW VJZX7/ogM2zhL0xrBGLBYsL3WNUJ9+mfUyUGCoPGORb4wZ/HFQAtdYqaBfUH8ts/ 1nUGQ78NuE+njsVxrOxV1VQ4iPeJGF3kZX+cRMnGhbbx3ijt7aD1S/6R84uD/xLJ ST3RtdnAcdgJcPK0MfQ/+38cTBX8vY2JV+DY9Ehr60d5Z2xHIWmQLiUO10PLz9r1 0Rf050+QgiK4umq/ELBEhcwAiXt8cdLv -----END CERTIFICATE-----Generated at Wed May 8 18:14:38 2024 by rpki-client on console-fra.rpki-client.org