$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: IiCb/WPME4eALrV2az2foZR3xw6zl2KcKZnK7qM3fQ0= Subject key identifier: E8:8A:26:86:8F:98:94:ED:79:FE:CD:0E:FC:BD:9E:36:C8:F8:4B:52 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 33C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 33C8 Signing time: Fri 31 May 2024 15:35:54 +0000 Manifest this update: Fri 31 May 2024 15:35:53 +0000 Manifest next update: Fri 07 Jun 2024 15:35:53 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: bOyy83kspFlwHyH/BoJG1/LHyaDGZ/uIvtdNKfANMbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13256 (0x33c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: May 31 15:35:53 2024 GMT Not After : Jun 7 15:35:53 2024 GMT Subject: CN=6659ee5a-f756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:24:b0:6d:a9:44:41:ff:e1:8d:4d:e6:9b: 69:dd:25:52:cb:db:86:98:64:97:d5:c3:12:7c:c0: 35:8e:5e:85:38:2f:af:75:61:27:af:f4:1a:06:6b: c1:58:4a:d7:03:32:2a:3e:e5:72:3f:66:e8:d0:71: 8f:69:4b:e4:9c:9a:7a:9d:66:99:bb:75:f8:93:2c: 99:4c:77:e9:4d:36:a1:64:b3:77:9a:dd:07:cd:ad: 51:33:d5:90:f5:1f:aa:44:e4:7e:8e:3e:3c:49:df: ea:4d:f5:79:13:94:06:b1:53:a8:60:5e:f3:a2:9c: 7e:0c:fc:78:f4:78:ac:42:f2:60:7b:eb:97:3a:b6: ee:21:fb:6b:f6:31:74:de:e8:4c:23:1b:cf:9b:b6: 92:1c:b3:ce:fa:51:95:fa:39:87:a6:db:de:34:94: c4:04:92:79:fa:88:e7:9e:f1:0f:eb:a8:fa:d3:fb: 5a:1b:56:95:62:93:9e:92:d1:2a:58:b5:d8:1b:27: 80:73:b6:61:c0:85:74:d1:f8:bb:bb:5a:17:c0:9e: 37:8c:ee:ce:03:bb:b6:e0:0d:7b:01:e5:6e:e6:9d: 28:7c:6c:d2:66:d0:ba:1f:99:54:9e:31:c8:26:56: e8:bb:04:9a:ee:cf:ea:67:21:c3:c5:a7:63:a5:ae: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8A:26:86:8F:98:94:ED:79:FE:CD:0E:FC:BD:9E:36:C8:F8:4B:52 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:28:21:44:72:3f:dc:4e:ce:54:f7:2a:4a:dc:6c:03:a3:c1: 33:bf:55:d5:3c:e2:ab:f7:08:f7:75:c8:34:80:4e:07:e8:59: 03:ca:16:e4:e6:15:aa:e5:98:e9:21:75:b4:13:b5:47:c5:07: 86:d7:15:1c:06:d1:80:4e:77:ee:52:47:8b:6a:15:02:ef:cd: 5a:f1:fa:30:1b:70:83:e7:8c:a3:78:7d:dc:a8:ea:54:fe:74: ae:29:fb:97:52:f5:a1:7a:ba:4f:a4:91:ca:35:70:b4:e6:c2: 94:c7:50:98:03:ae:3d:42:a8:90:8b:d9:5c:80:e1:fc:b2:e2: 79:ef:5e:31:13:28:61:db:b1:b1:95:06:56:1c:e8:1b:2b:4c: 53:56:65:b2:2f:30:cd:c2:c2:83:7b:d2:b3:88:9b:80:fd:17: a8:b7:10:86:6e:32:98:c6:e6:fc:99:ae:d1:d3:82:a9:48:72: dc:e7:de:25:cf:db:d2:d9:ec:b6:20:86:68:5c:03:77:45:91: f7:fb:03:70:da:53:90:39:89:e2:8a:14:b0:76:9f:c7:cb:34: 36:31:68:c0:9e:80:34:64:5d:85:36:32:27:73:a8:97:e8:43: df:36:2e:b6:21:47:4d:42:15:af:57:55:3b:3e:df:93:f7:c9: 09:15:c5:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjQwNTMxMTUzNTUzWhcNMjQwNjA3MTUzNTUzWjAYMRYwFAYD VQQDEw02NjU5ZWU1YS1mNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7d0ksG2pREH/4Y1N5ptp3SVSy9uGmGSX1cMSfMA1jl6FOC+vdWEnr/QaBmvB WErXAzIqPuVyP2bo0HGPaUvknJp6nWaZu3X4kyyZTHfpTTahZLN3mt0Hza1RM9WQ 9R+qROR+jj48Sd/qTfV5E5QGsVOoYF7zopx+DPx49HisQvJge+uXOrbuIftr9jF0 3uhMIxvPm7aSHLPO+lGV+jmHptveNJTEBJJ5+ojnnvEP66j60/taG1aVYpOektEq WLXYGyeAc7ZhwIV00fi7u1oXwJ43jO7OA7u24A17AeVu5p0ofGzSZtC6H5lUnjHI JlbouwSa7s/qZyHDxadjpa7OKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiKJoaP mJTtef7NDvy9njbI+EtSMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxKCFEcj/cTs5U9ypK3GwDo8Ezv1XVPOKr9wj3dcg0gE4H6FkDyhbk 5hWq5ZjpIXW0E7VHxQeG1xUcBtGATnfuUkeLahUC781a8fowG3CD54yjeH3cqOpU /nSuKfuXUvWherpPpJHKNXC05sKUx1CYA649QqiQi9lcgOH8suJ5714xEyhh27Gx lQZWHOgbK0xTVmWyLzDNwsKDe9KziJuA/ReotxCGbjKYxub8ma7R04KpSHLc594l z9vS2ey2IIZoXAN3RZH3+wNw2lOQOYniihSwdp/HyzQ2MWjAnoA0ZF2FNjInc6iX 6EPfNi62IUdNQhWvV1U7Pt+T98kJFcX/ -----END CERTIFICATE-----Generated at Fri May 31 16:41:44 2024 by rpki-client on console-ams.rpki-client.org