$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: 3LvMgpsULaw0B/SKnMclNcCZSEk0JgF2zkPtbN84ChM= Subject key identifier: 8B:5B:B6:3A:25:31:D1:3C:5C:65:69:17:70:5E:89:65:0A:B3:D1:B8 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 33BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 33BC Signing time: Mon 06 May 2024 15:25:19 +0000 Manifest this update: Mon 06 May 2024 15:25:18 +0000 Manifest next update: Mon 13 May 2024 15:25:18 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: 6hg85S1+4UEWTrDQ0ROdms1+lK7XtmvuJMw9H7EIN2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13244 (0x33bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: May 6 15:25:18 2024 GMT Not After : May 13 15:25:18 2024 GMT Subject: CN=6638f65e-400f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:ca:e8:50:96:a7:c6:19:04:84:4d:f9:53: d4:0e:a0:e8:95:a6:4a:f2:66:c5:44:6d:b7:2d:b1: 08:a4:93:46:18:c2:25:1b:c5:68:dc:ad:d2:71:c6: 22:39:2a:f8:a4:c9:9c:18:1e:37:8b:cc:65:cd:b1: e1:b1:44:2c:d0:fa:6f:e7:9f:78:ce:62:09:08:40: b6:66:24:b8:e4:73:e1:cb:c7:20:3d:ab:4f:2b:21: b4:e3:2e:32:a1:f1:96:17:2e:88:95:63:62:56:f7: 42:37:13:a0:0a:34:1b:6a:3e:bb:93:86:91:0b:61: 6e:7a:4c:bc:63:e0:b4:18:96:24:27:5a:72:b3:aa: c6:62:c5:00:ed:fe:aa:94:a5:06:e4:a1:d6:8b:6f: e4:3e:fe:94:e2:5d:63:3f:5c:c2:0d:77:df:72:62: e3:52:e3:90:d3:23:53:f7:70:b1:07:f2:c2:31:c7: 2e:9d:12:7a:c9:55:89:a1:42:90:ef:32:16:51:b1: eb:a8:fb:97:12:d4:d5:3b:fd:55:06:30:c1:0a:6d: c5:f1:5f:81:d8:d5:7c:e8:03:91:cc:5f:fd:3b:12: 43:59:b9:dd:d6:a6:3c:e7:af:bd:e8:bf:fd:63:ce: 68:1f:37:d9:32:64:a3:d3:c9:2c:50:84:0f:63:fe: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5B:B6:3A:25:31:D1:3C:5C:65:69:17:70:5E:89:65:0A:B3:D1:B8 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:40:66:c7:8d:45:d4:81:b1:95:63:9e:77:44:a4:cb:90:85: 2b:5a:a0:b5:2a:d2:79:11:a7:6c:40:cf:cb:a4:d5:bb:f5:2f: b7:10:6d:49:b8:15:25:79:c6:63:53:1a:d0:4b:1c:03:3a:db: 70:3e:db:56:83:51:21:47:b8:8f:e9:17:ba:e0:46:03:c1:23: e3:ed:7f:c3:d3:20:de:33:9c:05:af:c9:88:84:83:72:a1:91: a0:80:37:eb:4e:b9:12:0b:b7:2c:79:99:1a:ec:64:d2:50:ad: c5:77:dd:14:e9:a7:4f:30:22:b9:1e:07:da:33:58:ff:02:94: 8d:fc:cd:7f:f5:82:45:9c:0c:c8:e3:b9:61:ff:86:2b:12:2b: f7:fc:9f:c1:97:f8:c9:c5:31:6d:25:4d:d1:ba:18:8b:e6:3f: 9e:d4:95:84:a0:e8:31:bc:02:7d:e3:dc:ab:df:bc:ff:6d:c2: 93:8b:71:c8:a1:dd:ec:14:a9:e8:53:ba:31:f1:b5:a9:99:b9: ba:ad:be:ce:56:01:7b:44:19:8c:3f:4b:80:64:63:0e:68:ff: 8d:3e:d5:5c:9c:0a:3f:83:4b:81:4f:04:71:3d:c7:8c:50:2f: e7:0b:c3:eb:27:0a:69:94:15:09:6f:54:d0:c5:81:a9:0a:07: ba:8d:7b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjQwNTA2MTUyNTE4WhcNMjQwNTEzMTUyNTE4WjAYMRYwFAYD VQQDEw02NjM4ZjY1ZS00MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v/K6FCWp8YZBIRN+VPUDqDolaZK8mbFRG23LbEIpJNGGMIlG8Vo3K3SccYi OSr4pMmcGB43i8xlzbHhsUQs0Ppv5594zmIJCEC2ZiS45HPhy8cgPatPKyG04y4y ofGWFy6IlWNiVvdCNxOgCjQbaj67k4aRC2Fueky8Y+C0GJYkJ1pys6rGYsUA7f6q lKUG5KHWi2/kPv6U4l1jP1zCDXffcmLjUuOQ0yNT93CxB/LCMccunRJ6yVWJoUKQ 7zIWUbHrqPuXEtTVO/1VBjDBCm3F8V+B2NV86AORzF/9OxJDWbnd1qY856+96L/9 Y85oHzfZMmSj08ksUIQPY/4cSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItbtjol MdE8XGVpF3BeiWUKs9G4MB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJQGbHjUXUgbGVY553RKTLkIUrWqC1KtJ5EadsQM/LpNW79S+3EG1J uBUlecZjUxrQSxwDOttwPttWg1EhR7iP6Re64EYDwSPj7X/D0yDeM5wFr8mIhINy oZGggDfrTrkSC7cseZka7GTSUK3Fd90U6adPMCK5HgfaM1j/ApSN/M1/9YJFnAzI 47lh/4YrEiv3/J/Bl/jJxTFtJU3RuhiL5j+e1JWEoOgxvAJ949yr37z/bcKTi3HI od3sFKnoU7ox8bWpmbm6rb7OVgF7RBmMP0uAZGMOaP+NPtVcnAo/g0uBTwRxPceM UC/nC8PrJwpplBUJb1TQxYGpCge6jXtu -----END CERTIFICATE-----Generated at Mon May 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org