$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: yMbu7HS4/V0Hjlb1C2Jr2gZHSDr0ZIA+UlpRT6uBAdg= Subject key identifier: C9:8E:6F:41:11:40:B6:7F:72:12:D2:00:B3:3C:64:E6:BC:30:AD:1A Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 33C4 Signing time: Sat 18 May 2024 15:00:17 +0000 Manifest this update: Sat 18 May 2024 15:00:17 +0000 Manifest next update: Sat 25 May 2024 15:00:17 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: x5u9D40wq1ZKvnL5TcL5rme+lpQ7P/sYsiHtUfVCYz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: May 18 15:00:17 2024 GMT Not After : May 25 15:00:17 2024 GMT Subject: CN=6648c281-c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:96:86:e2:bc:d2:61:f7:15:f5:b8:16:75: 72:cc:0d:f3:ad:80:9f:5e:6f:00:67:7a:99:6d:ba: 9f:bb:62:dd:db:f6:c3:bd:58:2b:f2:2e:1b:6f:4e: ee:41:ee:96:74:cb:ba:24:1b:c7:93:93:b3:6e:b0: 8d:8f:65:b6:1c:c9:64:73:c6:a9:46:45:1d:f4:0b: 82:79:11:19:7f:9e:a9:d5:1f:a5:14:d9:18:e2:30: 63:36:20:b4:49:91:83:3b:d1:d5:8f:58:61:eb:bd: 51:bd:57:96:17:a8:c4:8c:c2:09:e0:55:8f:a0:e1: 1e:5d:e6:2b:bc:78:bc:73:80:1b:26:0b:f9:75:db: 7d:de:b2:b2:01:80:b9:96:66:b6:13:73:d4:02:1c: fc:46:d9:24:62:9e:01:81:b7:8c:06:0a:91:eb:90: 47:48:f0:bc:64:85:06:98:94:c5:02:94:0e:06:89: a9:8b:db:84:6c:e9:46:56:9d:f1:8f:a6:a9:a9:31: ee:1b:2e:8b:f4:88:47:c8:ae:7a:3e:6d:f3:6c:79: f1:ff:00:10:7c:e9:f2:4d:43:45:88:a2:a6:97:7c: 9e:85:4a:72:53:fa:06:e7:f1:d1:bd:14:0c:33:e9: 2d:db:ce:24:bc:87:b3:2c:73:10:63:81:7d:c7:c0: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:6F:41:11:40:B6:7F:72:12:D2:00:B3:3C:64:E6:BC:30:AD:1A X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dd:77:a0:b5:82:fd:02:ed:88:a8:f3:25:3a:bb:ed:19:7e: 19:2b:ce:62:b9:b6:da:51:ba:b2:cc:d4:58:91:fb:2f:ea:f1: 50:8c:e7:cf:d8:3a:f5:c4:79:92:0c:e7:b9:1b:f3:ef:4d:9b: 5e:f1:29:94:19:cf:8f:b1:2d:2a:74:6a:c7:01:0b:ba:52:cd: 06:8d:86:93:06:46:69:a7:73:df:8e:85:58:9a:ee:80:31:41: a3:66:fa:32:32:6e:d2:ff:68:44:fc:3e:c9:7a:57:f6:e0:a0: 88:bf:00:f2:70:97:db:6f:48:d0:1c:1b:dd:b0:05:b6:7f:35: 7c:59:0b:e0:2c:96:0d:ba:5b:61:e5:fd:e1:f9:82:86:09:8d: d5:82:e5:aa:28:57:e6:66:36:fc:69:6b:b0:d1:62:96:38:a5: 80:89:7e:82:ff:d1:90:61:b7:27:cd:1b:ad:4f:80:13:8e:09: cc:4c:39:9f:d8:83:c8:30:81:39:31:f4:2d:bf:7a:df:dc:18: 70:6f:90:9a:ca:68:a5:03:96:53:31:ef:56:fd:9c:42:36:b4: 7d:4a:be:80:b8:5a:f9:a4:ec:c4:40:90:f6:f2:9a:98:3d:60: 49:13:85:7a:47:8d:d7:69:09:75:b4:f1:72:45:ec:2f:f7:2f: 98:8b:49:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjQwNTE4MTUwMDE3WhcNMjQwNTI1MTUwMDE3WjAYMRYwFAYD VQQDEw02NjQ4YzI4MS1jNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmiWhuK80mH3FfW4FnVyzA3zrYCfXm8AZ3qZbbqfu2Ld2/bDvVgr8i4bb07u Qe6WdMu6JBvHk5OzbrCNj2W2HMlkc8apRkUd9AuCeREZf56p1R+lFNkY4jBjNiC0 SZGDO9HVj1hh671RvVeWF6jEjMIJ4FWPoOEeXeYrvHi8c4AbJgv5ddt93rKyAYC5 lma2E3PUAhz8RtkkYp4BgbeMBgqR65BHSPC8ZIUGmJTFApQOBompi9uEbOlGVp3x j6apqTHuGy6L9IhHyK56Pm3zbHnx/wAQfOnyTUNFiKKml3yehUpyU/oG5/HRvRQM M+kt284kvIezLHMQY4F9x8BHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmOb0ER QLZ/chLSALM8ZOa8MK0aMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt3XegtYL9Au2IqPMlOrvtGX4ZK85iubbaUbqyzNRYkfsv6vFQjOfP 2Dr1xHmSDOe5G/PvTZte8SmUGc+PsS0qdGrHAQu6Us0GjYaTBkZpp3PfjoVYmu6A MUGjZvoyMm7S/2hE/D7Jelf24KCIvwDycJfbb0jQHBvdsAW2fzV8WQvgLJYNulth 5f3h+YKGCY3VguWqKFfmZjb8aWuw0WKWOKWAiX6C/9GQYbcnzRutT4ATjgnMTDmf 2IPIMIE5MfQtv3rf3Bhwb5CaymilA5ZTMe9W/ZxCNrR9Sr6AuFr5pOzEQJD28pqY PWBJE4V6R43XaQl1tPFyRewv9y+Yi0nf -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org