$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: BEYh1ZqOO6acxJjSDDAb3EJe5H53mlvA5dCcQJKpNhI= Subject key identifier: D4:80:BF:80:B5:B7:0E:46:1E:2B:CE:87:D7:79:F9:92:C3:28:9C:2B Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 050B Signing time: Sun 19 May 2024 01:08:44 +0000 Manifest this update: Sun 19 May 2024 01:08:43 +0000 Manifest next update: Sun 26 May 2024 01:08:43 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: ebDrRvlFV73DPTePUw2kh3a2gLRc0tTiHy1WwUpoRkU=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: NsD+CZ8Q2Hz+TNwYGCOmuh7fT5EjVgfD5YZkwpCjQIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: May 19 01:08:43 2024 GMT Not After : May 26 01:08:43 2024 GMT Subject: CN=6649511c-42b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:38:d2:2d:25:dc:4e:73:36:0e:95:64:82: 80:10:ff:e2:07:df:b2:e8:cc:02:91:ad:53:12:b3: 65:73:3a:e8:a0:bf:97:98:5c:32:5b:38:5c:6c:66: 09:53:10:b2:11:c4:e4:46:65:a1:34:02:fb:be:92: 77:bb:57:74:ad:eb:6c:52:fb:d0:52:d6:5a:91:1c: 07:3b:f7:c5:60:1c:c4:53:db:3f:7e:39:a3:73:5c: 02:c9:ec:d6:6f:4a:ff:95:41:55:27:0c:ba:13:3b: 7f:b1:b6:63:40:33:0b:7c:89:20:4e:50:35:96:aa: 44:d5:4e:b3:32:36:fe:d9:48:16:c3:92:d7:c8:85: 23:7f:50:27:86:7a:5d:9e:7e:9b:61:25:33:f3:f5: 75:34:ce:ff:be:bb:0f:91:97:eb:e2:82:ef:ef:76: f0:4a:a1:9e:35:96:58:00:52:a9:c9:52:a4:2b:e7: ab:8e:13:88:b9:7f:5f:a7:44:ee:5d:c8:10:79:1d: 7e:84:9f:8e:90:b1:b3:a9:d5:5c:b8:2a:0f:4b:f4: 6a:ef:80:f2:1e:40:df:19:5d:2e:b6:eb:87:30:37: d1:67:c8:db:f9:87:48:be:8f:63:38:05:f9:e2:ce: 3d:c4:04:2e:e5:ef:68:96:57:a4:10:fc:ea:d2:4c: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:BF:80:B5:B7:0E:46:1E:2B:CE:87:D7:79:F9:92:C3:28:9C:2B X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fd:95:d9:ec:e0:25:23:2b:a5:d4:96:6f:55:99:9f:90:ba: 58:be:f2:1a:3c:dc:35:44:9c:12:9c:75:ea:67:19:24:7d:d4: 2f:71:94:7c:74:b9:ef:51:ee:35:15:b9:23:15:b1:12:7f:13: b1:db:f5:22:d8:d8:d7:60:8f:c7:8c:69:18:89:91:c2:3f:d9: 97:b7:ff:15:d1:9c:a2:1a:8f:18:51:72:98:b9:6e:2a:6c:fc: bb:47:47:07:04:d3:76:69:37:d4:46:f1:cf:4f:7a:8b:b0:e1: 6d:b9:dc:86:30:1a:93:47:2a:ad:84:d4:32:df:af:63:39:11: 9b:6d:5e:86:e1:98:ca:a1:21:ed:c8:99:4d:84:a6:17:54:2d: 4d:e7:f7:43:91:6e:40:5f:85:73:38:a2:ef:e0:6b:ff:c7:f5: 66:2b:9c:d0:d0:be:57:ae:02:60:61:6b:7a:63:34:d7:7a:be: 34:5b:f4:07:98:8a:a7:e3:82:e4:c7:76:17:ef:b5:e5:48:6f: b5:ff:30:2a:fe:1c:14:68:3f:0b:37:a1:4b:10:07:e4:5e:ff: 44:18:18:ec:18:66:69:4e:ba:9c:4c:8c:a3:d4:96:79:49:ec: 22:b2:6b:43:c7:2d:f3:fd:39:cc:91:c0:c6:8f:27:8a:54:5e: b9:31:a1:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjQwNTE5MDEwODQzWhcNMjQwNTI2MDEwODQzWjAYMRYwFAYD VQQDEw02NjQ5NTExYy00MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMQ40i0l3E5zNg6VZIKAEP/iB9+y6MwCka1TErNlczrooL+XmFwyWzhcbGYJ UxCyEcTkRmWhNAL7vpJ3u1d0retsUvvQUtZakRwHO/fFYBzEU9s/fjmjc1wCyezW b0r/lUFVJwy6Ezt/sbZjQDMLfIkgTlA1lqpE1U6zMjb+2UgWw5LXyIUjf1Anhnpd nn6bYSUz8/V1NM7/vrsPkZfr4oLv73bwSqGeNZZYAFKpyVKkK+erjhOIuX9fp0Tu XcgQeR1+hJ+OkLGzqdVcuCoPS/Rq74DyHkDfGV0utuuHMDfRZ8jb+YdIvo9jOAX5 4s49xAQu5e9ollekEPzq0kzILQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSAv4C1 tw5GHivOh9d5+ZLDKJwrMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2/ZXZ7OAlIyul1JZvVZmfkLpYvvIaPNw1RJwSnHXqZxkkfdQvcZR8 dLnvUe41FbkjFbESfxOx2/Ui2NjXYI/HjGkYiZHCP9mXt/8V0ZyiGo8YUXKYuW4q bPy7R0cHBNN2aTfURvHPT3qLsOFtudyGMBqTRyqthNQy369jORGbbV6G4ZjKoSHt yJlNhKYXVC1N5/dDkW5AX4VzOKLv4Gv/x/VmK5zQ0L5XrgJgYWt6YzTXer40W/QH mIqn44Lkx3YX77XlSG+1/zAq/hwUaD8LN6FLEAfkXv9EGBjsGGZpTrqcTIyj1JZ5 SewismtDxy3z/TnMkcDGjyeKVF65MaHO -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org