$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: Ba2xSZVU3wJJBGaYY7eqy9Fr162+KT+CwZ3hvy3k+mc= Subject key identifier: 9B:A8:EA:4F:FD:3E:FD:F3:46:55:BB:DD:D9:CF:72:3F:E7:0A:68:89 Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 33C5 Signing time: Sat 18 May 2024 14:37:45 +0000 Manifest this update: Sat 18 May 2024 14:37:45 +0000 Manifest next update: Sat 25 May 2024 14:37:45 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 6Wx6J8cpo9SDSNaxe1ZkolnwiqDJox5fPSd1Y8+iMVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: May 18 14:37:45 2024 GMT Not After : May 25 14:37:45 2024 GMT Subject: CN=6648bd39-af88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:d9:ac:d9:e9:c8:60:34:6b:70:e7:5f:4b: bd:0a:bb:a1:1e:cb:ed:e2:93:8c:91:9c:30:f8:44: ed:99:c2:a6:10:87:2e:4e:e7:f2:2a:0e:19:9b:8d: 05:fe:82:93:19:24:f5:54:d4:b0:75:d4:a5:d7:25: b5:d7:17:0c:4a:25:f3:3e:99:fb:d5:d8:67:33:5d: ac:5a:02:91:ac:0f:9d:c0:47:49:6c:59:4a:8b:f3: b8:c1:94:bc:a8:86:8b:fe:66:fe:7c:eb:42:63:aa: f7:ba:24:76:9b:41:40:d9:bc:d1:f1:6d:44:f2:3b: 51:73:7c:2d:22:eb:d6:d4:d4:fa:34:9e:e0:2f:f8: 77:e4:52:5f:65:41:d9:2f:33:04:10:e0:99:3b:21: 76:7b:3e:a5:f8:10:2f:ee:90:28:f9:fc:6d:b2:dd: 95:c8:eb:ed:bf:d9:b5:6c:37:ad:e1:7b:9e:4e:f9: 08:e1:49:61:7f:37:89:f6:63:16:9d:4f:fc:66:0d: 32:9b:77:e3:ee:03:8d:08:59:8d:9b:2f:96:71:42: 1e:e6:d8:9d:36:24:d6:53:a6:30:eb:15:f6:1c:56: 79:22:78:4d:51:7b:b4:86:10:8f:bc:99:30:82:c3: 3f:a0:56:3e:c8:63:a9:89:25:9f:ec:d1:a1:c2:b5: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A8:EA:4F:FD:3E:FD:F3:46:55:BB:DD:D9:CF:72:3F:E7:0A:68:89 X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:da:2b:3f:a1:95:9e:71:a6:50:94:0b:65:6d:4d:d5:00:af: 33:b4:07:88:95:fd:f9:de:b1:4b:40:11:9c:c7:f5:38:ba:37: 92:1c:20:67:8f:a2:90:6e:6e:1c:58:13:fe:71:af:e0:6f:91: 0f:e5:d9:6b:ab:3a:1e:4d:66:04:b4:1d:2c:00:a7:ce:5e:cd: 66:d6:8a:e6:ef:b2:42:66:97:85:72:bb:32:36:e7:0f:99:3b: 32:a5:07:79:11:3a:a3:08:e6:77:28:f4:65:7b:a8:ec:27:53: 5f:30:2d:f1:e2:53:ef:d9:dd:c1:c5:6d:96:13:b0:42:2b:ba: 43:dd:bf:a8:9a:49:e0:ee:ce:a8:87:6d:21:36:88:d2:04:80: 62:67:7a:ad:f8:2a:ac:6b:cd:8d:e1:0f:bb:e5:8b:67:67:1f: 7c:d1:de:fe:44:49:1c:36:8a:5a:db:79:aa:66:de:76:9f:6f: 53:20:7c:04:9a:ef:97:f9:55:c1:25:a1:55:64:90:1f:7f:a2: dd:d9:f4:7b:83:a0:94:79:fc:db:8e:eb:74:6d:16:58:bc:81: 24:55:59:4b:8d:20:9c:52:5d:41:37:48:ca:56:f6:06:bc:c3: 13:8a:95:70:c3:21:63:6c:d9:2b:4d:a3:5e:a6:d5:fa:b7:b8: 5c:14:c9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjQwNTE4MTQzNzQ1WhcNMjQwNTI1MTQzNzQ1WjAYMRYwFAYD VQQDEw02NjQ4YmQzOS1hZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6/ZrNnpyGA0a3DnX0u9CruhHsvt4pOMkZww+ETtmcKmEIcuTufyKg4Zm40F /oKTGST1VNSwddSl1yW11xcMSiXzPpn71dhnM12sWgKRrA+dwEdJbFlKi/O4wZS8 qIaL/mb+fOtCY6r3uiR2m0FA2bzR8W1E8jtRc3wtIuvW1NT6NJ7gL/h35FJfZUHZ LzMEEOCZOyF2ez6l+BAv7pAo+fxtst2VyOvtv9m1bDet4XueTvkI4UlhfzeJ9mMW nU/8Zg0ym3fj7gONCFmNmy+WcUIe5tidNiTWU6Yw6xX2HFZ5InhNUXu0hhCPvJkw gsM/oFY+yGOpiSWf7NGhwrVy3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuo6k/9 Pv3zRlW73dnPcj/nCmiJMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22is/oZWecaZQlAtlbU3VAK8ztAeIlf353rFLQBGcx/U4ujeSHCBn j6KQbm4cWBP+ca/gb5EP5dlrqzoeTWYEtB0sAKfOXs1m1orm77JCZpeFcrsyNucP mTsypQd5ETqjCOZ3KPRle6jsJ1NfMC3x4lPv2d3BxW2WE7BCK7pD3b+omkng7s6o h20hNojSBIBiZ3qt+Cqsa82N4Q+75YtnZx980d7+REkcNopa23mqZt52n29TIHwE mu+X+VXBJaFVZJAff6Ld2fR7g6CUefzbjut0bRZYvIEkVVlLjSCcUl1BN0jKVvYG vMMTipVwwyFjbNkrTaNeptX6t7hcFMkb -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org