$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft File: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json) Hash identifier: 1btzKJyCYV/7gzW3fkOPSONBFjfOsJonHnAUl5qSjrk= Subject key identifier: 66:8A:5E:09:AB:8A:5B:A9:D4:25:61:4C:3F:BC:A1:83:30:A5:87:63 Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 Certificate issuer: /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft Manifest number: 34 Signing time: Fri 17 May 2024 08:27:31 +0000 Manifest this update: Fri 17 May 2024 08:27:30 +0000 Manifest next update: Fri 24 May 2024 08:27:30 +0000 Files and hashes: 1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: 9hxwgfWBapivSdGiP648FKVausrsN6tDtVZbTjg4JKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Validity Not Before: May 17 08:27:30 2024 GMT Not After : May 24 08:27:30 2024 GMT Subject: CN=664714f2-ce10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:50:62:de:bb:65:25:af:d9:69:27:10:80: 52:97:1b:f9:53:65:b3:1a:88:e4:1c:34:3d:78:d0: f7:ff:2a:c1:d6:37:ae:fd:6b:ea:1d:9f:01:92:a2: d1:19:73:46:42:fb:e8:5e:82:1d:c8:07:a9:c6:b0: e5:3c:dd:9f:8b:9c:40:8f:1f:a9:ed:74:b4:77:0d: 52:a2:d8:8a:6e:17:3c:a2:57:7d:da:17:8b:00:9c: 05:92:31:96:2e:7c:fd:64:4a:d4:32:1f:c3:4a:5c: 63:7e:2e:0b:85:80:e9:ef:c3:4d:a4:d7:a8:f5:94: 64:61:37:7f:72:5c:c4:23:ff:fe:0d:01:4c:74:a2: c9:4c:2c:7f:38:c1:68:c2:a9:13:ef:c9:25:da:54: 99:73:0d:a3:69:3e:ca:9b:77:cd:0a:52:16:8e:87: 10:47:b7:3d:b6:eb:18:07:a6:24:66:61:47:1b:5a: d6:d7:7a:ad:85:44:82:07:48:80:8b:39:a7:9a:08: ff:c7:b8:ae:a5:bc:60:ab:a1:a0:85:c5:0c:01:75: 48:63:5c:19:bd:46:ae:64:51:1d:5e:a8:38:49:ab: 51:b4:ef:16:b6:c1:aa:89:72:ab:8e:74:36:d6:e2: a4:1e:c8:d2:b4:46:7c:e7:fc:01:1e:33:9f:17:ae: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:5E:09:AB:8A:5B:A9:D4:25:61:4C:3F:BC:A1:83:30:A5:87:63 X509v3 Authority Key Identifier: keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9a:32:a5:b5:9e:3e:c8:b7:ae:22:17:8b:5c:de:36:63:22: c1:b2:25:8b:22:90:19:81:6c:04:89:7c:2a:d3:6e:50:f4:20: 91:b7:58:cc:b3:35:c6:3e:c6:b3:f7:5f:4e:ec:66:8f:03:ea: ca:5c:86:ff:4e:09:12:ca:8e:a8:d5:95:e6:62:42:16:1b:c2: dc:31:a3:5f:ac:64:23:f1:44:49:7a:a5:e8:f6:f5:0e:46:5c: 50:05:c4:de:78:7c:03:f8:05:3d:b9:bc:a1:4c:bc:dc:8b:71: 2b:76:c6:89:9c:e1:46:4b:03:80:a3:70:ea:81:5e:a8:3d:c1: ae:ec:7d:40:14:5d:26:f1:e4:5f:e2:5b:83:3d:2e:6d:5c:c6: 56:aa:9a:5e:93:84:7e:26:49:b0:f5:8f:2e:ae:c9:19:6a:4c: 07:b6:5d:78:39:77:55:70:60:46:2b:07:f3:81:16:4e:c2:5e: bd:72:f5:b9:8b:4e:08:e5:65:c8:3b:31:9a:99:f2:6e:70:09: 99:18:7c:5a:29:3d:f9:73:75:e8:b5:d2:e4:d0:17:6b:28:d6: 73:56:b9:be:c3:55:b4:af:7d:36:62:b1:03:d4:39:c2:20:06: 1b:ff:32:64:3c:06:42:34:7b:2c:d1:3a:f7:61:69:55:fd:ea: 30:43:db:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzIwMzExMC8GA1UEBRMoMDlFMkM3NTgxNDFDMDE0NEY0NjJCOUYwRjhGQkU3NDhB QTA1Q0IyMTAeFw0yNDA1MTcwODI3MzBaFw0yNDA1MjQwODI3MzBaMBgxFjAUBgNV BAMTDTY2NDcxNGYyLWNlMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1SlBi3rtlJa/ZaScQgFKXG/lTZbMaiOQcND140Pf/KsHWN679a+odnwGSotEZ c0ZC++hegh3IB6nGsOU83Z+LnECPH6ntdLR3DVKi2IpuFzyiV33aF4sAnAWSMZYu fP1kStQyH8NKXGN+LguFgOnvw02k16j1lGRhN39yXMQj//4NAUx0oslMLH84wWjC qRPvySXaVJlzDaNpPsqbd80KUhaOhxBHtz226xgHpiRmYUcbWtbXeq2FRIIHSICL OaeaCP/HuK6lvGCroaCFxQwBdUhjXBm9Rq5kUR1eqDhJq1G07xa2waqJcquOdDbW 4qQeyNK0Rnzn/AEeM58XrhTTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZopeCauK W6nUJWFMP7yhgzClh2MwHwYDVR0jBBgwFoAUCeLHWBQcAUT0Yrnw+PvnSKoFyyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMjAzL0NFQzEyMkNBQzU4 NjExRUU5MTE2NkI4M0M0RjlBRTAyL0NlTEhXQlFjQVVUMFlybnctUHZuU0tvRnl5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2VMSFdCUWNBVVQwWXJudy1Qdm5TS29GeXlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD MjAzL0NFQzEyMkNBQzU4NjExRUU5MTE2NkI4M0M0RjlBRTAyL0NlTEhXQlFjQVVU MFlybnctUHZuU0tvRnl5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+aMqW1nj7It64iF4tc3jZjIsGyJYsikBmBbASJfCrTblD0IJG3WMyz NcY+xrP3X07sZo8D6spchv9OCRLKjqjVleZiQhYbwtwxo1+sZCPxREl6pej29Q5G XFAFxN54fAP4BT25vKFMvNyLcSt2xomc4UZLA4CjcOqBXqg9wa7sfUAUXSbx5F/i W4M9Lm1cxlaqml6ThH4mSbD1jy6uyRlqTAe2XXg5d1VwYEYrB/OBFk7CXr1y9bmL TgjlZcg7MZqZ8m5wCZkYfFopPflzdei10uTQF2so1nNWub7DVbSvfTZisQPUOcIg Bhv/MmQ8BkI0eyzROvdhaVX96jBD2wc= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org