$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: faCydgP2p92ZzQ/7dOpN3a6Q0+GAXIue69I0hqK4L9I= Subject key identifier: 35:05:49:46:58:4D:DB:60:B5:4F:BB:76:53:2E:C5:40:FC:34:D1:C8 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 33C0 Signing time: Thu 02 May 2024 14:56:39 +0000 Manifest this update: Thu 02 May 2024 14:56:38 +0000 Manifest next update: Thu 09 May 2024 14:56:38 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: k2rOM5BwvMX+oBT+RMxButro7y5qXchOMKMedrqvf0w=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: do/t1hxLNAObKeP+h7lIyAYLzs1i37SVx22K4ntYzxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: May 2 14:56:38 2024 GMT Not After : May 9 14:56:38 2024 GMT Subject: CN=6633a9a6-983d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:c7:61:e1:1b:bf:7c:05:cc:75:6a:af:d4: 9d:99:c5:3a:84:49:d4:9b:59:07:37:7e:65:9b:20: 3d:8c:ce:e8:ae:84:2b:c3:54:ae:3f:11:28:79:79: 7c:23:d0:af:d4:ba:49:92:a2:ec:72:ce:63:c7:7c: ed:cc:c0:7b:71:f6:c3:17:7e:ac:a4:cc:63:63:83: ce:d1:07:42:64:c9:00:45:a0:1b:35:e9:b4:c3:0c: 8e:d7:7f:ac:7b:f2:68:a9:24:05:be:a4:64:be:86: ae:8f:0f:16:06:b9:06:d2:26:48:22:9c:ed:fc:0e: 38:91:ce:a3:51:cc:d4:77:da:88:a4:cd:68:66:88: 37:55:8d:0b:1b:fa:68:49:56:40:8c:66:04:58:10: 2c:cf:d4:cd:e1:71:fd:b0:44:10:02:23:69:ac:41: d2:9d:16:02:45:03:bd:02:e3:3a:4c:be:6d:a4:68: a8:22:f8:12:e0:48:8e:ae:a6:f3:15:a0:51:2c:0d: 31:66:56:80:b5:dc:68:54:c1:26:81:d8:70:25:0b: 0a:76:fb:14:ca:c3:22:60:d6:fd:3a:73:7b:85:77: dc:ea:1a:9c:b8:f8:54:9f:fa:4a:19:b7:90:94:bb: 22:4a:08:ba:6f:d7:78:76:6c:c7:c9:77:c9:de:89: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:49:46:58:4D:DB:60:B5:4F:BB:76:53:2E:C5:40:FC:34:D1:C8 X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ae:fe:6a:a8:41:47:cf:a3:d6:f7:7f:21:c7:03:e4:0a:83: 97:c0:b2:62:6c:f2:68:81:f0:2b:fb:bc:b6:32:07:a1:56:1e: 3a:6f:3f:2a:14:37:4a:5c:21:70:ad:d7:a8:bf:4c:1f:a3:07: b5:b4:02:4b:5c:c7:fb:b1:ff:7d:06:c9:34:bc:3d:99:14:ed: c2:8e:34:35:0e:80:af:33:d3:2c:da:36:6f:41:0f:57:d0:32: f4:2c:d8:72:25:09:05:b1:31:30:5d:5d:45:0f:ba:68:e8:e0: 8b:30:40:5d:89:34:de:b1:c3:1d:7a:f2:f3:ef:4f:fb:d5:73: 27:7b:55:e2:f7:e5:b3:36:c8:66:f2:e8:c4:29:d1:9d:e6:0f: 2f:51:53:e8:de:e9:86:62:c7:25:6b:8e:24:bb:ba:98:b3:e1: 4b:96:ac:e6:74:59:33:7b:c8:f3:75:32:d1:4a:6a:f7:4a:59: ba:a8:db:f6:03:e1:cd:a8:01:44:db:5e:23:9c:cc:01:77:77: 0d:d6:fc:c5:c0:43:3b:c5:fe:56:2a:50:79:be:aa:ca:02:d9: c1:c1:8a:81:a0:15:0f:c4:89:9b:f4:73:1b:09:e9:6b:51:da: 66:81:2c:e8:6d:6f:4c:de:27:71:95:0f:7b:bc:03:04:cb:14: 4c:c0:74:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjQwNTAyMTQ1NjM4WhcNMjQwNTA5MTQ1NjM4WjAYMRYwFAYD VQQDEw02NjMzYTlhNi05ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgjHYeEbv3wFzHVqr9SdmcU6hEnUm1kHN35lmyA9jM7oroQrw1SuPxEoeXl8 I9Cv1LpJkqLscs5jx3ztzMB7cfbDF36spMxjY4PO0QdCZMkARaAbNem0wwyO13+s e/JoqSQFvqRkvoaujw8WBrkG0iZIIpzt/A44kc6jUczUd9qIpM1oZog3VY0LG/po SVZAjGYEWBAsz9TN4XH9sEQQAiNprEHSnRYCRQO9AuM6TL5tpGioIvgS4EiOrqbz FaBRLA0xZlaAtdxoVMEmgdhwJQsKdvsUysMiYNb9OnN7hXfc6hqcuPhUn/pKGbeQ lLsiSgi6b9d4dmzHyXfJ3olWFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUFSUZY TdtgtU+7dlMuxUD8NNHIMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTrv5qqEFHz6PW938hxwPkCoOXwLJibPJogfAr+7y2MgehVh46bz8q FDdKXCFwrdeov0wfowe1tAJLXMf7sf99Bsk0vD2ZFO3CjjQ1DoCvM9Ms2jZvQQ9X 0DL0LNhyJQkFsTEwXV1FD7po6OCLMEBdiTTescMdevLz70/71XMne1Xi9+WzNshm 8ujEKdGd5g8vUVPo3umGYscla44ku7qYs+FLlqzmdFkze8jzdTLRSmr3Slm6qNv2 A+HNqAFE214jnMwBd3cN1vzFwEM7xf5WKlB5vqrKAtnBwYqBoBUPxImb9HMbCelr UdpmgSzobW9M3idxlQ97vAMEyxRMwHSY -----END CERTIFICATE-----Generated at Thu May 2 17:18:30 2024 by rpki-client on console-ams.rpki-client.org