$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json) Hash identifier: b7wJsZKXcOHZrJpqrxPtb/ZKrSM9WjTG8efgomNwUvs= Subject key identifier: 58:B9:2A:03:A7:E2:7A:28:2A:98:E8:58:DF:ED:D2:E9:0F:09:E3:55 Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft Manifest number: 016C Signing time: Wed 01 May 2024 05:08:12 +0000 Manifest this update: Wed 01 May 2024 05:08:12 +0000 Manifest next update: Wed 08 May 2024 05:08:12 +0000 Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: QaC8is8GMWRSSwCilkT0J7/Dg8fIE5yJcPQFHIVoN00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Validity Not Before: May 1 05:08:12 2024 GMT Not After : May 8 05:08:12 2024 GMT Subject: CN=6631ce3c-9add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:d5:b7:4c:ed:f5:bb:ea:2e:e9:2d:3f:54: 12:e8:4e:a3:7c:ae:2f:39:fb:d1:4d:86:f9:58:90: d3:47:9f:69:de:d5:5f:d8:2c:4f:97:7c:8b:13:fc: 51:94:f7:96:92:8f:22:8d:9f:b8:f3:b2:38:4e:6a: 39:30:b4:ff:02:9c:42:a2:3e:f8:58:d3:d5:77:15: d3:c6:b0:d9:38:08:a2:41:9c:d7:67:6e:e3:80:dc: 64:51:34:cb:f6:c2:42:7f:4e:2a:35:4b:84:01:92: 3c:63:28:47:6a:3a:00:83:76:74:bb:f8:e8:95:1f: f6:ac:c0:65:84:c6:6d:78:ee:d0:52:b5:5b:20:2c: 1b:4e:a1:dd:ab:9c:18:e3:8e:c2:ca:61:46:24:26: 5b:a2:88:64:cd:a3:ee:82:49:9a:4e:a0:71:bc:51: 3a:7e:46:e4:fb:9a:f3:40:45:de:01:dc:44:6b:0a: fb:eb:0a:6f:e3:25:17:82:1f:8c:b3:79:e3:67:dd: af:06:c3:c5:65:87:e5:ee:2d:8f:db:fa:57:3c:ba: 38:c0:4a:a9:1f:a9:92:c2:b1:02:d6:ce:46:87:1f: a1:7b:7c:69:c5:e2:9a:5e:a8:c5:15:3d:a9:0f:14: ac:9d:e7:d3:82:db:36:4d:57:4f:43:e3:ad:e7:8a: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B9:2A:03:A7:E2:7A:28:2A:98:E8:58:DF:ED:D2:E9:0F:09:E3:55 X509v3 Authority Key Identifier: keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bc:d8:11:d7:47:3a:cf:43:6a:33:b8:c3:08:1e:e2:9e:c4: 60:66:6c:95:e9:c1:4b:fb:44:61:1f:a2:42:bb:4c:2b:01:d3: ec:f7:e4:17:54:dc:13:93:dc:cf:d7:42:c2:c9:0a:43:86:b8: ce:5a:51:73:3b:9a:e1:f9:a6:ca:95:bb:11:b8:16:3b:73:2e: f6:3a:73:3b:89:92:c5:c3:71:b0:8e:e4:cb:13:e9:fc:79:f3: 40:7c:fc:37:a0:9a:6f:b3:6f:8c:1c:cf:66:aa:89:f3:f2:43: 92:a8:89:5a:fa:f0:3c:dc:94:85:4b:65:d3:98:54:44:4c:ca: 3d:4a:e6:6c:a1:b0:da:0e:d4:14:1a:5c:5e:7a:af:8b:03:12: 9d:11:c3:fb:d8:ca:b7:32:ae:c6:80:92:87:97:0f:14:ce:5a: 17:3f:2d:f9:1b:c0:cc:54:e0:a9:96:ff:d1:09:48:ef:8b:b3: 0d:a1:95:6c:0c:e3:58:b8:33:38:2d:7c:1b:f0:47:b1:4e:b3: a5:40:40:12:8b:f8:10:79:c8:43:98:c8:6d:62:b3:93:46:a8: f5:4c:dc:a7:36:92:0f:23:73:9b:6a:f0:c1:e6:09:e2:fe:99: 64:58:5f:7e:2d:d1:05:4e:a2:65:5c:60:2a:f5:c0:e7:83:fb: d4:d7:04:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3 MzQ5OEUzREUwHhcNMjQwNTAxMDUwODEyWhcNMjQwNTA4MDUwODEyWjAYMRYwFAYD VQQDEw02NjMxY2UzYy05YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufXVt0zt9bvqLuktP1QS6E6jfK4vOfvRTYb5WJDTR59p3tVf2CxPl3yLE/xR lPeWko8ijZ+487I4Tmo5MLT/ApxCoj74WNPVdxXTxrDZOAiiQZzXZ27jgNxkUTTL 9sJCf04qNUuEAZI8YyhHajoAg3Z0u/jolR/2rMBlhMZteO7QUrVbICwbTqHdq5wY 447CymFGJCZboohkzaPugkmaTqBxvFE6fkbk+5rzQEXeAdxEawr76wpv4yUXgh+M s3njZ92vBsPFZYfl7i2P2/pXPLo4wEqpH6mSwrEC1s5Ghx+he3xpxeKaXqjFFT2p DxSsnefTgts2TVdPQ+Ot54oTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi5KgOn 4nooKpjoWN/t0ukPCeNVMB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3 NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0 OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQvNgR10c6z0NqM7jDCB7insRgZmyV6cFL+0RhH6JCu0wrAdPs9+QX VNwTk9zP10LCyQpDhrjOWlFzO5rh+abKlbsRuBY7cy72OnM7iZLFw3GwjuTLE+n8 efNAfPw3oJpvs2+MHM9mqonz8kOSqIla+vA83JSFS2XTmFRETMo9SuZsobDaDtQU Glxeeq+LAxKdEcP72Mq3Mq7GgJKHlw8UzloXPy35G8DMVOCplv/RCUjvi7MNoZVs DONYuDM4LXwb8EexTrOlQEASi/gQechDmMhtYrOTRqj1TNynNpIPI3ObavDB5gni /plkWF9+LdEFTqJlXGAq9cDng/vU1wQX -----END CERTIFICATE-----Generated at Wed May 1 05:59:16 2024 by rpki-client on console-fra.rpki-client.org