$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json) Hash identifier: vsh73B6dIjCaxVf2iocKgTdkn13fGhjnE0sstyDZu2A= Subject key identifier: 6D:61:C6:C7:25:4D:26:3B:23:2F:48:EE:62:D6:3A:0F:C7:B7:92:2E Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft Manifest number: 3438 Signing time: Sat 04 May 2024 14:22:42 +0000 Manifest this update: Sat 04 May 2024 14:22:41 +0000 Manifest next update: Sat 11 May 2024 14:22:41 +0000 Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: 0owPzQPSFszDyskKCSE+V54SGzhDjWCGWTRRERTfN/E=) 2: 6660F0B422C311EDA0AD9A5FC4F9AE02.roa (hash: ufc0EBQ1slxgSthPpQ1o6EdtltYZIE+ZpNjijgPbeRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Validity Not Before: May 4 14:22:41 2024 GMT Not After : May 11 14:22:41 2024 GMT Subject: CN=663644b2-e27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:67:c0:02:f1:c8:49:42:0e:dc:15:35:46: 21:2d:ea:7f:2f:16:c6:28:03:d3:eb:79:5d:41:c5: ec:e4:16:65:12:ae:e4:14:ad:50:bc:a1:b8:5c:dd: f5:d3:3c:0b:4a:6c:ac:84:42:de:96:54:3c:bd:c6: 4d:ff:d1:3e:0a:01:13:39:e4:c7:bc:c5:0e:37:f9: 47:0e:fd:17:03:7b:82:90:95:90:18:22:a7:58:dc: 00:70:2b:f9:3c:60:9d:fd:00:f5:b2:ad:f0:ef:2f: c6:6a:99:94:4d:c8:5d:0b:f8:8a:81:b8:5f:39:6c: cd:9f:b7:11:6d:6f:cd:57:11:24:7c:da:c0:33:94: de:48:30:69:cb:77:33:43:a3:29:e0:24:a7:92:91: 45:26:b5:5f:96:84:dc:ee:a6:c6:e4:47:74:b0:46: 6d:42:ca:fa:19:9f:af:bf:b2:7b:46:69:10:cf:ff: 18:6f:45:91:e9:dc:68:80:1e:f4:74:72:ea:50:e8: 18:9d:d6:bb:ba:ab:c5:76:17:12:30:8d:82:0e:5b: f6:cf:ab:f8:5b:fb:eb:32:0d:d7:c8:c2:d5:f6:a0: 24:23:b5:d9:29:08:cc:eb:3f:81:55:de:b0:fa:fc: 41:87:9a:3e:3d:85:3c:87:95:21:8a:a0:eb:c2:1c: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:61:C6:C7:25:4D:26:3B:23:2F:48:EE:62:D6:3A:0F:C7:B7:92:2E X509v3 Authority Key Identifier: keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:75:4b:d9:c7:62:89:5f:8e:9f:16:1d:bb:a5:fd:a6:e4:3d: f6:4c:8b:e9:cb:1d:0b:8c:ee:a9:9b:f8:ac:84:56:2a:ca:48: 11:f6:d4:6e:27:47:b4:a0:d0:10:cc:54:27:04:d2:0f:61:b3: d3:e2:fb:f8:96:eb:bf:9d:d6:57:07:41:97:38:14:36:29:69: 36:c4:b3:cc:81:38:e7:b5:42:1f:b8:c5:a5:54:1a:a7:e3:fa: 42:d4:1f:ec:5d:a2:3e:59:60:45:61:c4:8b:ea:f0:db:29:db: 99:66:13:4f:5d:a2:ec:99:03:c9:79:22:7d:66:dc:de:35:91: 58:b1:e8:00:d5:6b:26:2a:16:77:90:98:a0:db:99:01:85:a8: e1:ed:45:96:3d:55:61:59:29:08:06:40:a7:43:43:b3:96:d5: 20:a1:c7:6a:3b:27:7c:63:b3:14:24:65:e3:36:7a:f5:77:19: 3d:4a:33:18:3b:db:1c:23:43:73:85:53:cc:7e:79:e0:b7:cb: f1:00:c2:9f:84:cb:63:54:6f:76:80:af:17:f5:66:0a:f7:72: a1:8f:7b:86:ac:5b:7b:5d:c8:f8:78:f5:82:bb:0c:f7:af:38: 27:de:d0:bc:5d:9b:c1:33:ea:9a:c5:5b:ee:31:14:5b:34:20: 05:5b:21:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0NTcxMTAvBgNVBAUTKDZCMEU0MkQ4ODU5RTBCMUNERTU0MTU3QUNCOEQ3NjA0 QUQzRkYxQjMwHhcNMjQwNTA0MTQyMjQxWhcNMjQwNTExMTQyMjQxWjAYMRYwFAYD VQQDEw02NjM2NDRiMi1lMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcRnwALxyElCDtwVNUYhLep/LxbGKAPT63ldQcXs5BZlEq7kFK1QvKG4XN31 0zwLSmyshELellQ8vcZN/9E+CgETOeTHvMUON/lHDv0XA3uCkJWQGCKnWNwAcCv5 PGCd/QD1sq3w7y/GapmUTchdC/iKgbhfOWzNn7cRbW/NVxEkfNrAM5TeSDBpy3cz Q6Mp4CSnkpFFJrVfloTc7qbG5Ed0sEZtQsr6GZ+vv7J7RmkQz/8Yb0WR6dxogB70 dHLqUOgYnda7uqvFdhcSMI2CDlv2z6v4W/vrMg3XyMLV9qAkI7XZKQjM6z+BVd6w +vxBh5o+PYU8h5UhiqDrwhz5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1hxscl TSY7Iy9I7mLWOg/Ht5IuMB8GA1UdIwQYMBaAFGsOQtiFngsc3lQVesuNdgStP/Gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ1Ny80QzFBMDM0QzFE N0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4emVWQlY2eTQxMkJLMF84 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3NUMySVdlQ3h6ZVZCVjZ5NDEyQkswXzhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ1Ny80QzFBMDM0QzFEN0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4 emVWQlY2eTQxMkJLMF84Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBddUvZx2KJX46fFh27pf2m5D32TIvpyx0LjO6pm/ishFYqykgR9tRu J0e0oNAQzFQnBNIPYbPT4vv4luu/ndZXB0GXOBQ2KWk2xLPMgTjntUIfuMWlVBqn 4/pC1B/sXaI+WWBFYcSL6vDbKduZZhNPXaLsmQPJeSJ9ZtzeNZFYsegA1WsmKhZ3 kJig25kBhajh7UWWPVVhWSkIBkCnQ0OzltUgocdqOyd8Y7MUJGXjNnr1dxk9SjMY O9scI0NzhVPMfnngt8vxAMKfhMtjVG92gK8X9WYK93Khj3uGrFt7Xcj4ePWCuwz3 rzgn3tC8XZvBM+qaxVvuMRRbNCAFWyH2 -----END CERTIFICATE-----Generated at Sat May 4 15:55:00 2024 by rpki-client on console-ams.rpki-client.org