$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: caluRXBgnX6wGyVkYxKhQB9zY3DOWSJInlmL4bnrjes= Subject key identifier: 2E:69:FC:1A:C5:1D:F5:CA:09:64:AE:C3:75:00:90:8F:7A:3E:D9:A4 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 33F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 33DC Signing time: Sat 18 May 2024 14:20:15 +0000 Manifest this update: Sat 18 May 2024 14:20:14 +0000 Manifest next update: Sat 25 May 2024 14:20:14 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: s5NA5naLwB/eh8dnRuPi+Qe/oFrGYUCNY2xMdeS6XrQ=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13300 (0x33f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: May 18 14:20:14 2024 GMT Not After : May 25 14:20:14 2024 GMT Subject: CN=6648b91e-f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:37:0b:08:c2:c8:8f:7c:02:28:17:2c:ec: 55:6e:ab:52:d8:fe:66:dc:eb:6f:11:e0:9f:b1:54: 13:1b:60:a5:34:4c:1d:22:58:c5:63:5f:bd:04:b1: c4:4b:40:b1:7c:cf:f7:e2:7e:5c:0f:3a:ab:b3:9f: af:27:01:3d:8e:b3:55:51:09:b2:8d:1a:4b:cf:6b: f0:c8:ed:b3:07:a7:ab:a6:83:c9:a8:01:7c:b1:30: 4d:4e:a1:39:e7:fc:89:7f:00:a1:fa:3f:52:6e:d7: 33:c7:92:d8:a3:46:e5:4a:ab:d2:1a:36:0d:fb:65: a2:65:3e:1e:a7:d2:b4:76:37:f3:05:8d:a8:54:4a: 63:4b:8c:08:5f:32:93:95:cb:cf:7e:96:f1:94:2f: 76:7c:6c:64:b0:05:f4:65:a6:5b:d5:7e:96:e3:29: 6c:6c:b5:62:59:c9:3f:85:70:da:0c:a4:26:93:8f: db:87:fc:bf:e5:13:ae:80:a3:ce:a0:fc:13:8d:b1: 46:11:5b:11:96:9c:67:f4:44:a9:d3:a9:4f:34:b4: 08:87:ae:0b:c4:65:93:8b:5c:33:75:4f:51:e0:6a: 5f:fd:d2:67:cc:82:20:a4:3a:fb:dd:51:7e:e9:70: 3f:df:f9:79:56:66:1e:0c:f7:95:06:f9:17:7e:b6: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:FC:1A:C5:1D:F5:CA:09:64:AE:C3:75:00:90:8F:7A:3E:D9:A4 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ad:f9:2a:6f:04:4b:73:00:a4:92:d6:78:66:35:8b:95:07: 14:68:d0:64:ce:b2:ef:6b:e7:2a:22:b5:c6:74:d5:53:53:ff: 29:2f:8f:a8:07:58:a7:2c:0e:35:26:b7:1b:a6:6a:05:04:55: 97:e2:ec:9f:00:76:da:60:a4:f4:42:1d:43:3e:44:9f:7d:95: 88:b4:31:42:3b:aa:f9:19:c2:2e:ac:87:55:8d:f0:59:59:bc: 9e:f7:31:ee:56:1d:98:43:e4:67:2b:5e:ec:55:af:3c:16:3c: bd:55:70:e6:7a:1a:1e:b6:3d:8d:d1:a7:fb:d1:ec:f3:f1:dc: 41:60:56:14:39:5a:2a:22:f4:88:cb:97:30:17:e4:5d:d2:8f: a2:3a:f4:c5:6d:38:b0:33:c0:e0:99:a8:de:e5:4e:99:2f:93: d5:e0:60:03:60:a8:2e:5a:ec:9e:54:23:6b:9f:f1:f9:05:dc: c7:cf:83:64:11:df:18:50:d7:ec:c7:68:9b:23:fa:d8:67:9b: 01:77:54:60:d0:dd:f2:bb:32:90:54:47:80:f6:93:ce:cc:d4: a6:fa:ef:94:51:a7:8a:25:64:fd:2f:ef:33:e6:70:42:b4:68: ce:42:04:56:38:fb:04:5d:9d:7e:d6:10:87:51:45:ee:b4:40: 91:fb:6d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjQwNTE4MTQyMDE0WhcNMjQwNTI1MTQyMDE0WjAYMRYwFAYD VQQDEw02NjQ4YjkxZS1mNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSo3CwjCyI98AigXLOxVbqtS2P5m3OtvEeCfsVQTG2ClNEwdIljFY1+9BLHE S0CxfM/34n5cDzqrs5+vJwE9jrNVUQmyjRpLz2vwyO2zB6erpoPJqAF8sTBNTqE5 5/yJfwCh+j9Sbtczx5LYo0blSqvSGjYN+2WiZT4ep9K0djfzBY2oVEpjS4wIXzKT lcvPfpbxlC92fGxksAX0ZaZb1X6W4ylsbLViWck/hXDaDKQmk4/bh/y/5ROugKPO oPwTjbFGEVsRlpxn9ESp06lPNLQIh64LxGWTi1wzdU9R4Gpf/dJnzIIgpDr73VF+ 6XA/3/l5VmYeDPeVBvkXfrb3HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5p/BrF HfXKCWSuw3UAkI96PtmkMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnrfkqbwRLcwCkktZ4ZjWLlQcUaNBkzrLva+cqIrXGdNVTU/8pL4+o B1inLA41JrcbpmoFBFWX4uyfAHbaYKT0Qh1DPkSffZWItDFCO6r5GcIurIdVjfBZ Wbye9zHuVh2YQ+RnK17sVa88Fjy9VXDmehoetj2N0af70ezz8dxBYFYUOVoqIvSI y5cwF+Rd0o+iOvTFbTiwM8Dgmaje5U6ZL5PV4GADYKguWuyeVCNrn/H5BdzHz4Nk Ed8YUNfsx2ibI/rYZ5sBd1Rg0N3yuzKQVEeA9pPOzNSm+u+UUaeKJWT9L+8z5nBC tGjOQgRWOPsEXZ1+1hCHUUXutECR+22E -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org