$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: DKErnD66uvf42SqM14x5CLY3cRsoIBALyMVbOznE+x4= Subject key identifier: 29:0B:85:7A:A8:69:DF:FD:33:5D:3D:11:5E:6F:E4:E0:BE:56:A1:1E Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 33BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 33BA Signing time: Thu 02 May 2024 15:25:24 +0000 Manifest this update: Thu 02 May 2024 15:25:24 +0000 Manifest next update: Thu 09 May 2024 15:25:24 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: rnSFxZd8mcruy46UjrqVpFOgvRAsCIIIW0qpKShD/A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13242 (0x33ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: May 2 15:25:24 2024 GMT Not After : May 9 15:25:24 2024 GMT Subject: CN=6633b064-5e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:d9:3f:b8:72:dc:d9:b3:7d:9b:68:93:93: fa:ff:8a:a3:69:18:ee:48:e8:98:3b:2a:ea:ce:a7: e2:83:df:f4:43:1a:f6:39:95:28:11:60:89:bb:f2: e1:a9:0d:b8:94:f4:1c:98:0b:05:ba:61:74:0d:ec: 5e:29:01:39:0d:49:a4:df:07:4a:f0:3a:00:ce:96: 58:44:c6:9f:98:51:d0:ad:ca:38:b9:e9:2d:26:0a: c0:11:41:b9:54:65:35:f6:83:44:22:06:a2:2c:c3: 57:01:8f:6b:7b:75:5a:29:4f:cf:5c:8b:21:30:e4: 69:3c:00:aa:9b:6b:81:7c:54:d4:a3:a8:eb:db:ff: 0f:78:6d:ef:7b:27:99:6e:71:be:7a:73:09:5f:6e: 20:ae:19:69:05:ed:6b:03:9c:14:2c:c8:f4:56:8e: 0c:da:65:e0:2b:60:ef:07:00:01:b4:9f:bb:f3:1f: 04:8f:5c:6d:ec:8f:37:a3:07:90:3a:73:9e:39:28: 06:d1:04:a9:86:8c:b1:41:9c:5f:24:61:3e:ce:88: 0a:84:5d:3f:95:8d:4c:27:32:ca:2a:fc:8d:68:6e: d8:37:c2:b9:2d:d6:d8:66:da:93:b7:c2:bd:14:62: 35:1d:a6:9b:9d:e7:a0:49:59:7d:f1:19:0c:94:ac: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:85:7A:A8:69:DF:FD:33:5D:3D:11:5E:6F:E4:E0:BE:56:A1:1E X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:13:6f:51:24:96:ba:e5:4e:b1:8a:f1:4c:dc:3a:85:36: b5:07:bb:62:ab:5d:58:21:32:4b:bb:e6:91:05:49:97:c7:98: d8:84:42:fa:17:a4:af:fb:cf:8e:71:85:ff:12:f2:0a:d8:e1: 27:99:c9:7c:cf:2a:7f:f3:3e:16:54:e8:b9:f1:ce:53:55:98: ef:03:79:4b:8f:6e:60:32:9d:f5:0f:5c:c5:2e:4e:fe:d8:78: 59:18:f4:41:c8:70:48:92:f5:b3:51:56:31:3d:74:ce:a1:07: 18:7a:c7:da:f4:7e:f6:2f:24:a8:b7:87:2c:5e:ce:22:eb:7f: d1:f7:4a:f4:6d:09:20:e2:e1:82:cd:87:e0:2d:88:a2:12:33: 0a:97:b4:76:1c:7b:b3:88:7a:16:2a:be:2e:58:39:b8:4b:c3: de:f3:c6:de:c9:34:c7:42:f8:ea:20:6c:26:e2:96:e8:c1:19: 2e:d3:68:21:2b:c7:62:6d:88:26:0a:90:a6:82:d6:46:65:01: 7e:61:a8:98:9b:67:b2:a0:21:99:c5:88:5d:42:e1:1e:e0:c3: 02:60:43:83:cb:4a:3d:ae:30:25:d4:d4:7a:0b:58:64:77:7e: 78:97:ca:d0:70:44:b5:6d:08:25:41:db:dd:78:f8:73:ce:b5: 97:37:39:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjQwNTAyMTUyNTI0WhcNMjQwNTA5MTUyNTI0WjAYMRYwFAYD VQQDEw02NjMzYjA2NC01ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOfZP7hy3NmzfZtok5P6/4qjaRjuSOiYOyrqzqfig9/0Qxr2OZUoEWCJu/Lh qQ24lPQcmAsFumF0DexeKQE5DUmk3wdK8DoAzpZYRMafmFHQrco4uektJgrAEUG5 VGU19oNEIgaiLMNXAY9re3VaKU/PXIshMORpPACqm2uBfFTUo6jr2/8PeG3veyeZ bnG+enMJX24grhlpBe1rA5wULMj0Vo4M2mXgK2DvBwABtJ+78x8Ej1xt7I83oweQ OnOeOSgG0QSphoyxQZxfJGE+zogKhF0/lY1MJzLKKvyNaG7YN8K5LdbYZtqTt8K9 FGI1HaabneegSVl98RkMlKxMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkLhXqo ad/9M109EV5v5OC+VqEeMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc+RNvUSSWuuVOsYrxTNw6hTa1B7tiq11YITJLu+aRBUmXx5jYhEL6 F6Sv+8+OcYX/EvIK2OEnmcl8zyp/8z4WVOi58c5TVZjvA3lLj25gMp31D1zFLk7+ 2HhZGPRByHBIkvWzUVYxPXTOoQcYesfa9H72LySot4csXs4i63/R90r0bQkg4uGC zYfgLYiiEjMKl7R2HHuziHoWKr4uWDm4S8Pe88beyTTHQvjqIGwm4pbowRku02gh K8dibYgmCpCmgtZGZQF+YaiYm2eyoCGZxYhdQuEe4MMCYEODy0o9rjAl1NR6C1hk d354l8rQcES1bQglQdvdePhzzrWXNzmP -----END CERTIFICATE-----Generated at Thu May 2 17:43:07 2024 by rpki-client on console-fra.rpki-client.org