$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: W9UiGD6aOV6WP3IbZsP6rpMRwYzcKFGqD61FRv8MCe4= Subject key identifier: D3:35:2E:5F:43:9A:13:62:72:5F:99:FB:79:4B:5D:75:C4:73:F9:5F Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 33E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 33D7 Signing time: Sat 18 May 2024 14:23:31 +0000 Manifest this update: Sat 18 May 2024 14:23:30 +0000 Manifest next update: Sat 25 May 2024 14:23:30 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 5vN9WSUNZukdg7QmS9L7vlArBYiN8V1hhyV1oxP9xr8=) 2: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zAvAdjn3YdfOWi8begd0U+EEHGMY5vFuYmmn+BUm3lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13280 (0x33e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: May 18 14:23:30 2024 GMT Not After : May 25 14:23:30 2024 GMT Subject: CN=6648b9e2-0085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:34:6f:70:49:96:0d:3c:42:97:1b:3c:ae:42: 73:a8:f9:2b:f3:75:ed:cc:bf:64:b4:23:f9:d6:57: 76:2f:ea:24:c3:80:a3:38:25:d2:f9:e2:58:c9:c6: e8:73:13:dd:62:17:c9:19:71:64:bb:3e:00:d1:65: 13:9b:c0:4f:d7:84:fa:e1:52:21:d6:60:d6:05:18: dd:d9:05:57:20:72:38:c9:3d:7f:6c:fa:ef:e1:21: 68:97:84:56:37:f3:59:56:e1:29:bf:43:ee:e6:5f: f3:3c:17:14:51:25:59:1f:33:8c:66:06:43:4a:46: 54:7e:90:8b:13:e8:8b:0a:2f:4e:f0:06:b8:72:8d: 78:64:28:3d:39:82:37:d0:4f:e1:cd:c4:ee:0c:ff: d5:6f:b6:be:9c:af:ec:88:1e:12:60:86:43:fc:88: 9e:1c:51:bc:24:34:f1:24:51:3a:d7:b7:31:48:ef: 80:47:61:7d:ce:fb:77:4f:10:2c:7d:9f:ff:f5:35: d9:e6:ce:13:bc:a0:b3:72:06:f6:42:db:9b:11:20: 45:a1:44:62:58:45:e2:16:71:31:84:19:56:df:a0: ba:1c:f2:29:c1:73:48:68:81:f3:a8:88:e9:58:34: ff:b7:71:8f:c4:20:0e:19:2b:96:1b:d6:af:b1:2d: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:2E:5F:43:9A:13:62:72:5F:99:FB:79:4B:5D:75:C4:73:F9:5F X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:dc:44:f6:fc:af:b8:bf:f0:9a:7e:ae:b5:82:ef:f2:18:53: 9d:77:af:f8:09:db:cf:93:4e:79:f5:02:a2:99:a2:76:b6:53: d3:ff:af:3b:53:bf:36:d0:f4:7f:14:90:26:52:0b:6d:f9:a9: cc:b8:cc:8a:6c:f7:8a:1b:0b:94:de:1e:f4:d4:fe:22:f5:99: 76:db:60:b7:46:8c:31:eb:bc:fc:d7:63:d1:95:c0:47:e0:3a: 94:b8:58:d3:82:48:bb:38:74:57:89:df:40:fd:ff:15:a3:1a: 89:3d:63:2d:6e:43:7e:e6:0b:53:e9:41:ef:f0:80:53:65:86: 8e:cf:f1:b6:78:71:92:2b:6e:27:21:c2:4c:ae:41:f7:cb:cb: 93:04:60:fb:cb:a2:53:3f:b9:4a:44:7e:6a:b0:8f:a6:8c:0c: f3:4f:af:b7:1a:5e:32:0b:e8:e6:4f:1f:ff:0b:35:ab:da:43: c0:8b:13:57:51:3a:f7:7a:57:73:bd:f2:2b:5d:2b:22:50:dd: ac:53:24:a5:c6:46:8e:36:92:3d:62:a2:ad:fb:9c:27:b5:01: 95:76:e0:8a:60:59:75:6f:e7:96:e9:d3:69:05:9a:4e:e8:c7: f0:40:94:b6:e6:f9:b4:c6:cf:1d:db:7b:14:3f:5e:c2:b3:d2: e6:b7:87:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjQwNTE4MTQyMzMwWhcNMjQwNTI1MTQyMzMwWjAYMRYwFAYD VQQDEw02NjQ4YjllMi0wMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TRvcEmWDTxClxs8rkJzqPkr83XtzL9ktCP51ld2L+okw4CjOCXS+eJYycbo cxPdYhfJGXFkuz4A0WUTm8BP14T64VIh1mDWBRjd2QVXIHI4yT1/bPrv4SFol4RW N/NZVuEpv0Pu5l/zPBcUUSVZHzOMZgZDSkZUfpCLE+iLCi9O8Aa4co14ZCg9OYI3 0E/hzcTuDP/Vb7a+nK/siB4SYIZD/IieHFG8JDTxJFE617cxSO+AR2F9zvt3TxAs fZ//9TXZ5s4TvKCzcgb2QtubESBFoURiWEXiFnExhBlW36C6HPIpwXNIaIHzqIjp WDT/t3GPxCAOGSuWG9avsS1bewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM1Ll9D mhNicl+Z+3lLXXXEc/lfMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3ET2/K+4v/Cafq61gu/yGFOdd6/4CdvPk0559QKimaJ2tlPT/687 U7820PR/FJAmUgtt+anMuMyKbPeKGwuU3h701P4i9Zl222C3Rowx67z812PRlcBH 4DqUuFjTgki7OHRXid9A/f8VoxqJPWMtbkN+5gtT6UHv8IBTZYaOz/G2eHGSK24n IcJMrkH3y8uTBGD7y6JTP7lKRH5qsI+mjAzzT6+3Gl4yC+jmTx//CzWr2kPAixNX UTr3eldzvfIrXSsiUN2sUySlxkaONpI9YqKt+5wntQGVduCKYFl1b+eW6dNpBZpO 6MfwQJS25vm0xs8d23sUP17Cs9Lmt4cM -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org