$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft File: 0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json) Hash identifier: jmM6cmGD0d3uiSxw7rkHjDinIHFPsi8Os/4IOgFVXy8= Subject key identifier: 0A:A0:E1:DF:43:68:D2:27:45:87:08:B7:12:39:51:01:65:73:CA:5F Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Certificate issuer: /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 15:05:17 +0000 Manifest this update: Sat 18 May 2024 15:05:16 +0000 Manifest next update: Sat 25 May 2024 15:05:16 +0000 Files and hashes: 1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: 0H6SURBY1knqM2fNIGph8czrQcQX/PmVBi8/MbA0aqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Validity Not Before: May 18 15:05:16 2024 GMT Not After : May 25 15:05:16 2024 GMT Subject: CN=6648c3ac-f58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:9c:1c:12:7c:a8:ed:94:eb:57:07:01:5b: ae:ff:b5:c2:18:a2:18:04:22:11:2b:fa:54:5a:bd: 19:45:e7:55:1f:33:33:22:5f:e0:a5:33:b0:47:33: fe:22:23:0b:8b:9f:9a:e9:7e:ee:55:44:d4:8e:7e: 0e:84:fc:60:08:23:91:75:27:d7:e6:9f:b3:28:0d: b4:7f:56:8b:d8:d7:69:16:d9:4e:81:72:50:f1:d2: ae:a6:2b:81:6c:64:3d:39:d8:1b:ff:c7:2b:a6:ab: 8d:de:0b:49:1b:d9:09:34:bb:94:5d:98:11:13:e1: 53:fa:0c:f6:85:b9:5c:6a:c2:35:90:ee:5b:31:45: e8:9e:ec:aa:eb:69:49:82:00:b7:89:55:68:74:bc: f2:1f:6c:be:3f:8a:80:ee:91:27:0e:f5:9e:b8:ef: 4b:94:05:43:73:82:a8:47:46:e9:c8:81:73:7e:fd: 9b:26:a2:0a:0e:12:9b:82:5c:b3:dc:74:04:10:04: 4d:d6:7f:b1:60:d3:b5:f5:38:a3:80:20:d2:73:2c: 04:c9:0a:c2:f6:44:b4:2a:d5:79:04:7c:eb:2f:14: a6:e0:36:e8:0e:9a:e5:5f:91:fd:d0:8b:1b:e1:04: 5c:43:47:0b:51:04:32:54:79:dd:02:76:76:e8:0c: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:E1:DF:43:68:D2:27:45:87:08:B7:12:39:51:01:65:73:CA:5F X509v3 Authority Key Identifier: keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1b:a1:9b:49:59:bf:59:60:8d:a6:a4:62:5c:e4:95:bc:86: 2d:09:ac:2e:0b:f6:19:df:2d:61:59:de:e7:9b:07:0d:23:d8: 5b:d7:0d:cc:37:0a:3d:78:f8:4d:1f:0c:0c:48:a3:21:ab:f0: 58:f5:df:f3:93:77:e6:57:bb:29:0c:90:21:f6:b2:be:24:6d: 37:a3:0d:c6:b7:30:ae:ac:d0:0b:74:64:7f:83:50:d7:d8:65: a3:59:b8:e0:70:7e:0b:4c:8a:4a:24:0b:a2:f8:0d:52:80:28: ea:b6:d0:94:d0:13:ab:f1:e9:15:c6:72:ea:43:91:7c:6b:69: 3d:1c:3a:94:91:17:d1:ba:6a:b9:3c:1e:e4:42:09:db:18:23: 6c:8a:5e:e9:ab:1b:08:cc:c4:3e:01:00:1c:25:85:1a:db:c3: 5f:92:d8:2f:cf:93:04:ef:49:12:b8:39:63:02:81:66:68:92: d9:db:51:40:1a:8f:82:c8:f0:01:1d:f6:66:a1:9a:65:28:6d: d6:1e:d9:44:5c:d0:1a:4d:c5:b7:83:3a:58:cc:b1:bb:2b:60: 46:a8:3c:12:3b:6a:0e:8c:e6:f0:88:2a:a6:b6:cb:4f:4a:a2: e6:7d:c5:77:a0:97:23:96:1e:61:be:0e:07:36:99:71:64:da: a6:0a:6e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0MEE4RTM3QTlB MDRCNTgwMjUwHhcNMjQwNTE4MTUwNTE2WhcNMjQwNTI1MTUwNTE2WjAYMRYwFAYD VQQDEw02NjQ4YzNhYy1mNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstqcHBJ8qO2U61cHAVuu/7XCGKIYBCIRK/pUWr0ZRedVHzMzIl/gpTOwRzP+ IiMLi5+a6X7uVUTUjn4OhPxgCCORdSfX5p+zKA20f1aL2NdpFtlOgXJQ8dKupiuB bGQ9Odgb/8crpquN3gtJG9kJNLuUXZgRE+FT+gz2hblcasI1kO5bMUXonuyq62lJ ggC3iVVodLzyH2y+P4qA7pEnDvWeuO9LlAVDc4KoR0bpyIFzfv2bJqIKDhKbglyz 3HQEEARN1n+xYNO19TijgCDScywEyQrC9kS0KtV5BHzrLxSm4DboDprlX5H90Isb 4QRcQ0cLUQQyVHndAnZ26Ay6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqg4d9D aNInRYcItxI5UQFlc8pfMB8GA1UdIwQYMBaAFNCMNuJvJPudUU87QKjjepoEtYAl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTAzQy9CNkUwRjRBQTFE OUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01MVJUenRBcU9ONm1nUzFn Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBJdzI0bThrLTUxUlR6dEFxT042bWdTMWdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01 MVJUenRBcU9ONm1nUzFnQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfG6GbSVm/WWCNpqRiXOSVvIYtCawuC/YZ3y1hWd7nmwcNI9hb1w3M Nwo9ePhNHwwMSKMhq/BY9d/zk3fmV7spDJAh9rK+JG03ow3GtzCurNALdGR/g1DX 2GWjWbjgcH4LTIpKJAui+A1SgCjqttCU0BOr8ekVxnLqQ5F8a2k9HDqUkRfRumq5 PB7kQgnbGCNsil7pqxsIzMQ+AQAcJYUa28Nfktgvz5ME70kSuDljAoFmaJLZ21FA Go+CyPABHfZmoZplKG3WHtlEXNAaTcW3gzpYzLG7K2BGqDwSO2oOjObwiCqmtstP SqLmfcV3oJcjlh5hvg4HNplxZNqmCm6N -----END CERTIFICATE-----Generated at Sat May 18 15:58:21 2024 by rpki-client on console-ams.rpki-client.org