$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: yANo+E9ufVNQvnCCCEQHgRrTIo4SXzgDbJvgKH4NzX4= Subject key identifier: 6E:9C:53:4E:DE:DB:0B:9F:6D:BF:40:52:25:00:00:94:18:B3:D1:B8 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 54 Signing time: Sun 19 May 2024 07:54:09 +0000 Manifest this update: Sun 19 May 2024 07:54:08 +0000 Manifest next update: Sun 26 May 2024 07:54:08 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: aHbVzB9cEumM3+HD0uYd95h+IOPTzcnZdsVACHdfvu4=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: izatJflc937blTSbiJsZOIjjq1ChWsCeAYSdNwpZor0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: May 19 07:54:08 2024 GMT Not After : May 26 07:54:08 2024 GMT Subject: CN=6649b020-a81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:db:bd:5c:74:02:3b:32:94:6c:d5:77:43: 40:4f:a5:a3:44:4d:44:7c:4c:90:74:d2:7a:ba:9b: 7b:74:09:28:47:e3:b1:0f:b3:30:07:3e:29:2d:04: 50:bd:c3:ca:e2:83:df:38:25:7a:4a:23:e8:ff:1f: b4:2b:8c:4c:50:04:fc:dd:80:f9:d7:2d:67:49:7f: c5:9b:00:48:c9:11:66:9b:08:14:4e:7a:1d:55:72: ae:50:48:60:86:dd:1b:8d:fc:c2:b0:40:ce:48:6a: 25:c9:ed:63:8d:07:16:29:01:ee:25:2e:9f:0c:08: 4d:68:d2:4c:9d:78:b1:77:b4:be:4a:82:36:d5:9e: a3:4d:32:f1:e9:6b:df:55:85:0f:e0:a4:dc:0c:58: af:ea:8a:53:69:42:26:f1:48:40:59:ea:ac:d8:3b: 78:58:6f:44:ea:7c:46:21:39:70:3b:e5:e1:d3:9e: 64:c9:3a:ea:db:09:2b:d4:fa:b7:e3:68:a3:fc:e2: cf:63:b9:eb:9f:6e:73:ff:60:a1:3f:32:65:ac:46: ed:35:87:df:97:f0:1f:6f:70:36:20:bf:91:d5:68: 55:dc:93:16:51:7d:1b:2d:13:bd:07:18:24:7f:8f: f2:3e:03:5b:f4:81:c8:bd:c2:06:7e:b4:cf:3d:57: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9C:53:4E:DE:DB:0B:9F:6D:BF:40:52:25:00:00:94:18:B3:D1:B8 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7c:1f:38:e5:e2:a9:a2:ff:fb:27:68:ad:60:31:36:ef:e9: e5:de:59:7f:11:3c:86:cd:c0:92:42:60:ea:a8:aa:7c:f4:52: f6:0b:94:ac:2c:09:15:22:7a:7e:39:0b:e0:5b:2f:e3:d7:65: 09:e7:83:23:b8:e3:99:6e:7b:9e:63:91:10:9a:d8:2a:14:46: ef:25:38:26:68:8f:a9:8e:b9:a0:7e:a8:b4:49:3d:29:3c:55: db:81:0f:04:2e:55:11:dc:7e:ad:5e:a2:a3:3c:02:a0:1f:7e: c5:75:bf:26:28:f3:57:75:63:54:a1:74:6d:af:1e:0e:8a:94: a6:f1:3a:c1:02:3f:dc:b5:37:3a:50:90:93:1f:18:1b:81:81: 19:2f:90:a7:4a:ca:2f:36:e6:2b:26:c1:90:5b:d6:73:f7:f8: 95:f7:03:23:df:f0:e8:a1:92:1b:cd:87:7d:44:e3:5d:7c:cf: 0d:2a:74:d9:4e:cb:05:b2:6e:6d:b0:a0:8c:51:0c:a9:97:98: f3:15:b5:ab:f5:8d:bc:ec:8e:bf:80:17:04:9a:f2:0d:56:23: 22:db:66:70:c7:9e:61:9b:e4:96:e2:be:c8:de:c7:2a:5a:3c: a8:7a:12:e1:ed:15:ec:d7:00:17:63:d9:15:30:a1:08:b3:b1: 6d:dd:08:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjQzNzExMC8GA1UEBRMoRkIwMkVDRDZDNzc4OUEzOTZCNTNBNDhGQTkyNDM2NjBF MjUyQzE0MzAeFw0yNDA1MTkwNzU0MDhaFw0yNDA1MjYwNzU0MDhaMBgxFjAUBgNV BAMTDTY2NDliMDIwLWE4MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR3du9XHQCOzKUbNV3Q0BPpaNETUR8TJB00nq6m3t0CShH47EPszAHPiktBFC9 w8rig984JXpKI+j/H7QrjExQBPzdgPnXLWdJf8WbAEjJEWabCBROeh1Vcq5QSGCG 3RuN/MKwQM5IaiXJ7WONBxYpAe4lLp8MCE1o0kydeLF3tL5KgjbVnqNNMvHpa99V hQ/gpNwMWK/qilNpQibxSEBZ6qzYO3hYb0TqfEYhOXA75eHTnmTJOurbCSvU+rfj aKP84s9jueufbnP/YKE/MmWsRu01h9+X8B9vcDYgv5HVaFXckxZRfRstE70HGCR/ j/I+A1v0gci9wgZ+tM89VxhJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbpxTTt7b C59tv0BSJQAAlBiz0bgwHwYDVR0jBBgwFoAU+wLs1sd4mjlrU6SPqSQ2YOJSwUMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNDM3LzgxRjY2OURDOTdE NzExRUVBQUJDQTQzMkM0RjlBRTAyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dV TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXdMczFzZDRtamxyVTZTUHFTUTJZT0pTd1VNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NDM3LzgxRjY2OURDOTdENzExRUVBQUJDQTQzMkM0RjlBRTAyLy13THMxc2Q0bWps clU2U1BxU1EyWU9KU3dVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI58Hzjl4qmi//snaK1gMTbv6eXeWX8RPIbNwJJCYOqoqnz0UvYLlKws CRUien45C+BbL+PXZQnngyO445lue55jkRCa2CoURu8lOCZoj6mOuaB+qLRJPSk8 VduBDwQuVRHcfq1eoqM8AqAffsV1vyYo81d1Y1ShdG2vHg6KlKbxOsECP9y1NzpQ kJMfGBuBgRkvkKdKyi825ismwZBb1nP3+JX3AyPf8OihkhvNh31E4118zw0qdNlO ywWybm2woIxRDKmXmPMVtav1jbzsjr+AFwSa8g1WIyLbZnDHnmGb5Jbivsjexypa PKh6EuHtFezXABdj2RUwoQizsW3dCOk= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org