$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: JLfJA4g92PKQ2PBNGkkwgj4/w5Z9oJQNBFoLBpU7O+k= Subject key identifier: 0C:EE:A3:4F:A7:9A:61:82:C1:79:15:06:AC:74:22:1E:45:4E:32:0D Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 33DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 33CC Signing time: Fri 24 May 2024 15:24:50 +0000 Manifest this update: Fri 24 May 2024 15:24:50 +0000 Manifest next update: Fri 31 May 2024 15:24:50 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: ckie5jtMQ5S9aepGQV7AwnCemjPRK+9gwq2xAaqLL/U=) 2: 0BEA53F841AE11EAADED2C2CC4F9AE02.roa (hash: ADv71CV5g+ahow5B40nSTbJqpien9dZ4YGn7ERryy60=) 3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 2Igjxx3LDh0cpA4snVNC/dvSKs7TvHLZaS7POgUpmKs=) 4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: upVI92zwRShK4sg7Uqd0Ri8/XWcnJSbo+0kz8fir/jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13275 (0x33db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: May 24 15:24:50 2024 GMT Not After : May 31 15:24:50 2024 GMT Subject: CN=6650b142-9fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:5a:b3:d2:6d:c8:cc:ee:8e:a0:4a:4d:5a: 77:fb:02:b8:69:99:dd:7c:b7:72:56:6c:67:de:0a: 72:51:3d:8b:15:a6:f6:74:ea:f1:c3:e5:27:30:68: bd:04:78:8a:3c:15:dc:88:af:87:56:7e:72:2f:9e: 48:5e:66:1d:92:ad:90:a6:ab:68:29:22:95:98:87: 26:77:88:6a:8d:05:e7:46:27:8e:71:f3:eb:a3:44: df:71:12:f3:9a:b7:fa:9e:27:be:96:44:20:89:ab: 38:52:1c:4c:32:4b:9e:e4:eb:70:f4:28:4d:d4:fd: c5:c9:23:74:1d:d0:32:b0:49:4a:f1:48:a1:fe:75: 0a:70:bc:9e:73:74:35:91:35:c8:f9:60:dd:7b:ac: cc:55:66:37:61:e7:31:17:29:b7:cb:4c:a7:0d:ea: ed:0a:ed:82:fd:e7:f0:54:07:b2:2c:4f:fa:79:05: 33:f6:0c:b4:15:3f:3d:7c:a3:db:98:de:2f:53:24: 33:fb:6a:f5:04:88:1a:6a:01:02:0b:8f:08:75:f9: e1:f5:e5:00:82:e1:01:83:f9:51:c0:8d:99:5e:29: 59:86:6a:73:47:56:af:dc:7a:0f:af:97:52:9a:4f: fb:11:d4:8e:3a:ac:99:c4:65:11:78:29:f3:71:39: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:A3:4F:A7:9A:61:82:C1:79:15:06:AC:74:22:1E:45:4E:32:0D X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b9:9b:76:bc:c2:e0:4d:c2:d5:d7:bb:e1:ed:87:53:2f:97: 94:51:d6:bf:04:1c:cf:5d:91:c2:80:95:62:ee:5c:93:6e:b0: 78:c9:c4:37:e3:00:da:27:88:b9:ed:3e:06:00:56:fe:d7:85: d9:48:65:f3:14:00:bf:ed:73:06:dd:cf:ed:c2:c2:90:d8:1a: 36:73:f8:0f:6a:8b:25:2c:b3:18:d6:21:ae:d8:fe:e7:28:82: e8:9d:29:59:a2:ba:62:e0:b0:bc:b0:df:eb:7a:2c:6f:2a:34: ff:cd:c0:0c:23:b1:ca:02:09:02:31:01:ab:4f:4f:8c:f4:db: f4:26:cf:8a:bc:d5:2c:15:d2:c8:2d:f7:67:e0:82:ad:64:de: 16:dd:fb:4f:b7:d6:6d:be:1e:bf:7b:9f:dc:0f:4c:5f:16:db: 78:de:c7:6b:f5:b9:03:9e:43:04:cc:9c:5d:4d:b5:b5:e6:ad: ad:23:c9:4c:71:f9:bf:8b:97:b8:93:df:a6:4e:c1:9a:5e:86: 36:2a:e1:0f:8d:68:4f:b0:45:86:cc:6d:4e:21:99:16:aa:ad: 75:e3:3f:b4:30:05:6d:55:26:0c:33:a1:12:e7:c8:f5:5f:19: 91:d0:92:ed:36:1e:38:c6:f4:51:2c:3b:a5:a1:22:c5:92:fb: 09:4c:6b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjQwNTI0MTUyNDUwWhcNMjQwNTMxMTUyNDUwWjAYMRYwFAYD VQQDEw02NjUwYjE0Mi05ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn9as9JtyMzujqBKTVp3+wK4aZndfLdyVmxn3gpyUT2LFab2dOrxw+UnMGi9 BHiKPBXciK+HVn5yL55IXmYdkq2QpqtoKSKVmIcmd4hqjQXnRieOcfPro0TfcRLz mrf6nie+lkQgias4UhxMMkue5Otw9ChN1P3FySN0HdAysElK8Uih/nUKcLyec3Q1 kTXI+WDde6zMVWY3YecxFym3y0ynDertCu2C/efwVAeyLE/6eQUz9gy0FT89fKPb mN4vUyQz+2r1BIgaagECC48Idfnh9eUAguEBg/lRwI2ZXilZhmpzR1av3HoPr5dS mk/7EdSOOqyZxGUReCnzcTmVcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzuo0+n mmGCwXkVBqx0Ih5FTjINMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjuZt2vMLgTcLV17vh7YdTL5eUUda/BBzPXZHCgJVi7lyTbrB4ycQ3 4wDaJ4i57T4GAFb+14XZSGXzFAC/7XMG3c/twsKQ2Bo2c/gPaoslLLMY1iGu2P7n KILonSlZorpi4LC8sN/reixvKjT/zcAMI7HKAgkCMQGrT0+M9Nv0Js+KvNUsFdLI Lfdn4IKtZN4W3ftPt9Ztvh6/e5/cD0xfFtt43sdr9bkDnkMEzJxdTbW15q2tI8lM cfm/i5e4k9+mTsGaXoY2KuEPjWhPsEWGzG1OIZkWqq114z+0MAVtVSYMM6ES58j1 XxmR0JLtNh44xvRRLDuloSLFkvsJTGuz -----END CERTIFICATE-----Generated at Fri May 24 17:56:58 2024 by rpki-client on console-fra.rpki-client.org