$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: XwsdsO3psq7fHwgPQtouO807kCz+TiPLBIiWrJSXCC0= Subject key identifier: 38:64:7A:08:5F:6A:78:6B:5E:0F:F2:08:EB:1E:11:38:C6:51:52:44 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 33EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 33D6 Signing time: Fri 26 Apr 2024 14:48:21 +0000 Manifest this update: Fri 26 Apr 2024 14:48:20 +0000 Manifest next update: Fri 03 May 2024 14:48:20 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 77ksJkHM5m8dwlpKJVs4nOksHD5yWd7wvZ0o9nFP3lw=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: s/xDll+NU8P+gaf1clwEbVHiJqHeTImdz8nDRv5xRCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13295 (0x33ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Apr 26 14:48:20 2024 GMT Not After : May 3 14:48:20 2024 GMT Subject: CN=662bbeb5-8581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:04:28:44:90:3d:63:6a:8c:d8:3a:8b:de: 0f:0d:b9:19:6b:cc:f6:fa:1a:e5:c4:f3:ea:75:41: 64:40:3f:7c:9b:2f:d7:ac:81:73:87:91:ff:7f:a1: 7d:4d:cf:4c:2e:f2:0b:d1:09:be:75:65:b9:0e:8a: 2f:49:d1:10:1f:b8:54:47:a0:30:97:72:70:f4:6b: e8:6d:b3:a0:0b:95:76:f6:53:c5:a7:19:bb:af:28: 6c:c3:2d:b1:15:8d:9b:6c:11:91:e7:4a:52:8b:12: e7:51:7c:19:f6:5a:bb:56:68:21:17:5b:ba:31:b0: bd:b1:4a:83:1e:8f:78:75:3e:90:4f:9f:57:a4:05: a7:f1:f3:4e:2b:3d:8d:c7:c8:f2:6c:c3:e2:82:4b: 62:50:e6:76:49:53:b0:aa:e5:e0:5a:96:73:9f:8b: a0:35:7e:f8:35:d7:75:34:30:15:89:2e:d3:88:93: 13:23:af:bc:73:15:b4:da:c1:8a:42:28:c6:6c:95: 94:76:b3:c8:70:3c:90:bb:c6:11:fe:3b:11:cb:5d: e3:79:58:11:c2:06:ff:2b:8e:2d:6c:69:7a:c4:51: aa:fc:22:71:0e:d4:e3:9b:07:8a:a2:e1:c5:b6:fe: 4c:3c:69:1a:7b:fb:23:0a:8a:0f:88:8b:65:be:b1: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:64:7A:08:5F:6A:78:6B:5E:0F:F2:08:EB:1E:11:38:C6:51:52:44 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3a:16:8b:d7:16:f0:50:f2:0a:e3:80:52:98:64:25:6b:03: f9:fe:10:f3:6e:b4:82:67:a7:17:5c:29:35:18:ed:c4:b6:9c: 53:74:a2:bd:9c:08:db:df:4d:4c:9b:84:d3:df:ca:6e:4f:9a: 0c:5c:15:fa:be:04:c3:77:22:ce:68:fe:43:f0:64:ea:ee:32: db:5c:f6:d9:12:48:15:30:b0:44:37:be:a8:3a:d1:2f:12:1b: d7:f7:62:16:f9:55:24:68:f1:77:e1:ee:ef:fc:f4:ac:18:0d: a9:92:b9:bf:de:19:09:bf:07:a7:7a:a9:d9:1d:c4:0c:46:0a: 75:16:e6:1a:8c:28:27:b5:1c:75:cc:14:d2:c2:de:4b:b6:ee: 82:97:51:41:a0:31:14:71:83:7d:dc:90:9a:66:a8:1c:97:7d: 26:99:f0:56:8b:7b:6e:22:ad:72:88:b7:42:79:aa:24:75:6f: 86:ea:0c:de:d6:93:f2:3a:bb:76:06:a9:cf:40:43:e9:fb:66: 47:a1:33:ec:68:c2:90:87:6c:89:4c:02:f1:38:5a:26:72:c4: 3c:d9:a3:7f:5e:a0:62:a6:d3:b2:a8:c9:57:fb:1c:8b:5a:33: 25:73:52:b5:41:e5:00:8a:d3:0f:aa:9c:47:7f:ad:13:38:c7: 59:d6:49:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjQwNDI2MTQ0ODIwWhcNMjQwNTAzMTQ0ODIwWjAYMRYwFAYD VQQDEw02NjJiYmViNS04NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lAEKESQPWNqjNg6i94PDbkZa8z2+hrlxPPqdUFkQD98my/XrIFzh5H/f6F9 Tc9MLvIL0Qm+dWW5DoovSdEQH7hUR6Awl3Jw9GvobbOgC5V29lPFpxm7ryhswy2x FY2bbBGR50pSixLnUXwZ9lq7VmghF1u6MbC9sUqDHo94dT6QT59XpAWn8fNOKz2N x8jybMPigktiUOZ2SVOwquXgWpZzn4ugNX74Ndd1NDAViS7TiJMTI6+8cxW02sGK QijGbJWUdrPIcDyQu8YR/jsRy13jeVgRwgb/K44tbGl6xFGq/CJxDtTjmweKouHF tv5MPGkae/sjCooPiItlvrG4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhkeghf anhrXg/yCOseETjGUVJEMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlOhaL1xbwUPIK44BSmGQlawP5/hDzbrSCZ6cXXCk1GO3EtpxTdKK9 nAjb301Mm4TT38puT5oMXBX6vgTDdyLOaP5D8GTq7jLbXPbZEkgVMLBEN76oOtEv EhvX92IW+VUkaPF34e7v/PSsGA2pkrm/3hkJvweneqnZHcQMRgp1FuYajCgntRx1 zBTSwt5Ltu6Cl1FBoDEUcYN93JCaZqgcl30mmfBWi3tuIq1yiLdCeaokdW+G6gze 1pPyOrt2BqnPQEPp+2ZHoTPsaMKQh2yJTALxOFomcsQ82aN/XqBiptOyqMlX+xyL WjMlc1K1QeUAitMPqpxHf60TOMdZ1klM -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org