$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json) Hash identifier: LqsmtLJVOaEuSScfSMy5JuU9Ymw7AkV+x4TUIwDlNes= Subject key identifier: EB:B7:4F:26:9A:5D:5A:F4:BA:24:37:7E:A6:69:61:85:A7:BC:53:F6 Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft Manifest number: 33BF Signing time: Mon 06 May 2024 14:41:58 +0000 Manifest this update: Mon 06 May 2024 14:41:57 +0000 Manifest next update: Mon 13 May 2024 14:41:57 +0000 Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: a198RveCfmcD2MRmPCGs0eoc1CWL76OBb3cnJlZG680=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Validity Not Before: May 6 14:41:57 2024 GMT Not After : May 13 14:41:57 2024 GMT Subject: CN=6638ec36-1712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:81:7b:4b:81:7e:bf:b2:ec:29:3b:2b:80:26: bf:f8:d7:e8:a3:69:a8:3b:9f:88:2a:27:83:cd:a5: db:9a:9c:46:bb:da:9d:02:91:a8:7c:72:5a:34:f9: 4a:55:3c:58:58:93:fd:63:a1:76:e0:c0:ec:a7:47: d1:b5:2a:fa:da:33:0a:76:44:68:4b:51:12:17:9b: aa:05:80:ca:9a:c8:5d:4e:dd:25:4c:1d:a2:c4:db: d7:f9:a7:5a:5a:b4:42:75:2c:1b:37:0d:3f:7f:f8: 22:bd:6a:a7:59:6c:cd:81:77:88:d0:07:fb:a2:1e: 16:df:1b:18:53:fc:22:08:50:67:0d:bc:74:ba:fd: f7:d4:cb:04:51:06:30:13:69:10:61:93:70:16:17: 4a:a1:08:b5:da:02:2f:1f:52:c7:15:70:89:78:d8: 52:d7:76:ad:41:cf:aa:cd:95:7c:da:16:fd:50:69: b8:1f:b3:f3:ff:eb:db:a9:f6:5b:f0:67:aa:b3:5f: e9:d9:f8:dc:e1:0f:fa:30:9c:19:3c:fc:9f:1e:ba: c1:4c:cf:88:c0:46:40:38:0a:c0:81:27:a7:f3:e1: bb:c6:7e:b2:13:e6:ee:97:8e:24:73:11:40:09:5f: 31:55:4c:12:e4:d7:6f:0a:ca:86:c3:74:e3:b5:3f: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:4F:26:9A:5D:5A:F4:BA:24:37:7E:A6:69:61:85:A7:BC:53:F6 X509v3 Authority Key Identifier: keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2d:44:05:1b:73:72:85:35:34:22:3c:d7:d1:65:a9:82:1a: fb:3a:58:19:5b:8e:9f:d5:3e:6e:d0:d4:0c:06:36:40:9b:22: 78:93:11:1e:4b:7b:e4:49:3a:64:ef:40:b3:a0:dc:8e:74:40: 1b:84:ab:f8:4c:6c:ec:05:4a:10:a6:27:05:51:d7:6d:1c:ff: 53:5e:8f:a9:53:ec:49:65:34:6a:b7:c3:a6:ee:92:52:17:96: 7d:aa:c8:0f:4e:27:c6:b0:39:ad:47:bb:f7:77:a0:e9:bd:02: e2:99:5c:e7:43:dc:07:40:62:23:c4:6c:c6:dc:7d:a3:b4:8f: 97:09:21:ca:28:c0:fd:5d:d2:e9:73:3a:e3:ed:30:25:bb:d5: 3e:1b:56:fd:97:38:8b:6d:84:24:3c:2b:e2:88:0d:64:80:45: 0d:83:92:21:93:ee:3d:c9:5f:51:0a:51:d1:f3:ae:7c:30:36: fb:28:e4:bc:aa:9a:1a:94:a2:c3:d0:0a:80:ec:ce:14:fe:8b: fc:5e:1e:2e:21:7b:d3:9b:d7:cd:7e:f3:d2:cc:99:1c:be:4b: 19:a6:5c:73:b8:95:8f:b6:86:ad:b7:fc:ab:f0:9a:7b:ca:33: 41:e1:39:eb:4e:53:ea:64:fb:cd:fc:66:7c:ca:b6:d2:6e:43: 7f:a4:6d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4QzIzQzFFMjI0 QjQzREJBQTUwHhcNMjQwNTA2MTQ0MTU3WhcNMjQwNTEzMTQ0MTU3WjAYMRYwFAYD VQQDEw02NjM4ZWMzNi0xNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IF7S4F+v7LsKTsrgCa/+Nfoo2moO5+IKieDzaXbmpxGu9qdApGofHJaNPlK VTxYWJP9Y6F24MDsp0fRtSr62jMKdkRoS1ESF5uqBYDKmshdTt0lTB2ixNvX+ada WrRCdSwbNw0/f/givWqnWWzNgXeI0Af7oh4W3xsYU/wiCFBnDbx0uv331MsEUQYw E2kQYZNwFhdKoQi12gIvH1LHFXCJeNhS13atQc+qzZV82hb9UGm4H7Pz/+vbqfZb 8Geqs1/p2fjc4Q/6MJwZPPyfHrrBTM+IwEZAOArAgSen8+G7xn6yE+bul44kcxFA CV8xVUwS5NdvCsqGw3TjtT8MbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOu3Tyaa XVr0uiQ3fqZpYYWnvFP2MB8GA1UdIwQYMBaAFAZV4pFcrekWd6q0jCPB4iS0Pbql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQzNS9ENkY4ODVBNDFE OEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZSWjNxclNNSThIaUpMUTl1 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsWGlrVnl0NlJaM3FyU01JOEhpSkxROXVxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZS WjNxclNNSThIaUpMUTl1cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmLUQFG3NyhTU0IjzX0WWpghr7OlgZW46f1T5u0NQMBjZAmyJ4kxEe S3vkSTpk70CzoNyOdEAbhKv4TGzsBUoQpicFUddtHP9TXo+pU+xJZTRqt8Om7pJS F5Z9qsgPTifGsDmtR7v3d6DpvQLimVznQ9wHQGIjxGzG3H2jtI+XCSHKKMD9XdLp czrj7TAlu9U+G1b9lziLbYQkPCviiA1kgEUNg5Ihk+49yV9RClHR8658MDb7KOS8 qpoalKLD0AqA7M4U/ov8Xh4uIXvTm9fNfvPSzJkcvksZplxzuJWPtoatt/yr8Jp7 yjNB4TnrTlPqZPvN/GZ8yrbSbkN/pG24 -----END CERTIFICATE-----Generated at Mon May 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org