$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: yqFBgIUlnOi8ZcqbVjRHwGkDjJz/gf1qrlWI+NxmuAI= Subject key identifier: B4:AF:72:42:0B:D1:CF:20:78:FB:59:0C:D8:84:5A:D2:D4:7E:00:8A Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 14:57:15 +0000 Manifest this update: Sat 18 May 2024 14:57:14 +0000 Manifest next update: Sat 25 May 2024 14:57:14 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: t47iJo37J2DAEMiXw3rAEU0Cv1WodIsCoHYH9QUSZ0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: May 18 14:57:14 2024 GMT Not After : May 25 14:57:14 2024 GMT Subject: CN=6648c1ca-0414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:d2:a6:b1:6e:76:a8:61:86:b5:cd:46:6f: ec:80:ef:41:06:7e:88:f0:7a:dd:47:95:74:dc:64: da:de:ad:65:01:a9:9b:56:5a:56:a7:b6:4d:c0:09: 19:3c:c7:8e:9b:e0:83:7f:3d:3b:16:2e:44:93:ef: d8:53:97:f7:43:19:90:0d:c1:2d:54:e8:91:e6:a9: ef:41:4e:2c:1d:36:29:fa:79:65:d5:31:27:18:23: 1e:6c:17:a2:22:0b:12:41:61:e4:4f:1b:f1:24:4d: a5:48:3b:c3:5c:5b:a6:13:2e:a0:5e:15:29:5b:de: 7b:8f:af:64:ec:53:b9:05:b4:d8:38:15:67:e2:da: 0f:ff:2e:93:54:4e:c5:12:9e:72:29:9d:fb:f5:0c: 82:88:f2:9a:0d:03:4e:6a:70:41:06:b2:99:4e:7e: 38:98:b8:9b:85:f4:a6:dc:33:d4:a0:f2:f4:9a:fd: 3e:a2:f1:8e:9d:64:6c:b7:27:ba:3d:f5:e1:a9:86: 71:a6:b1:81:46:b2:18:28:16:35:6e:2c:0f:7a:15: a7:7f:2b:a5:fd:bd:47:bc:2d:bc:79:df:c4:71:7c: c3:d6:2a:54:ed:b5:27:49:42:e7:76:5c:69:39:0d: 39:9c:79:44:1a:cf:e9:b3:e4:85:9b:d1:be:49:c6: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:72:42:0B:D1:CF:20:78:FB:59:0C:D8:84:5A:D2:D4:7E:00:8A X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c8:60:ec:ab:49:e3:d9:29:97:24:89:92:99:7f:2c:9c:60: 7e:dd:d6:4d:21:80:e2:bc:cd:f4:ad:b1:d5:c7:c8:0c:fa:e9: e0:ff:5a:71:25:9c:4c:f0:07:b8:59:06:43:5e:2f:6d:0b:85: 64:60:ab:ca:90:ea:62:d9:af:44:98:52:63:47:eb:ff:f7:c0: 6e:ce:ba:c4:29:4b:10:40:89:9b:25:68:52:c3:10:aa:ad:86: 54:00:43:fe:04:47:cf:4e:7d:5d:51:58:e7:93:90:44:0a:f5: 79:bd:9a:c3:d5:fb:1b:7e:23:ea:8b:5e:fb:8d:9d:2b:2b:1b: e7:e2:70:4e:62:6c:33:63:60:cb:12:8f:37:61:50:e4:87:ef: bb:57:42:3e:10:2e:58:41:95:00:56:d9:7a:ff:f0:dc:09:31: 47:21:57:91:a3:ad:b0:7c:17:aa:a4:26:dd:a9:9b:a6:1c:34: a3:ef:21:82:91:54:1e:2f:ab:51:b9:8d:84:6c:26:63:0a:6e: d1:a3:ad:0c:3f:67:17:b6:df:8c:ad:49:52:d4:62:f2:8b:dc: 13:0b:9c:e7:f3:98:5b:c8:37:09:a9:c3:c0:a2:fd:a7:9e:3a: d4:7b:23:fb:d4:18:5b:a2:79:9f:16:32:c5:48:a5:b7:07:8d: db:1a:a1:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjQwNTE4MTQ1NzE0WhcNMjQwNTI1MTQ1NzE0WjAYMRYwFAYD VQQDEw02NjQ4YzFjYS0wNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8DSprFudqhhhrXNRm/sgO9BBn6I8HrdR5V03GTa3q1lAambVlpWp7ZNwAkZ PMeOm+CDfz07Fi5Ek+/YU5f3QxmQDcEtVOiR5qnvQU4sHTYp+nll1TEnGCMebBei IgsSQWHkTxvxJE2lSDvDXFumEy6gXhUpW957j69k7FO5BbTYOBVn4toP/y6TVE7F Ep5yKZ379QyCiPKaDQNOanBBBrKZTn44mLibhfSm3DPUoPL0mv0+ovGOnWRstye6 PfXhqYZxprGBRrIYKBY1biwPehWnfyul/b1HvC28ed/EcXzD1ipU7bUnSULndlxp OQ05nHlEGs/ps+SFm9G+ScZOAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSvckIL 0c8gePtZDNiEWtLUfgCKMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzyGDsq0nj2SmXJImSmX8snGB+3dZNIYDivM30rbHVx8gM+ung/1px JZxM8Ae4WQZDXi9tC4VkYKvKkOpi2a9EmFJjR+v/98BuzrrEKUsQQImbJWhSwxCq rYZUAEP+BEfPTn1dUVjnk5BECvV5vZrD1fsbfiPqi177jZ0rKxvn4nBOYmwzY2DL Eo83YVDkh++7V0I+EC5YQZUAVtl6//DcCTFHIVeRo62wfBeqpCbdqZumHDSj7yGC kVQeL6tRuY2EbCZjCm7Ro60MP2cXtt+MrUlS1GLyi9wTC5zn85hbyDcJqcPAov2n njrUeyP71BhbonmfFjLFSKW3B43bGqEV -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org