$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: 36saPzGu02LVQSqYicVRBwJJZR3jgcDZiEF2OUIbzrg= Subject key identifier: 55:6D:D6:3F:0F:E5:84:29:D5:B2:F5:DD:32:52:43:FF:B4:40:56:CE Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 33D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 4594 Signing time: Fri 26 Apr 2024 14:22:15 +0000 Manifest this update: Fri 26 Apr 2024 14:22:14 +0000 Manifest next update: Fri 03 May 2024 14:22:14 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: h7j3qb+M6EkzeSNWz3PFkoJN7u6/Q0+URTGvy5bm05w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13268 (0x33d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Apr 26 14:22:14 2024 GMT Not After : May 3 14:22:14 2024 GMT Subject: CN=662bb896-112c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:63:fb:28:42:f5:42:0e:7f:a1:d9:6d:ea: 71:ba:ac:5b:52:49:bb:d5:ce:0e:a5:e2:14:1e:b7: 9d:74:39:cf:10:8e:53:95:da:32:88:3a:ba:51:51: c5:90:05:5a:8e:e8:38:bc:b7:2f:0c:fe:76:1a:fc: 54:5b:99:44:1b:84:59:9a:e4:15:2e:41:70:56:39: b7:6f:d0:73:22:23:05:ec:5d:b7:73:61:4a:30:6c: d4:52:ba:85:70:41:e0:81:7f:05:a9:a2:5d:a1:22: 26:88:84:68:b2:f2:dc:05:6c:b2:df:17:6f:14:33: 74:c9:2c:4c:45:28:d2:9d:83:fa:d3:ee:2e:9e:1c: f4:72:1b:dc:f4:9b:27:af:55:00:5b:69:99:97:79: 25:e6:1b:25:6f:f6:43:1d:43:dc:c4:fd:06:61:14: f7:a5:82:34:26:30:03:93:f1:b9:db:64:b4:fa:e6: 66:2e:b6:a3:38:03:65:d0:11:90:24:46:48:f6:29: c1:17:fa:89:05:db:47:c7:b5:c5:73:3a:2a:b2:cc: ad:d7:8b:11:20:46:c6:78:04:bc:5f:9e:79:c7:15: 43:c0:a2:2f:e7:bb:34:e9:04:37:15:2c:8f:08:f2: 01:eb:7a:fa:d2:ae:de:31:89:ca:55:e9:c7:be:b0: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6D:D6:3F:0F:E5:84:29:D5:B2:F5:DD:32:52:43:FF:B4:40:56:CE X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:24:4b:48:15:4e:70:47:82:9c:3c:51:01:85:4c:14:44:d5: 18:9e:4a:20:2b:57:10:2f:77:a2:03:47:d5:e2:6f:6d:54:e6: bc:75:54:6f:2b:36:7e:14:d2:50:0e:41:46:ed:32:2d:20:0b: 3f:9b:24:85:70:14:46:62:3a:6b:80:27:2d:14:56:30:f6:5c: 08:79:ee:ee:81:ce:e9:c3:4a:48:9d:91:aa:f5:00:64:69:b1: 77:2f:17:9d:4b:30:c2:9d:af:99:ae:69:52:30:9b:aa:21:65: 57:69:22:97:82:85:19:6d:68:93:e4:d9:f9:d9:43:ef:e6:40: 94:42:12:f0:70:96:25:b3:98:7d:e4:c1:06:7f:f9:80:1b:31: 4c:54:5d:6f:85:6f:98:30:ff:15:88:c5:bd:ff:ff:37:40:2d: 36:02:ef:20:6d:68:3a:7f:ee:8c:96:84:5e:fa:44:a7:eb:39: 32:90:08:6f:b8:db:7d:66:d9:0d:88:1a:81:c2:c6:b4:5e:6d: 2c:72:bf:c6:a6:87:8c:19:28:c3:24:5a:39:9c:5b:a5:0c:98: 44:f3:30:ed:00:0d:f7:28:0c:ce:08:de:07:ac:61:b7:8e:35: a8:26:2f:43:b3:62:8a:72:68:ba:da:13:0a:54:aa:f6:c5:21: 24:ae:ef:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjQwNDI2MTQyMjE0WhcNMjQwNTAzMTQyMjE0WjAYMRYwFAYD VQQDEw02NjJiYjg5Ni0xMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jtj+yhC9UIOf6HZbepxuqxbUkm71c4OpeIUHreddDnPEI5TldoyiDq6UVHF kAVajug4vLcvDP52GvxUW5lEG4RZmuQVLkFwVjm3b9BzIiMF7F23c2FKMGzUUrqF cEHggX8FqaJdoSImiIRosvLcBWyy3xdvFDN0ySxMRSjSnYP60+4unhz0chvc9Jsn r1UAW2mZl3kl5hslb/ZDHUPcxP0GYRT3pYI0JjADk/G522S0+uZmLrajOANl0BGQ JEZI9inBF/qJBdtHx7XFczoqssyt14sRIEbGeAS8X555xxVDwKIv57s06QQ3FSyP CPIB63r60q7eMYnKVenHvrBimwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVt1j8P 5YQp1bL13TJSQ/+0QFbOMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWJEtIFU5wR4KcPFEBhUwURNUYnkogK1cQL3eiA0fV4m9tVOa8dVRv KzZ+FNJQDkFG7TItIAs/mySFcBRGYjprgCctFFYw9lwIee7ugc7pw0pInZGq9QBk abF3LxedSzDCna+ZrmlSMJuqIWVXaSKXgoUZbWiT5Nn52UPv5kCUQhLwcJYls5h9 5MEGf/mAGzFMVF1vhW+YMP8ViMW9//83QC02Au8gbWg6f+6MloRe+kSn6zkykAhv uNt9ZtkNiBqBwsa0Xm0scr/GpoeMGSjDJFo5nFulDJhE8zDtAA33KAzOCN4HrGG3 jjWoJi9Ds2KKcmi62hMKVKr2xSEkru9C -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:48 2024 by rpki-client on console-ams.rpki-client.org