$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft File: E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json) Hash identifier: xNRpG9bxC2u0JTNwpHZKfB4O90d6UXO6B7ZiPQVhWns= Subject key identifier: 87:C7:84:61:07:31:DA:48:E4:41:09:B4:AB:93:C7:94:9D:7F:D9:28 Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B Certificate issuer: /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B Certificate serial: 33BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft Manifest number: 33BD Signing time: Thu 02 May 2024 15:31:36 +0000 Manifest this update: Thu 02 May 2024 15:31:36 +0000 Manifest next update: Thu 09 May 2024 15:31:36 +0000 Files and hashes: 1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: KA8ZpdIrLfvqD5noGP4Mor7MPoayBkezq7JkOoDoNhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13246 (0x33be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B Validity Not Before: May 2 15:31:36 2024 GMT Not After : May 9 15:31:36 2024 GMT Subject: CN=6633b1d8-7c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:46:55:53:46:e1:9a:dc:0d:53:d0:ae:c1:e8: c1:35:e2:8c:5d:46:2b:31:3c:be:13:f5:9f:98:1e: a3:45:50:dd:75:c7:a8:03:89:cb:60:59:a6:53:e8: 5b:46:16:4d:2a:3b:19:0a:45:dc:a0:a5:82:2b:05: c5:67:e6:9e:ac:88:82:b1:67:3e:89:79:62:e0:cc: b4:e0:35:79:42:4f:a9:0e:26:aa:05:98:95:6c:db: 8e:0c:08:63:56:88:f1:f7:cc:b5:cc:ba:0b:63:75: bb:e7:16:23:f1:6f:19:8a:43:d0:c4:fe:f3:b7:45: aa:0b:b6:45:96:15:fe:19:bd:51:3a:c2:db:3d:e4: 3c:a1:7e:1d:26:ba:47:2a:f8:5d:9e:72:c6:87:21: cd:15:2b:2d:6c:fc:e6:58:87:a3:97:54:9c:7d:a5: 4a:20:33:be:87:76:aa:87:c9:f4:c6:4a:7c:f9:54: 9d:d2:f8:a5:ca:05:20:ac:fc:0f:b0:a1:ef:bd:71: 6e:1b:95:86:72:c6:70:df:93:9e:df:59:b0:63:8f: 10:d2:22:e0:b7:ff:a0:92:76:4b:9f:1c:51:05:1c: fe:4e:be:a5:57:3c:c4:0b:5a:d6:fb:a7:95:b5:73: c2:d0:fb:4c:8e:d7:62:e3:72:4d:66:08:ce:af:b9: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:84:61:07:31:DA:48:E4:41:09:B4:AB:93:C7:94:9D:7F:D9:28 X509v3 Authority Key Identifier: keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bb:64:d5:b9:41:77:c5:76:6d:06:93:69:fc:07:66:df:31: 2f:dc:cd:19:a8:ef:92:b3:8a:7c:b9:84:58:cc:66:2a:1b:cd: 7e:d9:8a:8c:1a:28:4c:87:3e:d9:5b:d2:a5:fc:cc:45:b0:3f: 7a:23:ba:9e:e7:ea:fb:51:69:34:1d:1e:72:ca:d8:26:06:37: 08:b4:d4:50:8a:e0:f3:53:fd:44:2d:ea:8a:65:9f:1d:80:e6: aa:97:7d:a8:dc:67:10:08:0d:c8:76:8c:0c:ae:dd:5e:8f:0a: 54:1c:29:10:e5:4c:c5:b8:b6:34:75:cc:fd:44:6a:05:d3:a0: ba:38:7e:9c:c6:61:ae:75:50:02:dd:90:b1:05:ff:7f:03:70: 3c:52:29:94:db:e2:e4:37:46:35:af:89:7d:3e:02:1c:66:96: 2d:b9:76:55:33:e0:f2:a7:fc:8e:54:e3:56:be:92:4a:57:f2: 55:d7:7c:70:0a:f1:54:8a:a0:c0:5b:0f:1d:b9:7d:0a:d8:14: 29:b4:e2:68:93:42:d5:78:5e:01:a7:e7:9e:d6:5a:2e:a7:9b: 38:a0:ec:89:4c:33:a6:4c:e6:90:c1:e9:f4:9b:29:1e:ed:dd: 2d:23:17:7f:43:6d:cc:ec:73:d9:31:47:4e:26:b4:73:38:86: 54:17:75:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxM0ExMTAvBgNVBAUTKDEzNjEyQzM0ODlFQkFFREI1NjM5MDJCQzlERTU5MkZD OEQ4M0M1NUIwHhcNMjQwNTAyMTUzMTM2WhcNMjQwNTA5MTUzMTM2WjAYMRYwFAYD VQQDEw02NjMzYjFkOC03Yzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EZVU0bhmtwNU9CuwejBNeKMXUYrMTy+E/WfmB6jRVDddceoA4nLYFmmU+hb RhZNKjsZCkXcoKWCKwXFZ+aerIiCsWc+iXli4My04DV5Qk+pDiaqBZiVbNuODAhj Vojx98y1zLoLY3W75xYj8W8ZikPQxP7zt0WqC7ZFlhX+Gb1ROsLbPeQ8oX4dJrpH KvhdnnLGhyHNFSstbPzmWIejl1ScfaVKIDO+h3aqh8n0xkp8+VSd0vilygUgrPwP sKHvvXFuG5WGcsZw35Oe31mwY48Q0iLgt/+gknZLnxxRBRz+Tr6lVzzEC1rW+6eV tXPC0PtMjtdi43JNZgjOr7mAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfHhGEH MdpI5EEJtKuTx5Sdf9koMB8GA1UdIwQYMBaAFBNhLDSJ667bVjkCvJ3lkvyNg8Vb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTEzQS80MDFCRjgxRTFE QUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0dFdPUUs4bmVXU19JMkR4 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyRXNOSW5ycnR0V09RSzhuZVdTX0kyRHhWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTEzQS80MDFCRjgxRTFEQUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0 dFdPUUs4bmVXU19JMkR4VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYu2TVuUF3xXZtBpNp/Adm3zEv3M0ZqO+Ss4p8uYRYzGYqG81+2YqM GihMhz7ZW9Kl/MxFsD96I7qe5+r7UWk0HR5yytgmBjcItNRQiuDzU/1ELeqKZZ8d gOaql32o3GcQCA3IdowMrt1ejwpUHCkQ5UzFuLY0dcz9RGoF06C6OH6cxmGudVAC 3ZCxBf9/A3A8UimU2+LkN0Y1r4l9PgIcZpYtuXZVM+Dyp/yOVONWvpJKV/JV13xw CvFUiqDAWw8duX0K2BQptOJok0LVeF4Bp+ee1loup5s4oOyJTDOmTOaQwen0myke 7d0tIxd/Q23M7HPZMUdOJrRzOIZUF3Xv -----END CERTIFICATE-----Generated at Thu May 2 17:43:50 2024 by rpki-client on console-fra.rpki-client.org