$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json) Hash identifier: 5lGLukgibpe8HUg6ix4nCuQ4RUu/5yTWvMGghceI3g0= Subject key identifier: BE:A7:A1:BD:D2:3B:2D:7D:36:04:72:0E:8D:A7:1D:2C:AB:C7:BB:7A Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft Manifest number: 34 Signing time: Sun 19 May 2024 08:18:54 +0000 Manifest this update: Sun 19 May 2024 08:18:53 +0000 Manifest next update: Sun 26 May 2024 08:18:53 +0000 Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: E/ynNeMHZf/7YhP6KxCkxEZMYtPb+HJ0I0f5zQKfLT4=) 2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: /BUQB8qGUnnEaeFS+7LTUsKBi8s51tzJ6SaFjKd8eFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC Validity Not Before: May 19 08:18:53 2024 GMT Not After : May 26 08:18:53 2024 GMT Subject: CN=6649b5ed-e931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:a4:d6:65:77:46:52:71:0c:74:5c:cd:99: 59:0e:c3:d9:9d:30:90:f3:03:c3:0a:c3:e2:9c:66: 99:64:4a:78:aa:2a:fa:c8:ce:78:00:0b:97:20:15: 5c:24:7e:6c:60:e8:0f:fb:73:d0:ad:24:8b:6f:7f: 49:42:78:12:9d:52:4a:c7:ae:d1:5d:06:61:d8:96: 4e:f4:b5:9f:b8:fd:59:e1:2b:80:85:b1:69:e0:a4: d9:3e:4a:12:62:7a:71:0a:d1:f9:a7:42:f9:ae:74: 8b:7b:6b:cb:e9:24:d0:c0:0b:38:75:16:11:e3:4a: b5:4e:d7:fb:ae:7b:31:48:84:6d:92:82:88:c6:f9: 6a:72:b5:f5:64:66:9a:7e:90:75:45:45:67:b2:5a: 59:87:8b:0a:f2:ba:d6:53:f1:35:01:6c:3f:a8:39: 3b:a1:1e:22:6d:c3:1a:b2:93:6b:78:eb:14:1e:8e: bd:02:aa:b4:23:8b:e0:81:08:a5:14:61:4e:0c:07: b7:2a:0f:32:7e:c1:46:e1:d4:00:24:88:1b:5a:ef: 7b:0e:bf:c2:2c:12:83:36:6c:e5:15:bc:a7:f3:d0: 2b:bb:de:34:00:5f:42:7b:33:df:e9:43:51:24:db: a0:31:aa:cc:76:3b:4d:57:93:b5:b5:8f:6c:b8:21: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:A1:BD:D2:3B:2D:7D:36:04:72:0E:8D:A7:1D:2C:AB:C7:BB:7A X509v3 Authority Key Identifier: keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fe:91:5d:06:fe:48:b5:10:7d:a5:ab:1e:e7:65:5c:25:c2: 8b:4e:e4:20:c8:dc:27:9f:f6:a5:4a:3a:74:91:29:90:f1:3c: 90:ae:f9:0d:dc:b5:5f:93:c3:86:4f:2f:c1:bf:17:93:82:16: b2:95:4f:55:2e:71:52:53:41:9d:b3:3c:5e:ac:6a:f8:21:1c: e5:ca:ba:4a:41:27:7c:29:62:ff:73:eb:8e:1d:b9:99:49:4e: d8:74:51:e7:37:ee:c7:31:a7:84:51:c8:21:b5:63:94:b5:ed: d7:fc:28:a6:94:18:42:61:e8:44:b5:a5:47:ab:45:52:32:f9: 59:3d:81:b6:8c:cb:23:6f:9d:b6:99:81:94:44:d5:32:75:f7: bf:11:30:08:00:37:07:67:5a:d8:8e:42:1b:7e:e6:42:aa:85: 7a:57:fb:55:64:8f:a6:bf:b2:57:c2:82:ff:1e:b1:63:36:49: 4c:d5:d5:6f:4e:36:70:2e:c3:28:5e:bf:5c:08:f2:0c:a4:ee: 6a:13:13:c2:4b:e9:6c:72:51:f7:78:f8:2e:aa:42:af:e2:bf: 0a:12:f9:49:5e:9f:89:8b:7b:69:3b:d6:04:53:a0:e3:49:3d: a2:74:ad:30:9a:06:3a:f2:f6:d4:87:eb:87:4a:dd:2e:ae:0b: d2:dd:6c:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjAxODExMC8GA1UEBRMoQjNFOTQxQTFDNTVEMTQ4M0FCNTc5MUQ5NDk4NzUwRTNE REFERURDQzAeFw0yNDA1MTkwODE4NTNaFw0yNDA1MjYwODE4NTNaMBgxFjAUBgNV BAMTDTY2NDliNWVkLWU5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhG6TWZXdGUnEMdFzNmVkOw9mdMJDzA8MKw+KcZplkSniqKvrIzngAC5cgFVwk fmxg6A/7c9CtJItvf0lCeBKdUkrHrtFdBmHYlk70tZ+4/VnhK4CFsWngpNk+ShJi enEK0fmnQvmudIt7a8vpJNDACzh1FhHjSrVO1/uuezFIhG2SgojG+WpytfVkZpp+ kHVFRWeyWlmHiwryutZT8TUBbD+oOTuhHiJtwxqyk2t46xQejr0CqrQji+CBCKUU YU4MB7cqDzJ+wUbh1AAkiBta73sOv8IsEoM2bOUVvKfz0Cu73jQAX0J7M9/pQ1Ek 26Axqsx2O01Xk7W1j2y4IWh/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvqehvdI7 LX02BHIOjacdLKvHu3owHwYDVR0jBBgwFoAUs+lBocVdFIOrV5HZSYdQ492t7cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMDE4LzMwNzlEODEyQzVG NjExRUVCRTBCNzk2MEM0RjlBRTAyL3MtbEJvY1ZkRklPclY1SFpTWWRRNDkydDdj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcy1sQm9jVmRGSU9yVjVIWlNZZFE0OTJ0N2N3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MDE4LzMwNzlEODEyQzVGNjExRUVCRTBCNzk2MEM0RjlBRTAyL3MtbEJvY1ZkRklP clY1SFpTWWRRNDkydDdjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJL+kV0G/ki1EH2lqx7nZVwlwotO5CDI3Cef9qVKOnSRKZDxPJCu+Q3c tV+Tw4ZPL8G/F5OCFrKVT1UucVJTQZ2zPF6savghHOXKukpBJ3wpYv9z644duZlJ Tth0Uec37scxp4RRyCG1Y5S17df8KKaUGEJh6ES1pUerRVIy+Vk9gbaMyyNvnbaZ gZRE1TJ1978RMAgANwdnWtiOQht+5kKqhXpX+1Vkj6a/slfCgv8esWM2SUzV1W9O NnAuwyhev1wI8gyk7moTE8JL6WxyUfd4+C6qQq/ivwoS+Ulen4mLe2k71gRToONJ PaJ0rTCaBjry9tSH64dK3S6uC9LdbBU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org