$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: 9b5It1AwvJ1OoC32HlysdpACbU7/30G9g8pgC/jbS3A= Subject key identifier: 2D:1F:B8:1B:D0:30:F9:80:9C:FE:5E:DC:8F:9D:F5:2F:2A:BE:E5:59 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 45 Signing time: Tue 21 May 2024 08:04:59 +0000 Manifest this update: Tue 21 May 2024 08:04:58 +0000 Manifest next update: Tue 28 May 2024 08:04:58 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: qw8lNQNyZa2cYk/TFd54BWlAzMcR8q0mSzaylwTCLIE=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: FaOon3incGL44fXWsUh5gm5uuJKLqWRTOR+SCwv9JuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: May 21 08:04:58 2024 GMT Not After : May 28 08:04:58 2024 GMT Subject: CN=664c55ab-8785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:5b:67:0c:39:7a:c5:a7:28:0c:28:75:a2: ee:2a:22:f6:8b:ab:02:bb:53:a3:fd:1e:db:85:7d: 45:9e:3a:00:cc:d3:6a:d7:af:e0:a2:c5:7e:64:04: ef:74:7b:89:38:a5:5d:c3:83:c0:18:19:6d:23:b5: 92:2b:75:a8:64:72:26:13:98:f0:fc:db:da:65:22: 38:46:83:d7:08:d1:e2:9c:69:ce:bf:35:f3:69:bd: 08:c8:c2:42:65:c0:9b:bd:cf:03:56:10:6e:2a:c6: 5c:d6:24:64:bb:57:b6:83:75:2b:f3:0a:53:a2:e7: 25:f8:85:3a:b6:85:3b:73:8a:b1:d0:12:27:47:95: 1f:63:29:68:b9:f1:b2:05:09:df:d1:f0:d7:27:b7: 1a:08:a0:27:7a:4c:57:a5:4b:23:f9:ee:5e:89:78: 07:85:ea:a8:e6:57:b7:ea:f0:6d:2e:75:87:05:4d: 7b:38:0a:67:88:50:1e:33:91:09:9a:18:b8:cc:21: c3:c5:c0:4d:3e:13:42:2c:8d:e7:45:cc:d6:c0:f1: eb:18:ef:42:98:c4:5a:82:a6:c6:a5:2f:47:3f:c8: c7:3f:58:c3:50:52:3f:12:11:2c:dc:25:7f:d1:6c: a4:33:2f:e6:eb:89:25:44:d5:cd:19:27:bd:14:d6: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1F:B8:1B:D0:30:F9:80:9C:FE:5E:DC:8F:9D:F5:2F:2A:BE:E5:59 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cf:76:b6:37:52:2f:54:5f:c8:ec:b9:40:8b:1d:70:d0:52: 00:0f:ce:80:42:8c:ee:00:82:3a:16:51:dc:ad:71:95:8b:3f: 8a:61:e0:ac:0f:39:2a:d3:09:92:a7:a2:62:e4:53:20:09:e6: 79:66:17:9c:61:08:80:86:ac:00:fa:b3:75:c9:ea:4b:3e:f7: fd:9f:c3:ea:5c:f2:89:9e:26:7a:f4:3a:3c:55:7c:b8:e2:81: 1c:8e:67:38:9f:56:81:be:ca:65:bb:7e:16:03:ef:25:69:40: 1c:ce:9f:fc:f1:e8:7a:56:37:7f:ae:06:22:fe:6f:4e:99:e9: c1:59:69:bf:0e:44:2a:2d:f2:1d:79:f6:d6:84:b6:f4:5b:4c: 08:e4:e2:ac:21:92:62:e2:bf:e2:34:84:d9:aa:8f:b8:71:39: 55:72:aa:95:04:42:66:81:ad:cf:e4:2d:ee:8e:fd:4a:2f:9b: f4:62:8d:7d:fa:85:3d:4e:a9:ee:a4:c2:33:0b:42:e0:77:b1: 91:7b:6f:3a:51:be:25:2b:0f:9a:1f:8d:58:ce:19:fc:f3:fd: b6:99:79:b2:c7:a8:98:63:ed:a8:ec:a4:ae:a0:f0:91:ed:54: 94:73:bc:e4:7a:47:2c:31:4f:c1:fb:90:34:4c:95:5d:2b:5b: 8d:a4:bf:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDk3RTExMC8GA1UEBRMoMzM3QkEzMTFGREY3QjcwNTI3QjU3RUMwMzgwRjFGQkJG QTM1OEFFRjAeFw0yNDA1MjEwODA0NThaFw0yNDA1MjgwODA0NThaMBgxFjAUBgNV BAMTDTY2NGM1NWFiLTg3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+BltnDDl6xacoDCh1ou4qIvaLqwK7U6P9HtuFfUWeOgDM02rXr+CixX5kBO90 e4k4pV3Dg8AYGW0jtZIrdahkciYTmPD829plIjhGg9cI0eKcac6/NfNpvQjIwkJl wJu9zwNWEG4qxlzWJGS7V7aDdSvzClOi5yX4hTq2hTtzirHQEidHlR9jKWi58bIF Cd/R8NcntxoIoCd6TFelSyP57l6JeAeF6qjmV7fq8G0udYcFTXs4CmeIUB4zkQma GLjMIcPFwE0+E0IsjedFzNbA8esY70KYxFqCpsalL0c/yMc/WMNQUj8SESzcJX/R bKQzL+briSVE1c0ZJ70U1rpRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULR+4G9Aw +YCc/l7cj531Lyq+5VkwHwYDVR0jBBgwFoAUM3ujEf33twUntX7AOA8fu/o1iu8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0OTdFL0YyMTIxMkZDQjY5 QTExRUU4RDhERjYwRUM0RjlBRTAyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTTN1akVmMzN0d1VudFg3QU9BOGZ1X28xaXU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 OTdFL0YyMTIxMkZDQjY5QTExRUU4RDhERjYwRUM0RjlBRTAyL00zdWpFZjMzdHdV bnRYN0FPQThmdV9vMWl1OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLPdrY3Ui9UX8jsuUCLHXDQUgAPzoBCjO4AgjoWUdytcZWLP4ph4KwP OSrTCZKnomLkUyAJ5nlmF5xhCICGrAD6s3XJ6ks+9/2fw+pc8omeJnr0OjxVfLji gRyOZzifVoG+ymW7fhYD7yVpQBzOn/zx6HpWN3+uBiL+b06Z6cFZab8ORCot8h15 9taEtvRbTAjk4qwhkmLiv+I0hNmqj7hxOVVyqpUEQmaBrc/kLe6O/Uovm/RijX36 hT1Oqe6kwjMLQuB3sZF7bzpRviUrD5ofjVjOGfzz/baZebLHqJhj7ajspK6g8JHt VJRzvOR6RywxT8H7kDRMlV0rW42kv84= -----END CERTIFICATE-----Generated at Tue May 21 08:38:36 2024 by rpki-client on console-fra.rpki-client.org