$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: l2xF/3Cob6LnJ+QCN7ZT+K9YVUd9Fz41i10HkOIUddw= Subject key identifier: D0:5D:24:04:71:25:9D:A1:EF:72:7D:12:A2:E8:36:E1:3F:88:77:B4 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 1607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 15F8 Signing time: Sat 18 May 2024 17:13:15 +0000 Manifest this update: Sat 18 May 2024 17:13:15 +0000 Manifest next update: Sat 25 May 2024 17:13:15 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: nvCa9ioQ5hLevOFmG/yzAvRUtQy++5QZavch0eDgwAc=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: iVyDvlKDRQf9+n7RKWYpftsNPBdU6hk+ssDPaArObWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5639 (0x1607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: May 18 17:13:15 2024 GMT Not After : May 25 17:13:15 2024 GMT Subject: CN=6648e1ab-be49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:2f:73:a0:e4:bd:d3:3e:02:ae:73:43:84: 76:13:1b:34:cd:8c:34:ae:1d:5d:9e:b4:62:8b:86: 1e:3a:5d:5e:6c:ac:38:7b:29:9e:ee:27:20:e7:aa: b4:e9:3b:78:18:f9:ec:16:28:1a:30:29:3f:3e:82: 79:4c:01:98:32:f9:fb:52:6d:e7:08:cf:57:f2:83: 53:d3:e6:de:92:11:be:95:87:64:c8:fb:40:5b:64: 45:8c:3f:46:3f:a2:11:d5:79:97:1f:c8:12:da:8f: 56:61:15:9a:76:ce:aa:79:b8:cc:0f:6b:50:4f:d2: a5:b2:09:f3:d2:45:9a:bb:22:62:83:6d:52:a6:6c: 97:52:69:c3:14:b7:70:79:b7:2e:60:ec:ca:8e:4d: e4:f2:b8:af:0f:0e:7a:a4:02:b0:d7:fe:27:ed:d0: a3:5e:f3:c7:c7:f8:18:04:9c:6e:e1:d2:0e:48:f2: d3:51:41:28:c9:17:25:6e:3a:04:94:c3:19:24:9c: c5:1c:71:ee:f6:71:a5:28:c3:0e:19:33:70:ea:aa: 65:a2:ce:37:04:9a:e5:42:81:8c:a5:e8:00:20:76: 1c:6d:93:61:98:a1:79:78:ce:4d:60:1b:9e:22:4a: 51:6f:ff:2c:c4:c3:03:3c:fe:ab:cd:62:0d:e8:ee: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5D:24:04:71:25:9D:A1:EF:72:7D:12:A2:E8:36:E1:3F:88:77:B4 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:48:0e:2e:30:10:c6:97:68:68:ef:e3:46:29:17:58:73:03: e7:bf:51:94:77:9f:7c:5d:3e:a5:cf:fd:ae:56:34:58:85:83: 04:16:8f:35:f4:5f:74:d6:8e:c4:ae:7b:d5:22:d9:ee:13:09: bc:fa:e7:21:1c:5a:d3:62:a8:60:49:e9:67:2f:e7:e7:2e:50: c4:49:9c:91:9e:94:3c:99:e8:f6:b6:70:dd:e5:ff:4e:04:d9: db:c5:b7:01:c6:7d:26:17:7f:d4:a7:cb:52:9c:c1:a2:09:fa: c5:16:01:bd:b9:6a:7a:b9:77:da:d0:b8:2c:a3:4d:5f:c9:34: e6:99:0d:b0:9f:5b:b9:f5:20:46:f3:65:c4:84:5e:01:e2:9e: bd:a4:d1:28:26:f9:2e:61:65:6f:28:f4:fb:09:04:d0:af:40: 6a:ff:a1:48:13:d3:2b:d5:ec:b1:7f:b3:2e:37:a7:85:77:06: 03:79:92:bd:57:4c:90:53:a9:91:c7:0a:14:8f:aa:66:d6:50: f4:df:c6:55:fd:74:b4:e1:e6:0f:2b:b2:d9:e2:46:65:ef:0c: a9:63:27:a6:27:b7:57:3f:aa:e9:ac:26:0b:5a:01:54:55:5d: bd:ba:ab:6d:39:08:3a:48:29:5a:c0:4a:f4:a3:33:52:bc:2b: bd:1b:34:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjQwNTE4MTcxMzE1WhcNMjQwNTI1MTcxMzE1WjAYMRYwFAYD VQQDEw02NjQ4ZTFhYi1iZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5wvc6DkvdM+Aq5zQ4R2Exs0zYw0rh1dnrRii4YeOl1ebKw4eyme7icg56q0 6Tt4GPnsFigaMCk/PoJ5TAGYMvn7Um3nCM9X8oNT0+bekhG+lYdkyPtAW2RFjD9G P6IR1XmXH8gS2o9WYRWads6qebjMD2tQT9Klsgnz0kWauyJig21SpmyXUmnDFLdw ebcuYOzKjk3k8rivDw56pAKw1/4n7dCjXvPHx/gYBJxu4dIOSPLTUUEoyRclbjoE lMMZJJzFHHHu9nGlKMMOGTNw6qplos43BJrlQoGMpegAIHYcbZNhmKF5eM5NYBue IkpRb/8sxMMDPP6rzWIN6O7/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBdJARx JZ2h73J9EqLoNuE/iHe0MB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhSA4uMBDGl2ho7+NGKRdYcwPnv1GUd598XT6lz/2uVjRYhYMEFo81 9F901o7ErnvVItnuEwm8+uchHFrTYqhgSelnL+fnLlDESZyRnpQ8mej2tnDd5f9O BNnbxbcBxn0mF3/Up8tSnMGiCfrFFgG9uWp6uXfa0Lgso01fyTTmmQ2wn1u59SBG 82XEhF4B4p69pNEoJvkuYWVvKPT7CQTQr0Bq/6FIE9Mr1eyxf7MuN6eFdwYDeZK9 V0yQU6mRxwoUj6pm1lD038ZV/XS04eYPK7LZ4kZl7wypYyemJ7dXP6rprCYLWgFU VV29uqttOQg6SClawEr0ozNSvCu9GzRG -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org