$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: Ubs08ZkZCedA0jjUM2Onmq+pbO/oqyhycrHByccRoQw= Subject key identifier: EE:4F:E2:FA:D4:D8:AD:3A:07:7D:E0:12:BA:6E:55:4C:F1:E3:57:37 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 33C3 Signing time: Sat 04 May 2024 14:45:53 +0000 Manifest this update: Sat 04 May 2024 14:45:53 +0000 Manifest next update: Sat 11 May 2024 14:45:53 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 4yJQhtDpCeDIcmhcvx5yiviok1L+UzzH20CMbQKBxAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: May 4 14:45:53 2024 GMT Not After : May 11 14:45:53 2024 GMT Subject: CN=66364a21-0715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:81:d0:d4:68:69:70:f8:9c:c5:04:05:2a: 3d:1e:73:e6:02:24:8f:7c:ba:da:b5:4c:cf:f2:d3: 27:6b:b7:e3:fe:a5:b5:e5:cf:c6:aa:bf:3e:61:b7: 48:46:9a:33:47:2e:97:d8:95:a6:84:4d:12:8e:59: 38:aa:55:fc:84:b8:68:80:94:73:5f:db:0f:ee:68: 12:c5:dc:21:4c:19:e2:97:5d:e3:7b:96:7b:81:c3: 3f:aa:a1:53:90:66:5a:da:84:00:a2:ad:64:89:bf: 71:e7:a9:cb:37:6f:dc:97:86:9a:2e:5e:6e:85:67: 5d:15:7a:1e:8e:a5:e2:78:11:c1:84:01:06:fd:3a: 83:59:bc:81:9e:5e:13:13:bc:b1:65:6c:2c:d7:9e: e8:12:db:2e:85:2c:6e:e0:80:56:b8:c5:26:25:28: 88:2c:5f:bf:d1:c7:bd:16:28:09:17:54:6f:e3:6a: 51:d6:0d:d3:3c:88:6c:3f:11:32:cd:ed:2e:b2:77: 37:6d:04:43:e8:d2:f9:0a:08:77:f5:07:ee:85:aa: b6:57:41:f5:85:ce:a1:66:58:46:f7:e3:f4:a8:41: 51:8c:62:d7:e2:4b:59:63:d3:91:e5:73:27:18:05: e5:d3:55:79:0f:b6:14:0b:ee:fa:d8:a4:3c:2c:ae: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:E2:FA:D4:D8:AD:3A:07:7D:E0:12:BA:6E:55:4C:F1:E3:57:37 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e3:25:a4:5c:37:45:37:66:74:b7:61:ba:83:54:74:bc:f7: db:97:d4:46:8d:72:9b:8c:84:8b:02:97:c0:31:3e:ce:ce:41: bf:ff:22:66:25:1c:8c:9f:49:e5:a8:76:b0:37:c8:36:93:4f: 34:67:e8:c0:53:5f:64:3c:a9:e9:00:15:f6:56:64:ee:9c:76: 19:9d:00:28:e6:ee:b7:f2:40:e1:e4:e9:19:51:5f:b2:8b:36: 93:48:c4:fc:20:42:96:1e:2f:10:b8:21:fc:dc:ed:c1:e2:eb: 9a:ed:47:57:1b:7e:a8:47:54:4f:1f:2c:01:d4:56:b0:e7:37: 1c:68:d7:20:a0:8c:d6:59:57:ff:71:c1:e2:d7:2a:3c:8e:ef: 88:3a:fb:ef:4a:e6:b3:c1:f4:17:6f:41:2d:c2:81:ee:de:72: 7e:97:8f:5c:12:6d:42:15:b5:e5:2b:e6:02:67:1f:f4:e0:62: 90:ad:61:f7:25:20:a2:6b:bc:98:5b:61:a4:a5:e7:d3:86:ee: 23:53:27:e1:46:32:6d:96:ab:fb:8f:ee:07:12:8e:0c:d4:95: b0:ec:f1:3f:9f:55:3c:c7:91:42:c2:93:8c:18:00:34:47:af: 83:b3:8b:dc:28:0d:d2:7a:02:77:3c:14:16:01:cc:4d:07:3d: 03:59:1d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjQwNTA0MTQ0NTUzWhcNMjQwNTExMTQ0NTUzWjAYMRYwFAYD VQQDEw02NjM2NGEyMS0wNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8CB0NRoaXD4nMUEBSo9HnPmAiSPfLratUzP8tMna7fj/qW15c/Gqr8+YbdI RpozRy6X2JWmhE0Sjlk4qlX8hLhogJRzX9sP7mgSxdwhTBnil13je5Z7gcM/qqFT kGZa2oQAoq1kib9x56nLN2/cl4aaLl5uhWddFXoejqXieBHBhAEG/TqDWbyBnl4T E7yxZWws157oEtsuhSxu4IBWuMUmJSiILF+/0ce9FigJF1Rv42pR1g3TPIhsPxEy ze0usnc3bQRD6NL5Cgh39Qfuhaq2V0H1hc6hZlhG9+P0qEFRjGLX4ktZY9OR5XMn GAXl01V5D7YUC+762KQ8LK5AhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5P4vrU 2K06B33gErpuVUzx41c3MB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU4yWkXDdFN2Z0t2G6g1R0vPfbl9RGjXKbjISLApfAMT7OzkG//yJm JRyMn0nlqHawN8g2k080Z+jAU19kPKnpABX2VmTunHYZnQAo5u638kDh5OkZUV+y izaTSMT8IEKWHi8QuCH83O3B4uua7UdXG36oR1RPHywB1Faw5zccaNcgoIzWWVf/ ccHi1yo8ju+IOvvvSuazwfQXb0EtwoHu3nJ+l49cEm1CFbXlK+YCZx/04GKQrWH3 JSCia7yYW2GkpefThu4jUyfhRjJtlqv7j+4HEo4M1JWw7PE/n1U8x5FCwpOMGAA0 R6+Ds4vcKA3SegJ3PBQWAcxNBz0DWR24 -----END CERTIFICATE-----Generated at Sat May 4 15:55:00 2024 by rpki-client on console-ams.rpki-client.org