$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: vKcNxOy2cIQAUk71YyKidP/+AxS6AaZFOwZKY3OS+Qk= Subject key identifier: CC:66:06:D7:ED:22:34:5A:A9:A9:A0:DB:B0:A3:17:59:41:9C:6C:E5 Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 33BF Signing time: Sat 18 May 2024 15:23:56 +0000 Manifest this update: Sat 18 May 2024 15:23:56 +0000 Manifest next update: Sat 25 May 2024 15:23:56 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: qK6XyUdtYYek5+HlY+Ga6jez/aOeCXEVe+YukNeNjZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: May 18 15:23:56 2024 GMT Not After : May 25 15:23:56 2024 GMT Subject: CN=6648c80c-1691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:af:87:fd:fb:0b:c3:6b:77:f4:e3:79:b2: 6b:ea:c7:43:5c:00:66:db:bf:1e:22:16:61:75:38: cc:04:0c:cf:09:35:b4:dd:3c:6f:09:61:06:34:44: bb:b5:10:8c:2c:d2:c9:99:f0:e3:c3:dc:fd:da:3d: 53:1c:65:bd:cc:19:16:01:c3:55:37:0b:95:cf:69: 0f:14:da:ba:b9:f8:e1:35:f0:0d:09:47:08:ad:76: 16:b9:97:44:ad:46:c7:18:8e:44:63:df:6a:69:09: ab:c3:2a:e3:74:a4:e2:a3:4a:57:30:bf:d9:ad:77: 4d:ea:7e:95:c9:bf:51:3a:ce:dc:76:ef:e0:f8:ba: a6:33:a2:48:6c:b9:19:77:89:d9:9c:e8:b3:b6:7b: b0:c2:1a:f1:04:9c:5a:27:96:cf:71:bb:cf:20:f2: 69:27:58:46:69:51:65:02:9d:fb:f1:d7:84:e2:0d: e4:bd:74:24:c2:98:a9:8e:88:42:79:39:7e:99:ca: ef:75:35:8c:35:31:84:e7:ca:c5:0b:c6:2a:00:42: 0b:ca:fe:4c:6c:00:69:c5:43:ad:e5:94:2d:fb:5f: 74:86:36:da:5a:15:b7:ab:07:b1:5d:c6:b6:8f:6c: a1:93:65:d1:c1:31:e7:3b:5d:c6:f0:19:da:a1:2e: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:66:06:D7:ED:22:34:5A:A9:A9:A0:DB:B0:A3:17:59:41:9C:6C:E5 X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:33:ad:4d:99:94:c4:ef:09:5b:c0:51:ab:94:6b:f4:5c:55: b0:23:c5:5a:45:28:b9:22:d0:ef:91:96:06:fd:eb:f1:3a:46: f7:a7:e6:5e:e2:b9:d9:23:2a:7a:e0:8d:fb:95:75:97:45:ca: 57:29:3c:06:1c:1d:00:04:e9:c5:33:62:80:66:10:69:12:79: 80:4c:c0:f7:77:0e:b0:ad:53:bc:ae:2b:53:93:13:f7:06:cb: 93:72:95:0d:cc:e8:f2:84:8f:ab:52:24:01:f1:59:ba:e3:f5: a1:1f:43:7c:4a:6e:fb:5f:cc:6b:06:e2:e1:66:89:66:c1:c3: 4c:29:4e:36:ea:86:c2:84:70:81:58:a2:1a:b9:40:5e:28:dd: 13:d7:28:7b:36:b1:b7:a8:5d:cf:d5:af:b4:e9:1c:de:a5:8f: c3:d9:9d:01:62:40:0f:ba:9b:3a:98:a0:81:2c:ca:87:f4:83: 0b:35:4c:7a:9d:f0:f8:fb:7d:a3:15:20:fb:03:1a:84:12:76: 6f:a2:bc:72:91:12:24:ec:d4:80:9b:e6:ce:d2:a9:7f:75:bf: 1c:61:71:ec:86:e8:f4:53:c8:05:3c:89:5c:4b:5b:f4:a7:21: 7f:ec:57:a4:6c:b5:ed:e1:7f:e9:5a:14:61:a7:57:a8:c3:e2: a2:0d:29:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjQwNTE4MTUyMzU2WhcNMjQwNTI1MTUyMzU2WjAYMRYwFAYD VQQDEw02NjQ4YzgwYy0xNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCGvh/37C8Nrd/TjebJr6sdDXABm278eIhZhdTjMBAzPCTW03TxvCWEGNES7 tRCMLNLJmfDjw9z92j1THGW9zBkWAcNVNwuVz2kPFNq6ufjhNfANCUcIrXYWuZdE rUbHGI5EY99qaQmrwyrjdKTio0pXML/ZrXdN6n6Vyb9ROs7cdu/g+LqmM6JIbLkZ d4nZnOiztnuwwhrxBJxaJ5bPcbvPIPJpJ1hGaVFlAp378deE4g3kvXQkwpipjohC eTl+mcrvdTWMNTGE58rFC8YqAEILyv5MbABpxUOt5ZQt+190hjbaWhW3qwexXca2 j2yhk2XRwTHnO13G8BnaoS7pFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxmBtft IjRaqamg27CjF1lBnGzlMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpM61NmZTE7wlbwFGrlGv0XFWwI8VaRSi5ItDvkZYG/evxOkb3p+Ze 4rnZIyp64I37lXWXRcpXKTwGHB0ABOnFM2KAZhBpEnmATMD3dw6wrVO8ritTkxP3 BsuTcpUNzOjyhI+rUiQB8Vm64/WhH0N8Sm77X8xrBuLhZolmwcNMKU426obChHCB WKIauUBeKN0T1yh7NrG3qF3P1a+06RzepY/D2Z0BYkAPups6mKCBLMqH9IMLNUx6 nfD4+32jFSD7AxqEEnZvorxykRIk7NSAm+bO0ql/db8cYXHshuj0U8gFPIlcS1v0 pyF/7FekbLXt4X/pWhRhp1eow+KiDSkG -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org