$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft File: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json) Hash identifier: J6/SKa4vXtR21FufxZP06tO1dzD6Gcm0S5JqVvATkKg= Subject key identifier: 99:18:C8:38:2B:2F:73:7E:E4:14:AC:78:54:B4:57:10:5C:2E:A7:54 Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 Certificate issuer: /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Certificate serial: 33B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft Manifest number: 33B0 Signing time: Sun 28 Apr 2024 15:20:04 +0000 Manifest this update: Sun 28 Apr 2024 15:20:04 +0000 Manifest next update: Sun 05 May 2024 15:20:04 +0000 Files and hashes: 1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: SgPQe184U8L0FvgP2KdkbQGUfVE5ElficZdzpecmZV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13233 (0x33b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366 Validity Not Before: Apr 28 15:20:04 2024 GMT Not After : May 5 15:20:04 2024 GMT Subject: CN=662e6924-301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:7a:b7:ed:32:43:37:b8:81:3e:00:05:d4: 8b:40:7a:81:78:a9:5d:66:80:0d:f6:cc:1e:bd:88: 4f:c0:10:2e:0f:30:fb:1e:f5:f6:b7:3c:1b:80:b3: e7:e3:2f:b5:d8:3f:f4:7b:51:bd:3d:ff:18:50:81: ab:ce:a0:f0:1e:40:f3:26:97:d7:55:a6:83:0d:f2: e0:ce:3e:bf:56:a5:3b:e9:7e:30:df:d6:e3:5f:34: 01:e5:ff:8f:2e:a4:57:bc:c2:84:e4:fc:0b:d0:96: 04:cc:68:3d:ab:eb:ac:ef:21:f9:66:7b:be:6c:af: 7f:c5:7c:7e:49:44:db:c9:76:73:e9:07:26:81:54: 34:ea:3e:25:cf:13:ae:63:e6:f5:d7:a1:93:17:62: b5:09:c7:74:b5:d3:6c:91:46:4c:ad:82:0a:83:89: 3d:56:9b:cc:d4:aa:72:9d:85:da:bd:ef:54:83:15: d8:f6:ba:7c:81:c5:40:bb:44:1a:8c:c0:ba:1d:8a: 8b:01:69:92:d7:2e:b4:1b:42:b0:4b:b3:14:fb:43: fc:67:53:1a:c2:b9:70:10:2a:e6:a6:c9:c3:ac:f1: 2e:12:97:bc:fa:fb:6a:a3:13:34:1c:73:be:0c:09: 42:15:79:d1:15:c9:6a:c5:76:35:f2:db:58:4c:dc: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:C8:38:2B:2F:73:7E:E4:14:AC:78:54:B4:57:10:5C:2E:A7:54 X509v3 Authority Key Identifier: keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:15:b3:7c:fa:12:1e:ce:18:5d:6c:e1:66:53:97:51:89:a6: b3:b2:85:1d:c5:e2:6a:4c:19:33:9e:bc:a5:24:f1:5c:49:4b: 7d:d6:80:a3:e1:9d:7f:5c:a9:b5:8c:81:56:08:90:29:c1:65: c2:b5:83:69:b1:d9:9b:1e:3b:df:d3:23:5c:d0:22:c1:d2:d6: af:cd:64:cf:69:5e:0f:d3:51:d8:7f:6e:9d:4c:35:0e:9c:9c: b4:43:8f:81:4b:ea:12:9d:07:43:89:6e:36:bc:eb:2f:95:2b: ca:1b:92:9e:7f:9a:85:78:15:a6:0d:c6:32:62:ae:fe:42:c2: a9:d1:14:3b:96:1f:51:a0:eb:f5:02:7e:aa:33:f0:4c:93:dc: f8:4f:67:a3:49:8c:b4:6c:72:90:cf:00:b9:9c:a1:e6:7e:c3: 30:47:8d:e6:82:00:a8:ad:b4:6b:58:7a:40:1e:14:24:03:5c: 6a:2d:2b:06:39:64:36:e8:f7:fc:e2:0b:1b:b2:4f:19:71:63: 7b:b2:d1:71:4e:6c:67:88:f8:76:b6:4c:3f:38:b1:b8:ce:e4: f5:2d:d3:ba:9c:14:e1:08:34:c3:dc:7d:cb:e5:5e:4b:5c:35: 33:ba:1c:f9:94:20:44:6c:89:da:63:2a:e7:ef:0e:6c:07:05: e5:1d:e5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2 OTlDMEMzNjYwHhcNMjQwNDI4MTUyMDA0WhcNMjQwNTA1MTUyMDA0WjAYMRYwFAYD VQQDEw02NjJlNjkyNC0zMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YB6t+0yQze4gT4ABdSLQHqBeKldZoAN9swevYhPwBAuDzD7HvX2tzwbgLPn 4y+12D/0e1G9Pf8YUIGrzqDwHkDzJpfXVaaDDfLgzj6/VqU76X4w39bjXzQB5f+P LqRXvMKE5PwL0JYEzGg9q+us7yH5Znu+bK9/xXx+SUTbyXZz6QcmgVQ06j4lzxOu Y+b116GTF2K1Ccd0tdNskUZMrYIKg4k9VpvM1KpynYXave9UgxXY9rp8gcVAu0Qa jMC6HYqLAWmS1y60G0KwS7MU+0P8Z1MawrlwECrmpsnDrPEuEpe8+vtqoxM0HHO+ DAlCFXnRFclqxXY18ttYTNy0RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkYyDgr L3N+5BSseFS0VxBcLqdUMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJFbN8+hIezhhdbOFmU5dRiaazsoUdxeJqTBkznrylJPFcSUt91oCj 4Z1/XKm1jIFWCJApwWXCtYNpsdmbHjvf0yNc0CLB0tavzWTPaV4P01HYf26dTDUO nJy0Q4+BS+oSnQdDiW42vOsvlSvKG5Kef5qFeBWmDcYyYq7+QsKp0RQ7lh9RoOv1 An6qM/BMk9z4T2ejSYy0bHKQzwC5nKHmfsMwR43mggCorbRrWHpAHhQkA1xqLSsG OWQ26Pf84gsbsk8ZcWN7stFxTmxniPh2tkw/OLG4zuT1LdO6nBThCDTD3H3L5V5L XDUzuhz5lCBEbInaYyrn7w5sBwXlHeUQ -----END CERTIFICATE-----Generated at Sun Apr 28 19:00:58 2024 by rpki-client on console-fra.rpki-client.org