$ rpki-client -vvf rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft File: wVU6bzeV4xXosEZIGTV6VZhShds.mft (raw, json) Hash identifier: Vmi8TvTyvW97qpeJAy7DE8QNy5vDvQic/NZkW8oDxFs= Subject key identifier: 2A:67:7B:98:82:34:C5:CD:A6:D0:27:4E:E9:E7:A6:AB:61:04:C9:1B Authority key identifier: C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB Certificate issuer: /CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft Manifest number: 33C4 Signing time: Sat 18 May 2024 14:40:26 +0000 Manifest this update: Sat 18 May 2024 14:40:26 +0000 Manifest next update: Sat 25 May 2024 14:40:26 +0000 Files and hashes: 1: wVU6bzeV4xXosEZIGTV6VZhShds.crl (hash: 48c7pxoZqOtP7oASifzoAXEQOi2c45YIOKzAn920zyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB Validity Not Before: May 18 14:40:26 2024 GMT Not After : May 25 14:40:26 2024 GMT Subject: CN=6648bdda-c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:58:10:a8:01:a4:e9:46:69:ad:57:19:ca: ea:44:58:50:fe:93:2e:90:50:71:9d:c2:8f:de:3e: 35:88:22:e2:7f:f1:3d:33:3a:bd:00:06:e9:9b:1a: b8:5e:c8:f2:e2:dd:b8:76:65:9f:90:4a:bc:96:c2: a1:57:f4:6d:7b:16:f8:10:b2:dd:ea:2a:00:41:f6: 49:4b:26:0a:0f:ab:d3:79:18:4c:33:86:0b:5f:a9: c7:00:d9:36:d0:2e:0a:4a:b2:b4:73:c6:40:df:ea: 1c:05:4b:b0:c7:3f:f0:92:cd:27:e3:9d:ff:89:67: 53:35:04:2a:b2:8d:fb:4f:1b:c9:ad:97:03:d7:b2: 5e:64:06:91:eb:5e:c8:28:22:a9:09:9f:09:48:e0: 44:84:13:44:f1:61:32:36:38:63:b9:10:c8:f1:ba: 3b:74:07:82:33:84:ee:8a:d7:82:47:7f:3b:4e:e6: 63:6d:2b:d8:f8:db:48:ea:b6:e2:4b:2e:8d:b5:99: 7d:7b:e2:19:ca:3f:02:d0:20:45:e3:5d:23:29:d0: fa:96:63:0f:9e:eb:a3:86:07:c1:c7:d8:fd:1d:53: 2f:fe:dc:c5:2f:94:4b:df:bd:a6:9f:19:73:89:42: 8e:a0:21:54:df:c5:5f:2c:fa:89:a5:2d:6a:3b:4b: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:7B:98:82:34:C5:CD:A6:D0:27:4E:E9:E7:A6:AB:61:04:C9:1B X509v3 Authority Key Identifier: keyid:C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:56:eb:aa:27:ad:a7:05:c7:9d:7f:63:a8:83:2e:ca:99:61: b7:dd:a0:7d:bb:15:e0:a6:23:cf:01:ad:b2:fe:9e:7e:05:02: b9:de:c6:18:55:fd:94:2e:6e:0f:df:50:30:24:8a:2b:d7:41: 02:48:6e:ce:f4:ee:4d:83:36:5e:1c:6e:bb:0a:e5:f3:30:27: f9:29:99:30:56:ec:d4:a2:c4:e9:36:9c:b1:49:d1:d7:8a:d6: 38:95:f0:08:b2:44:6d:24:f6:f5:9b:32:19:cf:5a:a3:19:ec: 69:68:7b:c5:7e:c9:08:c9:27:f0:26:12:8c:4a:dc:9b:8e:ef: 0e:a5:bf:65:dc:d8:7b:aa:ef:85:8c:55:c2:04:75:06:31:22: e9:81:8a:56:f1:94:98:1c:cb:02:a1:cc:b0:a8:a7:6b:26:ee: 82:a2:f5:2f:c9:6e:05:71:a4:9b:43:3e:7b:2d:9a:1e:84:c4: d0:1d:86:c8:98:2c:4e:03:99:36:e1:4e:6b:fe:2c:27:53:25: cb:47:d0:b0:37:2d:90:82:67:32:c4:97:89:dd:9d:1f:c3:7f: bc:b7:6c:ba:a1:44:3a:54:14:f3:7e:fc:18:19:c2:0b:9e:c2: 28:4a:75:9a:31:34:23:ee:3a:65:f9:8f:be:e1:fc:44:37:a8: a4:72:4f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRDMEIxMTAvBgNVBAUTKEMxNTUzQTZGMzc5NUUzMTVFOEIwNDY0ODE5MzU3QTU1 OTg1Mjg1REIwHhcNMjQwNTE4MTQ0MDI2WhcNMjQwNTI1MTQ0MDI2WjAYMRYwFAYD VQQDEw02NjQ4YmRkYS1jMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08JYEKgBpOlGaa1XGcrqRFhQ/pMukFBxncKP3j41iCLif/E9Mzq9AAbpmxq4 Xsjy4t24dmWfkEq8lsKhV/Rtexb4ELLd6ioAQfZJSyYKD6vTeRhMM4YLX6nHANk2 0C4KSrK0c8ZA3+ocBUuwxz/wks0n453/iWdTNQQqso37TxvJrZcD17JeZAaR617I KCKpCZ8JSOBEhBNE8WEyNjhjuRDI8bo7dAeCM4TuiteCR387TuZjbSvY+NtI6rbi Sy6NtZl9e+IZyj8C0CBF410jKdD6lmMPnuujhgfBx9j9HVMv/tzFL5RL372mnxlz iUKOoCFU38VfLPqJpS1qO0sKNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpne5iC NMXNptAnTunnpqthBMkbMB8GA1UdIwQYMBaAFMFVOm83leMV6LBGSBk1elWYUoXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEMwQi84MkQ4MzdDNjFE OEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4WG9zRVpJR1RWNlZaaFNo ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dWVTZiemVWNHhYb3NFWklHVFY2VlpoU2hkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEMwQi84MkQ4MzdDNjFEOEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4 WG9zRVpJR1RWNlZaaFNoZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRVuuqJ62nBcedf2Oogy7KmWG33aB9uxXgpiPPAa2y/p5+BQK53sYY Vf2ULm4P31AwJIor10ECSG7O9O5NgzZeHG67CuXzMCf5KZkwVuzUosTpNpyxSdHX itY4lfAIskRtJPb1mzIZz1qjGexpaHvFfskIySfwJhKMStybju8Opb9l3Nh7qu+F jFXCBHUGMSLpgYpW8ZSYHMsCocywqKdrJu6CovUvyW4FcaSbQz57LZoehMTQHYbI mCxOA5k24U5r/iwnUyXLR9CwNy2QgmcyxJeJ3Z0fw3+8t2y6oUQ6VBTzfvwYGcIL nsIoSnWaMTQj7jpl+Y++4fxEN6ikck9G -----END CERTIFICATE-----Generated at Sat May 18 15:26:04 2024 by rpki-client on console-fra.rpki-client.org