$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: IFPgRcFGq18qRY9fSmin9faNcUHCuwfUAa9R2oXIQkg= Subject key identifier: CA:ED:90:09:57:CF:FB:C8:75:AD:78:F2:E2:AD:DD:F2:8B:C5:E6:48 Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 0133 Signing time: Fri 31 May 2024 05:41:58 +0000 Manifest this update: Fri 31 May 2024 05:41:58 +0000 Manifest next update: Fri 07 Jun 2024 05:41:58 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: zfu6Rr3gxjh+n1OkqpHDytUVayTwe/CDR9NrxzHT9o0=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 7PFgi60WBkd011EUNiQnOIrK6mUnEC9T8wz7uTJUgnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: May 31 05:41:58 2024 GMT Not After : Jun 7 05:41:58 2024 GMT Subject: CN=66596326-9730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a0:64:4a:7d:5f:b6:8f:27:8a:c0:89:41:64: 34:6e:2a:fe:9a:f1:ff:e7:79:c3:f1:0a:b2:90:e8: 6e:a1:56:72:6a:06:f5:e8:85:d5:14:ca:21:8a:41: f5:22:ee:d9:58:78:42:94:3b:a5:11:e0:59:f4:50: a7:b8:cd:4f:a4:0d:06:72:38:1d:11:b8:22:9e:25: 6b:a9:a6:84:51:72:1f:5d:9c:af:19:11:77:8f:a2: a6:f5:ba:39:9a:44:2e:15:d0:37:04:74:72:1a:90: db:68:81:ca:b7:9a:fe:29:9c:1a:a7:62:cb:0f:b7: 61:c4:96:26:de:d2:68:3c:f6:bb:58:2d:11:57:4f: 9f:0c:e7:6b:04:2f:7a:87:3b:a3:57:62:0c:3a:12: 36:b6:a4:fe:83:58:4a:ab:59:0d:d9:f6:e4:04:38: b4:26:96:11:77:c3:a0:3c:c4:11:42:54:12:6d:37: fb:ad:6c:26:57:e9:8b:71:26:75:40:f5:c0:9a:01: ed:26:9f:71:ad:61:c6:8d:21:9c:94:89:19:d7:e3: 5a:c2:cd:24:5a:68:1b:c3:cb:ed:2e:df:1a:cb:c9: 37:7e:70:bb:f8:29:4d:3b:0f:0d:15:d9:9d:d7:a2: 19:b5:5b:8c:49:e6:2d:ba:79:50:38:11:04:9d:26: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:ED:90:09:57:CF:FB:C8:75:AD:78:F2:E2:AD:DD:F2:8B:C5:E6:48 X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f0:0d:44:ec:ae:b6:e8:5b:c3:b7:4b:93:d6:1f:36:06:30: 66:6a:94:a7:6b:08:b1:ab:57:6b:9c:f9:00:f3:79:20:b9:ce: 62:d4:5f:af:53:85:71:ff:45:8f:6c:d6:14:60:9b:9a:60:9c: 9e:f6:36:2d:8f:af:a9:43:6e:0e:8e:0a:bf:4b:fe:b5:73:db: 4c:5a:f1:a6:ba:d6:17:c8:84:15:35:62:46:cf:44:6f:42:e2: 4e:b3:00:5f:43:ce:01:c0:0e:6e:b3:08:ad:f6:dc:05:28:75: 28:ce:a9:80:8f:c6:6a:ca:06:e6:96:0e:3d:d4:cd:44:be:a2: ac:18:6a:80:4f:15:cd:33:fa:49:74:aa:84:53:ad:a5:43:39: 1d:22:cd:78:79:45:de:b5:42:40:45:ad:d0:83:6d:5e:63:03: a5:5b:c5:06:d5:b0:d8:1e:51:60:de:a0:99:6a:68:6c:da:93: cb:55:84:af:1e:15:f0:08:ef:bd:c2:c1:a0:9a:32:22:8a:5a: 2a:98:7b:71:7c:16:71:c5:fa:c9:32:c0:e6:2f:54:d5:81:36: bc:9c:a0:90:b5:be:c9:2e:d2:11:8f:58:31:92:35:be:22:db: ee:21:90:53:00:b3:03:4e:45:1e:93:41:0a:cc:ef:3d:85:ce: 68:78:22:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjQwNTMxMDU0MTU4WhcNMjQwNjA3MDU0MTU4WjAYMRYwFAYD VQQDEw02NjU5NjMyNi05NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aBkSn1fto8nisCJQWQ0bir+mvH/53nD8QqykOhuoVZyagb16IXVFMohikH1 Iu7ZWHhClDulEeBZ9FCnuM1PpA0GcjgdEbginiVrqaaEUXIfXZyvGRF3j6Km9bo5 mkQuFdA3BHRyGpDbaIHKt5r+KZwap2LLD7dhxJYm3tJoPPa7WC0RV0+fDOdrBC96 hzujV2IMOhI2tqT+g1hKq1kN2fbkBDi0JpYRd8OgPMQRQlQSbTf7rWwmV+mLcSZ1 QPXAmgHtJp9xrWHGjSGclIkZ1+Naws0kWmgbw8vtLt8ay8k3fnC7+ClNOw8NFdmd 16IZtVuMSeYtunlQOBEEnSZZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrtkAlX z/vIda148uKt3fKLxeZIMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB28A1E7K626FvDt0uT1h82BjBmapSnawixq1drnPkA83kguc5i1F+v U4Vx/0WPbNYUYJuaYJye9jYtj6+pQ24Ojgq/S/61c9tMWvGmutYXyIQVNWJGz0Rv QuJOswBfQ84BwA5uswit9twFKHUozqmAj8Zqygbmlg491M1EvqKsGGqATxXNM/pJ dKqEU62lQzkdIs14eUXetUJARa3Qg21eYwOlW8UG1bDYHlFg3qCZamhs2pPLVYSv HhXwCO+9wsGgmjIiiloqmHtxfBZxxfrJMsDmL1TVgTa8nKCQtb7JLtIRj1gxkjW+ ItvuIZBTALMDTkUek0EKzO89hc5oeCLg -----END CERTIFICATE-----Generated at Fri May 31 06:49:18 2024 by rpki-client on console-ams.rpki-client.org