$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: oqAr1oxC0NaW/7VUHSsqDxnldz+1F0Rw2U46EEvGFnA= Subject key identifier: 3B:A9:9B:5C:B1:D4:9C:4E:96:E1:B3:18:7D:51:12:2B:56:35:7A:72 Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 02F5 Signing time: Sun 19 May 2024 03:15:36 +0000 Manifest this update: Sun 19 May 2024 03:15:35 +0000 Manifest next update: Sun 26 May 2024 03:15:35 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: X8UGZtViRbcf77/o26pKH99UqYSav8mzPXHG5zFsu5A=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: HwvL6khPsFztTQvg1TkHORxRaOjS21Qg3Y425hZAKNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: May 19 03:15:35 2024 GMT Not After : May 26 03:15:35 2024 GMT Subject: CN=66496ed8-c999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:21:36:13:d0:c4:0f:67:25:4c:89:bc:c3: 5c:67:0f:bd:85:70:90:f6:f3:7d:03:a3:87:ba:31: 5f:f6:08:db:4e:18:08:a6:66:4f:88:77:db:23:31: e4:e2:77:62:0e:4c:35:85:dc:7c:53:47:72:71:2d: 67:5f:4d:35:47:11:6c:6d:e2:93:12:da:3c:ca:71: d4:49:38:20:f0:9f:85:c4:b4:f7:d2:4f:02:45:1d: 20:58:cd:25:c9:4e:6d:d2:4e:df:0e:c6:31:cc:f3: 8d:88:f8:c4:c9:28:02:e3:83:57:fe:e8:1f:a8:5e: 7d:b0:d3:4e:d4:15:b0:91:a6:b0:7b:ea:97:4f:42: 65:b3:d3:8d:da:49:e5:02:38:93:9a:31:6e:01:52: d0:6a:69:b7:d4:35:0e:08:28:ea:36:2d:b2:64:ba: c4:3a:af:0f:e1:44:9e:01:93:61:0d:f5:c0:3e:85: db:c1:1c:1d:b0:23:6d:f3:40:34:d4:b2:c5:8a:b0: 21:de:d3:ee:1d:05:56:a0:99:cd:98:b2:c9:4f:bb: 1c:39:49:f2:16:d0:35:23:50:ed:05:34:92:5b:73: 99:08:b8:94:87:ca:e2:82:32:ed:4b:a0:4d:65:93: 82:59:83:08:26:76:f8:f0:21:59:5d:d0:e0:4d:30: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:9B:5C:B1:D4:9C:4E:96:E1:B3:18:7D:51:12:2B:56:35:7A:72 X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:17:e4:60:13:c6:f7:8b:63:c1:a0:75:90:98:8e:2c:bf:cf: 1d:1f:f7:0e:4b:a2:5c:5c:c6:fe:43:cf:bf:48:c5:e3:bf:e9: 5f:45:34:4b:c8:94:a6:f6:c8:06:6b:d1:82:3f:ae:27:0f:6f: 44:3f:3d:4b:43:12:af:9e:01:79:8c:0e:20:24:ec:90:05:17: 56:7c:39:2a:6c:03:54:86:73:66:43:c4:39:2a:c3:09:c6:50: a2:56:ea:56:7e:94:51:2d:ed:30:3c:7a:4f:6d:5e:84:c8:02: 2d:f8:8d:de:22:79:f6:e4:3f:86:cb:6d:e7:40:69:ae:fe:cf: dc:90:70:68:a1:72:f6:4c:75:cd:74:c6:5d:ed:f2:b3:73:2f: 0d:e9:af:7a:5f:8b:e5:33:af:7e:44:61:ad:ab:65:bd:dc:ad: 9f:2a:34:dc:12:2c:93:10:86:c5:16:ef:72:67:41:80:fb:77: 80:29:14:71:f1:e0:bd:bf:cb:d0:53:a9:21:57:0d:6a:38:30: eb:a2:4b:ff:fa:f6:8d:92:dc:22:ea:b4:b6:38:43:55:d6:4f: 70:8a:ed:53:17:12:1e:7b:f3:bf:ba:fa:04:7a:17:d9:6a:46: c6:4b:d6:6b:3f:11:23:90:29:d4:6f:a2:e5:1c:83:02:54:5a: 6b:79:3f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjQwNTE5MDMxNTM1WhcNMjQwNTI2MDMxNTM1WjAYMRYwFAYD VQQDEw02NjQ5NmVkOC1jOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBohNhPQxA9nJUyJvMNcZw+9hXCQ9vN9A6OHujFf9gjbThgIpmZPiHfbIzHk 4ndiDkw1hdx8U0dycS1nX001RxFsbeKTEto8ynHUSTgg8J+FxLT30k8CRR0gWM0l yU5t0k7fDsYxzPONiPjEySgC44NX/ugfqF59sNNO1BWwkaawe+qXT0Jls9ON2knl AjiTmjFuAVLQamm31DUOCCjqNi2yZLrEOq8P4USeAZNhDfXAPoXbwRwdsCNt80A0 1LLFirAh3tPuHQVWoJnNmLLJT7scOUnyFtA1I1DtBTSSW3OZCLiUh8rigjLtS6BN ZZOCWYMIJnb48CFZXdDgTTCEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDupm1yx 1JxOluGzGH1REitWNXpyMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXF+RgE8b3i2PBoHWQmI4sv88dH/cOS6JcXMb+Q8+/SMXjv+lfRTRL yJSm9sgGa9GCP64nD29EPz1LQxKvngF5jA4gJOyQBRdWfDkqbANUhnNmQ8Q5KsMJ xlCiVupWfpRRLe0wPHpPbV6EyAIt+I3eInn25D+Gy23nQGmu/s/ckHBooXL2THXN dMZd7fKzcy8N6a96X4vlM69+RGGtq2W93K2fKjTcEiyTEIbFFu9yZ0GA+3eAKRRx 8eC9v8vQU6khVw1qODDrokv/+vaNktwi6rS2OENV1k9wiu1TFxIee/O/uvoEehfZ akbGS9ZrPxEjkCnUb6LlHIMCVFpreT/+ -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org