$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: SizVqLl5dptcnT+a3blL/PWOsMhbYVtc6IBfoxKYsk0= Subject key identifier: 89:40:E5:B7:75:C9:20:F2:C4:47:8E:F2:BC:C3:D8:07:9B:7D:41:E9 Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 0503 Signing time: Wed 01 May 2024 01:30:48 +0000 Manifest this update: Wed 01 May 2024 01:30:47 +0000 Manifest next update: Wed 08 May 2024 01:30:47 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: D5O0Rgr7DMV50MGrfx8JKBTyy+jMFhLOugDL+A9LI4g=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: NsD+CZ8Q2Hz+TNwYGCOmuh7fT5EjVgfD5YZkwpCjQIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: May 1 01:30:47 2024 GMT Not After : May 8 01:30:47 2024 GMT Subject: CN=66319b48-64ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:c3:9f:3b:21:87:95:96:c4:24:00:dd:fb: eb:cc:cb:00:1c:80:46:30:9e:ca:55:dc:86:a0:3e: a8:1f:f1:55:ab:ac:90:f5:09:bf:8d:14:94:5a:36: 5e:06:1a:e0:f2:b9:a7:0d:c6:bd:7b:1c:61:ff:52: a2:37:9e:7f:ee:77:b8:61:3d:a4:27:ae:36:b7:2a: 3b:4e:0e:8b:0b:1c:85:29:3a:9b:19:fe:aa:8f:10: d5:36:2a:8f:6c:7e:7a:97:29:17:b0:ee:9a:84:22: 36:94:c2:f9:64:a2:ab:6a:09:cb:2e:fb:b6:93:d8: a6:be:2a:ef:ba:74:52:3f:27:40:c4:0b:8f:df:16: 81:f0:9d:dd:6d:ab:29:22:eb:7e:6f:39:4f:2e:33: cb:23:3f:dc:19:c3:38:ba:72:3d:af:b6:4c:bb:ec: 47:33:e1:47:83:a9:77:2d:b9:77:87:9a:6d:13:ba: ed:41:22:8a:52:1b:a7:05:40:c1:d5:2f:a1:21:f3: 50:87:5c:8d:5a:7b:f5:9d:e0:b4:7d:fd:ca:35:c7: a6:43:71:51:72:d3:57:d7:33:e7:bf:10:af:95:f7: e0:33:db:3b:43:c5:85:d8:26:d7:b9:c5:6c:28:25: f2:8b:f8:54:97:f1:86:dc:ae:cc:f6:ec:e3:a4:28: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:E5:B7:75:C9:20:F2:C4:47:8E:F2:BC:C3:D8:07:9B:7D:41:E9 X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:96:d0:30:07:9f:71:81:29:1f:09:83:da:3c:ad:e2:10:20: 8c:61:68:1d:d8:ce:4f:ce:5d:98:9d:cc:c6:fa:2c:cf:e0:e6: 7f:c0:7a:f6:c8:9a:2d:c0:a4:17:75:d9:de:2f:95:95:7b:fe: 33:dc:62:0c:98:25:6b:29:78:75:a8:6d:b7:e2:22:80:fd:73: 1a:43:c3:68:5d:21:3a:0f:23:32:1a:1f:b1:8a:61:6a:86:b7: 60:af:7d:32:6b:c6:28:57:00:2f:0c:8c:f8:ee:2f:e1:16:34: ef:9c:f1:ed:4f:5d:a4:ea:95:21:d8:55:90:38:cf:bb:c2:91: 75:e9:21:c4:6f:5e:2e:d6:2e:ca:fe:55:c5:50:96:0c:5c:fd: 3c:58:d6:e5:bb:be:c6:50:0a:7e:45:6d:31:1f:0b:19:2d:43: 22:12:f2:43:4b:f2:03:c1:a3:d7:f9:f8:65:48:20:6e:20:bf: c7:ee:1a:38:33:42:ce:8f:88:4a:70:b0:9d:0d:cb:7e:b5:b3: c8:e0:d9:38:97:a3:90:fa:e1:f2:75:58:56:54:9b:77:ef:bb: 3e:e7:c3:a7:12:79:1e:53:a8:8e:bd:55:04:e5:4d:d1:48:ae: 11:63:19:df:0a:19:7a:da:8a:b5:9b:9b:ed:7a:83:6e:a4:5b: eb:6c:e9:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjQwNTAxMDEzMDQ3WhcNMjQwNTA4MDEzMDQ3WjAYMRYwFAYD VQQDEw02NjMxOWI0OC02NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa7Dnzshh5WWxCQA3fvrzMsAHIBGMJ7KVdyGoD6oH/FVq6yQ9Qm/jRSUWjZe Bhrg8rmnDca9exxh/1KiN55/7ne4YT2kJ642tyo7Tg6LCxyFKTqbGf6qjxDVNiqP bH56lykXsO6ahCI2lML5ZKKragnLLvu2k9imvirvunRSPydAxAuP3xaB8J3dbasp Iut+bzlPLjPLIz/cGcM4unI9r7ZMu+xHM+FHg6l3Lbl3h5ptE7rtQSKKUhunBUDB 1S+hIfNQh1yNWnv1neC0ff3KNcemQ3FRctNX1zPnvxCvlffgM9s7Q8WF2CbXucVs KCXyi/hUl/GG3K7M9uzjpCi55QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlA5bd1 ySDyxEeO8rzD2AebfUHpMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaltAwB59xgSkfCYPaPK3iECCMYWgd2M5Pzl2YnczG+izP4OZ/wHr2 yJotwKQXddneL5WVe/4z3GIMmCVrKXh1qG234iKA/XMaQ8NoXSE6DyMyGh+ximFq hrdgr30ya8YoVwAvDIz47i/hFjTvnPHtT12k6pUh2FWQOM+7wpF16SHEb14u1i7K /lXFUJYMXP08WNblu77GUAp+RW0xHwsZLUMiEvJDS/IDwaPX+fhlSCBuIL/H7ho4 M0LOj4hKcLCdDct+tbPI4Nk4l6OQ+uHydVhWVJt377s+58OnEnkeU6iOvVUE5U3R SK4RYxnfChl62oq1m5vteoNupFvrbOlh -----END CERTIFICATE-----Generated at Wed May 1 02:08:02 2024 by rpki-client on console-fra.rpki-client.org