$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: sJLO0f+a3JX0xhP0ceCLuQbxDFw2MAt/63mbdIf+z4Y= Subject key identifier: 73:B8:CF:02:F1:AC:C0:C4:32:49:67:1E:ED:2C:F8:D9:78:0D:47:9F Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 3401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 45EA Signing time: Sat 04 May 2024 14:22:15 +0000 Manifest this update: Sat 04 May 2024 14:22:15 +0000 Manifest next update: Sat 11 May 2024 14:22:15 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: xS8DvmnQma9yBQ0ov0XaFKervGFdhQtmho6zTWDfwuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13313 (0x3401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: May 4 14:22:15 2024 GMT Not After : May 11 14:22:15 2024 GMT Subject: CN=66364497-c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:d3:2a:84:a6:9b:33:fd:ca:a4:9e:c0:38: cd:51:b7:02:a4:5d:b5:6a:40:0f:03:6e:08:2a:94: c1:02:45:6a:41:c9:26:8b:5e:4e:4c:e0:45:43:34: 9d:97:2e:8e:ed:ea:45:23:34:8e:ee:97:f2:58:23: 05:1d:3d:ab:bc:de:c8:8e:7c:cc:f4:79:b4:f3:1b: bc:bf:72:26:1a:2d:4b:8f:b3:a1:fa:92:ca:73:12: 48:f0:03:d2:38:ed:bd:14:98:0d:6c:4d:80:ec:a8: 09:82:2d:d3:9a:01:aa:9a:ab:ce:98:16:7c:02:ae: 7e:f7:8d:2b:11:16:e9:28:27:cd:bf:d8:ac:49:17: a9:3f:28:82:ca:44:03:0e:f7:55:cc:d7:79:1c:b0: 7a:ff:9d:47:23:1d:03:d2:b2:2e:52:a5:43:b7:29: e2:04:2a:7f:ff:40:a5:50:04:60:6c:2f:e1:ce:fa: dd:33:fb:ee:da:74:80:d0:7a:91:fd:d9:95:5b:26: 0c:8c:dc:70:f5:fc:67:df:fb:33:4b:89:fa:75:5e: 91:0b:ff:7f:9b:6c:ab:41:1a:85:fc:d7:fb:f8:42: b0:ba:ac:dc:de:38:7f:f1:d9:49:8a:8e:d3:1e:42: bb:30:88:56:40:b9:65:1d:ac:e2:a5:fc:c9:8f:98: a7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B8:CF:02:F1:AC:C0:C4:32:49:67:1E:ED:2C:F8:D9:78:0D:47:9F X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:12:c2:ee:65:ce:08:88:a2:bc:4a:80:49:8b:fd:ad:04:d2: 86:5d:09:c0:cc:b2:fb:d4:21:12:ec:72:13:83:df:16:30:ad: 14:15:77:5a:6f:2d:ad:bb:a8:74:83:1c:6d:8a:ab:0b:12:95: 6b:bc:30:42:91:59:cd:45:72:0b:1f:8b:45:a8:88:4c:15:8e: 81:2c:db:9c:23:d6:49:57:f6:c2:b6:14:8d:3c:1a:1c:1c:ca: 9e:73:7f:e0:d8:73:e6:81:f9:36:fe:1b:1f:1a:c7:24:1d:f9: 96:78:77:58:ef:8c:18:a4:b4:60:97:cb:1d:12:be:50:2d:10: 42:52:ea:ec:c7:0e:31:a4:d2:e0:58:4d:cd:2c:b5:52:48:5b: d8:ac:65:5b:e7:c4:0b:15:3a:0a:f7:ca:2b:b9:97:0f:5b:54: 1a:b2:fc:9b:cc:4d:98:1e:1d:e6:a5:09:1e:8b:33:39:dc:80: 44:bd:f9:45:79:7c:42:fb:b9:3a:bb:1f:b5:ce:14:66:9b:68: 95:42:4f:cf:df:39:11:16:46:f2:41:d9:5d:b4:92:f6:ef:c9: 93:ed:14:39:3a:14:87:e3:df:c1:b5:24:4b:61:2a:25:61:e6: f1:68:37:30:ed:7b:44:f4:03:f9:87:02:21:85:f7:65:89:1f: e8:2f:04:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjQwNTA0MTQyMjE1WhcNMjQwNTExMTQyMjE1WjAYMRYwFAYD VQQDEw02NjM2NDQ5Ny1jNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbXTKoSmmzP9yqSewDjNUbcCpF21akAPA24IKpTBAkVqQckmi15OTOBFQzSd ly6O7epFIzSO7pfyWCMFHT2rvN7IjnzM9Hm08xu8v3ImGi1Lj7Oh+pLKcxJI8APS OO29FJgNbE2A7KgJgi3TmgGqmqvOmBZ8Aq5+940rERbpKCfNv9isSRepPyiCykQD DvdVzNd5HLB6/51HIx0D0rIuUqVDtyniBCp//0ClUARgbC/hzvrdM/vu2nSA0HqR /dmVWyYMjNxw9fxn3/szS4n6dV6RC/9/m2yrQRqF/Nf7+EKwuqzc3jh/8dlJio7T HkK7MIhWQLllHazipfzJj5infQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO4zwLx rMDEMklnHu0s+Nl4DUefMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoEsLuZc4IiKK8SoBJi/2tBNKGXQnAzLL71CES7HITg98WMK0UFXda by2tu6h0gxxtiqsLEpVrvDBCkVnNRXILH4tFqIhMFY6BLNucI9ZJV/bCthSNPBoc HMqec3/g2HPmgfk2/hsfGsckHfmWeHdY74wYpLRgl8sdEr5QLRBCUursxw4xpNLg WE3NLLVSSFvYrGVb58QLFToK98oruZcPW1QasvybzE2YHh3mpQkeizM53IBEvflF eXxC+7k6ux+1zhRmm2iVQk/P3zkRFkbyQdldtJL278mT7RQ5OhSH49/BtSRLYSol YebxaDcw7XtE9AP5hwIhhfdliR/oLwSB -----END CERTIFICATE-----Generated at Sat May 4 15:45:50 2024 by rpki-client on console-fra.rpki-client.org