$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: /A0vKsv8ZYidyd44A5z0P3XjbPWvLKCzQ/r+wTzqxQw= Subject key identifier: DA:76:0E:28:8E:D0:B6:14:15:F4:0D:B6:64:15:DC:7C:98:D7:B6:04 Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 024E Signing time: Sat 04 May 2024 16:55:29 +0000 Manifest this update: Sat 04 May 2024 16:55:28 +0000 Manifest next update: Sat 11 May 2024 16:55:28 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: iPxa66zKzxu9ajhrEslZs0gdxalkWhRu7Faxe0yWkxc=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: fGRAWVuiZM4SzZoTJqQ4vbTpTjVszXFlQHsIpTKFdWw=) 3: B2F10206F3A311EC8804FE09C4F9AE02.roa (hash: SGqEOD9kqAEWwvjfSGBDqxipEX5k0szvlLWgNevkloI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: May 4 16:55:28 2024 GMT Not After : May 11 16:55:28 2024 GMT Subject: CN=66366880-6476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:b0:2d:c5:f5:c4:76:8b:26:e2:ab:2f:5d: 35:1a:9a:60:a1:02:16:46:eb:d6:e6:d3:a9:1b:6a: e1:0c:89:08:90:63:06:17:1b:91:18:13:95:78:e3: 84:36:61:c4:1f:14:61:bf:0b:c8:01:7d:e0:b3:6a: b2:49:d8:1f:74:c4:2f:3d:be:15:1d:bd:1d:af:67: 59:20:06:30:bc:71:ee:ea:9d:c2:aa:df:5f:a7:ca: b9:e9:78:2c:77:81:58:7c:10:70:90:f6:d4:32:8f: 30:32:fe:d1:5d:0a:df:1d:e6:c2:a4:39:e4:55:d6: cf:14:12:3f:0f:f5:7f:02:09:14:18:40:f7:20:75: 49:0e:e8:19:9d:2b:90:3e:5a:c2:f9:f2:34:59:a1: db:ae:5b:a9:24:3e:10:0f:d0:ca:87:91:5c:de:c6: 2b:48:2e:be:ea:d8:47:44:3a:91:e5:de:e5:7e:cc: 20:60:0e:b6:03:2b:3a:03:f2:90:14:82:3d:ad:ee: e4:a1:20:29:f0:56:32:f4:8e:9a:bc:10:48:c3:42: 14:43:7d:f3:82:29:27:92:28:d1:ea:66:d2:7e:fa: f2:cf:34:f3:11:88:bd:6f:60:8d:45:2e:d6:1b:b9: 0f:d9:20:70:7d:2e:6a:f1:94:13:e5:a2:dd:50:ea: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:0E:28:8E:D0:B6:14:15:F4:0D:B6:64:15:DC:7C:98:D7:B6:04 X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ce:12:25:be:f9:90:68:62:c2:fc:2f:84:ff:76:9b:ee:fc: 53:e7:76:b9:6b:04:bf:b2:42:76:5f:d2:9b:29:49:9d:44:40: 89:2a:e4:1e:76:30:53:7f:36:f7:1c:8f:96:8a:47:78:00:37: 57:3b:ef:26:70:3b:40:67:bd:2e:a1:fc:4c:b2:77:a8:eb:1d: 74:b4:80:2b:b2:26:38:80:58:fd:9c:3c:c5:a5:f9:00:b6:fb: ed:45:87:dd:1e:d0:2c:a3:95:41:55:47:8c:a5:33:9c:f8:55: ca:a9:0e:0a:85:3c:b6:9d:c2:6b:69:52:10:79:b8:f1:6c:bc: 75:32:d2:5e:77:a4:fb:2c:db:cd:c2:e3:c3:64:76:73:d7:be: 3a:0a:6c:9b:53:79:84:94:e9:99:a7:8d:87:1d:85:9d:d1:8f: 4b:f0:bc:21:c2:96:1e:81:26:b5:2d:fe:6a:06:56:8c:a3:2d: e3:5a:46:9b:4c:06:4a:69:5d:07:54:26:f7:a9:59:43:6d:6d: f6:0a:d6:74:19:05:99:db:c5:93:fc:66:df:ab:71:76:c3:78: c5:04:70:3a:59:1a:51:0b:f5:86:57:39:b9:28:24:6d:fd:6a: 60:d5:d4:c3:87:fc:4e:44:27:1e:db:dc:fb:c8:0d:1e:91:da: 70:8d:7c:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjQwNTA0MTY1NTI4WhcNMjQwNTExMTY1NTI4WjAYMRYwFAYD VQQDEw02NjM2Njg4MC02NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHKwLcX1xHaLJuKrL101GppgoQIWRuvW5tOpG2rhDIkIkGMGFxuRGBOVeOOE NmHEHxRhvwvIAX3gs2qySdgfdMQvPb4VHb0dr2dZIAYwvHHu6p3Cqt9fp8q56Xgs d4FYfBBwkPbUMo8wMv7RXQrfHebCpDnkVdbPFBI/D/V/AgkUGED3IHVJDugZnSuQ PlrC+fI0WaHbrlupJD4QD9DKh5Fc3sYrSC6+6thHRDqR5d7lfswgYA62Ays6A/KQ FII9re7koSAp8FYy9I6avBBIw0IUQ33zgiknkijR6mbSfvryzzTzEYi9b2CNRS7W G7kP2SBwfS5q8ZQT5aLdUOptewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp2DiiO 0LYUFfQNtmQV3HyY17YEMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6zhIlvvmQaGLC/C+E/3ab7vxT53a5awS/skJ2X9KbKUmdRECJKuQe djBTfzb3HI+Wikd4ADdXO+8mcDtAZ70uofxMsneo6x10tIArsiY4gFj9nDzFpfkA tvvtRYfdHtAso5VBVUeMpTOc+FXKqQ4KhTy2ncJraVIQebjxbLx1MtJed6T7LNvN wuPDZHZz1746CmybU3mElOmZp42HHYWd0Y9L8LwhwpYegSa1Lf5qBlaMoy3jWkab TAZKaV0HVCb3qVlDbW32CtZ0GQWZ28WT/Gbfq3F2w3jFBHA6WRpRC/WGVzm5KCRt /Wpg1dTDh/xORCce29z7yA0ekdpwjXyt -----END CERTIFICATE-----Generated at Sat May 4 17:44:38 2024 by rpki-client on console-ams.rpki-client.org