$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: WsyOmmb+xXlYtu47zhxNuQKAJXJcLv72X2bBYt3dG5c= Subject key identifier: 66:AC:59:55:5C:40:BA:BD:A3:CD:D9:3C:16:1E:5A:CE:6F:B8:E5:A0 Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 11F2 Signing time: Mon 06 May 2024 20:33:07 +0000 Manifest this update: Mon 06 May 2024 20:33:07 +0000 Manifest next update: Mon 13 May 2024 20:33:07 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: mPx0YBuyWAoLION7sOzG8s4r4SbTiIx/HQpSCxeHP8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: May 6 20:33:07 2024 GMT Not After : May 13 20:33:07 2024 GMT Subject: CN=66393e83-35a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:d5:6c:4f:db:2f:54:88:d8:d8:49:29:7b: 37:53:84:78:35:5a:5f:5b:e2:9c:d9:60:de:af:75: a7:36:65:79:6d:68:f4:40:5d:5d:bc:5e:da:8b:38: bf:f0:38:e6:fc:a0:21:29:86:53:82:0a:6d:85:47: 8d:da:2a:47:89:8b:f4:a9:b2:57:90:4c:d2:42:bf: 72:f6:87:96:43:3d:68:e1:80:1e:79:8d:9a:c9:b6: 53:93:b3:a0:bc:61:6e:74:2f:9d:10:ef:91:0d:44: 00:25:54:6c:89:dd:c5:b4:d6:67:dc:07:d6:90:9b: 05:57:f8:1c:84:4e:51:f3:6f:26:fc:5a:2c:73:ac: 2b:57:62:dd:f7:62:78:ef:37:aa:e3:43:dc:15:2b: 5d:6c:2d:68:97:2f:31:3b:e1:f8:89:fd:30:10:d3: f9:21:f9:2b:77:dd:c4:d5:c1:22:bc:1e:ea:4c:cf: 0b:11:2b:28:79:95:86:5b:22:2a:e4:5b:91:36:a5: bc:bd:46:90:a7:79:44:a0:ed:ad:b5:d5:48:a8:9f: f5:b0:b4:b3:46:e0:16:7d:de:81:c6:48:c3:3d:b7: ac:26:86:d4:44:da:a6:a5:f4:59:45:06:fa:99:36: 0d:0d:81:26:7e:ae:cd:6d:44:ce:b4:89:fd:21:94: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AC:59:55:5C:40:BA:BD:A3:CD:D9:3C:16:1E:5A:CE:6F:B8:E5:A0 X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:96:8d:e5:d8:70:f2:67:31:f2:d1:8b:32:35:a9:db:60: 2d:7b:5e:ed:ae:79:ec:98:06:0b:e1:56:13:3d:6d:db:ff:94: ad:ef:01:79:3d:23:39:85:4e:cd:04:db:4b:c9:73:46:88:79: 1f:d1:f4:1a:ac:b0:f6:dd:39:bc:2d:a6:c9:6b:45:45:02:73: 66:4f:62:95:e5:f9:09:ab:e8:cc:ba:03:bf:11:b0:5b:b5:45: 00:29:11:fc:6c:14:5e:ba:0c:8e:33:3c:58:ce:f1:16:76:e1: f9:54:3c:ca:63:c5:00:84:fe:c0:8b:ae:e5:29:bc:67:41:7f: d0:8f:3d:8b:e4:54:aa:64:19:1e:49:20:c8:6e:15:46:b8:df: 92:ca:95:b8:cd:d6:81:8e:bc:24:38:59:e4:ab:3c:7d:1c:0a: f6:08:ec:5c:94:0e:50:13:c0:10:3e:86:b2:81:5b:6e:d1:e8: 18:ab:67:35:b4:85:c5:36:5b:23:a4:36:df:c2:06:96:b0:55: 44:f5:25:19:7f:45:94:1d:04:bf:f8:b7:9b:b3:31:e0:5e:d9: 40:ff:93:e7:45:d6:28:1f:0b:b2:e8:38:70:48:72:a4:e0:bb: d7:c8:94:5b:ff:cf:c7:1d:b4:50:cd:04:76:5a:55:18:e6:a3: 4e:44:62:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjQwNTA2MjAzMzA3WhcNMjQwNTEzMjAzMzA3WjAYMRYwFAYD VQQDEw02NjM5M2U4My0zNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8R/VbE/bL1SI2NhJKXs3U4R4NVpfW+Kc2WDer3WnNmV5bWj0QF1dvF7aizi/ 8Djm/KAhKYZTggpthUeN2ipHiYv0qbJXkEzSQr9y9oeWQz1o4YAeeY2aybZTk7Og vGFudC+dEO+RDUQAJVRsid3FtNZn3AfWkJsFV/gchE5R828m/Fosc6wrV2Ld92J4 7zeq40PcFStdbC1oly8xO+H4if0wENP5Ifkrd93E1cEivB7qTM8LESsoeZWGWyIq 5FuRNqW8vUaQp3lEoO2ttdVIqJ/1sLSzRuAWfd6BxkjDPbesJobURNqmpfRZRQb6 mTYNDYEmfq7NbUTOtIn9IZRMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGasWVVc QLq9o83ZPBYeWs5vuOWgMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSppaN5dhw8mcx8tGLMjWp22Ate17trnnsmAYL4VYTPW3b/5St7wF5 PSM5hU7NBNtLyXNGiHkf0fQarLD23Tm8LabJa0VFAnNmT2KV5fkJq+jMugO/EbBb tUUAKRH8bBReugyOMzxYzvEWduH5VDzKY8UAhP7Ai67lKbxnQX/Qjz2L5FSqZBke SSDIbhVGuN+SypW4zdaBjrwkOFnkqzx9HAr2COxclA5QE8AQPoaygVtu0egYq2c1 tIXFNlsjpDbfwgaWsFVE9SUZf0WUHQS/+LebszHgXtlA/5PnRdYoHwuy6DhwSHKk 4LvXyJRb/8/HHbRQzQR2WlUY5qNORGLV -----END CERTIFICATE-----Generated at Mon May 6 23:05:50 2024 by rpki-client on console-fra.rpki-client.org