$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft File: 39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json) Hash identifier: sREv7LBhlvCUD3bFuSmnEWIbI2KzDjMFeFA9i1uFlmU= Subject key identifier: 7C:A2:7C:E3:9E:BC:AD:91:A2:1A:5A:45:7A:6E:F8:10:BE:FD:6D:77 Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft Manifest number: 025D Signing time: Fri 31 May 2024 04:33:51 +0000 Manifest this update: Fri 31 May 2024 04:33:50 +0000 Manifest next update: Fri 07 Jun 2024 04:33:50 +0000 Files and hashes: 1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: 8zZB3n9VuKOSCWU6EfERcDwEkY3Q/GuY+LduA3tPgmY=) 2: 5BDA0522116E11EFB1682065C4F9AE02.roa (hash: +6O48uUYQPoK5bPOoonf12KRJzP/Fj/CE+G6BdPRaao=) 3: 440D7064116E11EFAE9EDF64C4F9AE02.roa (hash: mPSMPTxFL9Fw4FIp8VThRYZSJsszMMRjUrWYyamV9IA=) 4: F9F9D458387011EE8D54D351C4F9AE02.roa (hash: YRdHD4iBLaufoNbUzmd6OXDZUWlhchNQ/9HcXunfBLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Validity Not Before: May 31 04:33:50 2024 GMT Not After : Jun 7 04:33:50 2024 GMT Subject: CN=6659532f-5015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:dd:0e:cd:c3:c3:6e:73:61:2a:15:93:5a: 4d:00:fc:d4:22:b5:b5:14:10:1f:e7:7b:6c:cf:39: e2:6c:2d:a0:ba:26:14:a5:cd:c7:1c:5c:85:98:2d: 0b:7e:02:c7:2a:9e:8c:15:a1:43:71:cb:4f:06:bf: c1:05:1f:79:0c:01:6c:60:14:ae:c4:cc:f5:38:13: 2f:ac:e7:b3:6a:2f:4b:f3:06:85:96:c3:e0:64:6a: a3:77:71:42:c8:8b:a1:38:a4:73:eb:dc:f0:7d:25: 95:4f:be:15:0f:8e:a6:04:7d:64:07:4b:ef:cb:81: ab:8c:ac:40:1a:73:b4:ff:35:73:59:4c:7b:c4:04: f9:b8:05:37:4e:8b:cb:71:05:38:1f:3a:ab:f1:97: 3c:4c:ef:de:33:3a:4d:da:51:e3:32:2f:a4:47:a7: 8b:9e:65:91:37:1a:31:1f:24:f4:9c:a4:a0:ed:25: c3:ca:e8:9a:e4:92:7b:b2:c7:01:aa:ff:57:80:fd: 76:53:40:64:6a:da:c6:0d:c4:d6:92:de:b7:0d:01: 06:8b:e1:c7:30:60:74:27:b6:a4:d4:e3:28:9d:48: aa:92:e6:e1:d6:4b:52:97:22:40:86:30:be:9c:d2: d6:f4:2d:56:1b:dd:27:46:06:16:ec:c0:62:ed:34: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:7C:E3:9E:BC:AD:91:A2:1A:5A:45:7A:6E:F8:10:BE:FD:6D:77 X509v3 Authority Key Identifier: keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:02:c9:34:bc:e2:a4:9e:45:31:91:d7:c5:cf:ee:07:81:07: e3:4d:43:8b:7b:7b:5e:a3:68:ec:10:06:84:f5:8c:81:d8:0b: 5c:b9:6f:47:41:a3:59:6e:f0:11:a2:5b:72:05:96:27:56:a2: 13:c7:f7:b8:42:7a:6a:54:ad:f7:a5:5b:a3:de:b4:ec:50:bd: 2c:ac:07:5c:3d:a1:e4:68:43:79:b3:bb:73:b4:a8:2f:94:e2: 47:bd:41:7b:7d:f5:ce:f4:b4:ee:47:b1:e3:f4:cc:b1:13:f0: d7:2d:3f:ac:38:90:d3:7c:07:35:02:2b:d8:f5:76:8f:5a:90: 86:0b:8e:d3:57:c5:0f:a8:78:c2:63:8c:6f:3b:71:a0:a1:b0: b9:0d:18:ae:a0:87:df:f3:83:dd:28:0b:2b:ef:94:67:94:55: 12:d9:55:a1:7a:94:d7:4a:75:43:3c:58:d3:f9:6d:8b:65:de: bf:17:8c:92:40:bd:5c:bd:b0:8a:04:2f:14:ee:7a:d0:b3:39: 74:ab:7e:fb:09:1f:0e:8f:46:53:97:64:81:4f:02:e9:79:2c: 26:09:28:f7:1c:68:d7:86:48:03:fb:c3:83:2b:21:74:52:36: 9a:f4:a6:10:0f:28:b8:e5:43:85:24:ab:b6:fb:e6:06:15:8a: 8b:78:7c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1 NkMwOEEyQjYwHhcNMjQwNTMxMDQzMzUwWhcNMjQwNjA3MDQzMzUwWjAYMRYwFAYD VQQDEw02NjU5NTMyZi01MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvHdDs3Dw25zYSoVk1pNAPzUIrW1FBAf53tszznibC2guiYUpc3HHFyFmC0L fgLHKp6MFaFDcctPBr/BBR95DAFsYBSuxMz1OBMvrOezai9L8waFlsPgZGqjd3FC yIuhOKRz69zwfSWVT74VD46mBH1kB0vvy4GrjKxAGnO0/zVzWUx7xAT5uAU3TovL cQU4Hzqr8Zc8TO/eMzpN2lHjMi+kR6eLnmWRNxoxHyT0nKSg7SXDyuia5JJ7sscB qv9XgP12U0BkatrGDcTWkt63DQEGi+HHMGB0J7ak1OMonUiqkubh1ktSlyJAhjC+ nNLW9C1WG90nRgYW7MBi7TSarwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyifOOe vK2RohpaRXpu+BC+/W13MB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3 RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjVCMS9FRDYyOUYwQ0Q3RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FG a2UtdkozYkRzTVZXd0lvclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Ask0vOKknkUxkdfFz+4HgQfjTUOLe3teo2jsEAaE9YyB2AtcuW9H QaNZbvARoltyBZYnVqITx/e4QnpqVK33pVuj3rTsUL0srAdcPaHkaEN5s7tztKgv lOJHvUF7ffXO9LTuR7Hj9MyxE/DXLT+sOJDTfAc1AivY9XaPWpCGC47TV8UPqHjC Y4xvO3GgobC5DRiuoIff84PdKAsr75RnlFUS2VWhepTXSnVDPFjT+W2LZd6/F4yS QL1cvbCKBC8U7nrQszl0q377CR8Oj0ZTl2SBTwLpeSwmCSj3HGjXhkgD+8ODKyF0 Ujaa9KYQDyi45UOFJKu2++YGFYqLeHx4 -----END CERTIFICATE-----Generated at Fri May 31 06:49:13 2024 by rpki-client on console-ams.rpki-client.org