$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json) Hash identifier: ozQv8Xeb0gCalqOUOnMIJNoCN45jWs2UeMwf4GoSwiU= Subject key identifier: F6:EF:3A:89:DB:79:C4:F8:71:40:AD:1B:54:86:39:7F:76:F1:2C:00 Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft Manifest number: 5DD0 Signing time: Tue 30 Apr 2024 14:15:27 +0000 Manifest this update: Tue 30 Apr 2024 14:15:26 +0000 Manifest next update: Tue 07 May 2024 14:15:26 +0000 Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: wiYkFjwK2Tqc8sxwPEKuFfS522pABchljjMEVb76HGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Validity Not Before: Apr 30 14:15:26 2024 GMT Not After : May 7 14:15:26 2024 GMT Subject: CN=6630fcff-5b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:b1:a4:b3:27:d8:92:4c:27:54:68:79:d4: b1:00:8f:a5:4b:95:c9:f7:3a:a5:c9:ba:4a:00:14: b5:38:c4:86:cf:9f:69:64:9a:c9:44:0b:c6:f2:39: d9:47:27:c6:e9:2e:8e:b5:64:c0:f8:e1:5c:c9:b0: 04:5a:fc:71:d5:5e:f0:6f:00:89:e0:85:d9:8d:2f: 56:59:5d:09:e6:3c:a6:8d:c1:4b:6c:7c:00:b3:62: 3b:b8:bf:68:16:d1:bd:48:8f:1b:64:e8:cd:16:00: e7:5c:09:a1:0d:0e:51:e7:68:1b:c3:42:1a:16:30: ea:2a:73:21:8c:5d:d4:24:65:42:59:1d:f0:0e:df: c7:9d:89:b6:45:0c:28:f4:5a:49:19:a4:5d:8b:52: cc:ed:26:6a:eb:c4:1f:c6:c5:bd:76:90:e4:6e:fa: 92:6b:62:32:22:e3:b0:cb:47:00:fa:f2:b4:d3:bd: 66:b5:ae:af:33:50:a8:96:d5:fa:44:11:27:8d:15: 60:dc:96:69:d8:5c:e1:79:b1:0e:68:15:36:ed:2a: 7e:c6:90:53:3c:bc:37:dd:4e:5a:04:f2:df:93:d7: 58:15:ce:c6:65:6e:39:b3:c1:d5:17:5c:56:ce:da: 13:e6:a7:23:11:c4:a8:cd:91:5e:a4:cb:d0:79:42: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EF:3A:89:DB:79:C4:F8:71:40:AD:1B:54:86:39:7F:76:F1:2C:00 X509v3 Authority Key Identifier: keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:12:99:87:50:c0:a0:f9:c2:44:83:23:9e:09:e7:03:20:46: 9d:79:c7:30:01:17:97:2f:a4:98:dd:f6:e5:e4:08:8d:ff:03: db:99:a8:a4:a2:eb:68:91:a3:ff:bd:f5:23:5c:6a:a3:6f:cf: b1:fd:80:84:4d:05:e3:30:33:15:39:a9:c8:92:93:00:ad:18: d7:80:6f:8a:eb:34:ac:77:6f:32:05:8e:13:cf:10:62:11:80: 63:79:b8:86:bd:db:ff:cf:19:00:0e:c0:f0:db:1f:23:62:6e: c1:16:5f:45:73:e9:65:fb:6f:e7:8c:d6:23:f4:29:c9:b9:0e: 66:d0:bb:06:5e:e7:49:46:d9:aa:5c:c1:ba:3a:a1:94:bf:96: 4d:3f:18:1a:f6:99:77:3f:1d:3d:53:24:e5:74:ed:23:79:1e: 12:9b:17:da:8b:95:0e:e1:b7:de:35:39:b6:04:92:5b:ab:b1: 8e:1c:7f:9c:b6:12:cf:bc:78:ed:a9:ba:d0:48:0a:1c:71:24: 66:bc:51:8a:0d:bf:b2:3d:42:c8:99:f5:6d:93:32:6e:e2:54: f1:90:33:e8:e2:4c:b3:ab:b0:92:ba:63:21:c6:0a:e6:88:a3: cb:a5:b3:6e:05:dc:28:1f:4c:67:20:9c:cb:ad:f1:a5:0a:17: 49:5f:f5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB MzlENkNCMzcwHhcNMjQwNDMwMTQxNTI2WhcNMjQwNTA3MTQxNTI2WjAYMRYwFAYD VQQDEw02NjMwZmNmZi01YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0GxpLMn2JJMJ1RoedSxAI+lS5XJ9zqlybpKABS1OMSGz59pZJrJRAvG8jnZ RyfG6S6OtWTA+OFcybAEWvxx1V7wbwCJ4IXZjS9WWV0J5jymjcFLbHwAs2I7uL9o FtG9SI8bZOjNFgDnXAmhDQ5R52gbw0IaFjDqKnMhjF3UJGVCWR3wDt/HnYm2RQwo 9FpJGaRdi1LM7SZq68QfxsW9dpDkbvqSa2IyIuOwy0cA+vK0071mta6vM1ColtX6 RBEnjRVg3JZp2FzhebEOaBU27Sp+xpBTPLw33U5aBPLfk9dYFc7GZW45s8HVF1xW ztoT5qcjEcSozZFepMvQeUL7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbvOonb ecT4cUCtG1SGOX928SwAMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto cnFUT0M0UkpVcVNqbld5emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCEpmHUMCg+cJEgyOeCecDIEadeccwAReXL6SY3fbl5AiN/wPbmaik outokaP/vfUjXGqjb8+x/YCETQXjMDMVOanIkpMArRjXgG+K6zSsd28yBY4TzxBi EYBjebiGvdv/zxkADsDw2x8jYm7BFl9Fc+ll+2/njNYj9CnJuQ5m0LsGXudJRtmq XMG6OqGUv5ZNPxga9pl3Px09UyTldO0jeR4Smxfai5UO4bfeNTm2BJJbq7GOHH+c thLPvHjtqbrQSAoccSRmvFGKDb+yPULImfVtkzJu4lTxkDPo4kyzq7CSumMhxgrm iKPLpbNuBdwoH0xnIJzLrfGlChdJX/UT -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:32 2024 by rpki-client on console-fra.rpki-client.org