$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: PvS1qk3+g3bKbw5qxsmqnYHrN7SNxyCrqLpVMWK52D8= Subject key identifier: 90:50:82:26:F4:15:CF:B3:04:6F:C1:D7:E1:44:D7:69:89:F2:4D:19 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 33BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 33BB Signing time: Mon 06 May 2024 15:22:21 +0000 Manifest this update: Mon 06 May 2024 15:22:21 +0000 Manifest next update: Mon 13 May 2024 15:22:21 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: bTFBFmFZKiwTWvzbCVZdA6KGwz6s0RzpulWjQiQ9Cx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13243 (0x33bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: May 6 15:22:21 2024 GMT Not After : May 13 15:22:21 2024 GMT Subject: CN=6638f5ad-bde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:34:b6:fd:a7:a2:9b:0a:76:06:a8:c1:3d: 73:e7:35:8c:37:c5:96:53:ea:e0:88:5e:61:c8:ef: 07:15:2c:cf:c0:13:24:d1:43:09:ce:ee:14:36:63: a9:9b:fd:0d:5e:72:e5:df:b2:2d:4c:9c:db:af:03: 2a:9d:27:03:3a:10:e1:28:bc:29:0c:f6:3c:6d:31: ce:8c:2a:fc:2a:c0:9b:c5:0e:92:ab:9e:88:30:9e: 5e:98:93:e5:cd:15:2c:66:10:c6:ec:d8:3e:39:3b: 0b:07:e3:d1:bb:50:66:10:84:98:f8:f1:6d:fd:aa: 03:04:83:d8:19:d7:88:b2:26:5a:61:90:09:9f:65: e2:a2:9a:21:bd:5b:fd:2f:11:0c:40:c7:3c:91:e7: 99:4e:06:f5:4f:23:54:e6:79:e8:6f:78:24:ac:29: 94:24:bd:dc:a4:24:8e:e4:ce:87:4c:b1:2e:a0:e9: a4:75:50:a7:70:17:c2:ac:b4:bd:d5:91:ad:f1:c1: 73:f0:38:ad:56:c5:93:fc:13:04:7b:a2:cd:75:a1: 8a:eb:9b:28:93:53:25:9f:5e:03:42:92:08:5d:fe: ae:cc:db:d2:1c:e3:99:ac:b7:e8:06:9e:31:aa:57: 49:ca:45:53:15:0b:57:52:90:35:12:0d:1d:e1:89: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:50:82:26:F4:15:CF:B3:04:6F:C1:D7:E1:44:D7:69:89:F2:4D:19 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:26:eb:77:ee:ce:50:7d:40:c8:b1:21:a1:16:32:eb:88:8b: e4:67:00:6f:7d:8d:92:38:01:5d:e0:c4:7a:09:ac:c4:ed:e5: db:3a:31:a6:9e:04:70:63:0b:de:8c:8f:91:7a:8f:15:e3:fa: ab:b1:28:2b:94:d6:46:f3:b0:66:4f:58:6f:ae:11:ee:0b:e2: c8:ac:e4:de:7a:49:f6:6d:cb:b2:b3:b1:15:25:a9:3c:60:74: 68:48:89:4c:91:13:0c:25:37:cb:3d:95:bc:d6:db:b7:1d:b2: 67:2d:aa:42:f7:e0:9e:39:d0:c2:13:00:bf:30:30:f2:11:d5: 16:b9:e9:bf:30:0b:c5:be:d2:37:4c:70:86:fe:70:9f:8f:b7: c2:1e:7f:1f:ad:11:d2:e7:52:7c:66:ea:2d:10:98:c7:e1:31: a2:b7:90:7e:fa:2f:24:d9:26:b1:aa:25:93:9f:5f:68:ee:a9: f8:45:34:5c:a4:a2:a6:d2:4b:af:29:a3:08:34:23:df:b8:47: 3f:3a:66:e7:33:e5:a8:12:6a:63:39:70:d3:b9:a4:98:60:e9: cf:2c:c5:d6:4d:9d:60:43:a9:eb:3b:f7:d6:11:3e:af:cc:bf: 28:05:ca:9e:fb:52:56:07:32:a6:b2:7c:5d:32:12:a1:1b:5c: b9:e6:03:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjQwNTA2MTUyMjIxWhcNMjQwNTEzMTUyMjIxWjAYMRYwFAYD VQQDEw02NjM4ZjVhZC1iZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Gk0tv2nopsKdgaowT1z5zWMN8WWU+rgiF5hyO8HFSzPwBMk0UMJzu4UNmOp m/0NXnLl37ItTJzbrwMqnScDOhDhKLwpDPY8bTHOjCr8KsCbxQ6Sq56IMJ5emJPl zRUsZhDG7Ng+OTsLB+PRu1BmEISY+PFt/aoDBIPYGdeIsiZaYZAJn2XiopohvVv9 LxEMQMc8keeZTgb1TyNU5nnob3gkrCmUJL3cpCSO5M6HTLEuoOmkdVCncBfCrLS9 1ZGt8cFz8DitVsWT/BMEe6LNdaGK65sok1Mln14DQpIIXf6uzNvSHOOZrLfoBp4x qldJykVTFQtXUpA1Eg0d4YmfEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBQgib0 Fc+zBG/B1+FE12mJ8k0ZMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYJut37s5QfUDIsSGhFjLriIvkZwBvfY2SOAFd4MR6CazE7eXbOjGm ngRwYwvejI+Reo8V4/qrsSgrlNZG87BmT1hvrhHuC+LIrOTeekn2bcuys7EVJak8 YHRoSIlMkRMMJTfLPZW81tu3HbJnLapC9+CeOdDCEwC/MDDyEdUWuem/MAvFvtI3 THCG/nCfj7fCHn8frRHS51J8ZuotEJjH4TGit5B++i8k2SaxqiWTn19o7qn4RTRc pKKm0kuvKaMINCPfuEc/OmbnM+WoEmpjOXDTuaSYYOnPLMXWTZ1gQ6nrO/fWET6v zL8oBcqe+1JWBzKmsnxdMhKhG1y55gPu -----END CERTIFICATE-----Generated at Mon May 6 17:42:38 2024 by rpki-client on console-ams.rpki-client.org