$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: aWEkjvHGEwWzsUjrAiKUrnAQaypGFAYynwP1OdbIwFk= Subject key identifier: 1A:10:06:A1:93:B4:EA:68:14:46:61:B7:DD:17:35:F1:FF:EF:A0:20 Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 33BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 33BC Signing time: Sat 04 May 2024 14:29:47 +0000 Manifest this update: Sat 04 May 2024 14:29:46 +0000 Manifest next update: Sat 11 May 2024 14:29:46 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: NB81tNQOq5mXoSpIr5TTMbT/ei3zHdNbGDNs5DgncYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13245 (0x33bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: May 4 14:29:46 2024 GMT Not After : May 11 14:29:46 2024 GMT Subject: CN=6636465a-566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:0a:60:2d:5d:b6:e3:69:36:4d:43:9c:a5: d2:99:0a:64:71:48:3f:03:5f:8b:b0:0b:3e:d0:3c: fc:bd:b2:fb:4c:49:d5:09:3f:79:a2:8a:88:f3:04: a1:45:7b:9e:14:7c:3b:20:1f:ce:38:34:1f:a1:96: c6:5c:4f:44:ff:73:b8:d5:9b:40:c3:c8:5f:7f:68: 5d:59:e2:81:c6:0a:0c:fa:81:56:10:ff:43:34:6c: 64:58:79:17:a7:e7:4a:cf:58:d4:81:d0:84:8f:22: ef:35:87:c2:e3:a7:f0:45:c1:51:8b:f6:e3:cb:cb: 28:a9:3a:82:77:7b:6b:27:03:e4:08:9e:2d:04:28: 9f:91:be:e6:65:ca:d0:24:30:38:7f:c7:f7:42:14: 40:ce:94:bf:59:ae:1c:e9:0b:5a:d6:ae:87:08:76: 2f:bb:ca:51:4e:f5:61:54:7e:55:d3:c9:d4:6d:6d: c0:70:e1:b4:f3:8a:26:c3:45:ba:b1:e9:d0:f6:38: 14:64:8c:02:00:fd:c9:e9:53:05:18:1d:90:d0:5c: a2:ae:73:83:76:5a:2d:60:b9:13:4c:72:7a:c1:e8: ef:95:8d:5d:e7:3b:19:9b:d0:72:86:bf:06:59:ae: f2:85:1c:d6:a1:f4:b9:d6:f0:d8:ab:1c:c7:cb:7b: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:06:A1:93:B4:EA:68:14:46:61:B7:DD:17:35:F1:FF:EF:A0:20 X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b9:c8:8b:8d:72:06:61:d8:7e:39:06:58:87:29:ec:1d:a2: 11:2a:89:2b:9f:11:e3:09:ed:44:de:7b:24:2a:1a:22:60:ff: 05:d3:41:5a:ec:f2:0c:60:56:61:54:2f:f8:c9:cf:59:a4:35: b7:ef:1f:46:dc:8b:1e:e8:3d:da:ac:cb:eb:21:77:94:6c:06: e2:87:6c:16:bb:72:e1:8c:d0:d5:24:31:b4:a5:51:f0:93:c5: 9c:45:af:a5:71:b3:d2:69:66:15:7f:86:5f:bb:da:65:d2:0f: cc:ba:4e:cf:2a:9d:be:f8:9c:76:eb:27:7b:23:03:48:0d:38: 38:41:b0:ad:6b:63:95:54:84:a4:bc:3c:dc:2f:58:9f:8e:0f: 83:d6:a3:a1:bd:82:0d:82:b6:79:5d:fe:37:fb:94:03:ba:00: 1c:86:f3:e4:56:96:79:9a:fd:e2:97:3c:18:15:6b:4c:88:b9: 8c:91:db:2a:c6:11:e7:13:4d:a6:f4:6f:d3:90:82:1e:bc:45: a2:86:45:ca:4a:0d:e3:2c:31:79:2f:b8:dc:df:d0:d3:f5:90: 6b:56:6e:23:49:bc:b1:85:04:cb:84:82:a9:c8:40:c3:a6:a7: 62:fa:69:b2:f7:1f:9c:86:42:2f:12:a6:05:00:4f:5d:ca:2e: 0b:4a:29:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjQwNTA0MTQyOTQ2WhcNMjQwNTExMTQyOTQ2WjAYMRYwFAYD VQQDEw02NjM2NDY1YS01NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvgKYC1dtuNpNk1DnKXSmQpkcUg/A1+LsAs+0Dz8vbL7TEnVCT95ooqI8wSh RXueFHw7IB/OODQfoZbGXE9E/3O41ZtAw8hff2hdWeKBxgoM+oFWEP9DNGxkWHkX p+dKz1jUgdCEjyLvNYfC46fwRcFRi/bjy8soqTqCd3trJwPkCJ4tBCifkb7mZcrQ JDA4f8f3QhRAzpS/Wa4c6Qta1q6HCHYvu8pRTvVhVH5V08nUbW3AcOG084omw0W6 senQ9jgUZIwCAP3J6VMFGB2Q0FyirnODdlotYLkTTHJ6wejvlY1d5zsZm9Byhr8G Wa7yhRzWofS51vDYqxzHy3v3OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoQBqGT tOpoFEZht90XNfH/76AgMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiuciLjXIGYdh+OQZYhynsHaIRKokrnxHjCe1E3nskKhoiYP8F00Fa 7PIMYFZhVC/4yc9ZpDW37x9G3Ise6D3arMvrIXeUbAbih2wWu3LhjNDVJDG0pVHw k8WcRa+lcbPSaWYVf4Zfu9pl0g/Muk7PKp2++Jx26yd7IwNIDTg4QbCta2OVVISk vDzcL1ifjg+D1qOhvYINgrZ5Xf43+5QDugAchvPkVpZ5mv3ilzwYFWtMiLmMkdsq xhHnE02m9G/TkIIevEWihkXKSg3jLDF5L7jc39DT9ZBrVm4jSbyxhQTLhIKpyEDD pqdi+mmy9x+chkIvEqYFAE9dyi4LSikg -----END CERTIFICATE-----Generated at Sat May 4 15:45:46 2024 by rpki-client on console-fra.rpki-client.org