$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: 9WKienIHOiyFLot4H/6a3i0+zyE0E6cWgWxyrAvL1BU= Subject key identifier: 11:3A:01:5F:32:9F:6E:84:40:67:27:00:F5:16:7F:81:98:8F:07:04 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 33A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 33A1 Signing time: Sat 18 May 2024 15:34:45 +0000 Manifest this update: Sat 18 May 2024 15:34:44 +0000 Manifest next update: Sat 25 May 2024 15:34:44 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: vK9szTb5ekLBheKUXkex9ULI43LybNTa20R6w/4yT7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13218 (0x33a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: May 18 15:34:44 2024 GMT Not After : May 25 15:34:44 2024 GMT Subject: CN=6648ca95-ae1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0e:38:b0:1c:51:37:02:fa:76:66:6d:ec:ae: 0b:c3:77:f6:ec:6b:02:d8:ee:15:2c:a8:48:26:6e: 9f:6a:f3:16:04:4d:3c:f4:72:f1:03:6e:44:f8:7e: c1:94:ac:10:22:d1:7d:88:e7:ff:8b:1a:91:73:8d: 06:e1:69:3c:c2:fc:a5:e6:3a:e3:c4:34:66:9c:5d: 32:84:dd:0c:cd:a3:df:9c:22:1e:54:93:34:b0:f5: 04:ac:46:60:0e:44:14:35:95:ff:5e:f3:f2:b8:3b: 2a:32:06:d6:73:b2:60:40:49:09:0b:91:61:20:86: 0a:e8:45:e2:a2:c7:d3:64:66:3b:4a:9a:2a:42:6f: f6:84:98:67:58:29:3d:24:fa:7d:22:3a:b8:13:9b: 0d:53:16:c0:b6:5a:26:07:73:0a:21:21:bb:4a:d1: 60:73:5d:fd:ec:8f:57:dd:24:c2:36:36:a9:43:d2: 3f:10:3b:0f:fc:c6:bb:56:56:92:5f:db:51:b5:3a: 01:64:2e:5b:43:8c:38:03:6d:db:d9:8e:7e:09:93: 37:97:f3:aa:85:81:76:14:ab:bb:69:d7:4a:da:1f: 96:c5:77:4e:d2:cc:b8:83:60:9f:0e:e8:fd:66:8b: 64:bb:69:18:bd:37:85:4d:53:d2:09:26:9f:d4:00: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3A:01:5F:32:9F:6E:84:40:67:27:00:F5:16:7F:81:98:8F:07:04 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:19:bc:69:34:b0:2d:cf:a1:83:2f:f2:04:41:a7:74:35:93: 76:2e:ce:d8:0f:a2:51:ac:ad:45:19:4f:3f:8c:21:c1:89:f7: 06:8e:f5:74:83:87:a6:b1:de:28:c4:fe:ed:3d:ec:3b:0d:9a: 55:a7:20:3c:91:11:72:6a:4d:e3:f4:d2:28:a9:9d:4e:05:5c: 03:06:fc:9f:9e:43:5c:f3:c8:e5:b4:ff:6d:90:cd:fb:bb:c8: 6e:ff:03:13:46:25:24:97:61:98:6c:3c:c7:99:97:31:44:98: 2b:d4:6f:a9:c7:ff:26:00:de:3f:4c:3f:79:1f:0d:96:ce:e6: 36:4a:fd:d9:8b:f9:bd:5c:34:cd:3e:80:e8:2d:18:f4:37:52: 56:c1:37:95:63:4b:71:d4:70:e0:7d:65:ec:8b:e3:19:03:24: d4:03:34:51:14:2a:0a:a8:0b:79:fb:97:57:e2:fa:8e:27:60: 5a:5a:c8:ee:22:aa:4e:12:97:00:21:00:c1:2d:68:43:89:0b: 43:f4:6e:15:12:ae:df:f0:5f:55:50:8a:de:84:b3:57:9d:a8: a0:19:91:9f:7f:6a:ff:4e:48:2f:f5:6f:58:2d:0c:2a:1f:85: ee:68:b8:01:02:1b:43:f2:14:99:ac:12:f4:54:9d:64:e6:d2: db:a7:5d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjQwNTE4MTUzNDQ0WhcNMjQwNTI1MTUzNDQ0WjAYMRYwFAYD VQQDEw02NjQ4Y2E5NS1hZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Q44sBxRNwL6dmZt7K4Lw3f27GsC2O4VLKhIJm6favMWBE089HLxA25E+H7B lKwQItF9iOf/ixqRc40G4Wk8wvyl5jrjxDRmnF0yhN0MzaPfnCIeVJM0sPUErEZg DkQUNZX/XvPyuDsqMgbWc7JgQEkJC5FhIIYK6EXiosfTZGY7SpoqQm/2hJhnWCk9 JPp9Ijq4E5sNUxbAtlomB3MKISG7StFgc1397I9X3STCNjapQ9I/EDsP/Ma7VlaS X9tRtToBZC5bQ4w4A23b2Y5+CZM3l/OqhYF2FKu7addK2h+WxXdO0sy4g2CfDuj9 Zotku2kYvTeFTVPSCSaf1AA9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE6AV8y n26EQGcnAPUWf4GYjwcEMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgGbxpNLAtz6GDL/IEQad0NZN2Ls7YD6JRrK1FGU8/jCHBifcGjvV0 g4emsd4oxP7tPew7DZpVpyA8kRFyak3j9NIoqZ1OBVwDBvyfnkNc88jltP9tkM37 u8hu/wMTRiUkl2GYbDzHmZcxRJgr1G+px/8mAN4/TD95Hw2WzuY2Sv3Zi/m9XDTN PoDoLRj0N1JWwTeVY0tx1HDgfWXsi+MZAyTUAzRRFCoKqAt5+5dX4vqOJ2BaWsju IqpOEpcAIQDBLWhDiQtD9G4VEq7f8F9VUIrehLNXnaigGZGff2r/Tkgv9W9YLQwq H4XuaLgBAhtD8hSZrBL0VJ1k5tLbp11v -----END CERTIFICATE-----Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org