$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: 9LH0qODra7BMp+PBLE2CSPvUeC2Q1nXfedGeg32zIaM= Subject key identifier: 67:EB:A7:82:35:1E:6A:59:98:72:7D:CF:DD:D3:35:65:7D:C6:B7:E2 Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 33B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 33B4 Signing time: Sun 28 Apr 2024 15:26:41 +0000 Manifest this update: Sun 28 Apr 2024 15:26:41 +0000 Manifest next update: Sun 05 May 2024 15:26:41 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: apVzi849YyJvb9UvtGTja/gxxwN35laxGFxadZDgiUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13237 (0x33b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Apr 28 15:26:41 2024 GMT Not After : May 5 15:26:41 2024 GMT Subject: CN=662e6ab1-8207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:28:9c:e5:6b:70:ba:79:21:36:b3:95:d9: 2c:6b:79:a9:0d:98:85:60:5c:85:4b:40:05:05:d3: a3:fc:93:71:b5:63:ee:f7:d0:cd:e5:19:b6:39:cd: 05:7c:b1:39:90:92:d9:7b:e9:98:de:6e:e8:03:96: df:04:e5:97:81:9c:c5:fb:b0:46:4d:70:a3:07:3b: 0e:bd:75:77:66:5a:9d:d8:d9:aa:de:a5:31:3b:f0: 06:df:d9:c4:0c:ae:46:0c:ea:1c:72:35:b0:14:1f: 88:28:32:9b:21:eb:75:b4:6e:d4:a1:ec:bb:8c:33: 32:c4:7e:09:68:07:1f:0c:47:0a:61:6c:fc:ac:93: 0b:48:d0:cf:64:43:bf:7d:e0:ba:cf:62:a8:58:47: 0d:58:51:ad:42:cb:51:e7:d8:dd:88:00:bf:41:dd: c5:18:af:c0:a9:05:8e:2b:62:7d:61:af:91:e3:9f: 03:86:f9:7f:5c:d7:43:6f:22:d8:ba:f3:4f:9f:71: 66:5f:c0:2f:71:b2:93:92:50:e8:03:bf:13:2c:d0: 5e:6f:ea:22:45:73:45:5e:ab:b5:22:4d:56:18:f3: 3e:a2:0c:2e:31:65:03:5a:74:80:89:69:5e:d6:5a: 49:e9:1a:bc:7f:2f:e7:67:b8:a3:63:cf:e0:a7:41: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EB:A7:82:35:1E:6A:59:98:72:7D:CF:DD:D3:35:65:7D:C6:B7:E2 X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2f:bf:73:43:48:ac:b1:7a:9f:b0:8c:68:eb:cf:e2:cb:c6: b5:7d:f3:9e:e0:e6:8c:39:04:21:1d:6d:bf:13:52:04:1d:0d: 22:5a:69:41:7b:66:1a:bd:3f:ea:f0:87:b7:83:35:74:8a:83: ec:4c:ab:86:71:02:93:1e:c7:09:6d:be:eb:e2:d9:12:ed:61: 97:ca:11:9d:7f:4b:67:0d:85:16:e2:a1:36:aa:5b:d5:87:9d: c4:36:c3:f4:5e:e4:25:0f:89:5d:dd:6c:87:a7:94:e9:14:f3: b4:fb:d7:9c:52:39:1b:fb:cb:de:23:84:ac:20:74:2b:d2:a7: 18:be:5e:f4:ed:3a:6c:7a:85:5b:b1:7f:22:ea:50:1b:c1:e8: 20:c7:0e:cd:7a:3d:bb:3f:6c:57:0b:23:3b:f7:4c:5a:11:6a: 2b:99:f6:41:97:54:d7:fa:07:0f:37:19:a9:a0:11:f6:31:49: 7f:07:dc:58:33:ec:eb:ac:35:59:02:fd:df:03:a5:0d:63:f9: ee:68:86:f0:5a:ab:6d:96:0d:36:7e:87:a0:1b:26:68:58:ea: 9d:b7:3e:b5:2c:19:b1:26:ba:1d:58:21:59:8f:f8:21:a5:fa: 44:57:a0:4e:13:ad:3b:30:c3:27:36:11:1a:bf:ce:6f:08:2a: 96:94:c5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjQwNDI4MTUyNjQxWhcNMjQwNTA1MTUyNjQxWjAYMRYwFAYD VQQDEw02NjJlNmFiMS04MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgMonOVrcLp5ITazldksa3mpDZiFYFyFS0AFBdOj/JNxtWPu99DN5Rm2Oc0F fLE5kJLZe+mY3m7oA5bfBOWXgZzF+7BGTXCjBzsOvXV3Zlqd2Nmq3qUxO/AG39nE DK5GDOoccjWwFB+IKDKbIet1tG7Uoey7jDMyxH4JaAcfDEcKYWz8rJMLSNDPZEO/ feC6z2KoWEcNWFGtQstR59jdiAC/Qd3FGK/AqQWOK2J9Ya+R458Dhvl/XNdDbyLY uvNPn3FmX8AvcbKTklDoA78TLNBeb+oiRXNFXqu1Ik1WGPM+ogwuMWUDWnSAiWle 1lpJ6Rq8fy/nZ7ijY8/gp0EyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfrp4I1 HmpZmHJ9z93TNWV9xrfiMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOL79zQ0issXqfsIxo68/iy8a1ffOe4OaMOQQhHW2/E1IEHQ0iWmlB e2YavT/q8Ie3gzV0ioPsTKuGcQKTHscJbb7r4tkS7WGXyhGdf0tnDYUW4qE2qlvV h53ENsP0XuQlD4ld3WyHp5TpFPO0+9ecUjkb+8veI4SsIHQr0qcYvl707TpseoVb sX8i6lAbweggxw7Nej27P2xXCyM790xaEWormfZBl1TX+gcPNxmpoBH2MUl/B9xY M+zrrDVZAv3fA6UNY/nuaIbwWqttlg02foegGyZoWOqdtz61LBmxJrodWCFZj/gh pfpEV6BOE607MMMnNhEav85vCCqWlMWe -----END CERTIFICATE-----Generated at Sun Apr 28 19:00:53 2024 by rpki-client on console-fra.rpki-client.org