$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: xobtpCvtHty1VofzDxPvEnOfnhDyvOVlPRc/nFYoWWs= Subject key identifier: 96:4E:D8:79:A3:8B:44:15:D0:37:02:E0:76:15:1A:E4:37:D5:AD:8E Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3A3F Signing time: Thu 30 May 2024 14:41:10 +0000 Manifest this update: Thu 30 May 2024 14:41:09 +0000 Manifest next update: Thu 06 Jun 2024 14:41:09 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: xDAi0y3NIW8Ydu/zdQ3D8iGTL8YcuDlnHbwyU/aamEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: May 30 14:41:09 2024 GMT Not After : Jun 6 14:41:09 2024 GMT Subject: CN=66589005-4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f8:ab:e5:ed:a3:4f:a4:31:4c:61:d7:ad:c2: 25:bd:0c:17:5c:d6:48:df:85:48:ea:24:7e:c5:1a: c6:68:f4:20:a0:f3:d8:2e:2a:76:5c:7b:6b:27:65: 16:54:b2:02:75:3b:7e:47:55:07:a1:ef:cb:7d:32: 1b:71:d5:9e:01:25:63:62:8a:66:8a:b6:74:ea:de: 6c:bd:92:4b:8e:37:2a:3b:33:ed:16:f4:b2:e7:72: e6:e7:b0:34:41:47:25:da:ea:69:d4:35:d7:4b:77: 80:1a:04:56:e7:dd:8f:0c:b2:bb:36:b0:5d:c3:e7: b8:ff:e8:df:66:8f:7c:7c:f3:4a:d9:71:99:fe:1b: 38:0a:6b:0e:4a:36:29:fc:ce:8c:57:ee:ef:0f:aa: 83:bd:c4:bf:36:86:f3:16:0c:4b:e7:e2:52:38:79: 81:2f:de:37:3e:81:b5:bb:69:8b:91:ed:8d:b0:6f: 40:3d:e0:67:b6:7c:b0:a2:78:54:cc:84:83:b1:ed: ed:e0:77:8c:54:30:59:0a:74:3f:b1:6e:7a:38:55: a3:a8:7d:e5:35:94:d1:76:f0:67:59:16:7f:28:5f: 13:79:8a:cf:53:a2:5f:8b:21:4b:f7:09:cf:30:c3: ed:6f:01:09:62:ee:7b:5c:0b:ec:d9:ea:71:b6:29: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:D8:79:A3:8B:44:15:D0:37:02:E0:76:15:1A:E4:37:D5:AD:8E X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7f:0f:26:fc:71:2d:ac:0c:7c:f4:fe:45:9c:46:90:90:f1: 47:91:68:c5:d9:81:d1:b8:85:1d:e4:5d:ca:e1:d0:ed:f4:b6: 68:2b:b3:32:17:01:76:61:44:25:85:53:67:03:5e:45:42:39: 93:54:3c:21:04:57:d3:5a:c4:bf:8f:8c:f6:37:fe:71:37:06: fe:12:c9:97:ca:d5:8e:16:8f:cc:a0:36:20:31:dd:ab:95:bd: e3:88:67:17:33:1c:46:7c:e4:c9:9c:ed:ac:43:39:27:0c:b5: 73:5d:16:40:77:30:b3:ae:16:1f:63:cf:20:e8:01:fa:5f:c9: ce:a8:6f:9e:5a:6c:52:f1:3a:ea:be:f8:19:3b:49:19:13:2b: 2a:72:ee:20:14:30:72:a8:3b:1a:2e:9e:b3:d4:16:f8:0b:e5: 0b:a8:56:16:3b:e3:da:0b:7a:b2:d2:b2:d5:82:f2:87:b7:13: 3a:c1:5f:f5:6b:8b:e4:cb:87:23:dd:da:72:32:d5:07:6e:86: 76:55:75:70:62:d2:1e:fd:d2:c5:74:25:f8:b3:c1:ee:51:dd: b6:c7:15:41:50:0c:6c:10:b9:77:e8:ea:97:23:08:62:7b:bb: 18:6f:48:f6:64:c7:63:81:b3:99:63:01:b3:c4:36:d2:b1:b5: 22:9c:da:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjQwNTMwMTQ0MTA5WhcNMjQwNjA2MTQ0MTA5WjAYMRYwFAYD VQQDEw02NjU4OTAwNS00OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Pir5e2jT6QxTGHXrcIlvQwXXNZI34VI6iR+xRrGaPQgoPPYLip2XHtrJ2UW VLICdTt+R1UHoe/LfTIbcdWeASVjYopmirZ06t5svZJLjjcqOzPtFvSy53Lm57A0 QUcl2upp1DXXS3eAGgRW592PDLK7NrBdw+e4/+jfZo98fPNK2XGZ/hs4CmsOSjYp /M6MV+7vD6qDvcS/NobzFgxL5+JSOHmBL943PoG1u2mLke2NsG9APeBntnywonhU zISDse3t4HeMVDBZCnQ/sW56OFWjqH3lNZTRdvBnWRZ/KF8TeYrPU6JfiyFL9wnP MMPtbwEJYu57XAvs2epxtikgCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZO2Hmj i0QV0DcC4HYVGuQ31a2OMB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsfw8m/HEtrAx89P5FnEaQkPFHkWjF2YHRuIUd5F3K4dDt9LZoK7My FwF2YUQlhVNnA15FQjmTVDwhBFfTWsS/j4z2N/5xNwb+EsmXytWOFo/MoDYgMd2r lb3jiGcXMxxGfOTJnO2sQzknDLVzXRZAdzCzrhYfY88g6AH6X8nOqG+eWmxS8Trq vvgZO0kZEysqcu4gFDByqDsaLp6z1Bb4C+ULqFYWO+PaC3qy0rLVgvKHtxM6wV/1 a4vky4cj3dpyMtUHboZ2VXVwYtIe/dLFdCX4s8HuUd22xxVBUAxsELl36OqXIwhi e7sYb0j2ZMdjgbOZYwGzxDbSsbUinNoZ -----END CERTIFICATE-----Generated at Thu May 30 18:45:59 2024 by rpki-client on console-ams.rpki-client.org