$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json) Hash identifier: 1mtazYiCsNYgHkE7/v0LX0V3jP7EzgvsG90dPqIYwdU= Subject key identifier: 75:A6:A6:61:0E:08:D3:9B:F8:AC:48:18:69:7B:D3:EA:C2:2B:FB:D9 Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Certificate serial: 0A03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft Manifest number: 09FD Signing time: Sat 18 May 2024 20:38:48 +0000 Manifest this update: Sat 18 May 2024 20:38:47 +0000 Manifest next update: Sat 25 May 2024 20:38:47 +0000 Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: IR0e/qB8SqNsMyaqhP61NS7Y+PkVeIb+zmyExy1JQgE=) 2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: AxteJTYQfKhzHJcNDMSvPfiq/UKu+BhiRHq6hallwyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Validity Not Before: May 18 20:38:47 2024 GMT Not After : May 25 20:38:47 2024 GMT Subject: CN=664911d8-7b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:2c:27:49:b8:39:c7:d5:06:cf:4c:62:6c: 3c:89:a5:c0:42:73:0a:fd:32:e0:32:06:e4:8a:06: e5:7e:4e:de:f8:de:8d:13:bd:ca:a6:5f:62:fd:ec: 2f:e4:1e:c9:07:4f:f3:c1:49:50:b6:77:de:97:33: 10:cc:6a:ab:d5:48:92:d6:65:77:dc:6c:3f:39:22: 8d:1e:64:af:f1:0c:71:90:c6:09:4d:0b:0b:d0:43: 66:d8:cb:65:be:97:f2:bb:8c:4e:f9:d2:c5:b9:78: 2b:2d:e3:5f:97:ae:5a:3b:3d:fb:2c:6d:23:60:1e: 6a:85:25:2b:11:02:16:ba:5b:eb:cc:b7:e3:19:93: 9e:df:cb:ad:a7:60:aa:08:9f:5b:8a:60:1a:c3:fc: ed:39:bc:b9:ac:0a:bb:17:0a:29:4d:8e:97:8b:52: 2f:ac:2d:98:21:24:55:fc:8c:d5:92:f2:7f:4d:93: 0a:87:bc:e5:34:b0:4b:1f:71:61:da:cf:1f:4c:4f: a5:90:ef:b1:32:5d:98:fc:3a:59:91:23:d3:5f:7c: b0:e9:d4:e8:ff:59:40:4e:ce:3b:55:78:74:7f:86: 21:b0:15:d3:62:23:81:ee:4a:4f:3b:69:de:5f:df: 36:09:b8:f1:62:6e:c4:0a:c8:70:5f:8b:6c:a3:4b: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A6:A6:61:0E:08:D3:9B:F8:AC:48:18:69:7B:D3:EA:C2:2B:FB:D9 X509v3 Authority Key Identifier: keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:20:17:ed:39:72:a7:6f:24:ea:61:c1:06:2f:b2:73:94:18: 8b:d0:99:c6:8a:9c:f4:c2:e2:d9:07:1e:32:12:51:f7:06:c0: c1:4c:a0:fb:bb:ce:21:28:2e:d1:6e:9a:a2:ca:5b:75:fd:5c: 87:2a:51:93:fb:ae:44:3f:a4:e4:ec:61:1f:0f:0b:3a:cd:ad: 9b:d1:13:39:1e:17:73:03:38:ee:e5:a4:8d:8b:6f:d1:dc:9d: 38:ea:36:97:a2:56:52:00:3e:79:f1:a6:62:34:3c:ca:dd:54: d2:c1:b1:43:53:05:b3:58:4f:15:63:b2:15:bc:1e:45:bb:5d: 98:88:f7:98:f0:2d:76:5d:4f:56:8d:c0:35:2f:e9:1a:f6:7d: 1e:66:02:9b:64:3c:7c:9c:f9:11:ff:7d:b2:9b:3d:ca:33:45: 9a:77:62:68:46:a6:2c:28:5b:fe:ee:cb:fc:ce:e2:c7:6d:cf: 93:34:ea:90:10:0e:a9:d8:75:c6:a4:d7:4d:43:41:0b:60:12: e9:32:1c:ff:3e:8e:09:2e:f4:36:f5:ae:18:b9:51:94:a6:8a: 3b:17:1d:61:65:0a:ad:f8:4c:a7:df:62:15:21:e7:1f:1c:01: 1f:56:7f:4e:e5:bc:00:5d:69:16:ef:c3:a6:ee:d4:2e:f9:f6: 89:09:ee:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0M0IxMTAvBgNVBAUTKEQ2NjAxQTgyMDA4MEM3OTBGMEE1MUE2QzM3NjVGNUI0 QjBEMDFCMzcwHhcNMjQwNTE4MjAzODQ3WhcNMjQwNTI1MjAzODQ3WjAYMRYwFAYD VQQDEw02NjQ5MTFkOC03YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pMsJ0m4OcfVBs9MYmw8iaXAQnMK/TLgMgbkigblfk7e+N6NE73Kpl9i/ewv 5B7JB0/zwUlQtnfelzMQzGqr1UiS1mV33Gw/OSKNHmSv8QxxkMYJTQsL0ENm2Mtl vpfyu4xO+dLFuXgrLeNfl65aOz37LG0jYB5qhSUrEQIWulvrzLfjGZOe38utp2Cq CJ9bimAaw/ztOby5rAq7FwopTY6Xi1IvrC2YISRV/IzVkvJ/TZMKh7zlNLBLH3Fh 2s8fTE+lkO+xMl2Y/DpZkSPTX3yw6dTo/1lATs47VXh0f4YhsBXTYiOB7kpPO2ne X982CbjxYm7ECshwX4tso0uWFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWmpmEO CNOb+KxIGGl70+rCK/vZMB8GA1UdIwQYMBaAFNZgGoIAgMeQ8KUabDdl9bSw0Bs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQzQi82QTAzODNFNjUw QTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1RHdwUnBzTjJYMXRMRFFH emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtQWFnZ0NBeDVEd3BScHNOMlgxdExEUUd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQzQi82QTAzODNFNjUwQTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1 RHdwUnBzTjJYMXRMRFFHemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEIBftOXKnbyTqYcEGL7JzlBiL0JnGipz0wuLZBx4yElH3BsDBTKD7 u84hKC7Rbpqiylt1/VyHKlGT+65EP6Tk7GEfDws6za2b0RM5HhdzAzju5aSNi2/R 3J046jaXolZSAD558aZiNDzK3VTSwbFDUwWzWE8VY7IVvB5Fu12YiPeY8C12XU9W jcA1L+ka9n0eZgKbZDx8nPkR/32ymz3KM0Wad2JoRqYsKFv+7sv8zuLHbc+TNOqQ EA6p2HXGpNdNQ0ELYBLpMhz/Po4JLvQ29a4YuVGUpoo7Fx1hZQqt+Eyn32IVIecf HAEfVn9O5bwAXWkW78Om7tQu+faJCe41 -----END CERTIFICATE-----Generated at Sat May 18 21:31:28 2024 by rpki-client on console-ams.rpki-client.org