$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: iu65sjFjAF6WM0oHbkTpfaY5r3+ADoqfhmSF86fkXI4= Subject key identifier: F3:BE:36:15:1A:3F:98:39:94:15:CA:22:9A:93:EA:D2:0E:28:5D:D1 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 36 Signing time: Wed 15 May 2024 08:27:27 +0000 Manifest this update: Wed 15 May 2024 08:27:26 +0000 Manifest next update: Wed 22 May 2024 08:27:26 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: jKqkOraozR/LSwgG7JglnDKMkrp0KghI7jmFboHohpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: May 15 08:27:26 2024 GMT Not After : May 22 08:27:26 2024 GMT Subject: CN=664471ee-6818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:3a:f9:6e:8c:81:a2:dd:39:a4:89:0d:6a: 58:35:20:e4:b0:cc:32:0a:a9:17:04:f6:b0:32:ef: ba:85:f5:30:40:35:40:f6:78:70:3f:55:9b:1f:ff: c1:c8:fb:2f:11:6b:b4:a8:b1:bf:58:bd:13:f8:ea: f0:27:3d:0c:d9:0c:19:94:24:7a:14:9c:10:89:cd: 02:f2:d9:ec:e1:49:30:f0:7b:44:e2:75:3f:04:d4: ac:7a:4a:c4:51:b3:87:76:cc:81:9a:c4:6f:0e:ee: 3d:10:31:b7:2b:db:59:50:e8:e3:2b:f9:e8:72:ce: 70:33:d4:3e:b6:16:9f:a2:9b:d9:5a:e5:f8:f2:96: 5a:e7:8a:6a:bf:7c:0f:bc:2d:f9:31:f8:29:02:34: 24:ea:98:b7:87:9f:be:0b:4f:c1:13:47:88:be:4f: ef:40:65:69:f7:bf:97:95:28:ef:b7:ac:68:04:d3: e5:a5:03:95:a2:22:b9:49:2c:6a:03:57:1a:44:7d: a7:21:55:80:a9:dd:dd:ac:45:ce:19:f3:1a:60:84: 2a:5d:a1:5f:7e:71:cd:19:dd:4a:ce:01:7b:cf:ef: 4d:5f:39:18:73:d7:e8:75:c0:6c:c4:b7:bc:a1:fe: e7:64:45:0c:b9:d2:fe:c3:97:2d:d6:ea:bb:37:08: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BE:36:15:1A:3F:98:39:94:15:CA:22:9A:93:EA:D2:0E:28:5D:D1 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:d1:37:c7:0b:25:b3:f2:b0:dd:a0:c5:e3:9c:8c:c2:5b: 36:11:4e:bc:52:9f:93:c2:c0:03:5e:5c:73:f3:93:f3:c7:e8: bb:86:6f:17:c4:85:1c:0a:26:8a:a0:85:b0:c2:de:0b:e4:c7: 6d:11:ae:99:0a:dd:0f:16:50:50:19:8f:44:9e:0f:ef:f5:ca: 12:4e:1f:6a:09:25:c9:7f:97:79:27:cc:bc:ce:b1:b9:4f:7c: 45:a2:36:cd:a8:53:cf:f5:f4:a6:14:2e:78:ec:fb:72:d6:5f: 41:18:f3:67:c5:18:be:d7:fb:56:4d:b8:50:7d:80:56:e0:69: ed:b7:63:3d:86:c4:db:30:da:46:f9:85:52:4f:dc:3a:86:28: 9b:18:b9:69:05:e2:16:1d:c9:d2:39:a1:f0:82:d4:29:b4:81: 43:8c:a4:ed:ed:e1:3e:8f:c5:bf:8b:95:87:be:07:d9:f0:b7: e9:2c:11:62:2e:a8:79:2f:61:07:5b:a8:0f:2a:a5:35:bb:22: 80:31:0c:2c:20:2b:68:e6:1f:b1:53:ac:7c:26:e3:e5:86:49: 01:7e:a9:6b:e4:4f:a9:cb:39:9c:17:72:92:07:9c:76:ba:c2: 24:dc:82:f6:ad:84:a6:0c:d5:5a:3b:d5:3d:a5:28:73:0f:9c: fd:7f:ad:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTc0MjExMC8GA1UEBRMoNUNBNzI2ODQ3NzM2OEEwRjEyNUVGNDJCOTIwRDc2QzI3 MTI5Q0MyQjAeFw0yNDA1MTUwODI3MjZaFw0yNDA1MjIwODI3MjZaMBgxFjAUBgNV BAMTDTY2NDQ3MWVlLTY4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd+zr5boyBot05pIkNalg1IOSwzDIKqRcE9rAy77qF9TBANUD2eHA/VZsf/8HI +y8Ra7Sosb9YvRP46vAnPQzZDBmUJHoUnBCJzQLy2ezhSTDwe0TidT8E1Kx6SsRR s4d2zIGaxG8O7j0QMbcr21lQ6OMr+ehyznAz1D62Fp+im9la5fjyllrnimq/fA+8 Lfkx+CkCNCTqmLeHn74LT8ETR4i+T+9AZWn3v5eVKO+3rGgE0+WlA5WiIrlJLGoD VxpEfachVYCp3d2sRc4Z8xpghCpdoV9+cc0Z3UrOAXvP701fORhz1+h1wGzEt7yh /udkRQy50v7Dly3W6rs3CI0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8742FRo/ mDmUFcoimpPq0g4oXdEwHwYDVR0jBBgwFoAUXKcmhHc2ig8SXvQrkg12wnEpzCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNzQyL0RCQThBNUUyQzA1 NjExRUU5NzE1NzgxMEM0RjlBRTAyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEtjbWhIYzJpZzhTWHZRcmtnMTJ3bkVwekNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NzQyL0RCQThBNUUyQzA1NjExRUU5NzE1NzgxMEM0RjlBRTAyL1hLY21oSGMyaWc4 U1h2UXJrZzEyd25FcHpDcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILx0TfHCyWz8rDdoMXjnIzCWzYRTrxSn5PCwANeXHPzk/PH6LuGbxfE hRwKJoqghbDC3gvkx20RrpkK3Q8WUFAZj0SeD+/1yhJOH2oJJcl/l3knzLzOsblP fEWiNs2oU8/19KYULnjs+3LWX0EY82fFGL7X+1ZNuFB9gFbgae23Yz2GxNsw2kb5 hVJP3DqGKJsYuWkF4hYdydI5ofCC1Cm0gUOMpO3t4T6Pxb+LlYe+B9nwt+ksEWIu qHkvYQdbqA8qpTW7IoAxDCwgK2jmH7FTrHwm4+WGSQF+qWvkT6nLOZwXcpIHnHa6 wiTcgvathKYM1Vo71T2lKHMPnP1/rTo= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org