$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: 2rzeo8/IP1j4dOvAhqLgRB+mbCabKHFgdKFge/XKbVU= Subject key identifier: 34:CC:F1:A2:39:41:D4:D8:0D:77:21:A8:3A:4D:04:CE:08:57:23:A5 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 33C6 Signing time: Sat 18 May 2024 15:14:54 +0000 Manifest this update: Sat 18 May 2024 15:14:54 +0000 Manifest next update: Sat 25 May 2024 15:14:54 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: Ep1xldCwQUZ5Yl8T1U+Gln+QeAp20o65adbXdiwHt+M=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: kTFOK3ynHOox0BEylY/R7Pu/xXeyAHugoAvaLZ+re6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: May 18 15:14:54 2024 GMT Not After : May 25 15:14:54 2024 GMT Subject: CN=6648c5ee-6cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:68:ba:5b:f6:29:26:34:2a:96:8d:42:8e: 42:cb:6c:ff:b7:95:75:ce:45:9e:86:c7:8f:49:04: 5e:5c:f4:00:7b:2e:c8:44:15:36:39:00:71:99:99: 33:96:1f:a7:b9:66:39:ae:2e:11:af:ac:77:28:f4: 9f:1c:1c:af:8f:96:fc:77:a2:e7:fd:d4:7b:08:fe: ca:35:0e:56:1a:ec:11:8c:fb:8e:11:f1:8e:10:24: 69:d9:ea:57:63:aa:96:81:26:d0:f6:a3:a1:a4:a0: 4e:70:a6:27:d9:b7:7d:7e:b4:1a:0b:b9:f3:81:70: 56:c4:67:2d:68:f7:52:58:13:40:60:27:90:b7:0a: f2:67:3f:34:ce:1e:89:a4:ff:eb:ba:86:f3:73:2f: 47:f3:31:d7:d0:7f:e7:cb:ea:b7:98:c3:4b:5f:63: 3f:52:49:50:1c:24:48:6b:da:3b:bf:76:b7:37:7c: ae:d2:e5:39:2c:22:1a:7f:b0:61:e8:1e:ef:31:9d: 0f:e1:d7:ca:a9:4b:9c:b4:f6:5c:72:ed:b1:24:0f: c3:96:8b:81:10:10:5a:28:48:af:37:10:ef:c2:0f: 1c:3b:54:e5:c2:df:d0:2e:52:14:da:e8:15:1a:d9: be:18:d7:73:60:c3:b7:85:8b:28:45:da:46:2c:be: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:F1:A2:39:41:D4:D8:0D:77:21:A8:3A:4D:04:CE:08:57:23:A5 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:7d:d5:b1:d8:6b:0e:ae:b5:37:43:2b:f3:17:f2:84:d2: c7:4f:82:23:55:e2:31:a4:51:57:e8:7f:e3:b8:71:5f:3b:d5: ea:97:b4:e3:f1:4f:2f:69:29:02:bc:f8:02:64:7f:38:24:85: ca:3b:55:42:3b:bf:1c:aa:eb:8f:97:07:61:a0:94:41:2e:5e: 79:b8:b3:80:e7:b2:c0:b1:5b:ca:e1:76:d4:f2:4e:85:b1:32: 7a:cb:a1:f8:53:03:39:1d:99:55:79:5c:a7:29:a9:64:7c:6c: d6:bd:4b:31:fe:c6:79:f2:ee:8b:a8:10:35:f6:6d:23:93:dd: ff:70:82:09:88:cc:05:f7:09:81:e7:92:56:e3:cb:48:0e:31: 8e:27:06:f4:ee:a7:57:1a:20:c4:ff:78:29:b0:b6:7b:92:c0: 1e:30:db:f3:2d:ad:cd:32:77:23:9f:ec:c2:09:08:6e:6f:f0: 13:60:82:45:3a:5b:75:d2:5d:b7:8e:10:5a:38:76:33:79:4e: 6c:44:a0:6d:48:27:0f:6a:2c:e0:1a:0c:b5:43:8c:9a:00:ad: b4:86:f5:7a:23:6d:b8:32:8b:15:a1:20:fa:9b:45:e6:48:73: 28:b8:fa:44:b0:d3:47:9c:2c:6d:70:ad:2f:24:ea:89:a6:be: 53:0d:54:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjQwNTE4MTUxNDU0WhcNMjQwNTI1MTUxNDU0WjAYMRYwFAYD VQQDEw02NjQ4YzVlZS02Y2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0loulv2KSY0KpaNQo5Cy2z/t5V1zkWehsePSQReXPQAey7IRBU2OQBxmZkz lh+nuWY5ri4Rr6x3KPSfHByvj5b8d6Ln/dR7CP7KNQ5WGuwRjPuOEfGOECRp2epX Y6qWgSbQ9qOhpKBOcKYn2bd9frQaC7nzgXBWxGctaPdSWBNAYCeQtwryZz80zh6J pP/ruobzcy9H8zHX0H/ny+q3mMNLX2M/UklQHCRIa9o7v3a3N3yu0uU5LCIaf7Bh 6B7vMZ0P4dfKqUuctPZccu2xJA/DlouBEBBaKEivNxDvwg8cO1Tlwt/QLlIU2ugV Gtm+GNdzYMO3hYsoRdpGLL5V8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTM8aI5 QdTYDXchqDpNBM4IVyOlMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV+H3VsdhrDq61N0Mr8xfyhNLHT4IjVeIxpFFX6H/juHFfO9Xql7Tj 8U8vaSkCvPgCZH84JIXKO1VCO78cquuPlwdhoJRBLl55uLOA57LAsVvK4XbU8k6F sTJ6y6H4UwM5HZlVeVynKalkfGzWvUsx/sZ58u6LqBA19m0jk93/cIIJiMwF9wmB 55JW48tIDjGOJwb07qdXGiDE/3gpsLZ7ksAeMNvzLa3NMncjn+zCCQhub/ATYIJF Olt10l23jhBaOHYzeU5sRKBtSCcPaizgGgy1Q4yaAK20hvV6I224MosVoSD6m0Xm SHMouPpEsNNHnCxtcK0vJOqJpr5TDVSm -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org