$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: bYAOGD/F0onLE1cCaxypiONP7iFhJEaFx/6WHhne6cw= Subject key identifier: 20:C1:05:D0:BC:6A:00:67:DF:C2:FA:3F:CE:43:1C:08:4B:A4:40:8B Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 33BF Signing time: Sat 18 May 2024 15:20:56 +0000 Manifest this update: Sat 18 May 2024 15:20:56 +0000 Manifest next update: Sat 25 May 2024 15:20:56 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: yyKjWXrTJl0GeJtNJkZvY4neSOurBD7mTqG2/9+v/44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: May 18 15:20:56 2024 GMT Not After : May 25 15:20:56 2024 GMT Subject: CN=6648c758-af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:b6:ac:66:83:4e:04:7b:58:e4:6d:d8:e9: 67:b8:21:95:5d:55:2b:16:a7:b2:c1:d0:82:8c:87: 74:43:a9:d8:42:d1:bb:a2:1b:05:eb:66:34:40:5d: ed:90:99:35:fb:11:bf:3f:cb:d4:4e:66:b5:e1:5f: 5c:44:1d:ce:f0:c2:34:df:b1:99:2b:48:4e:c4:da: da:5b:8c:6e:b7:d2:72:cb:43:fd:b2:68:2e:fe:fe: a7:b9:6e:d9:a5:ce:18:48:57:41:d9:e9:cc:63:65: 71:59:30:59:05:5e:5d:6d:10:1d:dc:76:0a:e1:69: a8:cb:66:7f:87:d7:cd:71:fb:90:47:8f:fc:84:4e: 4a:ed:bd:7a:1c:42:7d:a6:2f:aa:75:43:25:40:00: 2f:aa:7a:de:7d:ac:08:da:ff:e8:34:ff:7d:f3:8c: 3c:04:63:de:4a:fc:7e:ce:ff:3c:b2:f6:f4:81:6f: 94:3d:be:20:40:c5:24:a2:66:4c:d1:d0:06:9d:68: eb:03:1d:f2:93:90:b7:88:bc:a3:fd:fc:49:0f:9b: d1:b8:43:ff:da:81:b6:d4:df:c8:1f:6f:59:10:3a: 89:98:45:08:34:9a:2a:9c:7f:6f:cd:6b:e7:c0:97: 70:1f:97:49:8e:74:ed:90:3d:f4:6c:47:a2:b5:bb: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C1:05:D0:BC:6A:00:67:DF:C2:FA:3F:CE:43:1C:08:4B:A4:40:8B X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:71:58:2d:c3:b0:a3:c9:7d:41:cd:96:8f:8a:7e:12:32:20: e2:fd:96:3b:f6:86:31:d4:d1:ac:db:cf:28:f0:e3:db:41:0f: 28:0c:72:71:dc:67:c9:95:0d:f7:64:4d:15:d0:1f:e6:55:98: ad:3b:59:a0:a1:9b:ff:ef:65:61:ab:77:41:38:b6:bb:50:d2: 91:4d:bb:31:89:c7:65:cf:08:b6:ec:9b:0c:a8:5b:ea:f9:fd: 3e:f1:fe:c6:34:a2:48:7f:c8:61:a1:6f:07:26:c8:5b:bc:28: ac:27:00:76:72:f2:78:37:37:c4:a7:d6:e6:83:d4:eb:9d:01: 78:ae:08:5a:46:a0:19:dd:f4:b7:f5:86:20:3a:71:ec:20:e5: f3:9d:7f:bc:81:74:ca:79:d4:95:0d:42:bd:37:7f:1f:c5:cd: 1c:f3:f9:5d:fd:62:3f:9c:c7:d0:f9:02:17:72:e6:08:d9:39: f3:a3:30:98:2a:ee:19:f7:f4:91:4d:a5:36:4b:cf:1f:8b:d4: a3:4f:2f:0b:7e:ed:e4:1c:15:b8:21:bb:d7:04:10:bd:fa:0b: 91:96:39:a9:8e:66:f4:b2:de:c4:dc:b7:4e:48:bc:ca:26:c6: 10:a3:12:6e:9c:59:d1:c2:8b:dd:8e:db:06:8a:b4:10:6a:ce: d1:4d:b3:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjQwNTE4MTUyMDU2WhcNMjQwNTI1MTUyMDU2WjAYMRYwFAYD VQQDEw02NjQ4Yzc1OC1hZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxse2rGaDTgR7WORt2OlnuCGVXVUrFqeywdCCjId0Q6nYQtG7ohsF62Y0QF3t kJk1+xG/P8vUTma14V9cRB3O8MI037GZK0hOxNraW4xut9Jyy0P9smgu/v6nuW7Z pc4YSFdB2enMY2VxWTBZBV5dbRAd3HYK4Wmoy2Z/h9fNcfuQR4/8hE5K7b16HEJ9 pi+qdUMlQAAvqnrefawI2v/oNP9984w8BGPeSvx+zv88svb0gW+UPb4gQMUkomZM 0dAGnWjrAx3yk5C3iLyj/fxJD5vRuEP/2oG21N/IH29ZEDqJmEUINJoqnH9vzWvn wJdwH5dJjnTtkD30bEeitbtHVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDBBdC8 agBn38L6P85DHAhLpECLMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIcVgtw7CjyX1BzZaPin4SMiDi/ZY79oYx1NGs288o8OPbQQ8oDHJx 3GfJlQ33ZE0V0B/mVZitO1mgoZv/72Vhq3dBOLa7UNKRTbsxicdlzwi27JsMqFvq +f0+8f7GNKJIf8hhoW8HJshbvCisJwB2cvJ4NzfEp9bmg9TrnQF4rghaRqAZ3fS3 9YYgOnHsIOXznX+8gXTKedSVDUK9N38fxc0c8/ld/WI/nMfQ+QIXcuYI2TnzozCY Ku4Z9/SRTaU2S88fi9SjTy8Lfu3kHBW4IbvXBBC9+guRljmpjmb0st7E3LdOSLzK JsYQoxJunFnRwovdjtsGirQQas7RTbMq -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org