$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: XusoQTbtIMDL8yIGCR9SXySQWGyjAKegIogLM6UFS9k= Subject key identifier: AF:B6:16:01:79:48:C3:A4:08:8A:18:2D:40:DC:17:71:5D:8B:65:E3 Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 33C9 Signing time: Fri 31 May 2024 15:21:44 +0000 Manifest this update: Fri 31 May 2024 15:21:43 +0000 Manifest next update: Fri 07 Jun 2024 15:21:43 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: RL8WpSx9leLAz3TGGBT7j16Rm/a3yT16ekbdvtvLsKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: May 31 15:21:43 2024 GMT Not After : Jun 7 15:21:43 2024 GMT Subject: CN=6659eb08-8704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:a7:01:ea:f5:fd:ff:b7:65:3a:1a:c9:48: 8f:81:8c:0c:8a:5d:da:ca:22:ce:28:83:5e:89:f7: 86:70:1f:36:a1:22:e5:9c:5a:f8:b1:70:88:3a:09: 62:78:41:d0:45:a1:0c:07:e2:e8:38:33:24:22:1a: e5:e0:f2:d9:ab:f5:aa:8e:b4:1a:5a:c3:63:16:dc: 73:4c:03:4c:95:91:9e:03:1a:ff:63:a0:7e:da:a3: ce:1d:cc:4b:a1:57:a4:5f:9d:78:de:08:b4:dc:8f: 61:88:01:f3:12:12:72:52:39:ff:0e:98:fb:87:4a: 2d:4f:73:18:3c:cb:67:15:58:c0:40:82:48:41:50: c4:27:33:77:b8:ea:90:47:38:31:26:b0:67:3b:df: a0:24:f4:b4:b2:1b:c5:f9:0c:a7:ad:32:8f:c9:87: f0:0f:55:30:1b:26:8a:3f:da:56:9b:bc:06:f5:dc: 19:f1:a5:28:51:96:77:3a:0a:45:ab:5d:a4:cb:e2: 75:8c:c1:ce:ec:3e:a3:f2:87:fa:10:32:d8:d3:bb: 36:5a:4b:74:fe:b0:72:67:0c:43:de:7f:3e:01:5d: e9:3a:d8:1f:22:a2:56:68:0d:41:ee:77:1b:3a:61: 7f:39:f0:3d:e5:14:1b:cf:a0:d0:17:2f:c3:17:c2: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:16:01:79:48:C3:A4:08:8A:18:2D:40:DC:17:71:5D:8B:65:E3 X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:93:9f:66:77:af:b9:b5:99:60:10:61:3b:64:c0:72:89:6e: 1c:11:52:0d:58:7e:e2:f0:38:85:eb:cb:30:b4:39:65:ff:ad: 0a:da:d6:01:4c:4c:c1:03:4a:49:b9:7b:45:20:8e:11:e3:b5: 99:29:39:91:7b:5c:20:8a:b6:6f:3d:ee:28:53:c4:52:98:a1: c3:1a:97:f7:80:6a:07:73:ac:62:0f:05:c5:ac:a8:0b:9d:22: a6:d0:0a:42:3f:33:c1:1e:70:69:f4:58:cf:5b:de:e9:86:7b: 42:ef:ba:c8:d8:23:c5:df:38:b4:bb:41:82:06:8e:39:76:3d: a6:d5:84:1c:6e:13:f5:a7:c8:26:0c:c9:2d:b1:f6:2b:60:0a: 57:4b:3e:a5:d3:c2:19:5f:74:93:48:54:74:d6:53:51:81:17: 50:2e:68:51:4e:08:83:64:0c:95:37:2a:68:7b:84:b5:08:72: 46:25:a8:a4:dc:40:fd:2e:e3:14:a0:f1:59:fc:b2:81:a3:25: 99:b4:6f:a5:ed:22:e4:9c:9d:3e:92:b1:66:a4:92:ef:00:f5: 1a:87:64:77:29:c1:6c:bd:99:b6:64:2a:59:2a:a9:b5:0c:d9: dd:27:6d:e9:1d:e7:7f:5d:eb:43:48:14:00:fe:e2:c7:40:a3: 1f:5c:4c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjQwNTMxMTUyMTQzWhcNMjQwNjA3MTUyMTQzWjAYMRYwFAYD VQQDEw02NjU5ZWIwOC04NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnCnAer1/f+3ZToayUiPgYwMil3ayiLOKINeifeGcB82oSLlnFr4sXCIOgli eEHQRaEMB+LoODMkIhrl4PLZq/WqjrQaWsNjFtxzTANMlZGeAxr/Y6B+2qPOHcxL oVekX5143gi03I9hiAHzEhJyUjn/Dpj7h0otT3MYPMtnFVjAQIJIQVDEJzN3uOqQ RzgxJrBnO9+gJPS0shvF+QynrTKPyYfwD1UwGyaKP9pWm7wG9dwZ8aUoUZZ3OgpF q12ky+J1jMHO7D6j8of6EDLY07s2Wkt0/rByZwxD3n8+AV3pOtgfIqJWaA1B7ncb OmF/OfA95RQbz6DQFy/DF8LkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+2FgF5 SMOkCIoYLUDcF3Fdi2XjMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCok59md6+5tZlgEGE7ZMByiW4cEVINWH7i8DiF68swtDll/60K2tYB TEzBA0pJuXtFII4R47WZKTmRe1wgirZvPe4oU8RSmKHDGpf3gGoHc6xiDwXFrKgL nSKm0ApCPzPBHnBp9FjPW97phntC77rI2CPF3zi0u0GCBo45dj2m1YQcbhP1p8gm DMktsfYrYApXSz6l08IZX3STSFR01lNRgRdQLmhRTgiDZAyVNypoe4S1CHJGJaik 3ED9LuMUoPFZ/LKBoyWZtG+l7SLknJ0+krFmpJLvAPUah2R3KcFsvZm2ZCpZKqm1 DNndJ23pHed/XetDSBQA/uLHQKMfXEwb -----END CERTIFICATE-----Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org