$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft File: rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json) Hash identifier: xYOseVI8jii0+cyP9GCY0Xd0Jl495VqQSEuFsoyg8KY= Subject key identifier: 9B:61:00:84:62:AB:FF:DC:33:F7:42:77:AD:09:B6:0F:3A:87:02:14 Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 14:50:49 +0000 Manifest this update: Sat 18 May 2024 14:50:49 +0000 Manifest next update: Sat 25 May 2024 14:50:49 +0000 Files and hashes: 1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: OlpsosZcmGENkRS8sbvnovo+HLMjAMbhxs+/YvTz0PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02 Validity Not Before: May 18 14:50:49 2024 GMT Not After : May 25 14:50:49 2024 GMT Subject: CN=6648c049-79ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:8d:05:ac:f8:75:f7:6f:88:99:51:43:fc: a8:3e:05:9b:77:04:1d:bd:03:09:79:4d:f4:00:8c: 61:d0:f3:ea:88:b2:ea:7c:00:11:cf:39:75:c6:49: b3:4e:a5:6c:e0:4e:89:7c:6c:be:b9:5f:31:4a:60: e9:42:0f:af:1e:37:9d:e9:4f:73:8a:f8:4d:be:76: 48:5a:03:70:ad:ea:7a:fa:5d:dd:16:96:63:5c:45: bc:57:e0:67:d1:b7:c4:01:7f:db:b7:94:cf:63:c6: 8c:7e:11:61:1f:16:37:bc:7d:75:20:af:0b:d3:da: 94:de:7e:b8:7a:23:ff:eb:4d:d8:b7:11:f5:56:58: b9:93:1b:58:18:79:bc:5b:03:fa:3d:f1:9d:5e:ec: 86:39:32:42:8b:3e:ce:74:5c:36:ba:ed:45:d3:2a: ac:79:98:a1:d7:03:d1:de:e2:8f:d9:3e:1a:19:2c: ed:99:a8:0b:1b:93:9d:01:55:43:88:7f:62:5b:06: 17:31:bc:f7:b5:33:d8:24:1c:ba:44:35:39:a8:15: 22:f6:31:f6:70:d8:72:79:09:63:9d:77:50:70:50: 15:f2:25:10:90:bc:89:1e:2b:2d:7c:6f:2f:34:8b: c9:44:f6:83:9d:93:39:57:4a:e4:79:e9:dc:94:03: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:00:84:62:AB:FF:DC:33:F7:42:77:AD:09:B6:0F:3A:87:02:14 X509v3 Authority Key Identifier: keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:a7:82:56:a3:a9:85:a9:3b:f8:59:eb:3d:c5:5a:b5:ac: 5a:8e:fb:08:e7:8d:d0:cd:b0:24:32:db:78:c8:ba:5e:07:5a: f9:f4:94:29:e9:f4:46:a5:56:9f:1b:9b:e2:63:91:67:f3:8e: 73:7e:34:5b:74:19:d7:b2:23:f3:4b:5d:ce:6c:76:80:4c:f1: f2:f5:e4:33:ca:6c:0d:9c:eb:c9:10:3e:42:8f:05:22:dd:5e: 80:43:35:e2:79:90:86:95:e7:ba:2c:4d:3b:17:af:65:d9:6a: 35:39:24:b1:fb:d8:5b:ee:bd:36:e9:d0:1f:78:00:70:e7:db: 11:7e:fa:0f:e4:65:5e:2f:e1:a7:7b:b1:e4:f9:8a:fa:30:79: 8f:6b:2f:95:f0:86:16:48:bd:4f:d0:64:c9:14:02:fd:4f:af: ce:9b:fd:47:8c:f3:57:cf:b3:8d:ec:a2:58:e9:c3:1a:07:de: b5:20:58:70:b6:a5:67:18:7e:cb:38:f0:01:08:8c:1e:05:94: ac:3e:26:2b:e4:6c:ac:67:fa:0c:3c:6a:27:51:c2:38:eb:09: 28:79:5a:ad:4c:65:bd:60:c4:64:53:fd:39:4b:bd:70:f5:3b: 06:35:a7:a0:ce:ce:16:05:7a:32:4d:3b:9c:15:d8:5a:dc:bd: 68:0f:80:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2NjkxMTAvBgNVBAUTKEFENEQ2NTNCODM1QzRFMURFOThFQzY2Mzc2ODg5QTlB ODM3NjRCMDIwHhcNMjQwNTE4MTQ1MDQ5WhcNMjQwNTI1MTQ1MDQ5WjAYMRYwFAYD VQQDEw02NjQ4YzA0OS03OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeKNBaz4dfdviJlRQ/yoPgWbdwQdvQMJeU30AIxh0PPqiLLqfAARzzl1xkmz TqVs4E6JfGy+uV8xSmDpQg+vHjed6U9zivhNvnZIWgNwrep6+l3dFpZjXEW8V+Bn 0bfEAX/bt5TPY8aMfhFhHxY3vH11IK8L09qU3n64eiP/603YtxH1Vli5kxtYGHm8 WwP6PfGdXuyGOTJCiz7OdFw2uu1F0yqseZih1wPR3uKP2T4aGSztmagLG5OdAVVD iH9iWwYXMbz3tTPYJBy6RDU5qBUi9jH2cNhyeQljnXdQcFAV8iUQkLyJHistfG8v NIvJRPaDnZM5V0rkeenclAPw+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJthAIRi q//cM/dCd60Jtg86hwIUMB8GA1UdIwQYMBaAFK1NZTuDXE4d6Y7GY3aImpqDdksC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjY2OS85RDVCRjZGRTFE OTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1RoM3Bqc1pqZG9pYW1vTjJT d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JVMWxPNE5jVGgzcGpzWmpkb2lhbW9OMlN3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjY2OS85RDVCRjZGRTFEOTIxMUUyODg2RUFBRjUwOEIwMkNEMi9yVTFsTzROY1Ro M3Bqc1pqZG9pYW1vTjJTd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX4KeCVqOphak7+FnrPcVataxajvsI543QzbAkMtt4yLpeB1r59JQp 6fRGpVafG5viY5Fn845zfjRbdBnXsiPzS13ObHaATPHy9eQzymwNnOvJED5CjwUi 3V6AQzXieZCGlee6LE07F69l2Wo1OSSx+9hb7r026dAfeABw59sRfvoP5GVeL+Gn e7Hk+Yr6MHmPay+V8IYWSL1P0GTJFAL9T6/Om/1HjPNXz7ON7KJY6cMaB961IFhw tqVnGH7LOPABCIweBZSsPiYr5GysZ/oMPGonUcI46wkoeVqtTGW9YMRkU/05S71w 9TsGNaegzs4WBXoyTTucFdha3L1oD4Bi -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org