$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: W7a5DB+TvWCyF+YQERZREjbRfMnbWDnUTQ/IPWc38iU= Subject key identifier: 01:93:88:ED:F4:B5:A0:4C:E6:D9:11:EA:B1:8A:49:AE:7E:93:FE:50 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 0112 Signing time: Sun 05 May 2024 05:23:33 +0000 Manifest this update: Sun 05 May 2024 05:23:33 +0000 Manifest next update: Sun 12 May 2024 05:23:33 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 43xMqEJQu/PWf5GUfLsGkjiClnrtn5aDdk/ZiC+ta6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: May 5 05:23:33 2024 GMT Not After : May 12 05:23:33 2024 GMT Subject: CN=663717d5-1fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:f7:55:7f:f1:b9:2d:93:7a:04:44:37:f5: ef:4e:bb:55:a1:bd:b1:cd:db:83:73:1b:f1:a4:cc: 56:03:ee:65:ec:bb:81:64:b4:50:22:8e:9c:c2:78: 56:41:d1:17:d3:78:ca:90:ab:cf:ee:c3:c9:8e:51: a6:bf:98:d4:3b:7f:1d:00:36:d3:f6:66:f1:b6:f1: d4:e4:37:6d:3c:e0:2f:ce:6c:d0:eb:04:df:76:2b: da:e9:b6:a1:aa:6c:68:6c:15:e2:d5:99:d0:f1:b0: 8a:fb:1e:fb:71:7b:14:4f:1f:ed:93:ef:c7:51:b5: 41:64:9c:db:2d:d8:65:af:9f:b8:e3:73:02:92:05: 71:42:0d:ff:72:58:61:41:e6:6d:93:37:24:a7:f3: 14:c6:52:a8:3f:a8:78:1f:a4:ca:e4:04:23:68:ae: 95:7e:2e:fa:3a:6b:d8:0f:ce:15:32:45:63:06:c9: 7d:8e:15:96:44:3d:df:fc:fb:2b:c5:69:10:9a:3b: 63:5a:aa:47:c9:08:8e:78:7c:5e:57:ad:51:8c:31: 1e:f0:15:b0:37:f7:14:d7:87:98:cd:c5:13:70:13: 4d:d7:e9:66:fc:60:ef:4b:71:a2:dc:b6:54:89:b7: e5:d4:80:6b:49:1f:2a:c7:e1:ee:e7:52:fa:91:0d: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:88:ED:F4:B5:A0:4C:E6:D9:11:EA:B1:8A:49:AE:7E:93:FE:50 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b9:48:6e:64:29:9b:d4:68:c6:e9:23:82:4b:45:61:21:e1: 2e:cd:a3:25:0a:18:9c:e6:4a:0d:bb:41:71:1a:3f:e9:01:03: ea:07:19:13:50:3f:a6:33:5f:c8:8f:0e:0f:3d:b7:e5:ae:5b: 8a:7a:1e:6e:4c:bd:38:73:c7:d3:97:80:59:e6:26:00:b0:e4: e2:f3:38:d3:52:18:9a:f6:4b:0e:50:29:ab:6f:07:18:7e:72: 0b:66:a0:40:f2:06:7d:7c:89:4e:b8:58:57:58:99:2a:5e:47: 2c:64:b2:58:92:62:af:51:dc:ee:69:09:7f:3a:d5:46:0d:07: e6:62:26:42:b2:3d:a6:11:1a:08:d6:c0:d3:15:09:06:0d:9b: 5a:c4:f5:48:87:75:b4:2d:92:67:8e:42:cc:91:cd:1c:40:1d: 0d:a1:48:c5:f4:29:08:07:55:42:a9:5f:83:4a:d2:eb:b3:2d: f9:d3:87:64:93:77:da:7b:c2:24:a9:28:c0:b2:f3:74:03:82: 35:c9:6f:c1:84:fd:39:b0:69:f9:1e:73:fd:81:25:90:19:49: 61:f0:d0:d0:e6:0a:8a:39:22:9a:e6:05:62:22:07:d1:c6:e5: 2d:14:32:4e:ed:d4:54:72:e8:dc:65:4b:ac:c0:00:05:6f:7a: 31:ef:48:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjQwNTA1MDUyMzMzWhcNMjQwNTEyMDUyMzMzWjAYMRYwFAYD VQQDEw02NjM3MTdkNS0xZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTf3VX/xuS2TegREN/XvTrtVob2xzduDcxvxpMxWA+5l7LuBZLRQIo6cwnhW QdEX03jKkKvP7sPJjlGmv5jUO38dADbT9mbxtvHU5DdtPOAvzmzQ6wTfdiva6bah qmxobBXi1ZnQ8bCK+x77cXsUTx/tk+/HUbVBZJzbLdhlr5+443MCkgVxQg3/clhh QeZtkzckp/MUxlKoP6h4H6TK5AQjaK6Vfi76OmvYD84VMkVjBsl9jhWWRD3f/Psr xWkQmjtjWqpHyQiOeHxeV61RjDEe8BWwN/cU14eYzcUTcBNN1+lm/GDvS3Gi3LZU ibfl1IBrSR8qx+Hu51L6kQ39/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGTiO30 taBM5tkR6rGKSa5+k/5QMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzuUhuZCmb1GjG6SOCS0VhIeEuzaMlChic5koNu0FxGj/pAQPqBxkT UD+mM1/Ijw4PPbflrluKeh5uTL04c8fTl4BZ5iYAsOTi8zjTUhia9ksOUCmrbwcY fnILZqBA8gZ9fIlOuFhXWJkqXkcsZLJYkmKvUdzuaQl/OtVGDQfmYiZCsj2mERoI 1sDTFQkGDZtaxPVIh3W0LZJnjkLMkc0cQB0NoUjF9CkIB1VCqV+DStLrsy3504dk k3fae8IkqSjAsvN0A4I1yW/BhP05sGn5HnP9gSWQGUlh8NDQ5gqKOSKa5gViIgfR xuUtFDJO7dRUcujcZUuswAAFb3ox70hL -----END CERTIFICATE-----Generated at Sun May 5 06:01:20 2024 by rpki-client on console-fra.rpki-client.org