$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: 0H+dbItFUnUu/mczRHVKcLEORe5RjwUWBKEBMUHzAKw= Subject key identifier: 02:6F:E5:39:78:77:95:B1:B4:67:57:17:8A:1A:16:83:4B:EB:A9:17 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 33D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 33D0 Signing time: Fri 31 May 2024 15:21:53 +0000 Manifest this update: Fri 31 May 2024 15:21:53 +0000 Manifest next update: Fri 07 Jun 2024 15:21:53 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: Ey98557iVwLfwWzSzwSUKiCQUICfJCSUoSi6mo2fMO0=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: d+iHLiGmo7NmBM9oXH2mW0yKh71Qity6r1jMJXCnmbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13269 (0x33d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: May 31 15:21:53 2024 GMT Not After : Jun 7 15:21:53 2024 GMT Subject: CN=6659eb11-a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:e8:d6:6d:60:69:ec:a9:e5:c4:45:28:75: 4b:25:e1:2b:50:54:15:fb:61:34:10:64:29:aa:b3: 8b:09:80:40:9c:12:48:c4:48:dd:59:f8:c2:32:fe: f8:0b:a4:d4:aa:20:d6:82:2e:78:9d:50:27:25:72: 5f:c6:c3:f3:b5:b0:52:36:87:76:3a:69:72:9f:5f: d0:0e:48:2b:09:af:f0:9d:da:d1:7e:2b:df:0c:e0: 20:4b:60:89:42:af:15:98:46:50:8f:af:f2:e5:2a: 4c:a9:50:77:31:8e:0f:ba:d1:2b:52:9b:37:53:12: f5:55:ad:31:8f:3a:bb:65:3d:e2:e9:b4:c8:a3:8e: ec:fc:80:8f:c3:d4:3f:75:79:d3:82:45:fe:c6:22: 05:2d:2a:e2:0f:9b:5e:01:43:4d:6f:a3:42:f4:0d: 28:de:cb:a0:c2:63:80:ba:54:72:3a:56:f6:94:1d: 86:06:1e:76:62:bd:2b:c9:c5:50:7b:b5:4d:a3:e1: bf:09:88:9a:8c:33:53:f9:aa:36:f0:70:8e:f5:30: 78:77:c4:9c:8b:b0:dd:f5:a1:d6:23:74:55:9b:03: bd:20:22:19:21:a9:71:d0:2d:b5:f6:dd:4c:b8:cb: ad:8b:97:6d:00:8a:93:fb:e4:d8:b5:a1:4d:8a:9d: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:E5:39:78:77:95:B1:B4:67:57:17:8A:1A:16:83:4B:EB:A9:17 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4a:61:3e:ed:a3:ee:38:28:3c:8e:a8:b3:0e:f7:33:37:e3: e1:1d:2e:e6:13:21:12:2a:06:a2:fb:aa:a0:82:77:49:98:46: cd:fa:53:e2:76:51:84:4b:57:82:95:86:7e:bb:c0:39:63:e6: 1b:3e:53:05:c2:ac:ad:72:c5:9d:ec:a0:7c:54:04:c3:c2:5e: 2e:d0:19:6a:1c:09:42:54:51:11:f9:9d:4c:2b:56:92:0e:ca: ae:c1:3f:8c:9d:92:47:30:f6:c8:ba:6d:34:4c:7a:4b:0d:7c: 62:86:60:a5:6b:2e:6c:26:6a:f5:b8:c8:8a:ae:26:e1:6e:aa: bf:d0:64:05:83:b5:a3:76:87:3f:3b:57:e3:2e:32:5d:e9:3a: af:ee:21:d1:7b:e2:2b:0c:52:18:57:92:ea:a0:db:80:6c:ef: 1f:0c:df:d5:d2:08:d9:07:72:da:e2:6e:07:36:d8:d3:56:d2: fb:5a:8d:80:2f:43:2e:23:af:2f:d2:b9:c6:8c:e3:44:30:35: c7:7c:ac:0f:13:06:a9:1d:2f:3c:ab:46:9a:1f:15:10:81:16: 57:17:6e:21:30:ee:69:a2:b8:37:b2:27:cb:4c:50:64:dd:b5: e2:48:51:8b:e9:a0:e0:fd:f2:ac:7f:06:80:6e:2e:22:df:bb: 92:55:53:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjQwNTMxMTUyMTUzWhcNMjQwNjA3MTUyMTUzWjAYMRYwFAYD VQQDEw02NjU5ZWIxMS1hODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnzo1m1gaeyp5cRFKHVLJeErUFQV+2E0EGQpqrOLCYBAnBJIxEjdWfjCMv74 C6TUqiDWgi54nVAnJXJfxsPztbBSNod2Omlyn1/QDkgrCa/wndrRfivfDOAgS2CJ Qq8VmEZQj6/y5SpMqVB3MY4PutErUps3UxL1Va0xjzq7ZT3i6bTIo47s/ICPw9Q/ dXnTgkX+xiIFLSriD5teAUNNb6NC9A0o3sugwmOAulRyOlb2lB2GBh52Yr0rycVQ e7VNo+G/CYiajDNT+ao28HCO9TB4d8Sci7Dd9aHWI3RVmwO9ICIZIalx0C219t1M uMuti5dtAIqT++TYtaFNip2klQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJv5Tl4 d5WxtGdXF4oaFoNL66kXMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQSmE+7aPuOCg8jqizDvczN+PhHS7mEyESKgai+6qggndJmEbN+lPi dlGES1eClYZ+u8A5Y+YbPlMFwqytcsWd7KB8VATDwl4u0BlqHAlCVFER+Z1MK1aS DsquwT+MnZJHMPbIum00THpLDXxihmClay5sJmr1uMiKribhbqq/0GQFg7Wjdoc/ O1fjLjJd6Tqv7iHRe+IrDFIYV5LqoNuAbO8fDN/V0gjZB3La4m4HNtjTVtL7Wo2A L0MuI68v0rnGjONEMDXHfKwPEwapHS88q0aaHxUQgRZXF24hMO5porg3sifLTFBk 3bXiSFGL6aDg/fKsfwaAbi4i37uSVVP3 -----END CERTIFICATE-----Generated at Fri May 31 16:40:57 2024 by rpki-client on console-ams.rpki-client.org