$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: 3/Drn2kBZQ2zBaje9FaZbr2KqVfS3i61sePjyUhN/24= Subject key identifier: 07:72:29:9B:0C:48:E1:F4:7E:3E:E9:D5:3D:74:89:1C:C8:F1:BB:E1 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 33CA Signing time: Sat 18 May 2024 14:45:38 +0000 Manifest this update: Sat 18 May 2024 14:45:38 +0000 Manifest next update: Sat 25 May 2024 14:45:38 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: ZtUnlKGjZF3IHNh9/MzYcXpDFYmL56VTSjSvPjpd+Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: May 18 14:45:38 2024 GMT Not After : May 25 14:45:38 2024 GMT Subject: CN=6648bf12-fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:16:a0:8f:09:a1:10:42:82:e1:0d:54:b2: ef:a0:ee:b0:7f:2f:bb:1f:62:29:ff:13:59:23:95: 2f:40:63:d8:21:9a:be:ee:5a:82:86:41:9a:97:d7: 45:44:dc:3e:01:d6:8e:21:7f:4f:74:86:2f:8c:24: fc:d9:49:c8:0d:0e:ae:8a:cc:fe:08:f7:af:95:12: 7d:0f:53:01:fb:15:ad:9c:bb:ad:a6:85:76:5d:3b: 36:db:e9:70:5a:aa:23:fc:3e:c1:28:23:db:02:6d: 01:11:be:ee:45:91:cc:10:34:54:09:c8:3c:8f:01: 80:fc:bb:1b:c2:c7:5e:78:7a:e1:ac:8c:74:6b:b7: 70:a3:27:a2:cd:2d:d3:d9:0e:f9:3a:c8:cd:67:ec: d9:3e:5b:bb:08:ff:2f:43:25:e4:dd:e2:96:ed:76: 23:5e:5b:65:55:6f:8f:67:b0:61:b6:fc:9c:cc:b9: 69:3e:79:b4:21:8f:b2:13:5c:45:27:66:0c:05:7e: 80:f9:6e:f7:83:2d:c6:a1:86:41:f1:d1:b8:8c:97: 30:6a:37:99:1b:96:a5:3d:f7:bc:9a:23:56:f1:b7: e3:a1:ba:a7:4b:4e:84:59:3b:65:c2:e2:1f:42:0a: 4c:02:41:9a:60:5a:1b:51:10:8e:38:3c:b8:89:68: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:72:29:9B:0C:48:E1:F4:7E:3E:E9:D5:3D:74:89:1C:C8:F1:BB:E1 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ab:6b:69:c2:e5:9b:d2:80:22:c9:cd:49:62:b2:6d:ff:54: 5b:6e:9b:a9:ce:98:80:31:77:3b:cc:d2:c1:a2:60:b1:66:43: d3:c0:92:f9:95:9b:c0:bf:18:dc:cf:01:7e:6a:d1:76:ee:eb: e1:35:3b:41:ce:10:fc:1b:ae:7c:9e:b3:3b:ad:e1:d2:a8:42: bc:c1:ea:a3:88:5f:c6:58:16:54:7c:f2:1b:3b:a6:48:71:7a: 74:5d:ca:85:fb:49:3e:62:97:2b:5d:45:a8:ae:cd:ea:56:fe: fb:dd:00:a8:c2:64:fd:7e:ed:3d:67:d0:4f:ce:1f:38:64:40: 0e:01:3d:47:9e:c0:ba:17:27:3b:0a:85:b5:12:4c:7f:19:c5: f2:e7:7e:ac:52:39:47:f6:cc:9c:09:95:93:a9:25:72:9f:a5: cf:ce:c6:7f:7b:10:7f:fc:13:56:07:74:ff:fc:d3:7e:6a:b6: c3:8a:5e:01:4b:35:b0:72:af:e3:16:5c:fc:8e:d7:41:c3:41: 58:e8:d5:95:4f:5f:b2:0a:71:99:ff:d5:72:b9:35:ee:ad:16: 43:53:f9:36:c0:04:bb:04:62:eb:85:d6:63:45:48:cf:82:1d: a2:0a:12:a7:c0:f4:2c:6d:a4:5f:a0:44:76:b1:fa:f5:71:b2: 36:24:a2:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjQwNTE4MTQ0NTM4WhcNMjQwNTI1MTQ0NTM4WjAYMRYwFAYD VQQDEw02NjQ4YmYxMi1mYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx04WoI8JoRBCguENVLLvoO6wfy+7H2Ip/xNZI5UvQGPYIZq+7lqChkGal9dF RNw+AdaOIX9PdIYvjCT82UnIDQ6uisz+CPevlRJ9D1MB+xWtnLutpoV2XTs22+lw Wqoj/D7BKCPbAm0BEb7uRZHMEDRUCcg8jwGA/LsbwsdeeHrhrIx0a7dwoyeizS3T 2Q75OsjNZ+zZPlu7CP8vQyXk3eKW7XYjXltlVW+PZ7BhtvyczLlpPnm0IY+yE1xF J2YMBX6A+W73gy3GoYZB8dG4jJcwajeZG5alPfe8miNW8bfjobqnS06EWTtlwuIf QgpMAkGaYFobURCOODy4iWiZ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdyKZsM SOH0fj7p1T10iRzI8bvhMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkq2tpwuWb0oAiyc1JYrJt/1RbbpupzpiAMXc7zNLBomCxZkPTwJL5 lZvAvxjczwF+atF27uvhNTtBzhD8G658nrM7reHSqEK8weqjiF/GWBZUfPIbO6ZI cXp0XcqF+0k+YpcrXUWors3qVv773QCowmT9fu09Z9BPzh84ZEAOAT1HnsC6Fyc7 CoW1Ekx/GcXy536sUjlH9sycCZWTqSVyn6XPzsZ/exB//BNWB3T//NN+arbDil4B SzWwcq/jFlz8jtdBw0FY6NWVT1+yCnGZ/9VyuTXurRZDU/k2wAS7BGLrhdZjRUjP gh2iChKnwPQsbaRfoER2sfr1cbI2JKIh -----END CERTIFICATE-----Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org