$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: coKd0SdrVgNA95xbUn7E9shvdcbO6HrIRdZYE6jWW+Q= Subject key identifier: 9D:5B:56:A6:7A:6E:96:64:6B:60:63:A4:64:40:F4:5A:51:20:54:93 Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: 3D Signing time: Sun 19 May 2024 08:13:57 +0000 Manifest this update: Sun 19 May 2024 08:13:57 +0000 Manifest next update: Sun 26 May 2024 08:13:57 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: 854RLQnfuDcS176qpYZzNi7ceY5xe8hjZDMAr2YDPhQ=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: xNLwv3ZrWQzpaBz7sFH6rc4BQ7H6gwRgcXBsSsBbUSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: May 19 08:13:57 2024 GMT Not After : May 26 08:13:57 2024 GMT Subject: CN=6649b4c5-34f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:a0:ca:c7:50:f5:54:38:95:fa:d0:9f:a7: 84:c5:f0:9a:09:e6:f3:10:b5:1c:4a:3d:a7:a6:68: 5c:d9:df:d4:4d:7b:6a:25:9f:1a:f9:a9:37:44:d6: cf:aa:1c:50:fb:c3:a0:c2:80:ed:a1:88:e2:9c:4b: 35:7f:54:1c:2f:ca:76:a9:50:28:9e:37:db:c0:21: 1f:a7:01:fd:38:23:80:c5:93:af:71:60:fe:2d:cf: 45:8d:03:b5:49:8a:75:1b:7a:39:00:0e:67:d1:31: 9b:08:a3:42:e2:31:df:98:9b:7d:b9:1f:41:ac:d3: 5f:f7:dd:34:ce:fc:40:03:1a:32:8f:c7:e9:a2:02: d4:9e:14:2f:4b:db:7e:2c:5a:c0:16:51:aa:a7:ea: 91:61:45:29:4f:06:fb:fd:75:09:46:aa:7e:3e:1f: 44:91:b4:f2:e3:81:f6:3e:d9:f1:09:9c:e4:0f:e1: 7e:e7:2c:48:3f:34:d7:18:0e:ae:bd:cc:62:d8:b0: 20:eb:63:c3:16:32:48:3e:da:e2:05:3f:43:dd:6e: 1e:d2:14:af:cf:72:98:e0:59:1b:07:6c:37:93:7d: c8:52:24:01:7f:c3:71:fe:9e:20:6c:ab:e7:42:e8: 17:9b:96:48:06:a7:07:af:fe:ba:aa:54:75:4f:61: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5B:56:A6:7A:6E:96:64:6B:60:63:A4:64:40:F4:5A:51:20:54:93 X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:19:6c:1a:37:87:59:36:f5:de:a7:89:29:28:94:d3:79:92: 34:12:2f:ed:2b:1e:c9:38:cb:9a:56:18:39:b3:da:bf:63:ab: 31:25:35:5b:0f:ec:6b:5a:3b:a6:f0:5b:4d:54:64:88:a0:18: aa:a6:d2:0e:e8:dc:99:90:f7:bb:fa:b0:36:ce:92:1c:83:fa: 87:6c:2a:4a:61:6a:fd:c7:81:fb:59:66:47:cf:d3:58:7a:ed: c2:b9:1b:8d:c9:2b:a1:a2:60:3b:2b:c3:f0:5a:aa:ad:4c:00: 56:46:de:5c:97:7e:27:a1:46:05:4f:3c:95:17:85:7a:0e:fc: f7:b5:49:a1:69:de:c4:e7:0e:5f:4e:a4:d7:0f:92:1e:58:48: 1b:77:3c:79:20:9e:75:a3:71:be:fb:69:13:1b:b3:6d:db:76: 1b:f0:fa:c9:70:0c:19:08:76:19:e8:30:7f:a0:8a:4f:57:c3: ba:b6:47:42:79:5b:36:1a:0c:e9:d7:78:34:73:65:fe:37:3e: ac:af:24:b7:b9:b7:36:9a:35:3b:c6:2b:d5:98:23:eb:7a:27: 75:68:6b:8a:53:45:6f:80:11:0f:17:be:c6:80:2b:e9:88:1c: 64:4e:72:83:e0:6a:61:ce:dc:2b:21:16:77:97:88:af:cf:79: a3:0c:04:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTA3MDExMC8GA1UEBRMoQzM2Q0Y1REUyNTMzOUI5MTQ1NkU1Q0MyMzE3MjQ4QjM2 RUE0NUI3RDAeFw0yNDA1MTkwODEzNTdaFw0yNDA1MjYwODEzNTdaMBgxFjAUBgNV BAMTDTY2NDliNGM1LTM0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlzKDKx1D1VDiV+tCfp4TF8JoJ5vMQtRxKPaemaFzZ39RNe2olnxr5qTdE1s+q HFD7w6DCgO2hiOKcSzV/VBwvynapUCieN9vAIR+nAf04I4DFk69xYP4tz0WNA7VJ inUbejkADmfRMZsIo0LiMd+Ym325H0Gs01/33TTO/EADGjKPx+miAtSeFC9L234s WsAWUaqn6pFhRSlPBvv9dQlGqn4+H0SRtPLjgfY+2fEJnOQP4X7nLEg/NNcYDq69 zGLYsCDrY8MWMkg+2uIFP0Pdbh7SFK/PcpjgWRsHbDeTfchSJAF/w3H+niBsq+dC 6BeblkgGpwev/rqqVHVPYVZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnVtWpnpu lmRrYGOkZED0WlEgVJMwHwYDVR0jBBgwFoAUw2z13iUzm5FFblzCMXJIs26kW30w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMDcwLzgwOEI0RDZDQkMx MDExRUU4QkVCMTM3QUM0RjlBRTAyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1cz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzJ6MTNpVXptNUZGYmx6Q01YSklzMjZrVzMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MDcwLzgwOEI0RDZDQkMxMDExRUU4QkVCMTM3QUM0RjlBRTAyL3cyejEzaVV6bTVG RmJsekNNWEpJczI2a1czMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0ZbBo3h1k29d6niSkolNN5kjQSL+0rHsk4y5pWGDmz2r9jqzElNVsP 7GtaO6bwW01UZIigGKqm0g7o3JmQ97v6sDbOkhyD+odsKkphav3HgftZZkfP01h6 7cK5G43JK6GiYDsrw/Baqq1MAFZG3lyXfiehRgVPPJUXhXoO/Pe1SaFp3sTnDl9O pNcPkh5YSBt3PHkgnnWjcb77aRMbs23bdhvw+slwDBkIdhnoMH+gik9Xw7q2R0J5 WzYaDOnXeDRzZf43PqyvJLe5tzaaNTvGK9WYI+t6J3Voa4pTRW+AEQ8XvsaAK+mI HGROcoPgamHO3CshFneXiK/PeaMMBO0= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org