$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft File: sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json) Hash identifier: k88NRXmO/gal753M4+Y0Z/O/Kmnh8/CBXqOTlVeUxNw= Subject key identifier: 3D:D2:37:28:46:A2:78:FA:52:DC:E6:00:88:B3:73:4C:37:C3:F5:FB Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 Certificate issuer: /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Certificate serial: 0EA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft Manifest number: 0E91 Signing time: Sat 18 May 2024 18:21:46 +0000 Manifest this update: Sat 18 May 2024 18:21:45 +0000 Manifest next update: Sat 25 May 2024 18:21:45 +0000 Files and hashes: 1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: vXNHsIvfmLFzwEfA9JvwAlSbNWQ+yb1hUlXTdUDUHK8=) 2: E8B2E1609EF211E988220246C4F9AE02.roa (hash: y2KGOCDh7I/P8NsvXsW+6RsyMZA1W+PFX8XRN0+6vUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3744 (0xea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2 Validity Not Before: May 18 18:21:45 2024 GMT Not After : May 25 18:21:45 2024 GMT Subject: CN=6648f1ba-243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:c5:40:82:d6:0e:71:c1:83:d5:78:a2:17: 03:d0:a3:6d:9e:09:6b:bf:77:f5:20:f5:f0:e9:aa: bc:8b:6c:90:2f:d7:9e:2a:d3:ef:f7:ab:84:77:c1: 21:2f:f3:15:6f:0a:6e:7f:f3:53:ad:7b:57:19:05: 8a:ed:24:95:f6:c2:15:4d:aa:a9:de:d6:e7:1a:4f: 52:43:6d:76:32:99:48:18:d8:2e:50:c6:5b:0a:2b: 3d:9c:7c:59:d9:47:4b:bf:80:31:52:f5:18:9c:0a: c9:5d:60:3a:89:ce:a1:24:22:a5:e9:66:6b:12:2a: a9:97:a3:c4:59:a9:fe:92:4a:3b:c2:72:19:1e:f5: 30:4d:d0:b7:c0:25:e8:17:16:2a:4f:b0:21:f8:7b: 56:6b:f8:4c:68:93:0a:c7:90:c7:81:93:84:e8:29: a4:f3:85:8b:ca:2a:e9:77:97:35:fc:82:88:58:67: 4e:06:b2:4e:59:a5:7e:ce:19:a1:f7:ca:82:50:1f: e6:bf:bc:d4:7d:e9:b2:a8:d6:4d:61:11:2a:16:26: 23:55:29:28:94:8e:c0:8a:ef:d1:0e:e1:20:3e:83: f2:81:ea:52:f3:a5:8f:8c:49:0d:df:c4:58:12:07: eb:1e:bb:24:40:a9:72:91:1a:4a:7f:c8:63:a2:35: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D2:37:28:46:A2:78:FA:52:DC:E6:00:88:B3:73:4C:37:C3:F5:FB X509v3 Authority Key Identifier: keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:87:8a:be:ff:b1:31:02:a7:d0:24:15:79:43:2b:33:2f:23: b9:9f:7a:a9:1a:c2:55:f6:56:c9:fe:4e:2e:37:35:db:c6:25: 1d:81:68:c7:2f:45:2f:94:1d:e8:74:ee:b9:2b:fa:a0:a0:ed: 05:b7:40:1b:61:3d:1c:4d:00:4d:4f:53:5d:f1:bf:ff:e4:43: b8:cc:28:f6:61:7b:16:63:20:6e:c1:8b:9d:84:98:3c:b1:e8: 11:c5:e5:33:00:42:f5:a2:20:2d:d3:ee:a2:62:5a:3d:94:cd: 2c:95:7e:54:4a:05:53:5d:5c:52:36:b0:e4:a8:66:82:d3:8d: 86:1d:1a:6a:60:e6:f1:a5:9b:2a:b2:b2:15:da:10:58:21:25: 81:81:6b:af:c7:9a:80:d2:85:a9:28:84:ce:09:34:02:99:24: 0a:90:8f:86:e3:52:4d:a8:56:f6:8c:9e:02:37:5c:da:92:bb: 01:90:20:7e:b0:b7:8d:06:03:99:86:c0:aa:3b:ee:d3:a0:ae: d9:f0:56:06:cc:ca:ae:f7:91:5d:d0:e8:a8:ff:12:02:f4:ea: d2:b8:ff:46:e8:4b:54:1c:5a:6f:f9:87:ea:84:6d:4a:7f:c5: 5c:7e:df:46:9a:47:2c:48:d3:f1:e6:28:eb:2c:ac:7c:74:49: 2d:8e:85:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB RkNERUMzRTIwHhcNMjQwNTE4MTgyMTQ1WhcNMjQwNTI1MTgyMTQ1WjAYMRYwFAYD VQQDEw02NjQ4ZjFiYS0yNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnTFQILWDnHBg9V4ohcD0KNtnglrv3f1IPXw6aq8i2yQL9eeKtPv96uEd8Eh L/MVbwpuf/NTrXtXGQWK7SSV9sIVTaqp3tbnGk9SQ212MplIGNguUMZbCis9nHxZ 2UdLv4AxUvUYnArJXWA6ic6hJCKl6WZrEiqpl6PEWan+kko7wnIZHvUwTdC3wCXo FxYqT7Ah+HtWa/hMaJMKx5DHgZOE6Cmk84WLyirpd5c1/IKIWGdOBrJOWaV+zhmh 98qCUB/mv7zUfemyqNZNYREqFiYjVSkolI7Aiu/RDuEgPoPygepS86WPjEkN38RY EgfrHrskQKlykRpKf8hjojX5QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3SNyhG onj6UtzmAIizc0w3w/X7MB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy cTNOckpWTllaMW12emV3LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkh4q+/7ExAqfQJBV5QyszLyO5n3qpGsJV9lbJ/k4uNzXbxiUdgWjH L0UvlB3odO65K/qgoO0Ft0AbYT0cTQBNT1Nd8b//5EO4zCj2YXsWYyBuwYudhJg8 segRxeUzAEL1oiAt0+6iYlo9lM0slX5USgVTXVxSNrDkqGaC042GHRpqYObxpZsq srIV2hBYISWBgWuvx5qA0oWpKITOCTQCmSQKkI+G41JNqFb2jJ4CN1zakrsBkCB+ sLeNBgOZhsCqO+7ToK7Z8FYGzMqu95Fd0Oio/xIC9OrSuP9G6EtUHFpv+YfqhG1K f8Vcft9GmkcsSNPx5ijrLKx8dEktjoXP -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org