$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft (raw, json) Hash identifier: 9Q3N6cAp4Dia97OknwXAK6KVrPR2ROuP+Ewr3+puQSU= Subject key identifier: 45:69:AE:11:D0:84:D7:1E:01:9B:23:CE:EA:9F:16:52:B2:97:02:AF Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft Manifest number: 33C9 Signing time: Thu 30 May 2024 14:52:05 +0000 Manifest this update: Thu 30 May 2024 14:52:05 +0000 Manifest next update: Thu 06 Jun 2024 14:52:05 +0000 Files and hashes: 1: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl (hash: o6LCOWmg9G154PVjG0wtAXsJ+GIFugYVaC9QZuYzqjM=) 2: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (hash: qHTAFNT1CrC2TX+FCvgSqGoQaj7rxEFQu/7DJVyzNcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 14:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0 Validity Not Before: May 30 14:52:05 2024 GMT Not After : Jun 6 14:52:05 2024 GMT Subject: CN=66589295-f651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:95:e7:2b:51:55:47:3f:66:77:1f:1d:28: 4e:e1:c6:4e:92:4e:6a:8e:da:24:6b:5a:23:b5:00: 5a:72:93:3e:5e:0d:d6:51:90:dc:49:d3:e6:a7:d8: 7e:71:92:43:02:d0:8c:b8:4e:e5:38:bb:25:16:ba: 1a:b1:9a:95:a5:6c:44:d6:1d:3c:c8:d3:06:ce:b8: 7f:72:9e:a9:05:20:34:1c:b6:b9:01:2e:c6:59:02: 72:78:ab:a7:38:a2:38:a2:17:18:e6:9a:13:5f:98: 04:69:0e:87:fb:f7:d7:46:6e:a6:19:61:be:7a:bb: 20:f7:45:6d:8d:c1:cc:01:61:df:ba:99:c7:20:5f: b6:a6:58:8a:fa:7c:d7:6d:a2:ae:75:65:62:a7:6f: 64:d0:33:95:37:f6:a7:0d:43:f1:fc:c4:98:e8:fa: 14:43:30:f2:83:a5:77:e0:d2:31:90:fc:96:8d:42: d9:92:ec:c5:8b:8f:09:54:69:ac:26:d3:f4:aa:8a: 5e:4d:76:ae:96:e4:85:44:8d:5c:c9:7a:e2:ac:b5: dd:1b:21:7e:44:59:7b:b9:32:fd:03:43:8f:2e:32: d7:b6:20:7e:91:4c:a5:29:af:84:da:23:a9:09:eb: 20:37:0c:3f:51:d9:81:ed:10:40:18:36:61:2d:c8: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:AE:11:D0:84:D7:1E:01:9B:23:CE:EA:9F:16:52:B2:97:02:AF X509v3 Authority Key Identifier: keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f1:5f:38:f1:23:81:31:7c:e2:79:10:b5:22:54:c3:7b:29: e9:3e:e4:94:63:8c:b8:98:0c:8d:fb:87:c6:ad:4a:73:a1:2f: 06:f0:2b:49:d6:d7:23:2a:13:b8:1f:32:49:ae:39:d7:b1:c6: 44:bb:fb:48:d3:4a:9a:f2:ab:a6:43:73:30:07:eb:48:75:a7: ba:9f:81:08:a2:2a:27:5a:4b:ad:49:ed:ba:c5:f1:41:a1:85: 74:89:b3:fb:51:87:ed:e8:10:bb:d8:1d:09:bb:ff:51:97:c7: c0:f3:95:ff:a5:5b:9e:29:2a:87:5d:04:7c:6d:54:23:75:9e: 04:23:e7:56:a7:04:3a:94:2a:1d:38:c6:2a:08:07:d1:25:d8: 6d:80:b4:2b:4c:90:13:80:19:f3:1d:53:a1:ac:39:c9:9f:08: 7a:e8:1f:01:73:85:e8:af:7a:15:16:56:fc:0c:63:5f:62:7d: 06:86:ea:95:1a:61:7c:fa:d0:25:82:6d:a5:69:10:d1:2c:74: 57:11:9a:b2:9a:e1:52:f7:13:eb:95:96:a5:3d:b9:3b:49:5b: 1b:75:6e:a0:40:ad:3d:62:5e:ac:b6:a8:ca:9b:57:e1:8e:64: 57:47:ac:79:d8:7d:d6:d5:31:e9:e8:71:ed:a1:d4:bb:6a:ba: 43:0b:c7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3OUExMTAvBgNVBAUTKEQ1NTYwNEUxQ0RCMDk1QjFBQzBBRDQzMTdCNjU1NzA2 MjMwNEIxRDAwHhcNMjQwNTMwMTQ1MjA1WhcNMjQwNjA2MTQ1MjA1WjAYMRYwFAYD VQQDEw02NjU4OTI5NS1mNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAyV5ytRVUc/ZncfHShO4cZOkk5qjtoka1ojtQBacpM+Xg3WUZDcSdPmp9h+ cZJDAtCMuE7lOLslFroasZqVpWxE1h08yNMGzrh/cp6pBSA0HLa5AS7GWQJyeKun OKI4ohcY5poTX5gEaQ6H+/fXRm6mGWG+ersg90VtjcHMAWHfupnHIF+2pliK+nzX baKudWVip29k0DOVN/anDUPx/MSY6PoUQzDyg6V34NIxkPyWjULZkuzFi48JVGms JtP0qopeTXauluSFRI1cyXrirLXdGyF+RFl7uTL9A0OPLjLXtiB+kUylKa+E2iOp CesgNww/UdmB7RBAGDZhLch11QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVprhHQ hNceAZsjzuqfFlKylwKvMB8GA1UdIwQYMBaAFNVWBOHNsJWxrArUMXtlVwYjBLHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODc5QS8wQzUzNjQyNjFE OTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xiR3NDdFF4ZTJWWEJpTUVz ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFWWUU0YzJ3bGJHc0N0UXhlMlZYQmlNRXNkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc5QS8wQzUzNjQyNjFEOTIxMUUyODE2NkI1RjQwOEIwMkNEMi8xVllFNGMyd2xi R3NDdFF4ZTJWWEJpTUVzZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+8V848SOBMXzieRC1IlTDeynpPuSUY4y4mAyN+4fGrUpzoS8G8CtJ 1tcjKhO4HzJJrjnXscZEu/tI00qa8qumQ3MwB+tIdae6n4EIoionWkutSe26xfFB oYV0ibP7UYft6BC72B0Ju/9Rl8fA85X/pVueKSqHXQR8bVQjdZ4EI+dWpwQ6lCod OMYqCAfRJdhtgLQrTJATgBnzHVOhrDnJnwh66B8Bc4Xor3oVFlb8DGNfYn0GhuqV GmF8+tAlgm2laRDRLHRXEZqymuFS9xPrlZalPbk7SVsbdW6gQK09Yl6stqjKm1fh jmRXR6x52H3W1THp6HHtodS7arpDC8fe -----END CERTIFICATE-----Generated at Thu May 30 16:04:43 2024 by rpki-client on console-fra.rpki-client.org