$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: KtpIO0TyqMKfQXp6JdKsa7FAbGwkcNCSCvkWGVes010= Subject key identifier: E7:0B:4C:66:B5:A1:22:8B:58:77:A3:37:22:A6:88:03:A0:AD:DC:2A Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 19 Signing time: Wed 15 May 2024 08:52:28 +0000 Manifest this update: Wed 15 May 2024 08:52:28 +0000 Manifest next update: Wed 22 May 2024 08:52:28 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: leVgBc8ExBCUJ6pn2w9DsvC7KCpxGg0+Qj7NSFsxLVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: May 15 08:52:28 2024 GMT Not After : May 22 08:52:28 2024 GMT Subject: CN=664477cc-85e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:b5:e1:e4:82:7e:5e:2f:49:8f:5a:00:ed: a7:62:34:9a:0f:d7:49:15:6b:f1:cb:5f:d0:e7:dc: 10:a9:56:fe:e0:35:86:5f:36:49:ad:c6:dd:32:22: f6:28:7b:89:00:0e:07:f4:41:15:c2:d8:ce:5a:f7: 1f:7b:c3:f4:6e:7d:f5:02:36:7e:b3:2a:bb:c9:e2: 85:b8:73:1d:99:13:d0:7e:1c:73:1d:0b:8b:45:10: a4:0c:a8:4e:36:f1:87:2c:45:33:f8:c2:27:92:3e: 62:8b:d7:0f:67:96:7d:25:61:e2:02:f6:e0:98:0a: 66:73:d8:9e:4f:bd:dd:33:3b:83:74:62:87:76:45: 94:a3:c1:e3:74:a9:84:8d:d4:b3:d6:d5:41:17:7c: d5:d0:4d:13:42:63:9c:e7:96:18:91:1b:2b:bc:a5: d9:ab:c3:27:0c:69:9e:da:93:66:6e:23:75:2a:cf: ef:39:3d:f1:46:1b:27:08:90:e6:e0:43:00:2d:fe: 0d:b7:7a:a9:8b:e2:0e:f2:3d:27:b0:98:15:dc:96: cc:8d:d0:e3:d7:92:80:32:62:91:94:c5:24:0c:c9: 53:93:1d:e3:dc:be:ca:8a:fd:91:2e:b6:9f:94:2c: f4:98:01:c0:ce:42:d6:62:7a:ed:a0:34:b8:0e:ce: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0B:4C:66:B5:A1:22:8B:58:77:A3:37:22:A6:88:03:A0:AD:DC:2A X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:52:4b:5c:ee:72:81:48:15:64:08:19:cb:a2:6f:32:ef:a7: 36:ec:34:6b:8e:55:d0:7d:35:01:70:96:1b:ca:f8:4c:9c:54: d2:9b:4c:d8:4a:ca:6d:cf:82:5e:02:46:6f:4f:01:81:55:b8: 2b:a1:81:9b:7c:de:49:f7:ba:c6:af:8c:89:92:aa:cb:73:57: d2:77:e9:b7:a4:f9:e7:c7:ad:a6:17:e8:39:b3:df:cc:51:43: fb:40:a3:6d:3d:a1:ad:74:67:5f:15:ee:3a:d1:0c:96:cc:88: 27:ec:54:fb:8c:95:f5:ac:53:c3:03:27:5d:eb:96:93:11:7c: 9e:fd:ad:19:65:fa:ce:b6:86:9f:1b:42:1f:b7:b2:59:f7:5c: 69:56:cf:0f:5c:fb:3b:df:1d:d9:c9:40:c1:74:e6:d1:d5:46: d1:28:14:87:8b:fa:15:63:ac:0e:05:ec:bd:3c:13:0f:c7:9f: 12:07:73:b9:62:23:20:2a:fd:62:1b:35:bf:91:5b:15:90:dd: db:ce:74:2a:93:f0:d5:8f:0f:1f:1e:65:fa:e7:6c:df:3d:b5: 62:0e:82:ae:38:90:19:cd:03:dd:f7:d6:53:eb:bb:3e:30:b0: 4b:5c:5f:57:f2:09:25:39:1f:9f:e0:2c:4b:fa:50:f9:0b:17: ec:0b:26:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Mzk4OTExMC8GA1UEBRMoNDZEN0UzQjI0MjY1MEY3NUY4NUM0NTgxMzU4NThEQ0Q4 Qzk5QzIwMzAeFw0yNDA1MTUwODUyMjhaFw0yNDA1MjIwODUyMjhaMBgxFjAUBgNV BAMTDTY2NDQ3N2NjLTg1ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwR7Xh5IJ+Xi9Jj1oA7adiNJoP10kVa/HLX9Dn3BCpVv7gNYZfNkmtxt0yIvYo e4kADgf0QRXC2M5a9x97w/RuffUCNn6zKrvJ4oW4cx2ZE9B+HHMdC4tFEKQMqE42 8YcsRTP4wieSPmKL1w9nln0lYeIC9uCYCmZz2J5Pvd0zO4N0Yod2RZSjweN0qYSN 1LPW1UEXfNXQTRNCY5znlhiRGyu8pdmrwycMaZ7ak2ZuI3Uqz+85PfFGGycIkObg QwAt/g23eqmL4g7yPSewmBXclsyN0OPXkoAyYpGUxSQMyVOTHePcvsqK/ZEutp+U LPSYAcDOQtZieu2gNLgOzidnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5wtMZrWh IotYd6M3IqaIA6Ct3CowHwYDVR0jBBgwFoAURtfjskJlD3X4XEWBNYWNzYyZwgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOTg5LzNBQUMwRTU4RUNE MDExRUU4QTIyNEQ0OUM0RjlBRTAyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5Wndn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnRmanNrSmxEM1g0WEVXQk5ZV056WXlad2dNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OTg5LzNBQUMwRTU4RUNEMDExRUU4QTIyNEQ0OUM0RjlBRTAyL1J0Zmpza0psRDNY NFhFV0JOWVdOell5WndnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElSS1zucoFIFWQIGcuibzLvpzbsNGuOVdB9NQFwlhvK+EycVNKbTNhK ym3Pgl4CRm9PAYFVuCuhgZt83kn3usavjImSqstzV9J36bek+efHraYX6Dmz38xR Q/tAo209oa10Z18V7jrRDJbMiCfsVPuMlfWsU8MDJ13rlpMRfJ79rRll+s62hp8b Qh+3sln3XGlWzw9c+zvfHdnJQMF05tHVRtEoFIeL+hVjrA4F7L08Ew/HnxIHc7li IyAq/WIbNb+RWxWQ3dvOdCqT8NWPDx8eZfrnbN89tWIOgq44kBnNA9331lPruz4w sEtcX1fyCSU5H5/gLEv6UPkLF+wLJgw= -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org