$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft File: Svoha2870BGo8RCzZ1Fbs97ZxQA.mft (raw, json) Hash identifier: zz63pq4lVl6wgN3bnnALzD7CM4h04xaVDGdZ0i2orcg= Subject key identifier: BA:F4:99:E4:9C:BD:B3:23:B5:00:ED:53:1E:B5:6D:B0:3B:98:1C:04 Authority key identifier: 4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 Certificate issuer: /CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft Manifest number: 8D Signing time: Sun 19 May 2024 07:01:16 +0000 Manifest this update: Sun 19 May 2024 07:01:15 +0000 Manifest next update: Sun 26 May 2024 07:01:15 +0000 Files and hashes: 1: Svoha2870BGo8RCzZ1Fbs97ZxQA.crl (hash: /HhE8ooZMNGVh2+aUZFuELfoB2bxeoq/D7DfAIlHApQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE65/serialNumber=4AFA216B6F3BD011A8F110B367515BB3DED9C500 Validity Not Before: May 19 07:01:15 2024 GMT Not After : May 26 07:01:15 2024 GMT Subject: CN=6649a3bc-21b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:31:63:e0:e9:16:05:7c:7f:7d:fb:33:31: bc:59:25:66:a6:73:8f:d3:a1:3f:56:3d:69:ea:eb: f4:4c:e2:8d:3c:84:74:c3:e2:f0:54:74:ad:5b:db: 93:25:62:12:3c:9f:b0:fb:1b:e7:11:84:96:d8:f4: 5c:05:4b:83:b4:33:be:dc:9f:65:9f:f9:88:65:7e: ec:54:75:42:55:f1:d7:f9:a0:10:b4:aa:ed:d3:dc: 82:9a:43:1e:d6:12:f7:76:1f:e4:18:c5:33:57:f0: d2:a4:85:ee:06:9b:f3:85:9d:39:7f:41:a2:c9:da: f2:67:08:e7:58:79:24:05:7c:99:05:20:2b:ab:7f: d4:78:cd:38:b2:9a:c3:3d:3c:27:9e:3b:b8:0f:be: 89:4b:13:16:03:11:84:09:42:18:7f:8d:e0:d0:fb: 4d:c8:41:39:77:d7:a2:6d:ef:45:f5:ed:69:56:32: a3:0e:60:d2:c8:71:c5:6f:cb:d2:ea:22:1e:57:b8: 8d:1b:ee:d1:31:61:c0:a0:de:fc:ee:ba:06:87:75: e6:38:06:f1:fa:48:5e:a6:7f:39:48:e6:8f:05:c3: c1:ab:f1:6c:aa:80:9e:59:65:cc:7c:d9:84:ea:0d: f5:52:91:3d:e8:30:d7:61:48:2c:da:c2:b9:14:2f: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F4:99:E4:9C:BD:B3:23:B5:00:ED:53:1E:B5:6D:B0:3B:98:1C:04 X509v3 Authority Key Identifier: keyid:4A:FA:21:6B:6F:3B:D0:11:A8:F1:10:B3:67:51:5B:B3:DE:D9:C5:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Svoha2870BGo8RCzZ1Fbs97ZxQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE65/53D73C863FF111EEBA776748C4F9AE02/Svoha2870BGo8RCzZ1Fbs97ZxQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1a:d3:99:1a:2b:ea:78:44:b6:57:e5:9c:95:29:e7:58:53: e5:27:84:8a:e4:e6:e3:d5:12:91:96:aa:0f:8d:b7:99:38:66: 6a:ad:15:77:28:36:e2:f2:08:2b:b0:ba:56:99:9a:80:41:11: e9:0e:cf:33:ca:bd:d1:e1:27:eb:5c:a5:75:5d:d2:b5:65:33: 8a:b0:19:fd:bd:a5:76:a0:1f:6c:8e:8e:57:cc:91:ac:f1:01: 31:3e:ab:3c:6c:e3:d3:23:34:8e:fe:5c:67:b9:ff:68:a6:c4: 9b:40:3d:7d:a7:b1:ba:6c:78:4c:95:bd:2e:96:e4:7d:d1:a0: 9b:bc:25:1c:4c:0b:64:03:8d:21:b3:9a:6e:38:c6:f3:43:a0: 03:51:8f:c9:ca:46:1a:cc:43:c5:96:1d:4a:02:a6:a8:4c:b4: 72:5c:13:63:cb:c3:5c:71:58:1c:9b:40:7f:f1:4e:27:21:a0: 7e:49:58:6b:32:53:d2:47:59:22:be:7e:7e:f8:25:83:29:ca: 47:a3:7b:3e:c8:69:fb:bb:56:79:17:6f:98:69:6e:53:e1:77: 11:7b:9e:a3:fc:9a:9a:d1:10:33:9f:0b:53:e3:ea:a2:b8:f6: a1:84:6a:b3:d6:3d:08:38:e8:60:5c:ec:10:ee:a5:e8:be:9e: 40:28:d1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZFNjUxMTAvBgNVBAUTKDRBRkEyMTZCNkYzQkQwMTFBOEYxMTBCMzY3NTE1QkIz REVEOUM1MDAwHhcNMjQwNTE5MDcwMTE1WhcNMjQwNTI2MDcwMTE1WjAYMRYwFAYD VQQDEw02NjQ5YTNiYy0yMWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bMxY+DpFgV8f337MzG8WSVmpnOP06E/Vj1p6uv0TOKNPIR0w+LwVHStW9uT JWISPJ+w+xvnEYSW2PRcBUuDtDO+3J9ln/mIZX7sVHVCVfHX+aAQtKrt09yCmkMe 1hL3dh/kGMUzV/DSpIXuBpvzhZ05f0GiydryZwjnWHkkBXyZBSArq3/UeM04sprD PTwnnju4D76JSxMWAxGECUIYf43g0PtNyEE5d9eibe9F9e1pVjKjDmDSyHHFb8vS 6iIeV7iNG+7RMWHAoN787roGh3XmOAbx+khepn85SOaPBcPBq/FsqoCeWWXMfNmE 6g31UpE96DDXYUgs2sK5FC/8sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr0meSc vbMjtQDtUx61bbA7mBwEMB8GA1UdIwQYMBaAFEr6IWtvO9ARqPEQs2dRW7Pe2cUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkU2NS81M0Q3M0M4NjNG RjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBCR284UkN6WjFGYnM5N1p4 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N2b2hhMjg3MEJHbzhSQ3paMUZiczk3WnhRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkU2NS81M0Q3M0M4NjNGRjExMUVFQkE3NzY3NDhDNEY5QUUwMi9Tdm9oYTI4NzBC R284UkN6WjFGYnM5N1p4UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKGtOZGivqeES2V+WclSnnWFPlJ4SK5Obj1RKRlqoPjbeZOGZqrRV3 KDbi8ggrsLpWmZqAQRHpDs8zyr3R4SfrXKV1XdK1ZTOKsBn9vaV2oB9sjo5XzJGs 8QExPqs8bOPTIzSO/lxnuf9opsSbQD19p7G6bHhMlb0uluR90aCbvCUcTAtkA40h s5puOMbzQ6ADUY/JykYazEPFlh1KAqaoTLRyXBNjy8NccVgcm0B/8U4nIaB+SVhr MlPSR1kivn5++CWDKcpHo3s+yGn7u1Z5F2+YaW5T4XcRe56j/Jqa0RAznwtT4+qi uPahhGqz1j0IOOhgXOwQ7qXovp5AKNFG -----END CERTIFICATE-----Generated at Sun May 19 08:24:57 2024 by rpki-client on console-ams.rpki-client.org