$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft File: 8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json) Hash identifier: kfcxaX0LoWEHrKtEwf8/ZBvFVlBXr0kbggZPXwnYmYQ= Subject key identifier: AD:ED:08:06:E5:B7:70:DF:81:96:96:0C:81:27:2A:03:7E:8B:6A:46 Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 Certificate issuer: /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Certificate serial: 33B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft Manifest number: 33B8 Signing time: Sat 04 May 2024 15:25:59 +0000 Manifest this update: Sat 04 May 2024 15:25:58 +0000 Manifest next update: Sat 11 May 2024 15:25:58 +0000 Files and hashes: 1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: CpRolO5+k+fAzccgIyOh26eKTlqj+I09FuJ3YmJVtiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13240 (0x33b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00 Validity Not Before: May 4 15:25:58 2024 GMT Not After : May 11 15:25:58 2024 GMT Subject: CN=66365387-f091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:93:df:4d:71:23:53:fb:c7:17:93:3b:83: ca:d3:4e:09:ff:03:3a:e9:a6:65:00:55:b2:c8:c9: 74:65:bd:d4:9d:e2:e9:85:d2:78:3b:76:9c:a2:5d: 02:90:fa:25:e1:d6:43:9f:14:c1:73:4f:e1:5c:e4: db:c2:66:2c:a0:55:3d:d8:59:76:10:ea:e0:7e:7c: 46:11:10:66:1e:7c:38:c5:a6:8a:1d:3a:92:a9:36: b9:80:c9:78:53:41:bb:aa:bc:97:37:b3:bb:15:12: c9:cd:3f:e7:d7:cd:ec:c0:fe:bf:a3:d0:be:b5:d4: 4b:4b:56:30:ba:d8:f8:72:67:09:4e:70:bf:7e:30: 38:c1:25:b3:ba:20:ce:02:5c:34:c8:9c:a6:18:c3: fd:c5:61:ad:ec:fb:4f:f0:4a:cd:ac:ab:06:41:8f: 2e:08:1b:4c:52:d5:ec:14:07:b0:76:40:f4:45:36: f2:f2:8e:ab:e8:af:52:8c:2d:29:d2:69:3a:69:66: 3d:dd:ba:51:ea:76:4c:49:8a:80:87:20:a8:0b:e9: 71:e1:01:20:ec:25:91:4e:fe:62:66:c2:8c:ee:30: 10:d0:e9:06:cc:97:9b:b4:32:6b:d5:d1:51:68:30: 91:a4:66:cd:b9:d9:e3:de:44:c6:9e:3b:46:d3:45: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:ED:08:06:E5:B7:70:DF:81:96:96:0C:81:27:2A:03:7E:8B:6A:46 X509v3 Authority Key Identifier: keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6c:ea:9c:39:36:59:bd:17:53:8b:d2:16:9c:d9:21:a7:8b: 14:49:9a:3e:43:60:4e:ef:ca:bd:01:b6:9b:79:93:a7:01:c5: c4:20:3d:b5:b2:42:fb:66:3c:c6:68:80:38:a8:5c:cd:af:ab: 10:64:9d:b4:57:c2:de:6c:57:45:aa:c2:b3:3d:54:8e:a1:11: da:e8:ca:82:00:5e:92:7b:de:7d:9e:b1:06:5f:64:e4:09:4a: 0c:44:00:68:6c:22:b4:51:ec:25:92:c4:dc:c8:25:67:81:06: a0:75:ad:20:5e:c7:de:dc:c8:b4:be:ab:cc:c9:dd:82:99:28: 6a:2c:2f:19:df:ab:ae:7c:09:57:b5:33:78:91:7c:eb:f5:f2: 7e:e7:03:0c:de:b6:66:25:90:20:da:28:84:11:75:0e:30:c6: 85:ce:8f:ac:6d:d9:2e:94:67:c4:6f:61:ed:e7:a9:03:e1:77: 63:54:bb:58:c3:ef:fd:89:fc:4a:cb:f3:78:a4:55:83:0f:2f: 53:e0:06:07:a9:ab:f4:dd:ff:0e:ca:2c:e2:73:45:14:8a:a4: 4b:e8:33:57:41:46:c2:af:7f:04:db:94:8a:f9:e4:84:d5:a0: 37:ff:83:3d:6b:d9:57:ff:09:8c:41:f4:d9:24:8b:f5:28:8c: aa:52:c8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGMDExMTAvBgNVBAUTKEYxMjYwRDY1MzA1RTNBODk1REIyQzY5MUI2QURDMDNF NTE5RjNEMDAwHhcNMjQwNTA0MTUyNTU4WhcNMjQwNTExMTUyNTU4WjAYMRYwFAYD VQQDEw02NjM2NTM4Ny1mMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG2T301xI1P7xxeTO4PK004J/wM66aZlAFWyyMl0Zb3UneLphdJ4O3acol0C kPol4dZDnxTBc0/hXOTbwmYsoFU92Fl2EOrgfnxGERBmHnw4xaaKHTqSqTa5gMl4 U0G7qryXN7O7FRLJzT/n183swP6/o9C+tdRLS1Ywutj4cmcJTnC/fjA4wSWzuiDO Alw0yJymGMP9xWGt7PtP8ErNrKsGQY8uCBtMUtXsFAewdkD0RTby8o6r6K9SjC0p 0mk6aWY93bpR6nZMSYqAhyCoC+lx4QEg7CWRTv5iZsKM7jAQ0OkGzJebtDJr1dFR aDCRpGbNudnj3kTGnjtG00WJXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3tCAbl t3DfgZaWDIEnKgN+i2pGMB8GA1UdIwQYMBaAFPEmDWUwXjqJXbLGkbatwD5Rnz0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0YwMS9DNEI4OEJGMDFE QTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9vbGRzc2FSdHEzQVBsR2ZQ UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTWU5aVEJlT29sZHNzYVJ0cTNBUGxHZlBRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YwMS9DNEI4OEJGMDFEQTUxMUUyOUMwOUI3OUMwOEIwMkNEMi84U1lOWlRCZU9v bGRzc2FSdHEzQVBsR2ZQUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrbOqcOTZZvRdTi9IWnNkhp4sUSZo+Q2BO78q9AbabeZOnAcXEID21 skL7ZjzGaIA4qFzNr6sQZJ20V8LebFdFqsKzPVSOoRHa6MqCAF6Se959nrEGX2Tk CUoMRABobCK0UewlksTcyCVngQagda0gXsfe3Mi0vqvMyd2CmShqLC8Z36uufAlX tTN4kXzr9fJ+5wMM3rZmJZAg2iiEEXUOMMaFzo+sbdkulGfEb2Ht56kD4XdjVLtY w+/9ifxKy/N4pFWDDy9T4AYHqav03f8Oyizic0UUiqRL6DNXQUbCr38E25SK+eSE 1aA3/4M9a9lX/wmMQfTZJIv1KIyqUsjI -----END CERTIFICATE-----Generated at Sat May 4 16:33:54 2024 by rpki-client on console-fra.rpki-client.org