$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: +mxPtCzjG5yR7870STe5mrMqXmW+1dubhreVEfRnhJ8= Subject key identifier: 47:E4:CF:23:18:E1:53:EA:1D:AA:6A:DD:AB:C5:59:C6:8E:31:9A:F5 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0C20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0C20 Signing time: Sat 04 May 2024 19:08:55 +0000 Manifest this update: Sat 04 May 2024 19:08:55 +0000 Manifest next update: Sat 11 May 2024 19:08:55 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: oZJk2jwtxWLSda540mFTSr1VyC5ULM3+O2UlJdhJPcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: May 4 19:08:55 2024 GMT Not After : May 11 19:08:55 2024 GMT Subject: CN=663687c7-1cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:2e:e1:2c:88:8b:bf:19:01:1e:61:74:06: 88:a7:9c:b7:e6:f7:0a:21:47:1a:bb:24:e5:80:16: b5:e5:3e:d6:c2:e4:d2:7b:61:cf:4d:22:22:88:58: ec:6d:31:21:53:08:7d:75:6c:5e:46:6b:9e:8d:cf: 10:75:2e:7f:d2:29:25:35:b1:3f:5a:55:ec:46:7b: 71:08:ef:16:46:51:58:1a:fc:b6:1a:3d:01:1b:bf: 89:51:61:6a:c1:c2:00:4f:f1:fd:4c:e9:35:21:b9: eb:ea:3b:7f:04:a7:f8:22:0b:da:e0:6d:17:81:72: d8:6f:0a:65:ce:31:77:8e:0b:77:b2:02:ba:a9:05: 71:e0:0e:81:94:b4:a0:62:e5:bd:5b:81:f1:ec:6b: 40:79:db:9f:e3:df:22:e7:d2:ee:e8:4c:3a:70:d8: 94:71:2f:8b:d8:e3:01:52:89:e9:4c:69:54:b8:68: 65:10:3c:eb:9a:53:06:85:f2:0c:a2:97:19:90:b0: 45:40:35:17:0e:36:59:19:16:e0:d0:3e:5e:f1:8e: 46:5c:7b:47:de:63:fd:87:a7:8a:b0:65:75:f9:3b: 60:20:67:43:30:3e:5d:dc:27:b4:34:82:6f:9f:d5: a9:85:29:09:8c:24:47:21:80:60:0c:57:c4:8a:39: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E4:CF:23:18:E1:53:EA:1D:AA:6A:DD:AB:C5:59:C6:8E:31:9A:F5 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:46:f0:c0:9c:63:36:67:11:9a:80:f8:6b:ff:8f:a3:f8:71: 19:7f:de:30:e0:51:21:d1:4d:82:ba:74:49:48:9e:27:2f:45: 19:11:bb:89:cf:7d:98:74:f2:d6:c9:7f:bb:e5:82:75:8a:9e: 0c:c3:c3:0d:4a:5e:f8:b3:36:15:17:4d:9d:fe:13:d1:55:eb: a5:ea:b8:1b:d3:33:d6:46:fb:f0:1c:54:d3:69:dc:b4:de:8b: 5c:49:91:c8:0f:b7:85:78:63:c1:f0:61:b7:91:b7:4c:0d:2e: 36:2f:11:2d:b9:6d:24:59:e3:ee:3a:c3:a8:83:7b:5b:7d:24: f3:7b:66:6b:53:25:36:e7:ee:5a:bc:6d:e2:f1:26:3b:6a:cf: e9:0b:fe:d3:69:3d:91:5e:41:9e:cd:d9:6c:63:ef:cc:97:f6: dd:a6:e9:d1:12:5a:21:75:f9:47:82:2d:33:e2:cc:90:11:fa: 37:f1:78:4b:2a:9e:84:e9:45:cd:00:c6:ab:d0:00:0c:6b:96: c8:49:cf:2f:cb:58:d2:95:ca:2a:f6:6e:87:8a:a4:51:c0:96: fa:ba:f2:cf:96:16:84:93:b4:49:bf:67:33:d5:49:28:92:74: 53:40:0d:35:ed:94:02:7d:fa:93:dc:17:76:82:09:de:16:25: b8:d9:b3:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjQwNTA0MTkwODU1WhcNMjQwNTExMTkwODU1WjAYMRYwFAYD VQQDEw02NjM2ODdjNy0xY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn8u4SyIi78ZAR5hdAaIp5y35vcKIUcauyTlgBa15T7WwuTSe2HPTSIiiFjs bTEhUwh9dWxeRmuejc8QdS5/0iklNbE/WlXsRntxCO8WRlFYGvy2Gj0BG7+JUWFq wcIAT/H9TOk1Ibnr6jt/BKf4Igva4G0XgXLYbwplzjF3jgt3sgK6qQVx4A6BlLSg YuW9W4Hx7GtAeduf498i59Lu6Ew6cNiUcS+L2OMBUonpTGlUuGhlEDzrmlMGhfIM opcZkLBFQDUXDjZZGRbg0D5e8Y5GXHtH3mP9h6eKsGV1+TtgIGdDMD5d3Ce0NIJv n9WphSkJjCRHIYBgDFfEijkSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfkzyMY 4VPqHapq3avFWcaOMZr1MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKRvDAnGM2ZxGagPhr/4+j+HEZf94w4FEh0U2CunRJSJ4nL0UZEbuJ z32YdPLWyX+75YJ1ip4Mw8MNSl74szYVF02d/hPRVeul6rgb0zPWRvvwHFTTady0 3otcSZHID7eFeGPB8GG3kbdMDS42LxEtuW0kWePuOsOog3tbfSTze2ZrUyU25+5a vG3i8SY7as/pC/7TaT2RXkGezdlsY+/Ml/bdpunRElohdflHgi0z4syQEfo38XhL Kp6E6UXNAMar0AAMa5bISc8vy1jSlcoq9m6HiqRRwJb6uvLPlhaEk7RJv2cz1Uko knRTQA017ZQCffqT3Bd2ggneFiW42bOt -----END CERTIFICATE-----Generated at Sat May 4 20:37:18 2024 by rpki-client on console-fra.rpki-client.org