$ rpki-client -vvf rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft File: SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft (raw, json) Hash identifier: b//yfdL7DcI+LUBqzQU8INy1YUKpJ3ueJ2xVjr9HUxk= Subject key identifier: 39:48:C0:1D:48:63:FE:8B:E0:F2:FC:16:7F:F0:79:9B:13:42:F8:86 Authority key identifier: 4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D Certificate issuer: /CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D Certificate serial: 3267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft Manifest number: 3267 Signing time: Sat 18 May 2024 15:36:50 +0000 Manifest this update: Sat 18 May 2024 15:36:50 +0000 Manifest next update: Sat 25 May 2024 15:36:50 +0000 Files and hashes: 1: SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl (hash: 2ci/e6SxrrQCaEjqHHuQGn/0UPY5jf12b1R8IeRDI+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12903 (0x3267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182EC4/serialNumber=4B2A86659545F92566354247A4F08F3CE5BE6C0D Validity Not Before: May 18 15:36:50 2024 GMT Not After : May 25 15:36:50 2024 GMT Subject: CN=6648cb12-897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:75:cf:42:9d:5d:b4:fd:7b:e8:b4:ed:3b: f0:cf:e7:94:13:d3:45:1c:8a:bc:24:b1:83:4a:c6: 67:ef:e1:44:6d:dd:1e:06:60:ff:97:4d:a7:03:1f: 14:ee:8b:08:ce:3c:a4:33:0c:a4:4e:42:ab:b5:a5: 8c:f2:79:75:df:36:f0:7e:9d:c2:8d:fd:59:9e:7e: e2:3e:6d:99:e5:c3:a4:3c:0b:28:4d:a7:6a:91:97: 9d:f7:cb:2f:ee:f1:8d:1b:56:ad:eb:8d:b2:74:56: 6d:9f:ea:df:61:41:b3:a2:31:78:ac:55:7a:b1:92: 46:a2:32:93:3b:6c:30:20:15:75:e0:e1:c0:ea:22: 1d:ea:14:74:b2:dd:83:f5:4e:0f:3c:88:71:2c:a2: cc:2e:be:fe:85:a5:d9:90:7b:1d:4a:d6:46:3f:68: da:f9:b6:25:86:ed:aa:77:02:1a:b6:e5:60:00:d4: cb:e2:57:8e:bf:94:7e:f8:8e:75:0e:42:bd:fb:3c: 12:59:d5:f3:6a:7a:79:0d:33:31:4b:b8:eb:c9:fd: ae:a7:cd:e4:ab:72:12:0e:cf:98:d8:b2:3f:9e:df: 5a:d8:41:d2:ae:af:70:a7:99:9f:9c:c6:09:06:20: c5:8e:0f:3f:d4:1b:5b:2d:12:57:bb:38:14:42:27: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:48:C0:1D:48:63:FE:8B:E0:F2:FC:16:7F:F0:79:9B:13:42:F8:86 X509v3 Authority Key Identifier: keyid:4B:2A:86:65:95:45:F9:25:66:35:42:47:A4:F0:8F:3C:E5:BE:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyqGZZVF-SVmNUJHpPCPPOW-bA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182EC4/C942030061A111E284B6A0852979BB20/SyqGZZVF-SVmNUJHpPCPPOW-bA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:97:23:de:66:ae:51:ca:7d:e6:8d:68:12:2c:1d:60:6a:5b: b4:1a:ec:b3:d1:fa:61:05:08:7b:28:82:92:ee:c7:34:d3:d3: c4:84:75:3a:b8:17:d1:78:a8:85:df:aa:d9:4e:08:3a:8b:53: 77:4e:0c:5d:34:e6:95:82:0a:d3:73:96:ee:f1:7c:ff:3f:57: 43:77:55:67:c8:66:12:ba:89:eb:45:97:5f:61:73:e5:92:05: db:09:e9:5b:b7:58:96:36:75:a6:18:f9:63:9c:69:59:77:3c: 0f:9f:70:b9:68:31:46:d6:f9:56:5d:4c:68:a1:46:33:6d:c8: 2f:a0:16:af:dd:f6:1d:b6:fe:53:25:8b:7b:2d:45:42:db:03: 3c:19:bb:15:da:1a:7b:d7:21:9b:ec:a1:f1:16:94:81:23:b6: 2d:cc:4b:c1:f2:d6:2e:a9:c4:9a:8d:fc:3e:78:6d:22:72:60: 4f:53:5e:35:b8:8b:55:89:b8:b7:fc:51:53:6e:64:6a:04:dd: 8c:f2:64:f0:61:e2:7b:1a:b6:5d:9c:79:1b:80:af:0f:95:7c: a2:ad:1d:78:d5:1e:33:7f:e6:cd:4f:04:54:21:19:cf:fa:d3: e6:13:61:a5:76:9a:2e:de:46:bd:40:2c:5b:c7:fb:04:b3:4f: c6:b1:ee:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJFQzQxMTAvBgNVBAUTKDRCMkE4NjY1OTU0NUY5MjU2NjM1NDI0N0E0RjA4RjND RTVCRTZDMEQwHhcNMjQwNTE4MTUzNjUwWhcNMjQwNTI1MTUzNjUwWjAYMRYwFAYD VQQDEw02NjQ4Y2IxMi04OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufF1z0KdXbT9e+i07Tvwz+eUE9NFHIq8JLGDSsZn7+FEbd0eBmD/l02nAx8U 7osIzjykMwykTkKrtaWM8nl13zbwfp3Cjf1Znn7iPm2Z5cOkPAsoTadqkZed98sv 7vGNG1at642ydFZtn+rfYUGzojF4rFV6sZJGojKTO2wwIBV14OHA6iId6hR0st2D 9U4PPIhxLKLMLr7+haXZkHsdStZGP2ja+bYlhu2qdwIatuVgANTL4leOv5R++I51 DkK9+zwSWdXzanp5DTMxS7jryf2up83kq3ISDs+Y2LI/nt9a2EHSrq9wp5mfnMYJ BiDFjg8/1BtbLRJXuzgUQidHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlIwB1I Y/6L4PL8Fn/weZsTQviGMB8GA1UdIwQYMBaAFEsqhmWVRfklZjVCR6TwjzzlvmwN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkVDNC9DOTQyMDMwMDYx QTExMUUyODRCNkEwODUyOTc5QkIyMC9TeXFHWlpWRi1TVm1OVUpIcFBDUFBPVy1i QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5cUdaWlZGLVNWbU5VSkhwUENQUE9XLWJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkVDNC9DOTQyMDMwMDYxQTExMUUyODRCNkEwODUyOTc5QkIyMC9TeXFHWlpWRi1T Vm1OVUpIcFBDUFBPVy1iQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQColyPeZq5Ryn3mjWgSLB1galu0Guyz0fphBQh7KIKS7sc009PEhHU6 uBfReKiF36rZTgg6i1N3TgxdNOaVggrTc5bu8Xz/P1dDd1VnyGYSuonrRZdfYXPl kgXbCelbt1iWNnWmGPljnGlZdzwPn3C5aDFG1vlWXUxooUYzbcgvoBav3fYdtv5T JYt7LUVC2wM8GbsV2hp71yGb7KHxFpSBI7YtzEvB8tYuqcSajfw+eG0icmBPU141 uItVibi3/FFTbmRqBN2M8mTwYeJ7GrZdnHkbgK8PlXyirR141R4zf+bNTwRUIRnP +tPmE2Gldpou3ka9QCxbx/sEs0/Gse6Y -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org