$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json) Hash identifier: FUA/C+J8uwX/uZevN6bkrxQUcD0Dki4svwK3X6dNNcM= Subject key identifier: 8E:80:84:1C:D8:70:88:B6:6A:1D:7A:AF:30:61:63:B7:6E:D7:B2:1C Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 14:45:16 +0000 Manifest this update: Sat 18 May 2024 14:45:15 +0000 Manifest next update: Sat 25 May 2024 14:45:15 +0000 Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: QaQbgIe81bScWcXPph22Hh05tQAz7T1FkQZ3hNHgO+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Validity Not Before: May 18 14:45:15 2024 GMT Not After : May 25 14:45:15 2024 GMT Subject: CN=6648befc-b6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:06:b5:32:6a:89:41:ce:9e:a9:0e:f5:8a: e6:6d:c6:e3:64:ea:8d:4d:ec:a3:40:6a:e3:a1:64: 06:b9:4c:e4:5b:67:ed:63:e1:b6:18:2b:8f:e6:61: 86:92:30:e1:2e:cf:e8:54:16:b6:00:87:39:b6:61: 49:ed:87:27:35:7f:06:a9:4e:b0:f8:27:1e:67:fb: b3:5e:72:05:f6:2e:54:17:af:5f:71:4c:23:06:42: b1:eb:2f:c6:72:d2:c8:17:9a:b9:f1:41:98:c8:4b: 07:df:f9:95:85:96:f4:32:8b:2a:09:d0:fc:db:50: ec:d3:34:45:3b:89:b0:ae:7b:0c:7f:82:08:65:09: 91:66:c5:3e:3a:8f:ff:28:dc:f5:86:69:ae:70:7b: 30:9b:04:b9:47:17:14:81:e5:49:e3:6f:72:da:ad: 84:16:9c:42:c9:1f:d8:eb:cd:91:90:de:11:bb:d8: 82:e6:a8:26:35:64:d3:f2:c8:5c:71:d3:1f:cf:38: 46:7c:27:27:71:a2:67:c1:67:f2:f0:6e:c0:77:20: af:f6:6e:60:4e:d2:86:c7:73:e4:a7:3d:96:ee:79: 71:ad:d9:4b:69:42:a4:3e:29:b1:59:d6:67:5d:ad: dd:7c:71:81:12:04:59:02:cc:fa:34:dc:c1:83:22: 51:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:84:1C:D8:70:88:B6:6A:1D:7A:AF:30:61:63:B7:6E:D7:B2:1C X509v3 Authority Key Identifier: keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ca:1e:a1:33:82:1c:b5:d6:fc:be:5f:52:79:a9:06:50:b7: 68:03:3a:a8:aa:3b:dd:e3:03:17:72:fb:4a:69:11:55:6b:ae: 21:d4:9e:7c:95:ff:9e:2d:b3:73:48:e1:62:7a:77:ae:47:8e: 36:13:c6:92:1c:19:c9:aa:1a:dd:64:e7:34:6c:f9:e5:02:bb: e8:7b:8b:55:52:c4:37:47:c5:2b:89:7e:be:bc:60:c6:83:bf: c2:a6:9f:b3:d3:09:bc:75:0d:aa:17:e0:80:cd:9e:43:91:ca: 45:7c:1a:ff:fd:07:46:16:79:2c:99:96:02:ba:f2:06:13:95: 8d:96:b2:2e:98:31:03:22:69:8b:6c:52:d9:4c:59:d6:a6:fa: e6:23:bf:d9:67:d3:d8:95:6b:38:38:ab:74:29:e5:31:26:ba: 84:bf:e5:1d:c5:8d:9d:af:27:67:f8:02:e4:b4:48:5b:5d:67: 16:f5:66:a1:26:4a:ab:2b:1c:9a:60:df:a5:0a:49:4a:c8:62: cf:0f:a5:49:11:ea:b9:2d:62:5f:a0:df:17:16:2a:8b:03:62: 5e:a5:84:ac:4d:e8:1b:bd:63:2d:14:2e:bc:af:b9:d8:bf:06: c5:10:f7:b8:e3:d2:37:d7:c3:2f:55:57:82:d8:b8:07:37:a3: 1b:8d:97:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTQxMTAvBgNVBAUTKEUzNDIyRjRFREU1RTY4Q0VDOUFBQTdFM0M2RTMyNzhD NzMwRTFFN0MwHhcNMjQwNTE4MTQ0NTE1WhcNMjQwNTI1MTQ0NTE1WjAYMRYwFAYD VQQDEw02NjQ4YmVmYy1iNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kkGtTJqiUHOnqkO9YrmbcbjZOqNTeyjQGrjoWQGuUzkW2ftY+G2GCuP5mGG kjDhLs/oVBa2AIc5tmFJ7YcnNX8GqU6w+CceZ/uzXnIF9i5UF69fcUwjBkKx6y/G ctLIF5q58UGYyEsH3/mVhZb0MosqCdD821Ds0zRFO4mwrnsMf4IIZQmRZsU+Oo// KNz1hmmucHswmwS5RxcUgeVJ429y2q2EFpxCyR/Y682RkN4Ru9iC5qgmNWTT8shc cdMfzzhGfCcncaJnwWfy8G7AdyCv9m5gTtKGx3Pkpz2W7nlxrdlLaUKkPimxWdZn Xa3dfHGBEgRZAsz6NNzBgyJR0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6AhBzY cIi2ah16rzBhY7du17IcMB8GA1UdIwQYMBaAFONCL07eXmjOyaqn48bjJ4xzDh58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNC80NzNDNjQ1MDFE OEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFNN0pxcWZqeHVNbmpITU9I bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwSXZUdDVlYU03SnFxZmp4dU1uakhNT0hudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNC80NzNDNjQ1MDFEOEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFN N0pxcWZqeHVNbmpITU9IbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJyh6hM4Ictdb8vl9SeakGULdoAzqoqjvd4wMXcvtKaRFVa64h1J58 lf+eLbNzSOFieneuR442E8aSHBnJqhrdZOc0bPnlArvoe4tVUsQ3R8UriX6+vGDG g7/Cpp+z0wm8dQ2qF+CAzZ5DkcpFfBr//QdGFnksmZYCuvIGE5WNlrIumDEDImmL bFLZTFnWpvrmI7/ZZ9PYlWs4OKt0KeUxJrqEv+UdxY2drydn+ALktEhbXWcW9Wah JkqrKxyaYN+lCklKyGLPD6VJEeq5LWJfoN8XFiqLA2JepYSsTegbvWMtFC68r7nY vwbFEPe449I318MvVVeC2LgHN6MbjZdj -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org