$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: /iYcnd3JP/Df8Y1RUcWTaDxzPVh7HyQnbol2bU6RLSg= Subject key identifier: 61:DA:91:A5:E1:2F:DA:71:20:EE:B6:63:10:48:D3:C8:04:60:A1:D6 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 33E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 33D6 Signing time: Sat 18 May 2024 15:17:39 +0000 Manifest this update: Sat 18 May 2024 15:17:39 +0000 Manifest next update: Sat 25 May 2024 15:17:39 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: aBFxbTclCSUl5GdV0xbSojRweaVfmrJx3p9kqzfc1RU=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: nUZZe1DuURBitjsrbGMu0Shu+UEoZmChhg4YIukAhM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13285 (0x33e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: May 18 15:17:39 2024 GMT Not After : May 25 15:17:39 2024 GMT Subject: CN=6648c693-64a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:d2:9e:58:c1:18:05:02:14:14:b4:1e:30: d5:1c:aa:f0:a2:94:df:e4:34:3f:16:5b:77:89:ba: e3:c9:09:0f:6b:00:8f:37:58:bf:78:bc:e0:04:35: 8b:78:5f:4b:08:b1:b3:61:c3:ec:d6:f2:89:bf:41: fb:8c:e9:ec:c9:04:1e:f1:23:80:2a:dd:cc:13:51: 30:21:41:93:eb:9a:65:95:46:32:e2:0a:8e:60:bf: 59:61:43:0d:05:60:c6:d7:62:a6:c3:2b:13:2d:45: 43:90:2e:1d:6d:2f:5d:57:76:f9:a7:0c:c4:05:b1: ee:20:11:eb:06:6a:ad:96:60:4d:99:86:27:5a:0c: 8d:73:e3:88:20:ef:7f:48:79:7b:50:91:e1:50:b1: ba:7b:fc:43:e4:17:6c:4c:3e:ed:25:1d:19:d5:c1: 4b:e1:fe:f8:ff:2c:03:bb:9c:eb:15:cf:ee:3e:ff: 76:4f:30:40:5a:c8:ea:11:8c:c5:57:c1:b6:9a:61: bb:b4:29:27:7c:65:bf:c0:4f:b1:1a:cb:f6:21:9e: 07:d6:07:cf:51:02:12:8b:d8:8b:4a:ac:8d:d5:13: f5:5b:c6:d3:1d:b7:7e:cc:f4:3e:ef:63:af:50:5f: 90:64:f3:87:7a:eb:b9:9a:1c:78:1d:08:05:31:f4: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:91:A5:E1:2F:DA:71:20:EE:B6:63:10:48:D3:C8:04:60:A1:D6 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:58:e5:a3:14:1b:39:72:d4:56:67:95:9c:48:70:4c:1b:e7: 6d:e0:9d:fa:74:50:67:7c:40:01:45:d8:57:b1:44:e4:23:52: 3b:91:97:bc:a2:81:30:06:53:30:38:6d:d9:f1:c1:da:85:65: 28:1f:0b:d0:5d:31:aa:de:36:43:9e:c2:d8:c6:3a:da:c3:b2: e2:8b:c1:b9:cc:7d:cb:6b:ac:82:7e:15:c2:7f:ee:94:7c:8b: e0:29:75:f7:39:cf:8e:4a:af:f6:81:cd:46:53:48:11:14:b8: 34:cf:15:fe:2a:e7:3d:75:f7:23:c3:37:d8:cb:e8:76:fa:bc: 12:b0:c7:a8:74:5e:cb:5a:c5:d8:f0:a8:d2:cc:ef:25:2a:bd: 22:8f:b6:cb:bf:31:97:a7:17:2e:05:96:d4:18:98:c2:06:b9: 6f:15:a3:24:c8:14:2a:25:b0:12:22:84:8a:f2:ab:9e:c6:5c: 84:6d:bb:4f:e4:74:df:ca:36:87:91:a4:0d:a6:66:9c:a6:0c: f3:9b:47:84:6b:ad:e9:53:6b:31:b3:e2:95:f8:90:24:35:2f: 26:fd:f3:b1:23:82:e3:c8:e5:ed:9a:04:eb:9c:93:93:35:34: fe:e1:ac:21:91:82:e1:c4:d0:99:d7:be:07:13:2a:b6:40:c0: 7a:d3:d2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjQwNTE4MTUxNzM5WhcNMjQwNTI1MTUxNzM5WjAYMRYwFAYD VQQDEw02NjQ4YzY5My02NGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eLSnljBGAUCFBS0HjDVHKrwopTf5DQ/Flt3ibrjyQkPawCPN1i/eLzgBDWL eF9LCLGzYcPs1vKJv0H7jOnsyQQe8SOAKt3ME1EwIUGT65pllUYy4gqOYL9ZYUMN BWDG12KmwysTLUVDkC4dbS9dV3b5pwzEBbHuIBHrBmqtlmBNmYYnWgyNc+OIIO9/ SHl7UJHhULG6e/xD5BdsTD7tJR0Z1cFL4f74/ywDu5zrFc/uPv92TzBAWsjqEYzF V8G2mmG7tCknfGW/wE+xGsv2IZ4H1gfPUQISi9iLSqyN1RP1W8bTHbd+zPQ+72Ov UF+QZPOHeuu5mhx4HQgFMfThVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHakaXh L9pxIO62YxBI08gEYKHWMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRWOWjFBs5ctRWZ5WcSHBMG+dt4J36dFBnfEABRdhXsUTkI1I7kZe8 ooEwBlMwOG3Z8cHahWUoHwvQXTGq3jZDnsLYxjraw7Lii8G5zH3La6yCfhXCf+6U fIvgKXX3Oc+OSq/2gc1GU0gRFLg0zxX+Kuc9dfcjwzfYy+h2+rwSsMeodF7LWsXY 8KjSzO8lKr0ij7bLvzGXpxcuBZbUGJjCBrlvFaMkyBQqJbASIoSK8quexlyEbbtP 5HTfyjaHkaQNpmacpgzzm0eEa63pU2sxs+KV+JAkNS8m/fOxI4LjyOXtmgTrnJOT NTT+4awhkYLhxNCZ174HEyq2QMB609Lm -----END CERTIFICATE-----Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org