$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json) Hash identifier: RM3VM8i6TzV5RkiZOerVivqhf2TdmUQhuUOfciEuH1c= Subject key identifier: AB:E5:F9:6B:1F:7E:84:C1:84:28:B3:8D:C0:1F:09:5E:A1:AF:8C:7D Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft Manifest number: 343F Signing time: Sat 18 May 2024 14:22:49 +0000 Manifest this update: Sat 18 May 2024 14:22:48 +0000 Manifest next update: Sat 25 May 2024 14:22:48 +0000 Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: Rrv41r2eBH4TTNe9ndKlHLhupuLZhjBms9lB2oqX70o=) 2: 6660F0B422C311EDA0AD9A5FC4F9AE02.roa (hash: ufc0EBQ1slxgSthPpQ1o6EdtltYZIE+ZpNjijgPbeRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Validity Not Before: May 18 14:22:48 2024 GMT Not After : May 25 14:22:48 2024 GMT Subject: CN=6648b9b8-c01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:08:60:d1:bd:28:f0:e5:43:37:aa:8e:7f: d2:63:22:3f:41:66:e7:2e:49:fe:67:ec:25:48:f5: c6:cf:11:d6:11:1c:34:1e:ad:44:66:3d:7a:11:c1: 40:ea:52:ef:1e:43:0f:22:b8:fd:ac:9b:9c:be:dd: 1a:6f:42:c7:d3:18:b9:b3:fa:08:11:1b:e3:59:99: 48:cd:5a:b1:a0:81:15:75:ea:5c:8b:0e:cb:72:20: c2:b9:0c:02:67:d3:36:af:4a:3d:2c:cd:0f:0b:b7: 79:6c:57:4e:24:8f:26:61:6e:f6:50:a3:89:24:ce: 82:f6:33:d6:14:a1:01:70:a9:26:19:a1:a8:65:09: 2e:a4:12:24:5d:3c:f7:14:87:c0:23:e2:10:d4:4a: 12:0b:4f:95:57:4a:a8:c7:ee:13:c2:45:33:ef:50: 72:c3:6a:02:60:4d:ae:7b:7b:4b:37:6a:9b:a7:48: 3c:74:8f:a3:90:93:55:a6:f0:3f:61:d4:ec:d9:0d: 42:72:c9:30:cb:56:25:41:2a:20:cc:a4:6a:9f:2b: cc:5f:82:21:41:73:51:67:f9:a5:c5:c3:0a:f7:7b: 44:87:59:d3:de:82:d1:0d:03:59:7a:fd:92:a6:b1: e8:18:e4:6f:c6:49:03:5b:8e:5e:f7:c9:74:44:06: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E5:F9:6B:1F:7E:84:C1:84:28:B3:8D:C0:1F:09:5E:A1:AF:8C:7D X509v3 Authority Key Identifier: keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:90:9b:2e:e3:b7:59:50:10:a0:9a:66:be:1e:26:6c:97:d1: 11:c6:86:5e:81:dc:47:4b:cd:8c:35:1e:73:71:e7:36:58:9d: e4:17:15:75:b6:26:84:91:f9:20:76:f6:82:87:09:f6:ab:bf: b1:d8:d6:82:4c:bc:5a:ce:1b:f6:59:a8:0e:01:8b:5b:8f:ee: c8:ee:81:e2:c3:b9:3c:d8:c0:a8:d5:3e:b9:ab:d1:96:b2:aa: 57:92:23:52:0f:17:22:32:76:ab:1d:84:a9:35:d7:10:12:49: ef:5d:c1:76:74:bd:bc:56:b2:64:9a:78:1b:8d:8e:4c:d1:a1: 1c:f4:6d:26:4c:2e:0b:b1:c5:7d:63:ed:02:e6:f6:32:78:9d: d3:1c:5f:41:f2:96:9d:34:a5:8f:c9:b1:48:fc:e3:59:88:e0: 2d:ad:37:a1:66:21:a0:81:6b:19:d9:eb:86:a6:11:b6:0b:aa: 65:a6:2e:87:9b:6f:4b:95:35:44:db:1e:fb:5b:05:a7:02:7f: 96:50:e2:9f:87:f3:0e:57:a6:fd:d9:b3:8c:4c:8c:02:a7:da: 70:1a:d7:62:2f:8d:5a:59:e4:6c:1f:86:e2:79:af:0d:19:b4: 65:82:ed:98:cd:b7:42:e7:99:5e:e3:ee:22:a4:ff:7b:fa:98: 0d:a0:ed:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0NTcxMTAvBgNVBAUTKDZCMEU0MkQ4ODU5RTBCMUNERTU0MTU3QUNCOEQ3NjA0 QUQzRkYxQjMwHhcNMjQwNTE4MTQyMjQ4WhcNMjQwNTI1MTQyMjQ4WjAYMRYwFAYD VQQDEw02NjQ4YjliOC1jMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qgIYNG9KPDlQzeqjn/SYyI/QWbnLkn+Z+wlSPXGzxHWERw0Hq1EZj16EcFA 6lLvHkMPIrj9rJucvt0ab0LH0xi5s/oIERvjWZlIzVqxoIEVdepciw7LciDCuQwC Z9M2r0o9LM0PC7d5bFdOJI8mYW72UKOJJM6C9jPWFKEBcKkmGaGoZQkupBIkXTz3 FIfAI+IQ1EoSC0+VV0qox+4TwkUz71Byw2oCYE2ue3tLN2qbp0g8dI+jkJNVpvA/ YdTs2Q1Ccskwy1YlQSogzKRqnyvMX4IhQXNRZ/mlxcMK93tEh1nT3oLRDQNZev2S prHoGORvxkkDW45e98l0RAZf9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvl+Wsf foTBhCizjcAfCV6hr4x9MB8GA1UdIwQYMBaAFGsOQtiFngsc3lQVesuNdgStP/Gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ1Ny80QzFBMDM0QzFE N0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4emVWQlY2eTQxMkJLMF84 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3NUMySVdlQ3h6ZVZCVjZ5NDEyQkswXzhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ1Ny80QzFBMDM0QzFEN0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4 emVWQlY2eTQxMkJLMF84Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCkJsu47dZUBCgmma+HiZsl9ERxoZegdxHS82MNR5zcec2WJ3kFxV1 tiaEkfkgdvaChwn2q7+x2NaCTLxazhv2WagOAYtbj+7I7oHiw7k82MCo1T65q9GW sqpXkiNSDxciMnarHYSpNdcQEknvXcF2dL28VrJkmngbjY5M0aEc9G0mTC4LscV9 Y+0C5vYyeJ3THF9B8padNKWPybFI/ONZiOAtrTehZiGggWsZ2euGphG2C6plpi6H m29LlTVE2x77WwWnAn+WUOKfh/MOV6b92bOMTIwCp9pwGtdiL41aWeRsH4biea8N GbRlgu2YzbdC55le4+4ipP97+pgNoO32 -----END CERTIFICATE-----Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org