$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: tND8Wld5BRZptad2Qvz2JRNdWMe50y+j82BXhCUdVZM= Subject key identifier: EC:EA:87:D6:32:24:23:76:1B:F2:4F:A0:6A:71:12:CF:CD:62:34:D3 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 33B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 33B5 Signing time: Wed 24 Apr 2024 15:31:57 +0000 Manifest this update: Wed 24 Apr 2024 15:31:57 +0000 Manifest next update: Wed 01 May 2024 15:31:57 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: B+HTxu+OsKeOGtrajmhx4PKP7rmxAO+LlGKSOh3EiRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13237 (0x33b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Apr 24 15:31:57 2024 GMT Not After : May 1 15:31:57 2024 GMT Subject: CN=662925ed-1706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:20:fc:19:e2:aa:88:4c:52:dd:de:8b:79: 27:3e:64:93:f3:f8:64:87:ea:0a:d4:6a:27:23:86: fc:e8:e0:07:69:58:da:db:84:55:62:77:18:f1:78: 2d:6a:c8:b3:57:d7:dd:4f:8a:a5:50:0e:10:44:73: f0:35:09:06:13:1e:31:55:ed:80:98:bd:8c:80:2c: 43:1a:91:d1:1d:29:80:79:78:f7:23:e7:59:ad:9b: cb:a8:0f:55:3c:07:04:2d:fc:4e:0f:85:81:e7:b4: d3:b6:8a:2d:55:37:24:92:5b:68:59:57:53:bc:14: 3e:b5:78:7e:d9:fb:bb:52:bb:33:39:d4:09:1f:c9: 06:f0:28:50:a2:74:b7:f3:21:d5:e8:7a:b5:cc:18: 0e:48:a5:11:e9:9e:4e:e6:28:cd:b5:04:c9:c4:ed: 4f:7c:fe:3a:61:19:14:71:f4:5f:08:ed:bc:af:ae: b6:b6:22:4d:1d:a1:02:59:86:c9:6d:98:be:f5:b5: 2c:6a:39:ea:b3:e3:4e:01:a4:97:98:6e:d6:26:aa: 7a:f1:f2:39:e4:f2:65:d9:73:79:06:36:26:a3:2d: 2e:d2:10:89:b1:50:0f:7a:d9:5f:b4:b0:bc:3d:a4: 4c:99:ab:93:e1:eb:ed:e5:5c:52:85:f1:d6:ea:f4: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:87:D6:32:24:23:76:1B:F2:4F:A0:6A:71:12:CF:CD:62:34:D3 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:85:31:42:8f:02:42:c3:70:3c:de:93:9b:6b:35:ee:7e:88: cc:cb:e2:e3:df:45:9b:94:b4:cb:94:ef:23:68:dc:8e:1e:e0: ea:0c:db:58:fc:1d:b4:fd:5b:34:98:e0:cc:37:04:4d:dd:77: 01:36:b7:b2:ac:7a:a4:ed:90:6d:d7:13:0d:aa:06:70:cc:c3: 73:e5:66:62:6d:08:19:56:2e:1e:bd:b9:64:8e:93:d8:f7:75: 47:a2:de:98:87:5b:f5:39:5e:79:6b:3a:18:37:65:e7:cb:52: a5:e9:62:93:9d:cc:c6:50:ad:6e:be:00:8e:48:18:e6:11:f5: 36:3f:72:b3:1b:51:37:48:fe:b5:6f:1d:6c:b1:5c:c0:47:58: d2:f9:bd:d0:51:c8:a1:12:c6:c4:b4:89:47:75:80:e2:47:3b: 2f:56:c7:20:69:1f:2e:6b:9c:f9:27:1d:6f:3f:c2:f2:e6:a2: 41:08:94:c8:ba:ee:b9:db:32:71:f2:87:89:09:7f:ba:e8:5e: 39:11:dc:6a:35:78:be:fc:32:26:d6:f7:78:59:bb:d3:75:e2: 52:f6:96:21:78:45:24:1f:ce:9d:3e:20:18:b0:f9:b0:04:fe: 86:06:b6:b5:9c:70:76:a3:34:47:96:a2:58:c4:b9:3a:0f:f3: ce:97:a9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjQwNDI0MTUzMTU3WhcNMjQwNTAxMTUzMTU3WjAYMRYwFAYD VQQDEw02NjI5MjVlZC0xNzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeYg/BniqohMUt3ei3knPmST8/hkh+oK1GonI4b86OAHaVja24RVYncY8Xgt asizV9fdT4qlUA4QRHPwNQkGEx4xVe2AmL2MgCxDGpHRHSmAeXj3I+dZrZvLqA9V PAcELfxOD4WB57TTtootVTckkltoWVdTvBQ+tXh+2fu7UrszOdQJH8kG8ChQonS3 8yHV6Hq1zBgOSKUR6Z5O5ijNtQTJxO1PfP46YRkUcfRfCO28r662tiJNHaECWYbJ bZi+9bUsajnqs+NOAaSXmG7WJqp68fI55PJl2XN5BjYmoy0u0hCJsVAPetlftLC8 PaRMmauT4evt5VxShfHW6vRB6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzqh9Yy JCN2G/JPoGpxEs/NYjTTMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXhTFCjwJCw3A83pObazXufojMy+Lj30WblLTLlO8jaNyOHuDqDNtY /B20/Vs0mODMNwRN3XcBNreyrHqk7ZBt1xMNqgZwzMNz5WZibQgZVi4evblkjpPY 93VHot6Yh1v1OV55azoYN2Xny1Kl6WKTnczGUK1uvgCOSBjmEfU2P3KzG1E3SP61 bx1ssVzAR1jS+b3QUcihEsbEtIlHdYDiRzsvVscgaR8ua5z5Jx1vP8Ly5qJBCJTI uu652zJx8oeJCX+66F45EdxqNXi+/DIm1vd4WbvTdeJS9pYheEUkH86dPiAYsPmw BP6GBra1nHB2ozRHlqJYxLk6D/POl6nA -----END CERTIFICATE-----Generated at Wed Apr 24 16:36:14 2024 by rpki-client on console-fra.rpki-client.org