$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: 9lANEkQuprPPDAkBV2a5w8CV/dxPLsEvlOLwrB43CD0= Subject key identifier: F1:39:42:07:91:EA:61:F7:B4:AD:5A:CE:BB:C7:73:C0:AA:7D:DA:C6 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 33 Signing time: Sun 19 May 2024 08:22:16 +0000 Manifest this update: Sun 19 May 2024 08:22:15 +0000 Manifest next update: Sun 26 May 2024 08:22:15 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 8EFzc/UnrmMAS1VJFpDJZa8LT3cwWQlaEBt/ohcOJGw=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: kw/n7fkzAUA5N8iXTK5blaPIVxmW9CgWCBSDv6AbxsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: May 19 08:22:15 2024 GMT Not After : May 26 08:22:15 2024 GMT Subject: CN=6649b6b7-b5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:20:23:53:06:bf:22:96:43:d6:45:4c:79: 92:cb:3a:47:c3:f0:12:56:1e:1f:fe:19:63:a1:30: 96:ff:b6:a7:c6:5b:bf:fe:47:f5:49:cf:bc:66:8c: e2:cc:69:b8:f4:e2:80:38:df:4b:64:3d:1f:99:41: 5f:d1:5e:01:8a:97:3d:24:49:3d:f4:5a:7e:9f:5b: 27:e6:43:4d:30:3c:05:18:70:54:b3:5f:8e:12:11: a1:b9:96:c4:3a:cf:cd:a8:18:53:84:76:83:cd:8b: 01:fe:b6:f3:13:6e:fc:7f:3f:e6:47:49:e3:83:81: 60:27:ad:ef:97:d9:22:37:bb:ab:d8:19:a1:8e:21: c5:d0:47:10:ca:e7:cc:b0:d8:0f:6b:ed:ef:31:c6: 80:38:b5:14:7f:3f:93:61:e0:74:d7:66:62:36:07: c3:43:4e:4a:49:13:cd:64:2d:6e:cd:8e:b8:3d:fe: 79:0e:8e:90:ea:1e:20:87:8c:fa:3c:e6:83:c0:0e: 03:ef:70:3a:dc:9b:44:15:4c:03:49:c3:81:21:93: b3:fa:58:a5:90:5e:0d:20:6c:e2:79:e5:57:7d:42: 42:94:7f:43:41:3a:a2:45:14:b2:25:37:b5:1f:37: 05:ee:59:f5:9e:60:fb:56:e2:ef:8a:ed:71:c2:6b: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:42:07:91:EA:61:F7:B4:AD:5A:CE:BB:C7:73:C0:AA:7D:DA:C6 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0f:bd:1b:40:cb:ac:0c:56:6d:88:c8:05:44:74:66:16:3d: 3d:4f:52:5e:c1:a0:2e:28:9a:f4:42:5e:b0:3f:d2:68:14:7b: b4:a7:a2:c6:e6:f7:23:22:a5:b2:d8:58:3b:54:46:82:cd:08: 0a:ab:6e:a5:e0:a8:93:4e:c0:dd:bd:81:69:ad:f9:d5:27:1d: f2:5e:9c:ab:bc:a0:df:e1:58:ee:a0:bb:01:51:f1:8b:d7:f7: f7:af:f8:02:0a:e2:b3:29:ba:da:3c:96:d6:71:b2:ef:ba:08: 86:3e:1e:98:21:94:44:71:c2:f8:31:3e:79:e1:50:04:99:ed: b8:e2:8e:97:90:b2:3e:5b:49:15:a8:4c:68:f1:d0:7f:98:e3: e5:df:e2:02:c5:ca:c7:0a:55:99:b1:29:e0:b0:90:c4:b6:ae: 6f:4e:05:1e:e5:33:6d:25:d9:03:40:75:ee:c7:7c:19:6e:08: 26:a3:fc:69:2a:e6:b2:52:e8:74:0a:34:a1:84:6a:ee:47:77: 5f:3e:3f:4b:93:fc:5d:5a:68:fa:e5:51:f8:77:58:67:c3:ac: 4b:67:db:d7:41:99:18:17:a4:2a:57:c5:2a:ac:33:43:d6:1e: 2e:43:e6:1e:1d:f0:a1:08:41:6a:cf:73:0e:a1:51:98:fc:36: d7:30:e1:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUEzMDExMC8GA1UEBRMoRjkyREI1QkEzNTEyRTQ2QTdDREJGQjRCMzUxNEJENkZG ODVDOEYzRDAeFw0yNDA1MTkwODIyMTVaFw0yNDA1MjYwODIyMTVaMBgxFjAUBgNV BAMTDTY2NDliNmI3LWI1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKtSAjUwa/IpZD1kVMeZLLOkfD8BJWHh/+GWOhMJb/tqfGW7/+R/VJz7xmjOLM abj04oA430tkPR+ZQV/RXgGKlz0kST30Wn6fWyfmQ00wPAUYcFSzX44SEaG5lsQ6 z82oGFOEdoPNiwH+tvMTbvx/P+ZHSeODgWAnre+X2SI3u6vYGaGOIcXQRxDK58yw 2A9r7e8xxoA4tRR/P5Nh4HTXZmI2B8NDTkpJE81kLW7Njrg9/nkOjpDqHiCHjPo8 5oPADgPvcDrcm0QVTANJw4Ehk7P6WKWQXg0gbOJ55Vd9QkKUf0NBOqJFFLIlN7Uf NwXuWfWeYPtW4u+K7XHCa4lJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8TlCB5Hq Yfe0rVrOu8dzwKp92sYwHwYDVR0jBBgwFoAU+S21ujUS5Gp82/tLNRS9b/hcjz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQTMwLzRCN0ExODZBQ0FG MjExRUVBQ0RCMkUxRUM0RjlBRTAyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLVMyMXVqVVM1R3A4Ml90TE5SUzliX2hjanowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QTMwLzRCN0ExODZBQ0FGMjExRUVBQ0RCMkUxRUM0RjlBRTAyLy1TMjF1alVTNUdw ODJfdExOUlM5Yl9oY2p6MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQPvRtAy6wMVm2IyAVEdGYWPT1PUl7BoC4omvRCXrA/0mgUe7Snosbm 9yMipbLYWDtURoLNCAqrbqXgqJNOwN29gWmt+dUnHfJenKu8oN/hWO6guwFR8YvX 9/ev+AIK4rMputo8ltZxsu+6CIY+HpghlERxwvgxPnnhUASZ7bjijpeQsj5bSRWo TGjx0H+Y4+Xf4gLFyscKVZmxKeCwkMS2rm9OBR7lM20l2QNAde7HfBluCCaj/Gkq 5rJS6HQKNKGEau5Hd18+P0uT/F1aaPrlUfh3WGfDrEtn29dBmRgXpCpXxSqsM0PW Hi5D5h4d8KEIQWrPcw6hUZj8Ntcw4ek= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org