$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json) Hash identifier: 32Sp18LmvWXZL1RHVPuroHX/Gd2WQcoskzYs6hQe3NE= Subject key identifier: F0:08:6C:79:1C:3B:8E:29:4B:31:82:08:CE:BB:FB:2C:86:9C:F2:82 Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 33D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft Manifest number: 33CF Signing time: Sat 18 May 2024 14:41:09 +0000 Manifest this update: Sat 18 May 2024 14:41:08 +0000 Manifest next update: Sat 25 May 2024 14:41:08 +0000 Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: BJJgr3WolIYN5SvWQk6gq+zshDT3HXKX8kEnW3uqL0M=) 2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 9wMD+BTTp63JJ2ve8IGpNkKxbEpqVM4ugh2P4b3ccDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13267 (0x33d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: May 18 14:41:08 2024 GMT Not After : May 25 14:41:08 2024 GMT Subject: CN=6648be04-2b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:18:96:40:46:f4:8e:bf:a0:b7:1d:bf:d5: ed:42:e2:87:37:05:6c:63:fe:78:55:f1:9f:9b:21: 69:39:fe:9c:97:60:ee:c0:be:e9:88:48:42:58:6f: 0b:51:d0:71:db:cf:60:3b:e3:86:a2:47:e6:ab:a9: 4c:5b:e8:58:dc:95:82:69:a4:1d:63:09:c5:8d:c1: e6:5a:f4:cc:9b:07:1b:a0:30:ac:92:20:07:61:71: 33:be:0c:fc:b9:b9:d2:54:0c:2e:50:0e:01:28:cc: cf:32:00:04:33:87:a0:81:3d:f1:9a:1d:30:ca:0f: a3:a0:7f:62:50:dc:a2:86:7b:c4:27:6f:a8:01:ef: 4c:2e:94:9a:b3:2e:de:b2:31:60:94:13:ef:4f:67: 85:03:41:a9:6d:2a:7c:e8:08:7f:be:c8:29:f1:b9: 10:f3:9f:00:ff:ab:a8:fc:f2:e3:72:38:f6:c6:df: d4:e1:64:1d:05:99:c7:ec:18:e4:a8:f4:8e:d8:81: 45:dd:eb:4a:71:35:b7:19:e0:7f:a7:7f:38:28:b3: c9:fb:5e:be:b7:20:f5:85:d7:db:a2:1a:72:8e:63: dd:d6:03:d0:cb:ad:96:99:1e:3d:af:fe:3d:94:d7: db:20:2a:f9:5a:c7:73:fc:90:2a:aa:8f:a2:e7:74: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:6C:79:1C:3B:8E:29:4B:31:82:08:CE:BB:FB:2C:86:9C:F2:82 X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:21:ca:ac:0a:e1:8c:8b:1c:95:24:a8:5f:cb:2a:b2:77:51: 83:00:79:3b:cc:df:c7:33:8e:44:cf:e7:d0:0e:f3:0c:63:5c: e7:82:09:29:4a:79:74:d1:d7:86:ad:ce:a4:c8:c6:1f:dc:da: 26:f1:d4:f5:e1:e7:fe:f4:23:ec:d1:1a:74:c6:5a:9c:e7:a5: 33:63:85:e4:62:34:5e:29:67:0f:b6:24:5d:90:9c:c5:f7:21: 02:81:da:99:03:01:3e:c5:c0:5c:cc:ff:63:fe:cc:a8:1f:25: e5:43:9b:27:b8:43:34:be:da:96:f5:bb:1c:04:8e:8d:f9:c7: 90:aa:51:fd:6f:a2:56:26:e6:1e:d2:e1:7a:40:43:3f:10:f3: 58:f5:3d:60:4e:e8:a9:83:8d:9c:de:bf:09:fc:e4:ae:0e:a0: 2c:b0:9a:73:13:e9:91:f4:e9:18:13:9d:19:f4:71:f9:a8:79: 38:84:b1:09:96:75:11:a0:f6:da:da:65:d3:2c:dc:df:6e:6c: b4:6d:8f:fa:e2:d4:ee:b8:78:0d:9a:bb:04:dd:cd:2d:48:a6: 2a:51:a7:a5:e0:98:9f:cb:12:c8:ff:76:7a:af:24:64:a0:eb: d7:bd:8d:bd:0d:00:0a:82:f2:e7:26:7a:55:84:f9:9f:32:0b: 94:cd:1d:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjQwNTE4MTQ0MTA4WhcNMjQwNTI1MTQ0MTA4WjAYMRYwFAYD VQQDEw02NjQ4YmUwNC0yYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwEYlkBG9I6/oLcdv9XtQuKHNwVsY/54VfGfmyFpOf6cl2DuwL7piEhCWG8L UdBx289gO+OGokfmq6lMW+hY3JWCaaQdYwnFjcHmWvTMmwcboDCskiAHYXEzvgz8 ubnSVAwuUA4BKMzPMgAEM4eggT3xmh0wyg+joH9iUNyihnvEJ2+oAe9MLpSasy7e sjFglBPvT2eFA0GpbSp86Ah/vsgp8bkQ858A/6uo/PLjcjj2xt/U4WQdBZnH7Bjk qPSO2IFF3etKcTW3GeB/p384KLPJ+16+tyD1hdfbohpyjmPd1gPQy62WmR49r/49 lNfbICr5Wsdz/JAqqo+i53QUOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAIbHkc O44pSzGCCM67+yyGnPKCMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2 YmdIbXZNbDIzQXk0UVU2RGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIIcqsCuGMixyVJKhfyyqyd1GDAHk7zN/HM45Ez+fQDvMMY1znggkp Snl00deGrc6kyMYf3Nom8dT14ef+9CPs0Rp0xlqc56UzY4XkYjReKWcPtiRdkJzF 9yECgdqZAwE+xcBczP9j/syoHyXlQ5snuEM0vtqW9bscBI6N+ceQqlH9b6JWJuYe 0uF6QEM/EPNY9T1gTuipg42c3r8J/OSuDqAssJpzE+mR9OkYE50Z9HH5qHk4hLEJ lnURoPba2mXTLNzfbmy0bY/64tTuuHgNmrsE3c0tSKYqUael4JifyxLI/3Z6ryRk oOvXvY29DQAKgvLnJnpVhPmfMguUzR1B -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org