$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json) Hash identifier: 9kchxyINKoeLwi7wspX0g2rFeXfATeM6qcCAfYSx9bM= Subject key identifier: A0:E1:F1:12:D8:1D:25:6A:76:6F:AB:CF:84:F3:43:73:9E:7D:F2:6C Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft Manifest number: 0444 Signing time: Sun 05 May 2024 02:04:27 +0000 Manifest this update: Sun 05 May 2024 02:04:27 +0000 Manifest next update: Sun 12 May 2024 02:04:27 +0000 Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: eXuO3KYvM+iQI83+ncniBbRbAl22zPr2kypWW11dwm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Validity Not Before: May 5 02:04:27 2024 GMT Not After : May 12 02:04:27 2024 GMT Subject: CN=6636e92b-2160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:9a:c3:ff:46:65:e0:4d:a9:94:33:5c:78: 25:c8:1f:6c:43:0b:65:a0:0e:6d:53:26:24:3f:9d: 83:d1:8c:0a:16:24:13:8f:20:95:13:fc:21:1c:90: 5a:57:b6:ed:54:bc:d3:0a:e2:97:b3:eb:30:4e:a9: 10:6c:7d:c5:e5:1e:7e:48:8a:ee:4f:2b:03:cd:6e: 61:a6:78:44:95:15:2a:71:73:76:a2:c3:f3:4d:89: 8c:3a:b1:a3:f6:4d:36:ab:09:64:a9:2a:80:35:3a: 42:08:e9:3f:ec:d9:23:55:2d:9f:6c:b8:e0:ff:79: 0a:71:69:fe:ae:5a:0b:ec:73:37:b6:3d:e9:22:8d: de:84:5e:9c:2e:6d:dd:4e:82:3a:ba:2e:42:97:03: 9f:06:42:d3:e5:11:8f:a9:85:85:b2:50:6d:4b:f2: 94:e6:41:eb:92:34:fc:cf:d4:3b:a7:70:d8:9b:66: 79:2b:6c:38:58:3b:e7:7b:0e:a4:a3:c2:5a:f9:3c: 26:81:26:70:8c:30:eb:da:b3:f5:54:06:8b:62:28: 3a:49:11:45:6d:08:9b:c4:56:0c:a8:f2:2c:5b:fd: 84:b3:dc:35:28:f6:6f:fd:2a:69:fe:23:b4:3b:56: 4a:a7:04:bd:90:22:8d:48:42:ea:df:39:90:48:cd: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:F1:12:D8:1D:25:6A:76:6F:AB:CF:84:F3:43:73:9E:7D:F2:6C X509v3 Authority Key Identifier: keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:70:5e:6a:c6:95:f3:c9:27:54:a7:73:f3:9e:be:0d:8b: 4b:fb:8b:72:01:d1:c5:8a:52:6d:81:ee:d0:79:b1:34:59:99: 9d:e7:b5:d3:35:84:36:67:9f:fc:47:eb:62:87:83:37:39:f0: b0:f9:fe:6d:f0:d0:53:2e:21:cb:7e:b7:52:b6:06:8f:f3:dd: 47:cf:6d:59:85:68:c9:48:85:8f:a8:bd:9e:9b:54:ca:c2:1c: d4:88:bf:df:51:d5:82:be:ae:d7:f7:ee:a2:33:60:ab:b2:31: 6c:83:62:6d:5c:5d:8d:cf:50:65:66:58:84:09:ff:54:ca:66: 65:f9:f8:78:9c:a4:e7:a8:62:da:98:06:55:d0:b6:5b:42:06: 89:97:f7:68:5f:4d:1e:74:74:1f:06:e3:99:58:50:38:fb:03: 54:d4:3e:7b:a4:45:fc:70:34:30:6d:d2:f6:11:b4:48:3b:ec: 34:23:a4:ec:4d:a1:e3:d1:df:63:08:02:8d:48:a1:b3:2e:35: 82:ff:01:09:73:53:03:8b:33:6f:1e:70:79:64:a7:ba:41:68: f6:51:3e:85:0a:55:08:23:31:53:31:49:2e:d9:4f:fa:c3:b2: c3:c6:8b:37:bc:ab:40:cd:c2:ca:89:b0:7a:d6:4e:93:c7:82: b1:81:55:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF RDU3NUYxREMwHhcNMjQwNTA1MDIwNDI3WhcNMjQwNTEyMDIwNDI3WjAYMRYwFAYD VQQDEw02NjM2ZTkyYi0yMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcCaw/9GZeBNqZQzXHglyB9sQwtloA5tUyYkP52D0YwKFiQTjyCVE/whHJBa V7btVLzTCuKXs+swTqkQbH3F5R5+SIruTysDzW5hpnhElRUqcXN2osPzTYmMOrGj 9k02qwlkqSqANTpCCOk/7NkjVS2fbLjg/3kKcWn+rloL7HM3tj3pIo3ehF6cLm3d ToI6ui5ClwOfBkLT5RGPqYWFslBtS/KU5kHrkjT8z9Q7p3DYm2Z5K2w4WDvnew6k o8Ja+TwmgSZwjDDr2rP1VAaLYig6SRFFbQibxFYMqPIsW/2Es9w1KPZv/Spp/iO0 O1ZKpwS9kCKNSELq3zmQSM1hfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDh8RLY HSVqdm+rz4TzQ3OeffJsMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp/HBeasaV88knVKdz856+DYtL+4tyAdHFilJtge7QebE0WZmd57XT NYQ2Z5/8R+tih4M3OfCw+f5t8NBTLiHLfrdStgaP891Hz21ZhWjJSIWPqL2em1TK whzUiL/fUdWCvq7X9+6iM2CrsjFsg2JtXF2Nz1BlZliECf9UymZl+fh4nKTnqGLa mAZV0LZbQgaJl/doX00edHQfBuOZWFA4+wNU1D57pEX8cDQwbdL2EbRIO+w0I6Ts TaHj0d9jCAKNSKGzLjWC/wEJc1MDizNvHnB5ZKe6QWj2UT6FClUIIzFTMUku2U/6 w7LDxos3vKtAzcLKibB61k6Tx4KxgVVV -----END CERTIFICATE-----Generated at Sun May 5 03:47:50 2024 by rpki-client on console-fra.rpki-client.org