$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: 0udZbk8IuQpQGZ+2iRQjqE83NZUKSP9iL/e9kdgrPFc= Subject key identifier: A4:83:76:70:92:B2:09:B8:0A:72:22:8F:A3:F3:BE:0F:4D:CA:AE:CB Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 33D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 33D0 Signing time: Sat 04 May 2024 14:23:18 +0000 Manifest this update: Sat 04 May 2024 14:23:17 +0000 Manifest next update: Sat 11 May 2024 14:23:17 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: rigi+vKpmceYG68raRTkkNm2rKrzpyOe4qhBGKRyPOE=) 2: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: zAvAdjn3YdfOWi8begd0U+EEHGMY5vFuYmmn+BUm3lA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13273 (0x33d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: May 4 14:23:17 2024 GMT Not After : May 11 14:23:17 2024 GMT Subject: CN=663644d5-c467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:b8:16:41:f4:9b:75:fb:b6:3a:88:6c:4e: df:ab:9a:01:97:67:7f:8d:1e:da:5a:87:53:8e:ad: 48:43:82:67:c2:e6:db:93:f0:11:76:73:80:93:a1: 6b:14:19:e3:a2:a4:69:d0:89:04:45:36:27:04:5b: a7:01:e2:79:f8:f3:44:de:2f:fd:74:00:35:d8:ae: dd:d1:48:5e:e0:dd:b2:a7:df:56:dc:7e:75:ba:17: c0:de:bb:a5:25:5c:e6:9e:e6:19:ed:0a:85:82:e2: 9f:70:e3:ce:9e:c6:87:54:19:86:00:9d:7d:c8:21: 0b:9d:e3:af:30:61:ed:c5:5e:6b:5a:f2:75:d5:99: 9c:05:55:6e:86:e5:f8:10:73:8e:7d:93:fd:ec:3e: 06:87:96:b9:e3:6a:fa:d6:fc:a7:74:61:d8:63:d6: 28:54:f5:cb:4d:b0:c0:68:42:95:01:67:1f:ac:25: 11:12:94:8b:c9:e7:48:79:a7:f6:d0:b1:10:94:5e: 39:b3:06:5f:ac:f4:a6:71:d2:e4:43:ca:21:60:f6: 31:5f:f1:47:1c:52:5f:5e:1a:77:33:16:17:96:1b: 76:17:e7:db:97:1a:8b:00:62:19:41:f9:b2:5c:0c: 8b:0a:89:db:7f:db:b1:d7:f5:7c:06:63:e6:45:9a: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:83:76:70:92:B2:09:B8:0A:72:22:8F:A3:F3:BE:0F:4D:CA:AE:CB X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:65:1c:cf:71:b4:11:91:f3:92:de:51:ef:d6:ec:05:a5:57: 7b:8a:a4:b2:a7:bf:c4:b6:3c:b5:1a:f6:43:f9:ff:b0:4e:f6: dd:60:3b:57:e9:2a:35:c1:d8:85:f5:4f:e2:58:79:cb:1e:b4: d3:49:d0:2c:8d:0a:3c:69:2c:6c:7b:f6:52:c1:e9:1c:07:34: 06:56:c4:2e:9b:ad:82:cf:d3:0e:7e:de:91:9a:cb:ec:43:96: a1:19:ea:d8:29:73:02:86:95:85:d4:6c:c4:08:1e:72:10:a0: c6:a9:10:0d:5b:8e:46:2c:f1:31:f9:67:1e:2a:f0:44:8d:67: dd:a0:c8:7b:3e:c2:1d:7f:02:f8:08:71:c2:02:54:94:29:17: ef:a1:6b:bb:79:d3:90:4f:c3:64:fe:79:4d:b9:91:75:05:57: eb:cf:23:d0:f1:25:19:47:a2:cd:b9:19:ab:82:4d:0e:9d:2d: 49:3a:c2:e1:66:07:d4:c3:b5:39:c2:17:cc:9b:82:54:88:93: d5:2c:6d:1a:87:4c:80:80:39:54:f4:b6:32:1f:60:68:d5:d1: 63:a7:a5:4c:e0:01:3f:88:68:5f:0b:47:d3:f3:3f:a5:ae:2c: 58:60:de:02:81:6b:cc:66:9c:73:1a:f6:7d:d7:84:6b:d3:32: 8c:47:99:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjQwNTA0MTQyMzE3WhcNMjQwNTExMTQyMzE3WjAYMRYwFAYD VQQDEw02NjM2NDRkNS1jNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyG4FkH0m3X7tjqIbE7fq5oBl2d/jR7aWodTjq1IQ4Jnwubbk/ARdnOAk6Fr FBnjoqRp0IkERTYnBFunAeJ5+PNE3i/9dAA12K7d0Uhe4N2yp99W3H51uhfA3rul JVzmnuYZ7QqFguKfcOPOnsaHVBmGAJ19yCELneOvMGHtxV5rWvJ11ZmcBVVuhuX4 EHOOfZP97D4Gh5a542r61vyndGHYY9YoVPXLTbDAaEKVAWcfrCUREpSLyedIeaf2 0LEQlF45swZfrPSmcdLkQ8ohYPYxX/FHHFJfXhp3MxYXlht2F+fblxqLAGIZQfmy XAyLConbf9ux1/V8BmPmRZoT1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSDdnCS sgm4CnIij6Pzvg9Nyq7LMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGZRzPcbQRkfOS3lHv1uwFpVd7iqSyp7/Etjy1GvZD+f+wTvbdYDtX 6So1wdiF9U/iWHnLHrTTSdAsjQo8aSxse/ZSwekcBzQGVsQum62Cz9MOft6Rmsvs Q5ahGerYKXMChpWF1GzECB5yEKDGqRANW45GLPEx+WceKvBEjWfdoMh7PsIdfwL4 CHHCAlSUKRfvoWu7edOQT8Nk/nlNuZF1BVfrzyPQ8SUZR6LNuRmrgk0OnS1JOsLh ZgfUw7U5whfMm4JUiJPVLG0ah0yAgDlU9LYyH2Bo1dFjp6VM4AE/iGhfC0fT8z+l rixYYN4CgWvMZpxzGvZ914Rr0zKMR5lZ -----END CERTIFICATE-----Generated at Sat May 4 15:55:00 2024 by rpki-client on console-ams.rpki-client.org