$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft File: L-aHDoJAvxJ46pnCMRal4KjSCZA.mft (raw, json) Hash identifier: xz0aKqMhDNf3LmJLNQHwgRI7V4et3PTdoP1ytM8DZKg= Subject key identifier: 39:73:FC:29:29:4D:91:DC:DA:62:B1:E5:8C:43:A1:EB:74:D7:88:13 Authority key identifier: 2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 Certificate issuer: /CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft Manifest number: 2C Signing time: Wed 15 May 2024 08:35:49 +0000 Manifest this update: Wed 15 May 2024 08:35:49 +0000 Manifest next update: Wed 22 May 2024 08:35:49 +0000 Files and hashes: 1: L-aHDoJAvxJ46pnCMRal4KjSCZA.crl (hash: 682G87xxhKpwOqGd38bz20TFD/yMrluKONuNPYAvzb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Validity Not Before: May 15 08:35:49 2024 GMT Not After : May 22 08:35:49 2024 GMT Subject: CN=664473e5-1fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:e3:d1:06:0a:5c:86:0a:60:51:f8:cb:bd: 45:d3:13:37:9b:3e:2d:21:52:df:bc:66:38:d7:84: b5:b5:e8:38:d8:f0:07:fd:4f:46:10:97:55:34:92: 20:4a:5c:f6:a1:4d:49:74:4d:1d:db:be:42:b2:65: 48:cf:02:ad:cb:52:a4:9b:73:0b:2e:09:34:34:83: 00:cc:a4:78:60:44:b3:23:18:48:a7:35:d5:83:15: 02:c8:e1:d4:cd:a3:5e:e0:16:be:03:26:47:51:89: 79:ee:48:a4:0c:7e:ea:87:2f:6d:1e:c6:a5:c2:74: 9f:3b:08:ff:2f:c2:24:1f:0f:b2:ff:75:bf:32:e7: a8:5b:9b:05:80:8d:d2:0a:0e:70:9d:8f:e5:16:0b: 47:bd:87:71:2a:32:31:3d:a3:ec:6b:89:62:e7:85: de:f6:c1:c1:4a:96:8f:71:0d:2c:96:9c:36:a5:69: 2d:13:f1:ec:6f:6a:1f:e6:c8:51:98:af:d9:44:e3: f1:7b:55:ca:4a:e4:f2:e8:af:38:60:55:57:66:d9: c9:a8:03:ab:c7:ba:d4:b7:c4:70:d5:dd:9d:91:04: 31:d7:18:2d:22:de:a5:ed:0d:27:ed:2b:fe:5a:db: 06:ec:1c:db:90:88:2d:68:f9:70:8e:68:50:bf:1f: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:73:FC:29:29:4D:91:DC:DA:62:B1:E5:8C:43:A1:EB:74:D7:88:13 X509v3 Authority Key Identifier: keyid:2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b7:a9:48:cb:89:da:53:7f:f5:2d:47:49:cf:1f:31:ad:70: 8f:82:94:3e:fc:7b:97:77:41:be:b9:21:84:55:40:2b:ae:8a: 8f:cb:6b:22:4d:00:54:e4:b6:4a:0d:20:fd:57:0f:ee:7d:17: 59:1e:40:ad:12:96:52:38:cd:72:6c:33:c7:68:c3:a3:0a:d1: b8:75:d5:9c:e6:b8:29:34:79:82:fb:b9:be:d6:82:ec:c0:9b: 86:08:52:f4:11:49:1b:01:d4:f1:ca:d0:87:8d:84:ac:9a:5c: 2e:14:e7:92:d2:1d:0f:38:bc:ea:d8:46:64:ef:17:92:70:7c: c1:03:54:03:89:53:a9:4e:92:44:c7:4e:ce:5c:ab:11:1f:84: 16:68:84:88:c2:2e:d5:f2:68:2d:1c:a3:7a:20:e2:96:43:96: 03:ce:3f:e0:1b:74:6e:25:c6:f0:97:be:05:a2:6f:7f:1e:c3: 9f:58:cb:f8:13:e4:83:4f:de:c0:8a:61:a6:da:6e:f5:b4:89: 9d:d3:67:60:a7:19:14:5d:06:e4:80:cc:ac:7a:84:ef:bf:0c: 3f:84:49:f8:33:ab:9e:a7:6b:5b:b2:56:dc:46:04:98:ae:ef: 34:14:10:df:ae:9a:01:6b:ec:a7:d4:6f:e1:2f:ff:bc:b9:e3: 7f:86:7b:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEIyQjExMC8GA1UEBRMoMkZFNjg3MEU4MjQwQkYxMjc4RUE5OUMyMzExNkE1RTBB OEQyMDk5MDAeFw0yNDA1MTUwODM1NDlaFw0yNDA1MjIwODM1NDlaMBgxFjAUBgNV BAMTDTY2NDQ3M2U1LTFmZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkuePRBgpchgpgUfjLvUXTEzebPi0hUt+8ZjjXhLW16DjY8Af9T0YQl1U0kiBK XPahTUl0TR3bvkKyZUjPAq3LUqSbcwsuCTQ0gwDMpHhgRLMjGEinNdWDFQLI4dTN o17gFr4DJkdRiXnuSKQMfuqHL20exqXCdJ87CP8vwiQfD7L/db8y56hbmwWAjdIK DnCdj+UWC0e9h3EqMjE9o+xriWLnhd72wcFKlo9xDSyWnDalaS0T8exvah/myFGY r9lE4/F7VcpK5PLorzhgVVdm2cmoA6vHutS3xHDV3Z2RBDHXGC0i3qXtDSftK/5a 2wbsHNuQiC1o+XCOaFC/Hy0dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOXP8KSlN kdzaYrHljEOh63TXiBMwHwYDVR0jBBgwFoAUL+aHDoJAvxJ46pnCMRal4KjSCZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QjJCL0E0NjVBNDlBQ0Y5 QzExRUVBRjM0NDY1RkM0RjlBRTAyL0wtYUhEb0pBdnhKNDZwbkNNUmFsNEtqU0Na QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTC1hSERvSkF2eEo0NnBuQ01SYWw0S2pTQ1pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QjJCL0E0NjVBNDlBQ0Y5QzExRUVBRjM0NDY1RkM0RjlBRTAyL0wtYUhEb0pBdnhK NDZwbkNNUmFsNEtqU0NaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADm3qUjLidpTf/UtR0nPHzGtcI+ClD78e5d3Qb65IYRVQCuuio/LayJN AFTktkoNIP1XD+59F1keQK0SllI4zXJsM8dow6MK0bh11ZzmuCk0eYL7ub7WguzA m4YIUvQRSRsB1PHK0IeNhKyaXC4U55LSHQ84vOrYRmTvF5JwfMEDVAOJU6lOkkTH Ts5cqxEfhBZohIjCLtXyaC0co3og4pZDlgPOP+AbdG4lxvCXvgWib38ew59Yy/gT 5INP3sCKYababvW0iZ3TZ2CnGRRdBuSAzKx6hO+/DD+ESfgzq56na1uyVtxGBJiu 7zQUEN+umgFr7KfUb+Ev/7y543+Ge+M= -----END CERTIFICATE-----Generated at Wed May 15 11:17:44 2024 by rpki-client on console-ams.rpki-client.org