$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: v6uz3eZWhaoxNv4/TZcMkaOwaYzEdsbEka8BJS5WHr0= Subject key identifier: A0:6B:6D:C5:38:CE:87:E2:E0:82:08:A3:C0:20:5F:23:E2:D3:A9:99 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 33E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 33D6 Signing time: Sat 18 May 2024 14:30:43 +0000 Manifest this update: Sat 18 May 2024 14:30:41 +0000 Manifest next update: Sat 25 May 2024 14:30:41 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: iZM8gCWoQeyZJC1vVQRYU1JlNJ5gcqSpNBoOKtHO8IQ=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: 7D7xYbAR9fmubo2ByXGVWqVGAwTJd+weM6h5FnUf2ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13284 (0x33e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: May 18 14:30:41 2024 GMT Not After : May 25 14:30:41 2024 GMT Subject: CN=6648bb92-a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:1b:64:ca:fc:56:18:3c:2e:69:41:f1:fd: 47:25:80:68:4b:93:5c:34:5a:1e:5a:d6:57:39:24: 86:7f:e2:bc:bf:1c:dc:7a:2e:52:03:9f:54:26:06: 82:28:a8:4c:60:b6:53:72:8f:36:dd:f0:f8:f5:fa: 6e:4c:12:6a:d9:c5:cb:84:be:0f:e8:e3:16:f5:31: 60:b9:d5:46:c4:c9:ce:db:cc:61:69:fd:ea:f0:c1: 86:6a:16:2e:0e:2e:eb:4d:57:79:05:44:97:04:bc: bf:7a:e6:03:4f:ae:4e:81:15:f8:a2:27:0a:32:f0: 58:fc:71:31:fb:54:38:88:c1:4a:0d:36:6e:66:63: 99:22:75:b6:e2:ee:05:60:2f:e5:0e:83:e0:99:15: a0:e1:f9:e6:72:83:1f:af:e0:c8:42:2b:53:ce:c9: b1:e4:43:57:a2:37:10:52:87:03:71:9e:60:08:a2: 48:b5:5b:ef:47:c8:3a:fd:dd:5d:de:dd:be:6e:0f: e9:0e:49:c9:06:6a:97:17:17:f8:0f:28:a0:0d:18: d8:b9:4b:2d:b1:9d:ad:33:83:bf:9c:24:d1:d1:a5: b4:cb:ed:51:4b:12:0f:95:fe:0d:59:b7:9e:65:4d: 2a:0b:76:11:5c:de:a7:ab:34:71:b1:b7:7b:13:03: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:6D:C5:38:CE:87:E2:E0:82:08:A3:C0:20:5F:23:E2:D3:A9:99 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:81:c9:8c:79:c5:d8:55:47:1e:92:11:e9:d9:f7:e7:ba:22: 42:fa:6f:47:9d:83:02:df:3f:cd:8a:f3:de:2f:cb:6e:51:da: 65:c1:ba:03:5e:d3:01:52:3a:eb:e3:c8:51:cb:5b:26:32:27: d0:39:36:7e:4d:f7:08:37:14:43:b8:ab:65:ba:88:b4:58:41: d7:e0:ee:ef:6c:e1:90:97:48:51:d3:22:98:80:61:5e:9f:0b: c8:47:12:6b:d4:cc:c8:cd:ed:c8:3c:74:73:d7:1a:a4:2d:8e: 33:0e:24:7e:97:b7:63:74:21:1e:47:2b:c2:1b:99:d0:76:2c: ab:f2:20:d3:6a:ba:71:83:8f:28:89:3f:ac:97:00:61:a3:b0: 5d:4a:93:8d:82:a4:99:5b:19:53:45:99:d7:55:8f:e5:28:30: 98:28:10:54:71:2c:8c:aa:2c:fc:ac:87:d8:ca:13:05:8b:a4: ce:ca:67:dc:79:0a:39:63:fc:4d:bd:91:ff:b9:f9:36:9a:f7: 99:b7:c9:c0:78:af:0c:ad:2a:4e:45:fa:62:11:5c:e3:88:f5: 3a:22:b0:24:c6:59:96:46:cc:bd:33:62:7b:ac:1b:d1:8f:40: 1f:f9:9c:1a:7a:25:3e:ff:a0:be:bc:93:2f:a4:0b:cf:e0:70: d4:b4:1b:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjQwNTE4MTQzMDQxWhcNMjQwNTI1MTQzMDQxWjAYMRYwFAYD VQQDEw02NjQ4YmI5Mi1hNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ0bZMr8Vhg8LmlB8f1HJYBoS5NcNFoeWtZXOSSGf+K8vxzcei5SA59UJgaC KKhMYLZTco823fD49fpuTBJq2cXLhL4P6OMW9TFgudVGxMnO28xhaf3q8MGGahYu Di7rTVd5BUSXBLy/euYDT65OgRX4oicKMvBY/HEx+1Q4iMFKDTZuZmOZInW24u4F YC/lDoPgmRWg4fnmcoMfr+DIQitTzsmx5ENXojcQUocDcZ5gCKJItVvvR8g6/d1d 3t2+bg/pDknJBmqXFxf4DyigDRjYuUstsZ2tM4O/nCTR0aW0y+1RSxIPlf4NWbee ZU0qC3YRXN6nqzRxsbd7EwNHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBrbcU4 zofi4IIIo8AgXyPi06mZMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTgcmMecXYVUcekhHp2ffnuiJC+m9HnYMC3z/NivPeL8tuUdplwboD XtMBUjrr48hRy1smMifQOTZ+TfcINxRDuKtluoi0WEHX4O7vbOGQl0hR0yKYgGFe nwvIRxJr1MzIze3IPHRz1xqkLY4zDiR+l7djdCEeRyvCG5nQdiyr8iDTarpxg48o iT+slwBho7BdSpONgqSZWxlTRZnXVY/lKDCYKBBUcSyMqiz8rIfYyhMFi6TOymfc eQo5Y/xNvZH/ufk2mveZt8nAeK8MrSpORfpiEVzjiPU6IrAkxlmWRsy9M2J7rBvR j0Af+ZwaeiU+/6C+vJMvpAvP4HDUtBvu -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org