$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: W+R/Q5QnQcsSR8BoTgO2SfRYbQ5mCQcJvllz1w/phKE= Subject key identifier: 52:F5:70:1B:3E:FD:A3:59:7C:FE:22:5A:81:84:DC:7B:7D:FC:38:9F Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 33C0 Signing time: Tue 30 Apr 2024 15:19:08 +0000 Manifest this update: Tue 30 Apr 2024 15:19:08 +0000 Manifest next update: Tue 07 May 2024 15:19:08 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: LnhvJNiiKEEpIxqeiinjUqzSsre9QE1GgekidQzd77w=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: d+iHLiGmo7NmBM9oXH2mW0yKh71Qity6r1jMJXCnmbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Apr 30 15:19:08 2024 GMT Not After : May 7 15:19:08 2024 GMT Subject: CN=66310bec-b458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:77:64:61:31:79:d5:be:07:c6:a7:6b:33: 07:f3:a3:bd:1f:c5:a7:81:50:55:97:44:ea:16:93: c9:82:21:29:99:58:73:e1:56:9d:2d:da:6b:2b:73: c0:a9:c0:aa:54:40:ef:54:e1:32:f0:8e:e8:aa:bc: ee:dc:71:ec:3f:da:5a:51:b5:21:3e:48:5f:9d:41: a3:03:ac:32:cf:66:90:b5:70:c9:0e:0b:c6:99:6d: 4a:9e:5a:76:de:25:c6:0e:cc:b3:4e:b6:2c:35:25: 80:52:44:47:f3:ca:f7:3a:6c:22:ac:50:35:78:54: c7:f7:68:a3:5b:11:0c:07:7e:d6:3c:c4:77:c9:10: 6e:e4:0c:eb:d8:76:6c:50:6d:bd:02:a0:81:7c:74: fa:0e:cb:2e:ca:0c:e3:7a:5a:09:d1:1b:33:5a:1d: 44:38:a3:2a:ee:a0:3c:4f:53:b9:cc:92:9d:c1:4f: 71:1f:d1:47:cd:d2:e4:1d:69:f1:eb:ee:76:9b:be: 06:f3:c4:24:b9:79:ae:52:c1:f0:77:00:ab:c7:37: 5e:f5:a8:3f:e2:28:64:23:d0:86:06:e2:7e:ed:9a: ae:83:6f:f6:f8:94:31:7f:48:02:8b:b7:13:b0:62: 5b:32:3a:50:74:d5:7d:57:69:bb:76:89:1d:d5:92: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F5:70:1B:3E:FD:A3:59:7C:FE:22:5A:81:84:DC:7B:7D:FC:38:9F X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:1e:58:4a:18:f3:3d:d8:73:07:77:cc:29:0b:73:d2:b3: d0:56:bc:e4:0e:e2:bc:aa:f2:eb:9d:0a:97:85:55:7b:ff:8d: 78:c0:21:aa:e1:6c:6d:77:2a:f1:01:d9:68:52:01:2a:11:cd: f8:33:9d:d0:85:8b:71:98:95:91:d2:7c:8d:6a:0b:c6:65:ca: b9:b2:ce:66:ac:0a:34:28:bc:c8:a5:6c:c5:14:62:c7:8e:cb: 72:b6:e1:f9:b2:72:3e:93:37:5a:ce:9e:c5:d5:88:5c:43:a6: b7:4c:3d:2d:05:a8:45:09:f4:1b:c1:3d:99:32:cf:d6:4c:2e: 9d:21:d6:50:41:76:17:5d:8d:3e:87:56:d6:6c:e7:b6:2d:88: ac:64:e0:86:96:e7:7b:1c:9e:54:36:04:ed:4c:df:12:10:15: 43:fc:ea:3a:0f:75:b1:61:fa:6d:68:2c:f3:b2:73:33:c2:1c: 9a:97:7f:b2:a7:3c:7a:24:b3:15:0b:53:88:1d:73:0f:40:78: da:32:6e:7b:47:7d:3e:3f:c2:55:ba:21:5c:a4:69:6b:c0:6d: f2:c6:25:06:05:65:0d:f7:f8:78:bd:6d:14:3a:96:00:60:2c: 1e:c8:29:64:42:1f:4e:c8:ef:85:a3:ec:78:ce:99:23:13:42: 33:ce:35:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjQwNDMwMTUxOTA4WhcNMjQwNTA3MTUxOTA4WjAYMRYwFAYD VQQDEw02NjMxMGJlYy1iNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwp3ZGExedW+B8anazMH86O9H8WngVBVl0TqFpPJgiEpmVhz4VadLdprK3PA qcCqVEDvVOEy8I7oqrzu3HHsP9paUbUhPkhfnUGjA6wyz2aQtXDJDgvGmW1Knlp2 3iXGDsyzTrYsNSWAUkRH88r3OmwirFA1eFTH92ijWxEMB37WPMR3yRBu5Azr2HZs UG29AqCBfHT6DssuygzjeloJ0RszWh1EOKMq7qA8T1O5zJKdwU9xH9FHzdLkHWnx 6+52m74G88QkuXmuUsHwdwCrxzde9ag/4ihkI9CGBuJ+7Zqug2/2+JQxf0gCi7cT sGJbMjpQdNV9V2m7dokd1ZL+twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL1cBs+ /aNZfP4iWoGE3Ht9/DifMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdRx5YShjzPdhzB3fMKQtz0rPQVrzkDuK8qvLrnQqXhVV7/414wCGq 4WxtdyrxAdloUgEqEc34M53QhYtxmJWR0nyNagvGZcq5ss5mrAo0KLzIpWzFFGLH jstytuH5snI+kzdazp7F1YhcQ6a3TD0tBahFCfQbwT2ZMs/WTC6dIdZQQXYXXY0+ h1bWbOe2LYisZOCGlud7HJ5UNgTtTN8SEBVD/Oo6D3WxYfptaCzzsnMzwhyal3+y pzx6JLMVC1OIHXMPQHjaMm57R30+P8JVuiFcpGlrwG3yxiUGBWUN9/h4vW0UOpYA YCweyClkQh9OyO+Fo+x4zpkjE0IzzjWq -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:31 2024 by rpki-client on console-ams.rpki-client.org