$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json) Hash identifier: gM469mlx5yxs+0tsFwwA3P0sjbulXeQlqo/Xlp277qA= Subject key identifier: D4:F0:41:3B:EC:4F:3D:DA:55:C8:57:5B:13:2D:03:74:9D:7E:91:6A Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Certificate serial: 33CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft Manifest number: 33C8 Signing time: Sat 18 May 2024 15:03:02 +0000 Manifest this update: Sat 18 May 2024 15:03:01 +0000 Manifest next update: Sat 25 May 2024 15:03:01 +0000 Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: EcBdE4mVgL7brXrCeAmnpvmGZsInvGWJUqT4Z1ieUlE=) 2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: kV4EAHSMy4Jq3/mPBsoOUs+MxUH26QTvmEtj0SznvHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13261 (0x33cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E Validity Not Before: May 18 15:03:01 2024 GMT Not After : May 25 15:03:01 2024 GMT Subject: CN=6648c325-bf5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:ff:4a:59:3b:aa:59:1a:f2:5d:73:eb:c7: e6:10:64:19:18:b7:9e:c5:f0:c0:94:0a:86:94:54: 23:9d:81:36:ce:45:ac:41:f9:bb:17:f5:4d:ad:7c: 61:d6:d8:40:75:95:f6:39:45:37:26:1a:cb:fb:22: 73:c2:2f:85:47:46:de:98:14:d6:74:f5:72:c3:13: cb:35:fa:4e:23:cb:8b:19:3f:ed:e6:cf:21:d8:99: 34:ad:2b:73:a1:75:c3:86:a4:38:e0:d6:cf:e4:03: c3:d2:50:c2:76:a2:d4:34:71:43:78:7f:3e:bd:3a: 1b:9f:a6:2f:b0:44:b6:fd:e9:34:e4:e3:fe:b9:4a: b6:ce:f8:4a:b6:65:5e:21:a5:ba:fe:f2:4c:bd:e2: 83:78:bd:d6:fd:96:4a:fd:d0:3a:db:25:f6:08:44: 31:c6:3f:2b:92:7a:bf:12:9f:35:70:a9:00:70:63: 3a:19:93:39:41:e5:29:f4:70:07:5a:43:ad:85:b1: 55:75:0d:e4:39:07:93:52:21:91:a4:af:fc:5d:25: 80:7d:7e:b6:ed:65:c7:92:da:02:b4:f1:e4:0d:39: a2:bc:52:02:76:f3:1d:0d:ad:e2:d3:76:58:1f:b8: 0d:ae:d4:04:23:3d:25:42:c2:1c:db:c9:a7:1b:bc: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:41:3B:EC:4F:3D:DA:55:C8:57:5B:13:2D:03:74:9D:7E:91:6A X509v3 Authority Key Identifier: keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:74:be:16:00:31:a0:00:f4:c0:20:b7:a0:78:a6:f0:f9:aa: a5:a2:70:55:07:5d:bc:32:b4:85:9e:36:8f:2e:8a:55:74:cd: 6e:81:19:48:d4:3e:04:26:61:66:48:be:7e:03:0d:99:f1:51: e7:d3:50:38:1d:c5:9b:90:90:10:62:8d:02:cc:a2:8e:b8:32: b7:b8:e7:b5:4d:a0:f0:31:5c:cb:e3:20:97:cf:22:12:77:4d: 71:8f:6b:9d:c0:e7:30:f8:11:05:4f:33:a7:d2:89:e5:68:3a: b8:07:65:bc:05:7d:1a:e4:40:5d:28:53:ba:e5:99:91:0f:f9: 5b:ae:79:40:fd:b3:15:74:0b:19:e3:99:91:95:8c:bc:55:cf: dd:68:56:fa:98:c5:55:f5:6b:d0:7e:8d:d2:fc:e8:35:f9:c1: 14:88:3b:d3:c6:c6:c9:47:17:25:17:c6:03:c0:da:1c:4c:2b: f6:60:f2:f4:ab:b1:77:5d:d0:ce:66:4a:7b:24:8e:c8:eb:19: 49:32:3e:af:1b:32:8a:57:fe:d3:55:91:1c:8d:94:93:dc:fa: 20:4e:eb:24:c5:f8:f3:6f:51:f1:01:fb:aa:76:38:30:38:7a: 7d:47:d1:69:41:83:91:0b:ac:7d:a7:13:27:39:5f:7a:61:0c: 31:d9:81:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy QTM4MDg1M0UwHhcNMjQwNTE4MTUwMzAxWhcNMjQwNTI1MTUwMzAxWjAYMRYwFAYD VQQDEw02NjQ4YzMyNS1iZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31n/Slk7qlka8l1z68fmEGQZGLeexfDAlAqGlFQjnYE2zkWsQfm7F/VNrXxh 1thAdZX2OUU3JhrL+yJzwi+FR0bemBTWdPVywxPLNfpOI8uLGT/t5s8h2Jk0rStz oXXDhqQ44NbP5APD0lDCdqLUNHFDeH8+vTobn6YvsES2/ek05OP+uUq2zvhKtmVe IaW6/vJMveKDeL3W/ZZK/dA62yX2CEQxxj8rknq/Ep81cKkAcGM6GZM5QeUp9HAH WkOthbFVdQ3kOQeTUiGRpK/8XSWAfX627WXHktoCtPHkDTmivFICdvMdDa3i03ZY H7gNrtQEIz0lQsIc28mnG7yO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTwQTvs Tz3aVchXWxMtA3SdfpFqMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTdL4WADGgAPTAILegeKbw+aqlonBVB128MrSFnjaPLopVdM1ugRlI 1D4EJmFmSL5+Aw2Z8VHn01A4HcWbkJAQYo0CzKKOuDK3uOe1TaDwMVzL4yCXzyIS d01xj2udwOcw+BEFTzOn0onlaDq4B2W8BX0a5EBdKFO65ZmRD/lbrnlA/bMVdAsZ 45mRlYy8Vc/daFb6mMVV9WvQfo3S/Og1+cEUiDvTxsbJRxclF8YDwNocTCv2YPL0 q7F3XdDOZkp7JI7I6xlJMj6vGzKKV/7TVZEcjZST3PogTuskxfjzb1HxAfuqdjgw OHp9R9FpQYORC6x9pxMnOV96YQwx2YEv -----END CERTIFICATE-----Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org