$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft File: pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft (raw, json) Hash identifier: A5RnygTcpzwW3/JrftccWFJMt1L4YJBgZvIH1j8g65s= Subject key identifier: B7:81:6D:73:52:9A:97:35:BC:FA:25:41:30:36:B4:80:76:13:94:B4 Authority key identifier: A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB Certificate issuer: /CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft Manifest number: 3A25 Signing time: Sat 04 May 2024 14:39:18 +0000 Manifest this update: Sat 04 May 2024 14:39:18 +0000 Manifest next update: Sat 11 May 2024 14:39:18 +0000 Files and hashes: 1: pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl (hash: OndfVOjg8r1XPGjs+n1CsAfhSQMCZNx5TSby4iqs0Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6D4/serialNumber=A41A767BE4CAC6EB1B897423360C2B4353AC1FFB Validity Not Before: May 4 14:39:18 2024 GMT Not After : May 11 14:39:18 2024 GMT Subject: CN=66364896-b1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:c3:25:56:50:cc:e5:2c:49:c5:e0:ee:7b: f7:13:c6:7f:22:10:46:c0:94:fe:a6:cf:5a:7c:f6: 0b:2f:73:74:40:a0:f6:45:f2:9d:f5:8f:c0:7a:e8: 5c:e5:75:54:5a:31:f2:48:50:e3:b2:1f:de:06:bd: b5:c0:77:56:de:7e:3a:70:5b:31:bd:cb:99:f2:5e: e1:89:ed:1a:6c:e2:ae:a6:5f:ed:82:35:97:18:23: 66:3c:6d:a1:f2:ac:03:c3:e5:41:ac:8a:8b:61:ed: 61:63:60:65:99:60:fa:b2:37:32:9a:ca:54:6e:36: db:b1:28:dc:01:7c:c1:d4:72:28:a3:c1:e0:77:87: cd:19:2d:b9:97:c0:80:d1:22:d2:6d:b4:1a:50:e8: 4c:b0:c0:97:26:a2:84:a1:d2:4a:04:e5:b0:ae:52: 7e:2b:0a:9e:f4:c6:2b:43:a4:df:38:48:fd:b4:05: ea:d0:11:b1:13:b4:e5:ce:bf:89:8b:4e:e1:57:08: 58:5b:ae:8c:ff:fd:a5:ba:ae:fd:35:04:5c:7d:73: f0:b8:00:30:6f:f0:7e:4a:12:89:52:b3:0b:8a:1e: 35:4e:3e:74:ca:5f:53:60:d0:c9:8a:4b:49:bf:6a: 1f:3e:b5:a1:1a:72:df:92:9f:05:0f:db:60:c9:87: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:6D:73:52:9A:97:35:BC:FA:25:41:30:36:B4:80:76:13:94:B4 X509v3 Authority Key Identifier: keyid:A4:1A:76:7B:E4:CA:C6:EB:1B:89:74:23:36:0C:2B:43:53:AC:1F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6D4/C30171421D8B11E2AF0CA6E608B02CD2/pBp2e-TKxusbiXQjNgwrQ1OsH_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4c:1f:37:2a:6a:63:c1:e9:80:49:c4:8b:e7:2f:e1:e7:3d: d6:55:ac:29:b3:db:10:7e:3f:30:72:bf:17:e4:16:6c:cc:fd: f9:e7:6a:f8:0b:5a:88:1a:3b:87:97:55:a1:d8:94:d3:01:46: f9:13:98:11:f7:76:6d:c6:a0:35:2d:76:6e:77:de:63:c5:c7: 68:0c:de:82:f8:c3:ea:19:cb:f4:c9:29:13:30:98:01:da:ea: 47:81:77:57:3f:95:8d:fb:96:38:32:a1:f4:c8:a4:3e:6f:ef: 46:be:e3:56:28:a2:68:bb:9b:71:3c:6c:e7:d8:af:b0:20:8c: b4:cd:df:77:f6:4c:96:79:01:e6:87:d9:d1:62:e6:50:68:61: b8:28:ea:43:64:bf:79:45:84:1d:39:b9:29:c0:c8:ec:f7:18: 11:29:c5:5f:8f:ef:5a:5b:c6:f5:f3:44:32:b4:63:ea:b7:b7: 8b:97:c6:02:3a:3e:0b:46:1c:ba:cf:33:61:fa:ac:54:13:cc: 92:c6:44:e2:88:89:63:a6:34:9b:45:b9:65:39:21:2f:91:6f: 83:7f:6b:5d:6f:4c:37:e9:16:d4:3e:59:96:95:e7:68:5a:47: 44:27:03:3b:fb:a8:9d:88:77:d9:50:f7:8c:5e:75:36:6e:3d: c2:e0:bb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2RDQxMTAvBgNVBAUTKEE0MUE3NjdCRTRDQUM2RUIxQjg5NzQyMzM2MEMyQjQz NTNBQzFGRkIwHhcNMjQwNTA0MTQzOTE4WhcNMjQwNTExMTQzOTE4WjAYMRYwFAYD VQQDEw02NjM2NDg5Ni1iMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8zDJVZQzOUsScXg7nv3E8Z/IhBGwJT+ps9afPYLL3N0QKD2RfKd9Y/Aeuhc 5XVUWjHySFDjsh/eBr21wHdW3n46cFsxvcuZ8l7hie0abOKupl/tgjWXGCNmPG2h 8qwDw+VBrIqLYe1hY2BlmWD6sjcymspUbjbbsSjcAXzB1HIoo8Hgd4fNGS25l8CA 0SLSbbQaUOhMsMCXJqKEodJKBOWwrlJ+Kwqe9MYrQ6TfOEj9tAXq0BGxE7Tlzr+J i07hVwhYW66M//2luq79NQRcfXPwuAAwb/B+ShKJUrMLih41Tj50yl9TYNDJiktJ v2ofPrWhGnLfkp8FD9tgyYebewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeBbXNS mpc1vPolQTA2tIB2E5S0MB8GA1UdIwQYMBaAFKQadnvkysbrG4l0IzYMK0NTrB/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZENC9DMzAxNzE0MjFE OEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1c2JpWFFqTmd3clExT3NI X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BCcDJlLVRLeHVzYmlYUWpOZ3dyUTFPc0hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZENC9DMzAxNzE0MjFEOEIxMUUyQUYwQ0E2RTYwOEIwMkNEMi9wQnAyZS1US3h1 c2JpWFFqTmd3clExT3NIX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlTB83KmpjwemAScSL5y/h5z3WVawps9sQfj8wcr8X5BZszP3552r4 C1qIGjuHl1Wh2JTTAUb5E5gR93ZtxqA1LXZud95jxcdoDN6C+MPqGcv0ySkTMJgB 2upHgXdXP5WN+5Y4MqH0yKQ+b+9GvuNWKKJou5txPGzn2K+wIIy0zd939kyWeQHm h9nRYuZQaGG4KOpDZL95RYQdObkpwMjs9xgRKcVfj+9aW8b180QytGPqt7eLl8YC Oj4LRhy6zzNh+qxUE8ySxkTiiIljpjSbRbllOSEvkW+Df2tdb0w36RbUPlmWledo WkdEJwM7+6idiHfZUPeMXnU2bj3C4Lu2 -----END CERTIFICATE-----Generated at Sat May 4 15:45:46 2024 by rpki-client on console-fra.rpki-client.org