$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: 8qZtYmqW7kM1V8El9Xt6p0wwkomsFp0nrL+wiGFZ9NY= Subject key identifier: CA:C7:49:B9:98:E7:60:CF:1B:51:AF:23:0D:CF:4A:14:D5:65:98:E5 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 21B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 21B8 Signing time: Thu 02 May 2024 14:43:40 +0000 Manifest this update: Thu 02 May 2024 14:43:39 +0000 Manifest next update: Thu 09 May 2024 14:43:39 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: lqbzJz53Ji6B6ck3aAzwFJ9DoI6zPYoAgP62l0AjteU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8632 (0x21b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: May 2 14:43:39 2024 GMT Not After : May 9 14:43:39 2024 GMT Subject: CN=6633a69b-4088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:c0:f7:71:09:e5:95:ed:f4:e3:20:00:7d: 69:52:c6:53:6e:65:5f:38:d6:0e:36:e3:29:53:95: 6b:c7:41:36:ca:16:0c:28:f6:91:17:89:4d:e6:d1: cd:de:51:fc:8e:95:58:06:8f:df:c9:88:66:60:6c: 72:b7:14:ba:ce:ea:f3:69:32:cf:be:db:73:2c:3c: 62:15:94:9d:8c:af:89:15:83:e7:5e:bf:b2:06:e1: d2:fd:53:97:1b:b4:ba:f1:0e:fd:90:21:7a:1c:75: cc:b6:5e:ad:7a:85:24:bc:f2:f0:76:08:e7:21:52: 42:1e:39:eb:f2:88:81:1c:cf:50:7d:ef:5a:79:98: 78:d3:72:b5:6a:ff:6e:5d:20:0d:55:db:5c:f9:2c: 69:97:eb:ed:de:7a:34:2b:17:33:55:8e:b3:ba:9d: 45:52:8e:e6:0d:4f:01:ae:bf:81:15:bb:17:40:34: 26:60:36:17:cc:e8:0c:74:b3:d2:ed:32:aa:73:aa: d2:83:17:c1:82:0d:51:4a:4a:15:29:a2:2c:48:44: 33:8b:40:e6:1d:c7:23:aa:18:28:ff:26:af:de:a7: a5:6c:dd:1c:8c:4f:0d:e1:af:3b:84:19:9d:90:c0: 76:0c:8f:a2:e3:f8:6d:e9:19:88:d4:70:38:3b:69: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C7:49:B9:98:E7:60:CF:1B:51:AF:23:0D:CF:4A:14:D5:65:98:E5 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9b:d0:a4:2f:c7:92:7b:e9:d7:6f:6b:0a:2f:18:83:f7:11: 0a:c3:1a:49:a1:48:36:23:ff:c8:8f:96:ec:a0:d4:ca:11:e9: 16:ed:cd:fa:29:1a:1f:96:5a:8d:da:d6:21:f0:94:90:72:d7: 93:01:7c:0b:07:78:f6:ea:57:88:af:90:bf:f3:b1:45:41:f7: 8d:ab:9d:c6:d9:29:a8:69:dc:2c:b3:0d:9a:cf:0f:fb:2a:8c: 28:dc:2a:8e:c0:f2:51:78:44:0c:ec:50:8f:84:47:b4:d6:60: 50:c5:ed:c5:52:05:63:f7:5f:22:d7:04:5c:44:18:00:28:c4: dc:2b:ec:00:f0:26:10:66:b3:4e:ec:34:6c:0a:1d:00:9b:f0: 0a:92:c6:21:5a:ee:7e:cd:07:5f:46:16:5d:02:c6:9e:85:d8: f6:a6:67:96:4d:32:0b:a4:57:cd:58:66:05:41:15:44:cd:d6: 47:7a:c9:f5:4e:6d:c7:05:26:f5:3b:5a:c4:9f:d9:a2:8d:79: 3b:d3:93:3a:13:9e:6d:ff:56:a2:4f:51:ee:36:d6:73:0d:c3: f0:ee:dc:09:09:1e:f2:95:00:17:0d:50:1f:08:0d:66:7a:78: 4f:92:fb:07:5f:a6:62:88:ce:b3:78:35:8f:0b:7b:de:2a:0e: 68:a5:37:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjQwNTAyMTQ0MzM5WhcNMjQwNTA5MTQ0MzM5WjAYMRYwFAYD VQQDEw02NjMzYTY5Yi00MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k/A93EJ5ZXt9OMgAH1pUsZTbmVfONYONuMpU5Vrx0E2yhYMKPaRF4lN5tHN 3lH8jpVYBo/fyYhmYGxytxS6zurzaTLPvttzLDxiFZSdjK+JFYPnXr+yBuHS/VOX G7S68Q79kCF6HHXMtl6teoUkvPLwdgjnIVJCHjnr8oiBHM9Qfe9aeZh403K1av9u XSANVdtc+Sxpl+vt3no0KxczVY6zup1FUo7mDU8Brr+BFbsXQDQmYDYXzOgMdLPS 7TKqc6rSgxfBgg1RSkoVKaIsSEQzi0DmHccjqhgo/yav3qelbN0cjE8N4a87hBmd kMB2DI+i4/ht6RmI1HA4O2nQnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrHSbmY 52DPG1GvIw3PShTVZZjlMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7m9CkL8eSe+nXb2sKLxiD9xEKwxpJoUg2I//Ij5bsoNTKEekW7c36 KRofllqN2tYh8JSQcteTAXwLB3j26leIr5C/87FFQfeNq53G2Smoadwssw2azw/7 Kowo3CqOwPJReEQM7FCPhEe01mBQxe3FUgVj918i1wRcRBgAKMTcK+wA8CYQZrNO 7DRsCh0Am/AKksYhWu5+zQdfRhZdAsaehdj2pmeWTTILpFfNWGYFQRVEzdZHesn1 Tm3HBSb1O1rEn9mijXk705M6E55t/1aiT1HuNtZzDcPw7twJCR7ylQAXDVAfCA1m enhPkvsHX6ZiiM6zeDWPC3veKg5opTd9 -----END CERTIFICATE-----Generated at Thu May 2 17:43:51 2024 by rpki-client on console-fra.rpki-client.org