$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: BtV+exwxsbFIAJvwHEQbON9XeoADbB6vKa+Q+DSGJU0= Subject key identifier: 7F:FC:4C:C1:BA:25:8A:36:21:C0:C6:19:B2:44:7D:59:78:2B:30:E3 Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9C17 Signing time: Sat 04 May 2024 14:33:19 +0000 Manifest this update: Sat 04 May 2024 14:33:19 +0000 Manifest next update: Sat 11 May 2024 14:33:19 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: 8zq7T79OpjAuh9bZki2rESYbLEJz4G7OxXqdoK5LQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9329 (0x2471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: May 4 14:33:19 2024 GMT Not After : May 11 14:33:19 2024 GMT Subject: CN=6636472f-af41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a3:00:5b:a4:23:71:28:2a:a4:d4:62:99:53: e4:6e:b8:80:2f:2d:7c:4d:d8:3a:0d:86:c9:79:65: 26:23:bf:a5:d8:b9:64:fe:44:62:02:ba:be:a4:14: a4:73:01:19:21:5c:d8:ee:d6:1a:af:30:b5:95:04: 05:31:e9:a5:fa:4a:14:bc:19:1f:13:49:d5:58:ed: 95:91:fe:95:d0:9b:21:cb:9d:0f:b5:dc:23:4f:12: 33:44:e3:8f:5c:c3:49:b4:9e:25:c9:49:4b:e0:82: 53:be:72:6c:12:9f:86:71:be:85:f1:b7:ac:4f:2f: f4:57:a2:b5:0d:d4:24:e1:55:53:5e:67:3a:23:44: ce:ac:51:f2:79:15:31:f0:e0:f0:27:e0:bf:9b:6a: e8:f8:1a:7f:8c:c0:ef:ab:48:fd:9c:db:3f:ad:88: ae:9d:38:6c:a8:7f:b5:98:03:e4:52:8a:68:35:67: 35:6b:20:fd:de:e9:36:61:a8:4b:38:d8:39:d8:b7: 79:c5:a9:89:f4:b7:5f:37:f4:a7:2b:df:50:9a:c6: d5:60:a7:50:64:ca:76:73:0e:20:fe:9a:53:bc:3e: 3e:36:e9:f2:da:3d:ac:55:32:f3:fd:07:0c:de:df: 18:ec:ee:37:fa:ce:b3:7e:73:93:48:d8:86:21:d8: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:4C:C1:BA:25:8A:36:21:C0:C6:19:B2:44:7D:59:78:2B:30:E3 X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e0:21:ea:66:76:f9:94:2d:f6:b5:d6:32:d8:96:9a:5f:ba: af:bf:8b:0e:30:3c:31:55:5a:bc:40:62:69:9f:fb:0a:b2:ea: 9d:07:32:f9:9c:29:1c:9f:f4:3e:e1:99:b5:3f:41:21:e4:95: 5a:93:ac:df:2e:ec:62:01:0c:57:f4:00:12:6f:d7:42:45:79: f6:77:35:fe:e4:74:84:0c:32:9f:cc:06:40:64:83:10:6c:ce: 2e:8c:51:bd:90:24:a3:d7:c3:f4:51:15:08:fc:bf:5f:e1:c5: 6c:82:27:ab:82:d0:30:98:69:42:ee:21:69:56:6d:e6:9f:3e: cc:96:ad:3d:3f:02:6f:de:e8:27:b2:87:e9:d7:53:87:3d:db: 97:8e:fe:3e:77:46:3e:49:fa:5f:c8:d0:6c:f3:ca:2f:be:20: c3:b9:4b:54:bd:07:3c:cc:8a:ae:97:83:c6:a6:5d:28:04:92: 1c:a8:e0:d8:12:07:c5:3e:92:1e:8c:3b:0d:db:89:ed:44:4a: da:48:98:c0:d6:53:eb:04:ce:dd:fd:fe:b0:22:f1:e0:4a:75: 02:cb:fc:70:d6:8f:df:9a:f5:e4:b2:c3:fe:e2:a4:80:97:6f: 8e:28:57:d2:ee:d0:83:77:1f:aa:20:f0:09:85:69:0b:5b:f5: 36:7a:f6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjQwNTA0MTQzMzE5WhcNMjQwNTExMTQzMzE5WjAYMRYwFAYD VQQDEw02NjM2NDcyZi1hZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aMAW6QjcSgqpNRimVPkbriALy18Tdg6DYbJeWUmI7+l2Llk/kRiArq+pBSk cwEZIVzY7tYarzC1lQQFMeml+koUvBkfE0nVWO2Vkf6V0Jshy50PtdwjTxIzROOP XMNJtJ4lyUlL4IJTvnJsEp+Gcb6F8besTy/0V6K1DdQk4VVTXmc6I0TOrFHyeRUx 8ODwJ+C/m2ro+Bp/jMDvq0j9nNs/rYiunThsqH+1mAPkUopoNWc1ayD93uk2YahL ONg52Ld5xamJ9LdfN/SnK99QmsbVYKdQZMp2cw4g/ppTvD4+Nuny2j2sVTLz/QcM 3t8Y7O43+s6zfnOTSNiGIdjIwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/8TMG6 JYo2IcDGGbJEfVl4KzDjMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb4CHqZnb5lC32tdYy2JaaX7qvv4sOMDwxVVq8QGJpn/sKsuqdBzL5 nCkcn/Q+4Zm1P0Eh5JVak6zfLuxiAQxX9AASb9dCRXn2dzX+5HSEDDKfzAZAZIMQ bM4ujFG9kCSj18P0URUI/L9f4cVsgiergtAwmGlC7iFpVm3mnz7Mlq09PwJv3ugn sofp11OHPduXjv4+d0Y+SfpfyNBs88ovviDDuUtUvQc8zIqul4PGpl0oBJIcqODY EgfFPpIejDsN24ntREraSJjA1lPrBM7d/f6wIvHgSnUCy/xw1o/fmvXkssP+4qSA l2+OKFfS7tCDdx+qIPAJhWkLW/U2evZh -----END CERTIFICATE-----Generated at Sat May 4 15:45:50 2024 by rpki-client on console-fra.rpki-client.org