$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft File: dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json) Hash identifier: CH/MAGsOrwGRN00cWJU6/uVFV9z95cnS33y5/u94CLY= Subject key identifier: B8:D5:81:42:2A:B3:32:0D:86:8B:23:44:DA:48:C7:EB:59:2F:D2:57 Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Certificate issuer: /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft Manifest number: 33C5 Signing time: Sat 18 May 2024 15:04:38 +0000 Manifest this update: Sat 18 May 2024 15:04:37 +0000 Manifest next update: Sat 25 May 2024 15:04:37 +0000 Files and hashes: 1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: 1A/PLkOSKYe9U2vwHZ0vA4LgQzkDsONMapvJF55rnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Validity Not Before: May 18 15:04:37 2024 GMT Not After : May 25 15:04:37 2024 GMT Subject: CN=6648c386-4dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:59:95:96:73:1e:0a:12:46:18:c9:30:94: 3f:1f:ad:27:fd:81:a8:46:ad:6b:05:ec:9c:aa:cf: 6f:9a:f6:2a:a9:48:9f:00:4f:39:57:8b:8b:be:11: 33:5d:af:4a:e9:41:50:9b:6e:99:26:da:c4:a7:87: 5e:56:91:4e:c9:7e:cd:4d:99:b8:ae:b2:2c:9b:6f: 49:61:e1:07:69:3c:aa:10:8f:0f:17:20:a1:7d:bb: a3:e5:be:e2:23:db:eb:da:b6:c2:14:cf:b9:55:68: d5:47:aa:40:5c:e6:06:46:7d:cf:0c:3e:f7:57:80: 6b:99:65:ab:77:77:98:a0:e3:0e:f5:63:dc:25:96: de:b3:05:2b:ae:71:0e:69:b7:9f:d3:4a:0b:d0:40: e0:21:9d:c5:99:66:b7:dd:c8:0e:4b:57:37:34:ad: da:93:e4:83:5d:97:6d:7f:52:c5:5e:b2:1c:be:03: a1:dc:80:00:3a:af:87:32:2e:98:f4:be:12:57:32: 30:52:8b:bf:e6:6d:96:dc:39:78:16:09:78:f1:ee: 20:ff:1d:a7:8c:a9:a3:20:42:49:f8:27:99:34:98: fb:5b:b2:4c:2b:f6:ad:6d:7f:08:fb:18:14:84:04: 01:34:d4:de:e5:38:c0:e8:41:7d:47:d0:1a:d5:b1: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D5:81:42:2A:B3:32:0D:86:8B:23:44:DA:48:C7:EB:59:2F:D2:57 X509v3 Authority Key Identifier: keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:bc:f4:c1:d7:94:e0:68:2e:91:3b:c4:84:14:e7:f4:6d:ae: d7:9e:f3:16:47:60:09:42:45:39:c9:15:54:4e:7e:41:e7:10: e3:3e:fa:f4:db:b8:be:3b:c0:d9:54:63:7a:4c:98:d3:2c:a4: e0:44:f0:34:71:02:f6:51:ce:69:95:12:87:a2:0d:74:98:01: 5d:59:bd:0a:8d:e7:45:cc:f8:6b:8e:30:a8:69:5c:69:78:74: 0f:12:9e:6b:3d:18:b9:9e:57:74:cd:1d:d2:93:2b:a4:48:f6: 5b:62:6b:63:df:f4:35:02:59:5e:37:63:93:ec:a8:84:ba:05: 5f:a4:b0:0c:14:fb:52:46:e0:73:53:7e:7a:ab:30:3b:65:7e: ab:46:3e:f7:1d:38:52:73:66:79:9d:d5:d9:92:53:06:1d:5c: 21:eb:7e:f7:23:2b:4f:8d:a3:87:4c:0f:46:21:fb:66:b3:4e: 87:af:81:80:35:d3:b3:16:5e:97:5f:40:08:21:49:48:87:77: 14:ba:d1:0d:c1:d2:f4:ce:a3:91:73:31:87:2b:c3:eb:ee:4d: cf:e9:c6:75:f6:8b:89:19:7e:a5:dc:ac:c3:4a:6b:0b:2f:fc: 38:95:01:f6:37:d5:d0:3e:d8:c1:d0:c2:f3:33:6c:7f:45:c4: b1:bd:e7:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3REU3NkNBNDM5 MkQ5RTZFQzMwHhcNMjQwNTE4MTUwNDM3WhcNMjQwNTI1MTUwNDM3WjAYMRYwFAYD VQQDEw02NjQ4YzM4Ni00ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6hZlZZzHgoSRhjJMJQ/H60n/YGoRq1rBeycqs9vmvYqqUifAE85V4uLvhEz Xa9K6UFQm26ZJtrEp4deVpFOyX7NTZm4rrIsm29JYeEHaTyqEI8PFyChfbuj5b7i I9vr2rbCFM+5VWjVR6pAXOYGRn3PDD73V4BrmWWrd3eYoOMO9WPcJZbeswUrrnEO abef00oL0EDgIZ3FmWa33cgOS1c3NK3ak+SDXZdtf1LFXrIcvgOh3IAAOq+HMi6Y 9L4SVzIwUou/5m2W3Dl4Fgl48e4g/x2njKmjIEJJ+CeZNJj7W7JMK/atbX8I+xgU hAQBNNTe5TjA6EF9R9Aa1bHBGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjVgUIq szINhosjRNpIx+tZL9JXMB8GA1UdIwQYMBaAFHRMtAZ3nc96vmnxfedspDktnm7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTM1Qi81NjY3OTI5NjFE OUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHozcS1hZkY5NTJ5a09TMmVi c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFeTBCbmVkejNxLWFmRjk1MnlrT1MyZWJzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5lZHoz cS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQvPTB15TgaC6RO8SEFOf0ba7XnvMWR2AJQkU5yRVUTn5B5xDjPvr0 27i+O8DZVGN6TJjTLKTgRPA0cQL2Uc5plRKHog10mAFdWb0KjedFzPhrjjCoaVxp eHQPEp5rPRi5nld0zR3SkyukSPZbYmtj3/Q1AlleN2OT7KiEugVfpLAMFPtSRuBz U356qzA7ZX6rRj73HThSc2Z5ndXZklMGHVwh6373IytPjaOHTA9GIftms06Hr4GA NdOzFl6XX0AIIUlIh3cUutENwdL0zqORczGHK8Pr7k3P6cZ19ouJGX6l3KzDSmsL L/w4lQH2N9XQPtjB0MLzM2x/RcSxveda -----END CERTIFICATE-----Generated at Sat May 18 15:58:20 2024 by rpki-client on console-ams.rpki-client.org