$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: a1YFRc3y7z+YMMSweH04RzT48GjLAfnmS3rD5n2Ifiw= Subject key identifier: 53:53:A6:3F:86:98:F4:B4:9A:5F:4C:C3:31:63:89:39:6B:8C:01:6C Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 33E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 33C7 Signing time: Thu 02 May 2024 15:32:41 +0000 Manifest this update: Thu 02 May 2024 15:32:40 +0000 Manifest next update: Thu 09 May 2024 15:32:40 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: t01yZ23SdD9/biOr8wNwsqwFSxB00dXyo70bYzjJRsI=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: c0HT9dBg6yx92mNeJl9gTHdunA9v+Kix8k9fOS4ZSW0=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: XofMmICfUItPgFjfW0OoLeb3QmcPJWVmjOy3e6yJoIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13282 (0x33e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: May 2 15:32:40 2024 GMT Not After : May 9 15:32:40 2024 GMT Subject: CN=6633b218-c120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:61:86:0c:10:f8:0b:a7:af:c4:ab:11:23: a2:ba:e0:87:35:c2:f4:3e:88:57:7a:af:da:16:8b: ad:60:fb:ce:55:00:f6:e5:c8:55:8e:ea:2d:f7:3a: 43:31:09:db:8b:52:de:6c:2a:ff:f8:97:1d:4a:66: aa:1c:2e:6c:1a:b6:c1:f3:ba:0c:7d:f5:75:d0:46: 7c:95:83:27:35:34:9f:ee:7c:8f:70:37:8e:6a:79: 51:c0:36:73:cb:1a:15:aa:b5:7c:c1:6d:4c:a6:a9: b4:88:84:26:34:2b:71:ac:24:17:6d:a2:78:c2:c0: 5b:e4:48:8d:f4:cc:ad:03:a5:1b:cd:5e:8e:d5:e9: b6:82:fa:ee:85:20:0c:ea:e6:09:38:82:2e:be:89: eb:c2:94:8e:e7:3a:15:8c:dc:d6:ef:36:04:25:94: b5:ab:32:cf:0a:fb:2d:32:a8:66:02:15:e5:13:fd: af:00:78:e4:da:19:45:6e:9e:7f:36:06:c8:b9:d5: db:11:d9:f0:65:7c:9c:de:56:49:68:2a:88:76:83: 55:82:46:a5:a7:f0:75:db:95:d4:6d:4f:46:9e:a6: 7e:61:ad:72:60:49:47:36:2e:96:ef:b2:63:e7:5d: 09:46:d4:c8:a9:3e:35:ec:2c:5d:c9:84:62:57:e6: 39:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:A6:3F:86:98:F4:B4:9A:5F:4C:C3:31:63:89:39:6B:8C:01:6C X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:70:32:bd:af:ba:0f:47:7a:69:6f:e8:db:9b:28:42:e4: ac:29:09:ba:cb:ee:45:ab:88:7f:e9:ee:cd:e2:c1:a2:40:64: 98:8c:08:e5:79:a7:78:ec:83:af:e2:91:a4:19:4c:98:64:84: 5d:a8:80:88:a7:31:7f:69:04:bd:71:d8:92:dd:89:13:d6:d0: f3:9a:55:77:c5:ee:7c:f1:7f:57:20:cf:aa:7d:e7:61:01:c6: 41:88:58:c3:38:ba:f0:93:9c:20:28:29:87:99:89:ee:a7:e0: 17:17:46:4d:ee:c7:bf:8e:09:dc:eb:db:8f:e3:f9:c6:6f:01: e0:44:5c:59:87:ab:ca:95:4a:12:5e:56:db:bf:a9:20:83:05: 28:d3:fa:75:4d:9b:38:23:08:18:4f:e9:e3:09:90:05:05:0f: 45:de:16:5d:0f:f4:6f:92:4b:85:50:80:67:a6:22:8d:20:4e: ee:6d:9c:62:0a:f8:0e:ef:d2:f5:2b:e2:94:d7:b0:bf:47:64: 3c:0d:68:94:7b:84:af:f9:e1:17:bd:eb:8d:30:5d:4b:88:65: 2c:92:bf:bc:70:66:e1:7b:8d:32:e2:1b:0d:3c:7e:b9:a7:f0: 73:16:cb:aa:65:7e:c4:25:c6:2f:d7:87:0e:b1:8e:0c:f7:f9: d3:d3:eb:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjQwNTAyMTUzMjQwWhcNMjQwNTA5MTUzMjQwWjAYMRYwFAYD VQQDEw02NjMzYjIxOC1jMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuZhhgwQ+Aunr8SrESOiuuCHNcL0PohXeq/aFoutYPvOVQD25chVjuot9zpD MQnbi1LebCr/+JcdSmaqHC5sGrbB87oMffV10EZ8lYMnNTSf7nyPcDeOanlRwDZz yxoVqrV8wW1Mpqm0iIQmNCtxrCQXbaJ4wsBb5EiN9MytA6UbzV6O1em2gvruhSAM 6uYJOIIuvonrwpSO5zoVjNzW7zYEJZS1qzLPCvstMqhmAhXlE/2vAHjk2hlFbp5/ NgbIudXbEdnwZXyc3lZJaCqIdoNVgkalp/B125XUbU9GnqZ+Ya1yYElHNi6W77Jj 510JRtTIqT417CxdyYRiV+Y5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNTpj+G mPS0ml9MwzFjiTlrjAFsMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhN3Ayva+6D0d6aW/o25soQuSsKQm6y+5Fq4h/6e7N4sGiQGSYjAjl ead47IOv4pGkGUyYZIRdqICIpzF/aQS9cdiS3YkT1tDzmlV3xe588X9XIM+qfedh AcZBiFjDOLrwk5wgKCmHmYnup+AXF0ZN7se/jgnc69uP4/nGbwHgRFxZh6vKlUoS Xlbbv6kggwUo0/p1TZs4IwgYT+njCZAFBQ9F3hZdD/RvkkuFUIBnpiKNIE7ubZxi CvgO79L1K+KU17C/R2Q8DWiUe4Sv+eEXveuNMF1LiGUskr+8cGbhe40y4hsNPH65 p/BzFsuqZX7EJcYv14cOsY4M9/nT0+tW -----END CERTIFICATE-----Generated at Thu May 2 17:18:28 2024 by rpki-client on console-ams.rpki-client.org