$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: S3ymwENyn6TY6fgnQ3cxrp6iThXErFK2atP0I5h7ezI= Subject key identifier: 28:E4:45:AA:46:42:DC:4C:90:2B:66:73:C8:99:11:B4:62:31:A7:D0 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 40 Signing time: Fri 17 May 2024 08:15:52 +0000 Manifest this update: Fri 17 May 2024 08:15:52 +0000 Manifest next update: Fri 24 May 2024 08:15:52 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: 5K9WYyNp4zEmmyxyIoKpr1KvYfx7o+0zUX3INhrT1Io=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: gHv97LbD597egHzs1DHhKJuGArhYuwuC/fceU19SEJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: May 17 08:15:52 2024 GMT Not After : May 24 08:15:52 2024 GMT Subject: CN=66471238-fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:2f:7a:50:e6:e9:42:37:fd:0f:49:29:b1: d8:21:82:a7:10:7f:e7:42:0b:a7:fa:93:87:2e:be: d9:b0:4c:e8:57:0f:bb:99:7d:f9:0e:d5:c8:9f:2b: 95:99:65:4b:4f:fb:1b:b8:35:5a:b0:a9:38:5d:35: cb:9f:ab:14:ae:bf:7d:1b:ef:c6:e5:4f:91:8c:ea: c7:95:b9:e6:14:db:2f:cf:d1:9e:8e:61:82:04:b4: 94:be:02:7e:0e:66:f5:fa:e8:da:80:41:2e:b0:7d: ec:8f:8c:7f:43:98:04:a7:ea:71:26:55:b1:dc:16: d8:1b:68:c6:23:f5:20:31:2c:f5:60:c0:b9:d7:9b: 4a:b6:b4:af:01:2b:79:6d:93:11:f2:98:f5:a3:7a: d9:2b:df:47:b4:40:99:47:84:cf:32:6b:c3:c5:84: dc:d8:eb:00:1f:54:b2:fc:47:3a:0e:cf:10:63:7c: 31:8d:95:8d:e1:63:40:3a:29:a8:aa:33:5b:85:3f: 22:98:b2:d7:b8:d0:62:f0:3d:92:55:0f:15:f9:ee: 2f:b1:75:aa:6f:9b:07:50:a9:b7:54:ee:81:da:b0: 32:81:50:d8:23:2d:d8:02:a5:3d:30:11:18:7a:93: 89:f9:26:5b:4d:61:2c:86:4e:11:89:03:9c:7d:cf: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E4:45:AA:46:42:DC:4C:90:2B:66:73:C8:99:11:B4:62:31:A7:D0 X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:54:b0:b9:a2:2a:4e:72:cc:ea:b7:33:19:3c:c2:dc:7d:e3: 8c:e4:33:55:40:60:6e:25:a9:18:e2:ea:8a:bc:e4:f8:4c:ba: 84:a2:e2:a0:f0:34:97:b1:76:d2:1d:16:c5:cc:a5:dc:2e:e0: 55:fd:d6:49:33:70:20:71:f9:c6:91:12:08:6e:1e:11:75:fc: f6:ea:0f:21:53:0d:2b:3c:2a:d9:f0:57:f8:e2:45:38:41:f8: 23:33:0f:db:d1:dc:3c:c2:dc:96:e4:44:ff:98:eb:53:61:51: eb:37:67:7b:90:41:9e:32:66:bd:8f:a1:ca:73:bf:62:28:7f: 0b:38:f9:d2:fa:66:d4:6b:c7:14:75:af:2c:1d:11:a2:f0:7d: d0:1e:fd:f5:c1:24:50:50:fa:e7:5a:f7:8e:f4:65:58:80:9d: 31:fe:bf:6a:ca:4c:5d:0e:88:e1:f8:61:ff:96:6a:86:d6:22: 22:6f:e8:a8:85:4a:d4:98:dc:72:94:12:3b:01:20:77:42:b0: 4b:1f:bc:e0:15:1a:f9:8e:4f:b7:52:a9:15:30:a4:e0:2e:63: 9c:e3:89:65:eb:92:03:61:ad:0a:2a:bf:7d:0d:b4:fa:85:94: 5a:48:94:1a:e8:56:b7:8f:00:75:18:6a:43:5f:fc:14:e0:fd: 18:d0:27:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODk3QTExMC8GA1UEBRMoQjdGQTUxMjE1QkI1QzFFRjg4RUFFMTVGMDM0MzEzRDFC NzFCOEQ0NDAeFw0yNDA1MTcwODE1NTJaFw0yNDA1MjQwODE1NTJaMBgxFjAUBgNV BAMTDTY2NDcxMjM4LWZiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSvi96UObpQjf9D0kpsdghgqcQf+dCC6f6k4cuvtmwTOhXD7uZffkO1cifK5WZ ZUtP+xu4NVqwqThdNcufqxSuv30b78blT5GM6seVueYU2y/P0Z6OYYIEtJS+An4O ZvX66NqAQS6wfeyPjH9DmASn6nEmVbHcFtgbaMYj9SAxLPVgwLnXm0q2tK8BK3lt kxHymPWjetkr30e0QJlHhM8ya8PFhNzY6wAfVLL8RzoOzxBjfDGNlY3hY0A6Kaiq M1uFPyKYste40GLwPZJVDxX57i+xdapvmwdQqbdU7oHasDKBUNgjLdgCpT0wERh6 k4n5JltNYSyGThGJA5x9z//FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKORFqkZC 3EyQK2ZzyJkRtGIxp9AwHwYDVR0jBBgwFoAUt/pRIVu1we+I6uFfA0MT0bcbjUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4OTdBLzUzM0UyNDYyQjU1 MTExRUVCQjRDNTczQkM0RjlBRTAyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdF9wUklWdTF3ZS1JNnVGZkEwTVQwYmNialVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 OTdBLzUzM0UyNDYyQjU1MTExRUVCQjRDNTczQkM0RjlBRTAyL3RfcFJJVnUxd2Ut STZ1RmZBME1UMGJjYmpVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJpUsLmiKk5yzOq3Mxk8wtx944zkM1VAYG4lqRji6oq85PhMuoSi4qDw NJexdtIdFsXMpdwu4FX91kkzcCBx+caREghuHhF1/PbqDyFTDSs8KtnwV/jiRThB +CMzD9vR3DzC3JbkRP+Y61NhUes3Z3uQQZ4yZr2Pocpzv2Iofws4+dL6ZtRrxxR1 rywdEaLwfdAe/fXBJFBQ+uda9470ZViAnTH+v2rKTF0OiOH4Yf+WaobWIiJv6KiF StSY3HKUEjsBIHdCsEsfvOAVGvmOT7dSqRUwpOAuY5zjiWXrkgNhrQoqv30NtPqF lFpIlBroVrePAHUYakNf/BTg/RjQJxk= -----END CERTIFICATE-----Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org