$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: fBJ+v6TXGcDgsIgclxx5x9NjlfMgjG6Zj/fH7VM0vuo= Subject key identifier: F9:25:62:DB:89:43:D3:3E:C9:F3:F1:A6:19:18:9C:34:D5:E0:19:84 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 33CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 33C6 Signing time: Tue 30 Apr 2024 15:11:18 +0000 Manifest this update: Tue 30 Apr 2024 15:11:18 +0000 Manifest next update: Tue 07 May 2024 15:11:18 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: omdugvwUY/UytIhxZklAm3KPyB5sjEqAHyjdVJiWWTw=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: MraStnVmvcnS9AeqAcI9xA2fmZFXDQtS6JZrCq3suAA=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: X+iF7hfqqvb0x9XIaTLZTv1G/nzDAAAdLdQX/S0RxbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13263 (0x33cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Apr 30 15:11:18 2024 GMT Not After : May 7 15:11:18 2024 GMT Subject: CN=66310a16-ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:63:6e:4c:07:5b:3b:d0:3c:1e:5c:35:1c: 0c:46:cc:26:02:8c:e0:a5:77:c6:2b:7c:6b:f1:a7: da:46:de:41:c2:03:64:d5:d5:ee:6f:9d:1f:c1:30: a7:e3:2c:7f:ea:2e:e0:07:74:18:c9:8a:e8:db:8e: 48:2c:5a:2f:99:8c:fb:25:01:bc:98:77:bc:05:78: e5:09:d7:0f:10:94:0e:f4:75:89:6e:07:c7:30:ce: d5:fe:bf:16:c9:45:0a:ce:d9:33:63:a9:1d:5f:0d: cb:d0:46:db:dc:ab:b0:97:c9:03:75:92:d6:89:81: 2e:dd:45:1b:fa:40:18:a2:dc:64:f7:0e:dd:0a:43: a1:c4:32:38:21:bc:0f:3c:ca:42:36:b3:48:3f:ca: fa:23:9f:90:a8:17:b1:e1:3d:17:12:61:e5:1c:48: e8:dd:03:a8:d0:bc:0f:8c:73:d1:19:ed:a6:a8:8c: eb:fa:60:12:98:28:99:21:c5:0e:7a:7b:9e:e6:47: 74:a9:90:c2:f3:c2:2f:1e:7b:0b:fd:6b:26:f9:23: 2d:e1:7f:7a:aa:99:98:88:47:68:31:bb:5d:a3:be: 4b:ab:7c:6b:7b:fe:12:a4:19:67:2f:d5:7b:5c:99: c0:0f:dc:97:6e:8f:22:b0:24:ef:f2:97:92:a1:e3: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:62:DB:89:43:D3:3E:C9:F3:F1:A6:19:18:9C:34:D5:E0:19:84 X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:d8:30:9d:cd:15:6e:0c:a7:47:94:d4:7a:51:51:c9:6b: ad:d0:27:06:ee:2e:6a:8f:28:b2:be:cf:76:bc:0a:07:3f:b4: 34:29:b0:51:e6:ee:c6:dc:00:33:45:5e:4f:76:40:ad:0b:7d: fc:9c:0d:bc:f8:bb:81:21:08:1b:54:62:3c:91:94:60:d7:09: 06:c0:f8:a8:92:70:65:ef:d7:99:af:16:1e:20:95:7c:9f:2f: d6:2f:ed:24:f1:b8:c7:0a:ef:1e:0b:b5:c8:16:ca:12:33:7f: f6:5f:c5:57:39:e9:dc:0c:60:8a:db:77:a3:97:f5:22:01:27: 78:7e:93:91:49:4b:61:23:9b:cb:73:f8:37:2b:fa:7d:f1:60: 00:ac:b7:b6:97:3f:7f:71:c9:49:36:54:33:47:5c:36:ad:f3: d9:f8:02:1b:da:bc:c6:ec:0c:63:9a:35:b7:1d:0e:e7:60:a6: 21:21:85:f0:f7:30:9f:80:f8:90:cf:22:b8:06:3a:79:6d:f0: 6d:9f:00:ff:5e:51:9e:7c:60:e9:f5:d5:32:5b:25:7b:40:b2: 3b:8e:1e:a3:1b:3f:05:2f:83:03:e3:5e:8a:62:14:3e:c4:9c: 6c:03:48:2b:a4:ad:96:d4:21:23:ac:9a:31:f6:29:f3:57:b5: c8:75:35:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjQwNDMwMTUxMTE4WhcNMjQwNTA3MTUxMTE4WjAYMRYwFAYD VQQDEw02NjMxMGExNi1lY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBpjbkwHWzvQPB5cNRwMRswmAozgpXfGK3xr8afaRt5BwgNk1dXub50fwTCn 4yx/6i7gB3QYyYro245ILFovmYz7JQG8mHe8BXjlCdcPEJQO9HWJbgfHMM7V/r8W yUUKztkzY6kdXw3L0Ebb3Kuwl8kDdZLWiYEu3UUb+kAYotxk9w7dCkOhxDI4IbwP PMpCNrNIP8r6I5+QqBex4T0XEmHlHEjo3QOo0LwPjHPRGe2mqIzr+mASmCiZIcUO enue5kd0qZDC88IvHnsL/Wsm+SMt4X96qpmYiEdoMbtdo75Lq3xre/4SpBlnL9V7 XJnAD9yXbo8isCTv8peSoePUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPklYtuJ Q9M+yfPxphkYnDTV4BmEMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYZ9gwnc0VbgynR5TUelFRyWut0CcG7i5qjyiyvs92vAoHP7Q0KbBR 5u7G3AAzRV5PdkCtC338nA28+LuBIQgbVGI8kZRg1wkGwPioknBl79eZrxYeIJV8 ny/WL+0k8bjHCu8eC7XIFsoSM3/2X8VXOencDGCK23ejl/UiASd4fpORSUthI5vL c/g3K/p98WAArLe2lz9/cclJNlQzR1w2rfPZ+AIb2rzG7AxjmjW3HQ7nYKYhIYXw 9zCfgPiQzyK4Bjp5bfBtnwD/XlGefGDp9dUyWyV7QLI7jh6jGz8FL4MD416KYhQ+ xJxsA0grpK2W1CEjrJox9inzV7XIdTWb -----END CERTIFICATE-----Generated at Tue Apr 30 15:52:31 2024 by rpki-client on console-fra.rpki-client.org