$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: E0tHzMOaz2wzeZqgc3QA7c2cXBPLjPikESXU5q3Xb8U= Subject key identifier: 09:81:6D:81:69:07:22:33:C6:B2:A2:3B:C5:6A:A2:28:42:66:7F:F3 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 13 Signing time: Wed 15 May 2024 08:57:54 +0000 Manifest this update: Wed 15 May 2024 08:57:54 +0000 Manifest next update: Wed 22 May 2024 08:57:54 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: JHdeS6NUIUiqpkphZ24ufAKsuXusfn2K0rWgUabj71U=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: h7M3jvYcD4TnzeijvBah0qUC81qHwLqusYkjmL9+ZWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: May 15 08:57:54 2024 GMT Not After : May 22 08:57:54 2024 GMT Subject: CN=66447912-92a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:a3:c5:a4:f9:b3:6e:51:0b:65:a3:e2:59: 15:b8:1e:7e:37:cd:ee:68:5c:ab:dd:0f:e8:0d:cc: e1:56:9b:c9:21:e8:0e:2b:8b:a2:53:f0:cf:26:6b: ce:1b:62:e6:44:7f:cc:30:27:a1:e6:1e:36:67:1b: 32:1f:84:e7:c7:da:64:ca:ab:ff:2d:44:e5:89:c1: a8:d3:c5:c0:b1:13:3a:94:11:00:57:60:2f:2d:65: 94:c2:28:95:62:36:46:d5:18:84:f5:5e:db:df:ca: 19:cf:bc:00:f7:14:0a:a2:7b:c5:20:b2:a4:7a:44: 66:02:c7:5b:c3:85:b0:38:fb:32:db:6e:ad:93:ce: eb:88:6f:e0:eb:c3:b2:a9:ef:41:0d:ab:56:96:79: 84:22:47:3a:d2:2e:20:b4:e0:76:b3:c6:b9:b9:b6: 02:05:33:c6:62:15:22:45:42:39:09:51:06:76:a7: 2f:20:34:bd:8a:fa:cb:04:11:31:d5:50:91:26:64: 2e:2f:ee:b0:9a:5a:92:03:5c:fc:b8:98:1d:aa:3c: a7:89:20:fd:fe:64:91:0d:04:ef:d0:67:80:99:ea: 13:89:5e:84:da:67:ce:3c:90:f2:39:b8:a7:db:49: b2:2c:1b:9f:40:c3:1b:f0:9a:a9:91:5a:f7:d1:00: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:6D:81:69:07:22:33:C6:B2:A2:3B:C5:6A:A2:28:42:66:7F:F3 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:58:c8:46:92:6a:04:99:9c:4b:ca:c2:89:ac:ab:03:21:59: 56:bd:30:3e:10:45:f3:6e:95:12:78:4e:12:75:32:b9:34:1a: b3:ef:e5:a5:55:8b:b4:95:1e:f3:85:f3:62:a5:85:70:13:9e: 2f:1b:3d:31:2e:ad:31:06:ab:1b:cd:2b:b1:c5:ce:29:cb:22: 58:17:ab:18:75:5d:a2:91:07:29:09:04:60:81:60:62:0d:f9: eb:40:8e:2d:bc:99:32:6e:da:1d:d5:b3:c6:cc:94:45:42:be: a9:5c:10:a4:d0:81:b3:2c:19:25:ab:e6:7e:5a:5b:19:8c:b3: e8:e5:f8:63:f5:ad:40:58:5e:a2:a9:32:71:df:55:ca:22:3b: cf:30:35:90:a2:20:b0:36:87:a5:ed:ad:ca:c1:59:8c:1b:9a: 46:91:47:47:58:b0:51:c7:e8:bb:59:ef:be:68:d6:a7:99:54: f2:e8:36:cc:35:06:f1:3b:ad:3c:cb:f0:e7:c3:83:b9:89:5e: 14:05:7f:3c:2b:ff:0a:94:86:8f:4e:93:0c:a1:2c:e2:f2:fd: 6d:ed:26:58:b3:1d:d2:eb:73:1d:f3:dd:93:c2:8c:2e:7f:46: 78:d5:b8:84:e7:e7:f4:e8:8a:47:0b:0e:68:3b:65:26:65:56: bb:9d:78:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz M0EyNzExMC8GA1UEBRMoRENBRDY0NDcwNUNGMThDMjdEN0ZDMjAxNzM4NUQyM0VF NzIwMzk1NTAeFw0yNDA1MTUwODU3NTRaFw0yNDA1MjIwODU3NTRaMBgxFjAUBgNV BAMTDTY2NDQ3OTEyLTkyYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGDKPFpPmzblELZaPiWRW4Hn43ze5oXKvdD+gNzOFWm8kh6A4ri6JT8M8ma84b YuZEf8wwJ6HmHjZnGzIfhOfH2mTKq/8tROWJwajTxcCxEzqUEQBXYC8tZZTCKJVi NkbVGIT1XtvfyhnPvAD3FAqie8UgsqR6RGYCx1vDhbA4+zLbbq2TzuuIb+Drw7Kp 70ENq1aWeYQiRzrSLiC04Hazxrm5tgIFM8ZiFSJFQjkJUQZ2py8gNL2K+ssEETHV UJEmZC4v7rCaWpIDXPy4mB2qPKeJIP3+ZJENBO/QZ4CZ6hOJXoTaZ848kPI5uKfb SbIsG59AwxvwmqmRWvfRAAYHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCYFtgWkH IjPGsqI7xWqiKEJmf/MwHwYDVR0jBBgwFoAU3K1kRwXPGMJ9f8IBc4XSPucgOVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzQTI3L0UyNjY0NkU0Rjcw MzExRUVBMzFGNUQ3QUM0RjlBRTAyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09W VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0sxa1J3WFBHTUo5ZjhJQmM0WFNQdWNnT1ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz QTI3L0UyNjY0NkU0RjcwMzExRUVBMzFGNUQ3QUM0RjlBRTAyLzNLMWtSd1hQR01K OWY4SUJjNFhTUHVjZ09WVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMxYyEaSagSZnEvKwomsqwMhWVa9MD4QRfNulRJ4ThJ1Mrk0GrPv5aVV i7SVHvOF82KlhXATni8bPTEurTEGqxvNK7HFzinLIlgXqxh1XaKRBykJBGCBYGIN +etAji28mTJu2h3Vs8bMlEVCvqlcEKTQgbMsGSWr5n5aWxmMs+jl+GP1rUBYXqKp MnHfVcoiO88wNZCiILA2h6XtrcrBWYwbmkaRR0dYsFHH6LtZ775o1qeZVPLoNsw1 BvE7rTzL8OfDg7mJXhQFfzwr/wqUho9OkwyhLOLy/W3tJlizHdLrcx3z3ZPCjC5/ RnjVuITn5/ToikcLDmg7ZSZlVrudeGI= -----END CERTIFICATE-----Generated at Wed May 15 11:17:41 2024 by rpki-client on console-ams.rpki-client.org