$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json) Hash identifier: grut1hiy4RXW3G9fjyKkje8imzEu0vSEa0XAr+F36VM= Subject key identifier: 38:2E:99:08:D9:0D:03:A5:55:2B:2C:3A:D3:0A:FC:E7:E1:1D:CD:1C Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft Manifest number: 48 Signing time: Sun 19 May 2024 08:06:19 +0000 Manifest this update: Sun 19 May 2024 08:06:18 +0000 Manifest next update: Sun 26 May 2024 08:06:18 +0000 Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: 3IFJd6jUIEBfHWGDJjHgmLymkaeQ5A3DUddrbOnnCR4=) 2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: /xLgcciV1fAsMQUoHqYX8C0b6v/QUBkQkCnmsh29lS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A Validity Not Before: May 19 08:06:18 2024 GMT Not After : May 26 08:06:18 2024 GMT Subject: CN=6649b2fa-a944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:be:b0:39:86:5c:d2:7e:6a:e6:a8:e8:45: 69:80:be:2b:ff:c7:cd:85:2a:4c:ec:24:69:46:97: b0:54:34:a5:3f:2a:de:67:bc:24:01:c7:c0:7c:ed: 76:ae:be:07:94:6b:8a:69:38:e4:da:18:ab:ce:e3: ae:bd:1d:c7:7a:a1:e8:a9:72:74:8f:7d:5a:11:bc: 8d:99:f0:9e:ee:0d:4b:34:47:8c:da:e4:fb:67:56: 6a:ea:e6:83:69:25:ba:41:c2:7a:09:55:84:e2:64: 46:56:3c:a8:bc:4f:0a:ab:69:38:9a:6f:7a:ba:53: 8c:82:db:03:4d:75:23:63:df:70:9e:2d:b1:ff:b6: 59:03:d1:0c:a3:a7:c5:50:21:6d:e5:e9:76:67:2e: b7:e3:6d:e1:4d:3e:26:e2:2f:68:ce:96:e8:a7:0d: 04:cb:e0:cf:4f:7d:74:c6:af:23:c2:12:1e:a3:58: 66:60:fd:14:a8:5d:5d:95:ea:14:af:f6:33:dc:86: ba:39:fb:c8:60:88:30:b0:4d:98:17:54:7f:85:e4: e9:26:23:11:35:80:d8:be:87:74:40:f8:2e:58:b6: 0b:d4:0e:72:96:9d:cd:15:92:52:de:a3:f9:97:74: 2a:70:c2:50:6b:a0:e0:6a:59:ac:24:a1:aa:86:de: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2E:99:08:D9:0D:03:A5:55:2B:2C:3A:D3:0A:FC:E7:E1:1D:CD:1C X509v3 Authority Key Identifier: keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:9a:57:a8:20:e0:fc:3b:98:9b:6e:08:01:10:61:db:30:4c: 24:b4:e9:98:ff:95:c7:58:b8:96:ff:ab:5f:f7:fb:72:86:e5: 95:01:2b:c2:d4:e9:48:bd:6b:99:93:ca:fd:6d:45:9d:76:28: d6:d2:9c:e6:7e:1b:86:41:53:09:62:9d:83:a7:42:46:16:1c: 71:29:75:98:0e:66:45:6a:43:d0:d1:67:f1:30:7a:c0:05:55: 15:10:63:34:c6:0b:59:b2:29:99:78:da:ef:b7:87:19:5e:d6: 6c:f9:ae:6a:75:24:62:72:97:ee:60:3c:67:8b:f3:9f:0d:14: d8:66:ef:38:fb:88:26:2c:19:e6:f2:9b:56:43:6b:d5:e9:04: 22:de:e8:0d:19:32:6e:fb:44:82:4b:23:fb:2a:c2:5b:ea:0b: 59:1d:67:97:96:78:12:6f:45:87:93:9a:b3:4f:16:a1:de:79: 81:22:36:77:37:4d:cd:6e:42:8d:9c:ab:ff:a2:a9:b0:34:d4: ec:ec:c4:1d:ef:6e:fa:09:5a:9f:3c:a9:1a:ae:b9:d8:68:06: 60:70:68:ca:2d:a0:68:cc:d4:8e:59:7a:69:e3:14:d7:df:e6: 6e:c4:29:30:70:4f:57:5c:d2:62:2f:a1:f8:b8:a2:4a:0f:f3: e2:90:38:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzkyMTExMC8GA1UEBRMoQzM3NTY4MjM0QUJFQzc5ODBGNkUxNzdENDhEMEI0MzE2 NDBERDMzQTAeFw0yNDA1MTkwODA2MThaFw0yNDA1MjYwODA2MThaMBgxFjAUBgNV BAMTDTY2NDliMmZhLWE5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGr6wOYZc0n5q5qjoRWmAviv/x82FKkzsJGlGl7BUNKU/Kt5nvCQBx8B87Xau vgeUa4ppOOTaGKvO4669Hcd6oeipcnSPfVoRvI2Z8J7uDUs0R4za5PtnVmrq5oNp JbpBwnoJVYTiZEZWPKi8TwqraTiab3q6U4yC2wNNdSNj33CeLbH/tlkD0Qyjp8VQ IW3l6XZnLrfjbeFNPibiL2jOluinDQTL4M9PfXTGryPCEh6jWGZg/RSoXV2V6hSv 9jPchro5+8hgiDCwTZgXVH+F5OkmIxE1gNi+h3RA+C5YtgvUDnKWnc0VklLeo/mX dCpwwlBroOBqWawkoaqG3si5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOC6ZCNkN A6VVKyw60wr85+EdzRwwHwYDVR0jBBgwFoAUw3VoI0q+x5gPbhd9SNC0MWQN0zow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzOTIxL0U5NUM3REFDQjI4 ODExRUVBQTIzNTUxOUM0RjlBRTAyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzNWb0kwcS14NWdQYmhkOVNOQzBNV1FOMHpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz OTIxL0U5NUM3REFDQjI4ODExRUVBQTIzNTUxOUM0RjlBRTAyL3czVm9JMHEteDVn UGJoZDlTTkMwTVdRTjB6by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN+aV6gg4Pw7mJtuCAEQYdswTCS06Zj/lcdYuJb/q1/3+3KG5ZUBK8LU 6Ui9a5mTyv1tRZ12KNbSnOZ+G4ZBUwlinYOnQkYWHHEpdZgOZkVqQ9DRZ/EwesAF VRUQYzTGC1myKZl42u+3hxle1mz5rmp1JGJyl+5gPGeL858NFNhm7zj7iCYsGeby m1ZDa9XpBCLe6A0ZMm77RIJLI/sqwlvqC1kdZ5eWeBJvRYeTmrNPFqHeeYEiNnc3 Tc1uQo2cq/+iqbA01OzsxB3vbvoJWp88qRquudhoBmBwaMotoGjM1I5ZemnjFNff 5m7EKTBwT1dc0mIvofi4okoP8+KQONQ= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org