$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: zPRzoq8Hjl7nB5QV2hzzeHTvx832zDzdqzyirqAn1f8= Subject key identifier: 3F:03:BC:A9:CD:BA:D0:85:B4:3F:CE:9F:BE:BB:55:BC:6F:98:16:FC Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 33EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 33D5 Signing time: Sat 18 May 2024 14:51:15 +0000 Manifest this update: Sat 18 May 2024 14:51:15 +0000 Manifest next update: Sat 25 May 2024 14:51:15 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: tGsXimtzp5DdSoMSoxeejr/entJ4sVJQt3PxOdQYpQM=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: r/uWPxWKwu+kO1HevrlCc4sI8N+zLGmuIoKjh8em6gs=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: ezI8TwMx43cHowiyWTqvZ83VJ4vIz73nr929q1FGN6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13295 (0x33ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: May 18 14:51:15 2024 GMT Not After : May 25 14:51:15 2024 GMT Subject: CN=6648c063-a641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:8a:06:44:94:f9:15:de:27:3c:4f:bb:4e: fd:da:a3:cc:ae:dc:8a:a8:b2:a7:6b:e0:2f:db:d3: 12:06:8f:71:0d:88:28:2a:59:a4:d1:74:cc:2e:b0: e6:c0:6f:45:b6:4d:42:2e:d7:3e:82:03:51:15:1f: 8d:74:ae:a9:df:7d:cd:73:d7:5d:b0:7b:1f:d8:14: 2f:27:92:09:21:d4:06:fe:07:e2:60:64:ab:f7:09: 71:d5:b4:b9:a9:46:a6:56:7f:73:81:42:45:fc:bf: fe:3a:62:c8:5d:6d:b7:6b:e3:50:72:cf:64:a4:28: 48:27:e1:cc:00:a7:2a:ef:dc:f0:31:61:2a:bb:62: d9:8e:55:ba:e3:4d:22:0b:1f:a2:dc:3a:d2:5e:8c: 9d:53:5e:4f:34:c0:7c:47:87:df:20:f4:44:23:e0: 8d:0d:f8:52:1f:6e:6e:e9:67:fe:11:71:2a:b4:6e: da:63:25:5a:86:2e:bf:90:ec:9b:ea:7d:e8:f5:c0: 9c:51:c6:a3:b1:f7:a4:6e:55:39:f6:cd:f4:3b:c8: b1:9f:17:80:8a:fd:53:7e:49:c1:2f:95:48:e7:02: 6b:9a:c0:c3:8c:bf:75:1f:31:0d:99:0f:ef:d4:20: 1d:00:cd:0e:b6:e6:e9:42:98:19:0b:82:03:be:1b: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:BC:A9:CD:BA:D0:85:B4:3F:CE:9F:BE:BB:55:BC:6F:98:16:FC X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9e:6c:23:2e:0d:72:59:e9:d6:37:5d:18:ae:7f:9e:6e:8f: 9c:7c:db:02:f9:91:9e:e0:bc:32:36:dd:d8:5e:f7:6c:74:7e: 29:d5:e5:e9:c5:55:a8:cb:91:45:4e:54:bf:06:16:03:85:61: b3:aa:5a:cc:b7:7f:bd:1d:c6:78:9e:9b:e2:4e:c3:af:4f:cf: fc:1a:12:35:f2:b3:bc:71:e1:88:e6:fe:78:2b:6c:f3:dc:2e: 8a:b2:3f:f7:45:a0:45:0e:ab:34:55:ed:89:c5:ed:87:e6:a7: b7:8e:96:5c:7e:10:50:09:2e:ff:47:95:39:62:aa:a2:dd:78: 9f:69:ee:cf:11:3d:4f:0f:d0:1d:a5:42:c3:25:7a:75:e2:e0: 00:72:fd:d6:a3:74:35:ea:fe:67:53:1d:7e:c4:bc:ea:03:fb: 3d:23:b0:98:42:3d:76:d0:0a:84:aa:7d:3b:e6:8a:c8:b0:39: 05:6f:39:d5:f9:7b:7d:64:ed:ab:af:cc:0f:15:30:2a:06:a3: 54:fe:73:69:b6:3f:73:bf:2e:55:38:06:10:a7:10:b5:4b:af: fd:4f:6a:34:fd:0e:b9:00:35:92:e0:32:55:7c:5c:03:80:bb: ec:63:f4:79:46:b4:95:4d:9e:e0:4b:58:51:f7:d3:d7:13:30: 40:f4:7d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjQwNTE4MTQ1MTE1WhcNMjQwNTI1MTQ1MTE1WjAYMRYwFAYD VQQDEw02NjQ4YzA2My1hNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV2KBkSU+RXeJzxPu0792qPMrtyKqLKna+Av29MSBo9xDYgoKlmk0XTMLrDm wG9Ftk1CLtc+ggNRFR+NdK6p333Nc9ddsHsf2BQvJ5IJIdQG/gfiYGSr9wlx1bS5 qUamVn9zgUJF/L/+OmLIXW23a+NQcs9kpChIJ+HMAKcq79zwMWEqu2LZjlW6400i Cx+i3DrSXoydU15PNMB8R4ffIPREI+CNDfhSH25u6Wf+EXEqtG7aYyVahi6/kOyb 6n3o9cCcUcajsfekblU59s30O8ixnxeAiv1TfknBL5VI5wJrmsDDjL91HzENmQ/v 1CAdAM0OtubpQpgZC4IDvhvQtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8DvKnN utCFtD/On767VbxvmBb8MB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0nmwjLg1yWenWN10Yrn+ebo+cfNsC+ZGe4LwyNt3YXvdsdH4p1eXp xVWoy5FFTlS/BhYDhWGzqlrMt3+9HcZ4npviTsOvT8/8GhI18rO8ceGI5v54K2zz 3C6Ksj/3RaBFDqs0Ve2Jxe2H5qe3jpZcfhBQCS7/R5U5Yqqi3Xifae7PET1PD9Ad pULDJXp14uAAcv3Wo3Q16v5nUx1+xLzqA/s9I7CYQj120AqEqn075orIsDkFbznV +Xt9ZO2rr8wPFTAqBqNU/nNptj9zvy5VOAYQpxC1S6/9T2o0/Q65ADWS4DJVfFwD gLvsY/R5RrSVTZ7gS1hR99PXEzBA9H2H -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org