$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: BbA0M5QlwsCJF1PlL5K4hyjv5e4Sxo98KlrHeTvalZE= Subject key identifier: CF:23:50:8D:B1:91:88:22:5A:10:0C:F3:4D:34:6B:6E:FA:08:2B:C7 Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 33BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 33BA Signing time: Sat 18 May 2024 15:19:57 +0000 Manifest this update: Sat 18 May 2024 15:19:56 +0000 Manifest next update: Sat 25 May 2024 15:19:56 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: UF3WqP84d0NEFtBk3IHGN4AdMMwUnt4iCIYp5AfNp00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13243 (0x33bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: May 18 15:19:56 2024 GMT Not After : May 25 15:19:56 2024 GMT Subject: CN=6648c71d-7ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:61:58:92:fe:98:2e:9f:a9:cd:6d:a9:d9: 2c:f9:e7:46:8c:c9:d9:91:5f:83:4f:54:e3:8b:5a: 8b:ce:70:a6:05:3c:30:24:2e:eb:d5:a6:42:1d:d2: b4:89:a3:78:6c:a1:7c:47:68:6e:7e:f9:bb:16:27: 4e:67:b2:fb:be:85:6e:1c:78:81:ce:75:78:62:b7: 94:19:fe:56:58:c0:39:ee:cb:75:e7:c3:18:20:d1: cc:8f:e0:0d:3b:1e:0f:bd:20:33:90:40:ee:c6:aa: 79:44:0f:4e:83:97:4b:45:ce:71:6b:d0:f4:c1:74: 0c:38:1c:ed:4e:fe:63:1e:15:ba:e3:fb:6c:b2:ef: fb:78:b6:7c:de:c7:b3:0d:43:30:23:95:9b:82:ca: 0d:2d:c2:92:31:97:bd:83:b7:34:6a:0d:05:6f:f6: 53:a5:d5:5f:b6:64:8d:3e:5a:b6:89:2e:87:57:46: f0:f3:ba:41:22:62:04:f6:99:b4:0c:8d:12:fb:5d: ff:92:82:b2:17:41:a6:6f:c3:fc:49:1a:e1:67:14: 7d:c0:b1:c1:13:0a:2a:e0:f7:6c:72:69:99:3f:93: 81:bd:eb:99:15:ef:b5:90:5a:aa:c9:92:2f:a1:da: e3:7f:54:d6:7c:2c:96:3e:ca:eb:2f:69:d4:ab:7d: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:50:8D:B1:91:88:22:5A:10:0C:F3:4D:34:6B:6E:FA:08:2B:C7 X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:86:1f:79:83:68:0b:72:22:d8:57:50:d2:e6:4d:3b:b9:db: e0:cb:7f:bd:f0:c6:52:8f:8d:f9:e8:ac:0b:a6:fb:98:9d:c5: 20:5a:3c:eb:5f:92:fe:bc:df:e4:f9:a7:42:90:7a:b6:08:cb: c4:17:cc:1a:7f:53:69:c0:19:39:3e:3d:75:c7:8c:45:90:10: 00:3e:e6:c4:51:4f:6d:92:45:fb:e5:05:0b:f2:df:67:be:09: d9:5f:7e:d7:2d:00:43:17:9c:38:82:f8:0e:4a:96:21:3a:f1: 64:7d:26:7a:d4:10:4e:4f:a0:36:0c:15:82:40:25:6d:45:bd: d6:57:d4:46:ee:d1:99:99:2c:09:52:37:50:c6:a1:76:8c:bb: 21:6a:51:02:c5:56:c6:5e:ba:03:bb:98:2b:ff:df:f4:eb:e9: 36:93:44:d5:37:5b:73:ec:e3:c6:81:54:eb:82:91:52:f8:3d: 46:61:e3:6a:68:dc:ff:8a:f8:79:68:17:79:6b:53:0d:bb:bb: b8:c0:06:09:64:d6:9b:58:d7:a9:1d:a5:e1:0a:b0:95:4b:60: 0d:b6:09:37:17:de:2e:73:51:be:2f:e7:5e:43:35:e0:04:38: 75:47:e1:05:d3:86:df:c6:49:fe:79:72:86:0e:f5:c8:e0:77: 49:14:3d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjQwNTE4MTUxOTU2WhcNMjQwNTI1MTUxOTU2WjAYMRYwFAYD VQQDEw02NjQ4YzcxZC03ZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2G1hWJL+mC6fqc1tqdks+edGjMnZkV+DT1Tji1qLznCmBTwwJC7r1aZCHdK0 iaN4bKF8R2hufvm7FidOZ7L7voVuHHiBznV4YreUGf5WWMA57st158MYINHMj+AN Ox4PvSAzkEDuxqp5RA9Og5dLRc5xa9D0wXQMOBztTv5jHhW64/tssu/7eLZ83sez DUMwI5WbgsoNLcKSMZe9g7c0ag0Fb/ZTpdVftmSNPlq2iS6HV0bw87pBImIE9pm0 DI0S+13/koKyF0Gmb8P8SRrhZxR9wLHBEwoq4PdscmmZP5OBveuZFe+1kFqqyZIv odrjf1TWfCyWPsrrL2nUq32AEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8jUI2x kYgiWhAM8000a276CCvHMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUhh95g2gLciLYV1DS5k07udvgy3+98MZSj4356KwLpvuYncUgWjzr X5L+vN/k+adCkHq2CMvEF8waf1NpwBk5Pj11x4xFkBAAPubEUU9tkkX75QUL8t9n vgnZX37XLQBDF5w4gvgOSpYhOvFkfSZ61BBOT6A2DBWCQCVtRb3WV9RG7tGZmSwJ UjdQxqF2jLshalECxVbGXroDu5gr/9/06+k2k0TVN1tz7OPGgVTrgpFS+D1GYeNq aNz/ivh5aBd5a1MNu7u4wAYJZNabWNepHaXhCrCVS2ANtgk3F94uc1G+L+deQzXg BDh1R+EF04bfxkn+eXKGDvXI4HdJFD2c -----END CERTIFICATE-----Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org