$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: 45ZTSkdankTy8TJYYLLNsCHXAi+JK7VxA1HPKXxA9+o= Subject key identifier: E4:C3:11:5D:21:FE:9C:46:16:62:BC:0D:6B:D0:6F:48:94:77:76:12 Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 15A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 15A0 Signing time: Mon 06 May 2024 17:20:36 +0000 Manifest this update: Mon 06 May 2024 17:20:36 +0000 Manifest next update: Mon 13 May 2024 17:20:36 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: f5kplzyfrnLxuCfgJCP6R0Nw6Npd5wyu+YKwXEdk9/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5543 (0x15a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: May 6 17:20:36 2024 GMT Not After : May 13 17:20:36 2024 GMT Subject: CN=66391164-52e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:8a:03:1b:66:2f:0f:17:fc:8a:a8:e0:01: 16:25:d4:49:b2:fb:eb:3c:fd:a0:89:69:38:b4:69: 0f:b1:f6:4e:a1:5f:95:3d:b2:ef:c4:d6:22:79:09: 7d:d2:11:ae:0c:ae:f9:ca:9c:16:f5:08:f0:2f:00: 5f:19:65:c2:d8:1a:5c:08:99:67:29:8b:a3:db:f3: bd:20:ac:d6:08:24:68:f2:fc:39:30:ed:95:7a:b4: 07:e6:83:81:57:2e:fa:e5:8d:d3:47:a0:69:0b:b8: e7:db:76:ce:0c:0a:74:94:77:61:66:02:7d:1e:22: 26:f0:c9:b5:de:b6:0c:07:0f:b6:53:fd:5e:09:76: 1a:98:b7:a7:00:54:6f:a1:65:1a:e2:e0:8f:12:42: 55:d6:32:3e:73:95:09:82:8d:3d:96:fb:2b:b0:3a: 7c:7d:73:e4:a6:70:4f:40:f3:2f:54:bd:1b:21:22: 82:98:51:a3:a2:e5:cf:33:33:0a:9d:9c:e3:bb:1d: d3:07:da:18:6c:d9:13:81:1d:d4:cb:2d:69:dc:80: 35:20:ec:00:86:65:1d:ba:91:79:5d:07:53:43:54: 59:22:dd:9d:e3:e6:95:cc:40:63:ac:93:f0:d2:c0: 62:56:e1:5f:5b:d1:53:09:65:66:ec:07:bb:6d:46: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C3:11:5D:21:FE:9C:46:16:62:BC:0D:6B:D0:6F:48:94:77:76:12 X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:35:51:d0:89:14:d8:d6:b6:79:dd:bf:a6:11:fc:4d:52:ff: 6d:c8:fd:14:20:6f:d4:85:93:50:12:48:6c:a4:d5:a0:4b:6a: ae:85:83:6b:39:a6:8b:3f:d0:23:89:5c:ee:07:7f:02:de:c8: 94:78:f1:a4:03:f8:5d:6b:3c:52:ed:a6:f4:e0:7e:3c:7b:ef: f0:cb:72:29:72:8d:de:ba:01:fb:d5:15:48:69:dc:61:b4:53: 20:f1:13:36:60:01:cf:a2:1a:b2:92:de:22:22:19:ca:ba:bc: a5:87:e5:0f:69:e5:db:2b:08:a4:ba:ba:78:8c:d4:55:8c:09: 50:a4:18:20:a1:a8:c2:86:2a:9a:1d:71:b6:e2:9d:72:c1:fb: 42:19:a5:48:71:6c:02:ae:d3:8f:35:68:bd:87:bb:8a:6e:70: ab:a4:66:2c:40:13:7b:c2:00:5a:26:30:f2:69:f4:fe:08:48: 23:7e:8e:ec:45:c3:5c:6c:2a:7d:8a:e4:47:45:89:d9:02:a4: 49:a2:1e:0f:84:e0:98:b4:e4:a7:ed:2e:56:73:89:07:b8:dc: 9f:4e:91:0c:0c:36:fc:ad:8a:4d:27:82:4b:75:e4:35:7c:e0: 53:30:1a:44:a3:52:b6:ea:7f:99:f7:18:19:e9:74:c8:4e:9a: 12:15:14:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjQwNTA2MTcyMDM2WhcNMjQwNTEzMTcyMDM2WjAYMRYwFAYD VQQDEw02NjM5MTE2NC01MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzCKAxtmLw8X/Iqo4AEWJdRJsvvrPP2giWk4tGkPsfZOoV+VPbLvxNYieQl9 0hGuDK75ypwW9QjwLwBfGWXC2BpcCJlnKYuj2/O9IKzWCCRo8vw5MO2VerQH5oOB Vy765Y3TR6BpC7jn23bODAp0lHdhZgJ9HiIm8Mm13rYMBw+2U/1eCXYamLenAFRv oWUa4uCPEkJV1jI+c5UJgo09lvsrsDp8fXPkpnBPQPMvVL0bISKCmFGjouXPMzMK nZzjux3TB9oYbNkTgR3Uyy1p3IA1IOwAhmUdupF5XQdTQ1RZIt2d4+aVzEBjrJPw 0sBiVuFfW9FTCWVm7Ae7bUZIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTDEV0h /pxGFmK8DWvQb0iUd3YSMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0NVHQiRTY1rZ53b+mEfxNUv9tyP0UIG/UhZNQEkhspNWgS2quhYNr OaaLP9AjiVzuB38C3siUePGkA/hdazxS7ab04H48e+/wy3Ipco3eugH71RVIadxh tFMg8RM2YAHPohqykt4iIhnKurylh+UPaeXbKwikurp4jNRVjAlQpBggoajChiqa HXG24p1ywftCGaVIcWwCrtOPNWi9h7uKbnCrpGYsQBN7wgBaJjDyafT+CEgjfo7s RcNcbCp9iuRHRYnZAqRJoh4PhOCYtOSn7S5Wc4kHuNyfTpEMDDb8rYpNJ4JLdeQ1 fOBTMBpEo1K26n+Z9xgZ6XTITpoSFRQI -----END CERTIFICATE-----Generated at Mon May 6 20:19:45 2024 by rpki-client on console-ams.rpki-client.org