$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: OkxqDRXcHckoXphkKnA0FgIaC9VnRI0z6ddT80tSwao= Subject key identifier: AF:43:69:D3:2C:5E:41:EC:CA:4D:C6:92:17:25:30:48:F8:66:25:A3 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 0163 Signing time: Sun 19 May 2024 04:50:50 +0000 Manifest this update: Sun 19 May 2024 04:50:49 +0000 Manifest next update: Sun 26 May 2024 04:50:49 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: dYsN5Gj0eS9MnO/opAdmPapxEhCYjyoiTdP14t2x8Co=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ESvF2zANeeoHFSP7kMO/U5RvLezUTjQbbdWpYH4pQ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: May 19 04:50:49 2024 GMT Not After : May 26 04:50:49 2024 GMT Subject: CN=6649852a-75c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:7b:2c:c5:6c:0e:cb:66:44:9b:4f:19:08: fe:3d:91:44:02:10:17:74:1b:56:5f:1a:61:cf:8c: 9f:d8:a0:79:91:c3:c0:6f:e8:7f:e8:ce:11:a3:60: fa:92:ef:e1:b4:e3:df:ff:2d:74:c5:5b:b1:3a:02: b3:b3:25:0b:00:48:47:01:f4:c2:90:9c:f4:06:22: ab:5b:9d:67:8f:19:f1:53:be:0f:31:92:1e:48:bf: ee:5a:a7:ea:4f:86:e7:6c:59:78:9d:e8:b8:ca:94: a7:b3:ff:b5:ca:ea:7f:38:d4:fe:94:74:e7:36:87: b3:1b:61:58:4e:9c:33:d1:35:4d:68:ac:f6:a2:cd: 9c:a8:5d:55:0f:9c:50:91:32:6b:5c:0d:91:b7:31: 6b:31:d7:2a:14:3e:3b:8e:b1:de:b0:47:bd:e3:3b: c6:3c:66:6a:82:be:8f:3a:9e:c4:c3:d4:f3:5f:7f: 92:f0:31:8b:be:f1:27:9b:96:27:bb:41:a9:37:ad: 29:81:84:c4:ea:e6:83:15:0f:31:c5:f0:cd:2c:ef: 3c:b6:ce:c7:43:e3:de:5d:2c:95:d0:8c:e7:76:5e: 6d:b1:fe:72:28:10:f9:4b:1b:09:89:fb:4c:c2:85: 96:6e:33:2d:0d:4d:55:d9:5c:0c:17:d2:4f:15:2a: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:69:D3:2C:5E:41:EC:CA:4D:C6:92:17:25:30:48:F8:66:25:A3 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a9:29:a2:99:f8:43:4b:60:a4:db:7b:e2:f9:d3:af:1f:e9: 59:20:7e:27:bb:09:92:be:e6:b9:3b:f3:be:a0:f2:b2:56:35: e9:10:08:4f:5a:82:67:8f:12:fd:fc:33:32:c7:a7:85:a5:d3: 3f:d7:f4:39:cd:7b:44:b4:f4:3d:e7:9b:7a:57:73:74:b3:32: 8b:df:c7:a4:8a:69:fd:7c:50:6d:dc:9c:11:e6:af:0a:14:7b: 4c:7e:74:ab:58:61:4b:62:c0:bd:35:f1:32:ae:fe:12:0a:52: 14:18:f1:31:0e:c0:f8:aa:1a:4c:9a:40:a5:af:77:aa:ad:43: c1:e4:9f:56:d6:a5:75:da:b2:88:52:b9:ef:fa:69:07:7e:5c: 43:53:27:2f:eb:1d:28:18:cb:ad:e3:ef:ab:f5:6a:1d:45:ba: 28:e1:86:7e:7c:72:05:a5:75:07:1f:83:9a:9b:01:eb:79:0b: a6:b7:e7:7e:a9:e3:d1:4e:95:53:81:ff:6a:39:15:2e:ee:ff: 50:00:04:3b:2c:9e:d4:a8:7f:f3:ff:96:cf:49:76:d1:23:4b: 9e:5a:aa:f2:e3:fa:6a:0c:f7:22:f5:f9:9a:7c:0b:85:05:c6: cf:09:91:38:86:07:21:6c:1d:0d:3c:4e:88:1c:c4:fb:09:a5: ea:9b:5f:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjQwNTE5MDQ1MDQ5WhcNMjQwNTI2MDQ1MDQ5WjAYMRYwFAYD VQQDEw02NjQ5ODUyYS03NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwN7LMVsDstmRJtPGQj+PZFEAhAXdBtWXxphz4yf2KB5kcPAb+h/6M4Ro2D6 ku/htOPf/y10xVuxOgKzsyULAEhHAfTCkJz0BiKrW51njxnxU74PMZIeSL/uWqfq T4bnbFl4nei4ypSns/+1yup/ONT+lHTnNoezG2FYTpwz0TVNaKz2os2cqF1VD5xQ kTJrXA2RtzFrMdcqFD47jrHesEe94zvGPGZqgr6POp7Ew9TzX3+S8DGLvvEnm5Yn u0GpN60pgYTE6uaDFQ8xxfDNLO88ts7HQ+PeXSyV0Izndl5tsf5yKBD5SxsJiftM woWWbjMtDU1V2VwMF9JPFSoaewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9DadMs XkHsyk3GkhclMEj4ZiWjMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZqSmimfhDS2Ck23vi+dOvH+lZIH4nuwmSvua5O/O+oPKyVjXpEAhP WoJnjxL9/DMyx6eFpdM/1/Q5zXtEtPQ955t6V3N0szKL38ekimn9fFBt3JwR5q8K FHtMfnSrWGFLYsC9NfEyrv4SClIUGPExDsD4qhpMmkClr3eqrUPB5J9W1qV12rKI Urnv+mkHflxDUycv6x0oGMut4++r9WodRboo4YZ+fHIFpXUHH4OamwHreQumt+d+ qePRTpVTgf9qORUu7v9QAAQ7LJ7UqH/z/5bPSXbRI0ueWqry4/pqDPci9fmafAuF BcbPCZE4hgchbB0NPE6IHMT7CaXqm1+C -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org