$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: X6uIOX75AU/1NuPnYUiY7OzT7NixXhcNdAenjhT27hY= Subject key identifier: 8C:64:3D:2D:AA:92:3B:A2:11:FE:9A:97:99:26:C9:7A:06:65:02:30 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 33DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 33CE Signing time: Thu 02 May 2024 15:17:30 +0000 Manifest this update: Thu 02 May 2024 15:17:30 +0000 Manifest next update: Thu 09 May 2024 15:17:30 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: HTKocWgsA4kgoyZ1LbY7kIhOguvytFsEETrMpvOoYPQ=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: nUZZe1DuURBitjsrbGMu0Shu+UEoZmChhg4YIukAhM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13277 (0x33dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: May 2 15:17:30 2024 GMT Not After : May 9 15:17:30 2024 GMT Subject: CN=6633ae8a-f8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:a7:c3:81:71:ed:60:76:cf:06:6c:dd:9d: 11:ba:ad:71:9e:51:9a:71:1f:55:3a:f7:ff:fd:2e: 31:66:4d:c7:4e:a8:40:2b:65:fc:10:60:83:13:62: e4:3a:69:25:f4:b4:bf:b3:54:19:df:e1:b3:ad:8d: b1:63:31:13:7c:82:64:3d:4e:19:f4:4b:ad:7b:a2: 36:ce:84:a1:90:cf:0c:30:9e:49:50:0a:a5:0d:37: 0a:aa:90:f7:9d:06:7e:f8:12:13:3d:e1:46:75:87: 46:fa:4b:3f:7e:c1:55:54:5f:22:b2:13:f5:37:37: 72:78:3b:ad:9c:56:7c:50:af:a3:fb:b3:8d:91:71: 2d:b8:8d:82:70:b7:89:4e:21:7f:6a:4b:b5:14:cd: c8:24:6d:2f:57:d6:89:71:88:49:0e:85:3e:00:c4: e9:f4:8f:16:70:ca:65:03:0c:bc:0c:e0:ec:24:5b: 6f:07:40:06:28:d7:ad:c6:87:d5:c3:71:e9:f6:5e: fb:ff:b8:5c:d1:aa:20:0f:7b:b1:4a:52:9e:56:0f: 78:d8:a7:a2:c1:be:17:c3:68:7b:0d:a0:2c:d1:a2: bc:c1:09:13:a9:99:ea:22:82:20:3e:bf:53:17:d8: 53:b3:96:ad:39:ab:d1:92:72:6b:6c:30:6c:5a:40: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:3D:2D:AA:92:3B:A2:11:FE:9A:97:99:26:C9:7A:06:65:02:30 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:6e:c6:b8:1b:8f:1d:9a:c0:df:53:75:43:51:31:8e:df: 5d:78:b7:7a:9f:98:57:dd:55:3b:d9:29:70:a0:a7:61:3d:59: 52:2f:de:c9:f6:0a:86:b5:ac:d2:9a:1e:57:0e:99:ec:2e:c3: 66:40:d1:d3:26:0a:38:3e:fa:97:da:eb:ae:c4:e5:b6:cc:40: 1b:2d:98:53:39:5f:d8:cf:e3:57:c5:8e:66:e4:84:87:3c:8e: 5a:5d:1c:ab:24:52:9f:6c:30:84:07:6f:e6:f0:02:fd:e4:49: d6:d0:cf:3a:e5:6f:02:01:72:00:7b:dd:f5:90:8c:84:0e:d3: 01:10:17:e1:a5:5b:c9:69:20:82:9c:5f:57:c6:cc:83:88:cb: 6e:84:21:5e:a6:26:dd:d8:35:7f:46:6c:54:9c:21:f5:e3:e0: 56:44:6b:47:cd:dc:6c:30:96:3a:57:2d:ca:5a:62:11:79:42: eb:d0:35:36:9a:d3:97:87:7d:8b:9e:6a:a5:61:c0:72:92:27: 7a:28:12:ba:5c:9f:ec:7f:52:11:6f:f4:04:f3:43:57:67:4d: 2f:ba:89:15:16:70:8e:7e:de:63:be:53:b7:bc:f8:2f:3a:fd: b1:3c:e7:6e:17:ef:9e:b2:6f:69:ef:8d:53:1f:06:2b:87:d4: e9:4f:c8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjQwNTAyMTUxNzMwWhcNMjQwNTA5MTUxNzMwWjAYMRYwFAYD VQQDEw02NjMzYWU4YS1mOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgenw4Fx7WB2zwZs3Z0Ruq1xnlGacR9VOvf//S4xZk3HTqhAK2X8EGCDE2Lk Omkl9LS/s1QZ3+GzrY2xYzETfIJkPU4Z9Eute6I2zoShkM8MMJ5JUAqlDTcKqpD3 nQZ++BITPeFGdYdG+ks/fsFVVF8ishP1NzdyeDutnFZ8UK+j+7ONkXEtuI2CcLeJ TiF/aku1FM3IJG0vV9aJcYhJDoU+AMTp9I8WcMplAwy8DODsJFtvB0AGKNetxofV w3Hp9l77/7hc0aogD3uxSlKeVg942Keiwb4Xw2h7DaAs0aK8wQkTqZnqIoIgPr9T F9hTs5atOavRknJrbDBsWkCivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxkPS2q kjuiEf6al5kmyXoGZQIwMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzCm7GuBuPHZrA31N1Q1Exjt9deLd6n5hX3VU72SlwoKdhPVlSL97J 9gqGtazSmh5XDpnsLsNmQNHTJgo4PvqX2uuuxOW2zEAbLZhTOV/Yz+NXxY5m5ISH PI5aXRyrJFKfbDCEB2/m8AL95EnW0M865W8CAXIAe931kIyEDtMBEBfhpVvJaSCC nF9XxsyDiMtuhCFepibd2DV/RmxUnCH14+BWRGtHzdxsMJY6Vy3KWmIReULr0DU2 mtOXh32LnmqlYcBykid6KBK6XJ/sf1IRb/QE80NXZ00vuokVFnCOft5jvlO3vPgv Ov2xPOduF++esm9p741THwYrh9TpT8jD -----END CERTIFICATE-----Generated at Thu May 2 17:18:27 2024 by rpki-client on console-ams.rpki-client.org