$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: NQjndTVf9diRJMYEfFdFgYleoKlyUmskyWDu6NZPj4A= Subject key identifier: 1A:1C:8E:7C:9D:4D:77:B8:26:EB:71:EA:51:E1:90:16:B7:3E:9A:1D Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 33C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 15:12:46 +0000 Manifest this update: Sat 18 May 2024 15:12:45 +0000 Manifest next update: Sat 25 May 2024 15:12:45 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: dC4CJkXFtmOsJXrEl0PCL4OKtAA53XPKTNUSVjyxevk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13250 (0x33c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: May 18 15:12:45 2024 GMT Not After : May 25 15:12:45 2024 GMT Subject: CN=6648c56e-7d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:02:93:04:63:e4:75:97:fe:c4:b9:71:ac: 0a:5e:0f:19:1e:af:29:33:cf:60:2b:62:86:9f:04: ab:45:d4:d3:5c:7c:2f:2a:7a:ab:dc:23:1d:86:ca: 17:eb:05:7d:bc:0a:21:8c:61:3d:c4:6d:27:19:9e: 6a:a9:5e:4f:cc:2a:65:13:45:73:68:55:e2:2c:9c: de:91:2e:33:fd:96:c4:b8:73:50:36:4d:83:79:cb: bb:54:89:be:17:66:2c:07:d6:7f:a7:cc:db:90:0d: 66:d1:3e:0b:e9:73:88:63:af:4b:73:11:9b:39:3f: 10:50:98:41:96:7f:54:c3:1d:ee:c6:02:52:8f:f7: ef:ae:ae:e2:a3:35:0f:27:3f:42:9b:a8:e9:c5:bc: 28:23:8f:1c:a4:f1:c8:3b:10:1c:24:42:2f:c6:26: 9b:dd:3b:2d:0e:c6:80:15:1b:e2:34:da:44:e3:86: 6d:d6:44:55:c4:65:34:af:5c:ab:e9:67:7a:c3:da: 2e:ba:e5:a2:e4:da:4a:10:f4:c6:68:18:8b:98:d4: bd:e5:72:e8:ee:71:5c:5e:98:96:b1:80:c6:5d:5e: e6:77:23:36:81:1e:a8:7c:09:ac:8e:aa:55:59:13: 99:5c:ed:dc:01:c5:27:ae:55:33:f6:87:eb:eb:91: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1C:8E:7C:9D:4D:77:B8:26:EB:71:EA:51:E1:90:16:B7:3E:9A:1D X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:85:63:a4:2d:c7:6d:fb:c9:bb:fb:53:c9:19:ff:a1:ba:68: 67:63:35:5a:5e:2c:8b:37:e6:33:eb:00:fc:a7:de:28:85:c7: ef:91:6e:bc:b9:46:e6:ee:37:1b:db:1f:d5:f9:ea:12:35:33: 66:be:97:44:1f:a4:aa:12:f6:77:b7:b8:70:60:97:2a:e2:ed: 62:cf:68:1f:6e:e7:fe:9b:2d:f4:ae:75:b2:8c:8b:85:65:4c: 6e:97:cb:f0:33:e2:3a:0a:61:10:70:28:a8:ab:10:d4:56:dc: 33:85:36:4e:50:74:58:e8:99:31:69:f1:b1:c1:df:b8:d4:a7: a3:e9:fa:7e:cc:66:69:aa:ae:71:d9:39:c5:eb:53:67:17:84: 97:4d:d2:da:0c:cc:fd:5a:57:58:b3:c2:61:41:51:1d:d7:cb: 84:77:56:e9:da:22:a4:7e:4a:2a:85:39:90:2c:6b:96:46:54: 34:28:d8:66:c8:b1:55:7d:41:5b:5c:ee:f1:4c:32:bc:8a:e8: b0:33:9d:cb:e1:e7:bb:00:74:90:89:d8:b7:9a:48:a2:90:cc: 75:93:98:90:f7:d8:50:d0:e3:64:5a:29:b5:54:7d:8d:f9:8f: da:27:aa:f2:1c:e5:56:47:78:97:5a:9a:91:49:62:9a:21:c1: 26:7a:d8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjQwNTE4MTUxMjQ1WhcNMjQwNTI1MTUxMjQ1WjAYMRYwFAYD VQQDEw02NjQ4YzU2ZS03ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBQCkwRj5HWX/sS5cawKXg8ZHq8pM89gK2KGnwSrRdTTXHwvKnqr3CMdhsoX 6wV9vAohjGE9xG0nGZ5qqV5PzCplE0VzaFXiLJzekS4z/ZbEuHNQNk2Decu7VIm+ F2YsB9Z/p8zbkA1m0T4L6XOIY69LcxGbOT8QUJhBln9Uwx3uxgJSj/fvrq7iozUP Jz9Cm6jpxbwoI48cpPHIOxAcJEIvxiab3TstDsaAFRviNNpE44Zt1kRVxGU0r1yr 6Wd6w9ouuuWi5NpKEPTGaBiLmNS95XLo7nFcXpiWsYDGXV7mdyM2gR6ofAmsjqpV WROZXO3cAcUnrlUz9ofr65FH0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBocjnyd TXe4Jutx6lHhkBa3PpodMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhWOkLcdt+8m7+1PJGf+humhnYzVaXiyLN+Yz6wD8p94ohcfvkW68 uUbm7jcb2x/V+eoSNTNmvpdEH6SqEvZ3t7hwYJcq4u1iz2gfbuf+my30rnWyjIuF ZUxul8vwM+I6CmEQcCioqxDUVtwzhTZOUHRY6JkxafGxwd+41Kej6fp+zGZpqq5x 2TnF61NnF4SXTdLaDMz9WldYs8JhQVEd18uEd1bp2iKkfkoqhTmQLGuWRlQ0KNhm yLFVfUFbXO7xTDK8iuiwM53L4ee7AHSQidi3mkiikMx1k5iQ99hQ0ONkWim1VH2N +Y/aJ6ryHOVWR3iXWpqRSWKaIcEmetiw -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org