$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: 8p6xQy757GsOTpCGZxnlVHgc/unZnBmWNm/2JfdwX3Q= Subject key identifier: 37:5E:46:DE:7F:11:F6:CA:48:F3:4A:E6:07:D2:48:62:8B:BE:67:D4 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: 33 Signing time: Fri 17 May 2024 08:33:11 +0000 Manifest this update: Fri 17 May 2024 08:33:10 +0000 Manifest next update: Fri 24 May 2024 08:33:10 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: t2LiDpFepaMHoz9AXcDgak3WLIHuzVv7rsMeO8e69d4=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: UI9VDDNj5/gUUO3ewueElxsuAaYwPSQhrOvYuANf840=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: kxgR+t9G3Yoo6D6Yn73+0inhOBPdrEAQX82yP7J/c8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: May 17 08:33:10 2024 GMT Not After : May 24 08:33:10 2024 GMT Subject: CN=66471646-3028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:67:9b:33:e5:5d:ce:3d:8d:24:92:d7:14: e9:2c:c9:b1:59:ba:52:c7:63:5c:48:ca:ca:3e:bf: 3d:ba:8e:86:74:85:13:7f:4b:5d:49:f7:23:14:6b: 0e:c9:8f:fe:78:84:3e:4f:fb:b9:16:82:4c:c5:63: 0e:dc:c4:83:ca:00:76:a0:d5:74:37:79:6f:d9:34: f3:b3:85:c4:75:31:fe:e8:6b:bd:9e:e3:24:59:f9: 06:f9:86:dc:cb:6d:d2:31:05:84:46:9a:f5:c6:b8: bf:7a:cc:8c:01:2e:b2:df:16:5e:8f:ed:40:ef:21: 0b:8e:f4:5d:c9:90:06:56:27:0c:75:d5:1e:46:c2: 36:dd:09:e3:41:dc:d9:e5:ac:4e:27:ee:29:51:ef: da:09:ea:2a:59:28:b1:d3:2b:68:ce:01:09:cc:87: 59:2a:6e:27:a2:f0:e7:3e:75:39:ef:a6:a3:37:0c: 11:c5:61:7f:f8:56:a3:0f:9a:45:05:6b:1e:40:2e: bf:82:40:e7:0b:d6:80:71:7b:38:9e:cd:f1:b2:54: f4:25:28:cd:52:7d:d6:42:43:5d:a2:5e:45:b1:cb: a7:e0:04:01:03:5a:22:31:2d:b8:93:b8:b3:2d:16: 44:db:4d:d3:18:78:c4:43:2b:d3:62:4a:d0:12:a8: 58:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5E:46:DE:7F:11:F6:CA:48:F3:4A:E6:07:D2:48:62:8B:BE:67:D4 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:cf:0a:d5:50:04:05:cb:d2:0e:5c:5e:9c:fb:f3:06:0a: 49:28:f0:63:b8:14:97:71:28:4c:64:8a:9a:0a:1a:c0:96:99: e3:3e:e9:f8:84:38:b9:95:89:78:23:25:09:80:ef:9c:16:37: c0:ab:fd:97:a0:5b:59:b1:ea:9a:88:12:ff:57:f1:cf:d7:e9: 17:bf:b6:03:52:78:0d:b2:c0:94:3f:10:06:65:56:24:8d:50: dc:ee:f4:75:b3:b9:23:6c:42:d5:b9:0a:28:22:0d:8c:80:fe: e9:f4:d5:8d:b8:9c:7d:d2:a3:8f:a5:3e:26:0c:66:60:d6:19: 33:0f:ce:b6:e9:96:90:96:c5:d1:8a:5e:e8:b2:3d:9f:e2:cc: d6:09:c7:8e:fa:82:dd:94:a0:a8:25:24:c0:56:86:87:87:d8: 03:e6:e1:bf:72:f3:fa:02:0f:69:2b:00:a6:f2:72:41:33:c4: 9e:1d:2c:93:93:0f:b0:75:aa:49:e6:50:3f:7f:b3:cd:ae:ab: 8c:30:bd:b4:d8:db:2c:9d:88:4c:36:c7:f4:cd:b2:83:f6:29: 3e:3c:d5:cc:69:7e:3a:82:71:62:4d:a7:18:26:0d:db:a2:6c: f9:67:2b:db:ba:cb:d0:cc:0d:69:40:1a:cb:17:87:95:43:f2: 2e:16:5c:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzY1MTExMC8GA1UEBRMoNzZENkZBN0NGOUJGOEU0MTVGMkY0MjYxOUI4MDQyODg3 NjNFNjdBMjAeFw0yNDA1MTcwODMzMTBaFw0yNDA1MjQwODMzMTBaMBgxFjAUBgNV BAMTDTY2NDcxNjQ2LTMwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIjGebM+Vdzj2NJJLXFOksybFZulLHY1xIyso+vz26joZ0hRN/S11J9yMUaw7J j/54hD5P+7kWgkzFYw7cxIPKAHag1XQ3eW/ZNPOzhcR1Mf7oa72e4yRZ+Qb5htzL bdIxBYRGmvXGuL96zIwBLrLfFl6P7UDvIQuO9F3JkAZWJwx11R5GwjbdCeNB3Nnl rE4n7ilR79oJ6ipZKLHTK2jOAQnMh1kqbiei8Oc+dTnvpqM3DBHFYX/4VqMPmkUF ax5ALr+CQOcL1oBxeziezfGyVPQlKM1SfdZCQ12iXkWxy6fgBAEDWiIxLbiTuLMt FkTbTdMYeMRDK9NiStASqFghAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN15G3n8R 9spI80rmB9JIYou+Z9QwHwYDVR0jBBgwFoAUdtb6fPm/jkFfL0Jhm4BCiHY+Z6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNjUxLzMzNEY2OEM4Q0VF QzExRUVBRTAzMzA2Q0M0RjlBRTAyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHRiNmZQbV9qa0ZmTDBKaG00QkNpSFktWjZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NjUxLzMzNEY2OEM4Q0VFQzExRUVBRTAzMzA2Q0M0RjlBRTAyL2R0YjZmUG1famtG ZkwwSmhtNEJDaUhZLVo2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/tzwrVUAQFy9IOXF6c+/MGCkko8GO4FJdxKExkipoKGsCWmeM+6fiE OLmViXgjJQmA75wWN8Cr/ZegW1mx6pqIEv9X8c/X6Re/tgNSeA2ywJQ/EAZlViSN UNzu9HWzuSNsQtW5CigiDYyA/un01Y24nH3So4+lPiYMZmDWGTMPzrbplpCWxdGK XuiyPZ/izNYJx476gt2UoKglJMBWhoeH2APm4b9y8/oCD2krAKbyckEzxJ4dLJOT D7B1qknmUD9/s82uq4wwvbTY2yydiEw2x/TNsoP2KT481cxpfjqCcWJNpxgmDdui bPlnK9u6y9DMDWlAGssXh5VD8i4WXF8= -----END CERTIFICATE-----Generated at Fri May 17 10:59:09 2024 by rpki-client on console-ams.rpki-client.org