$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: 7a6Xj0oTNL8KG/59nBlXUsxy4S/Y1In+45FodJwKg08= Subject key identifier: 20:19:DF:B9:57:09:65:F2:6B:69:E2:A7:DD:B6:03:E5:62:EF:62:60 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 66 Signing time: Sun 19 May 2024 08:01:01 +0000 Manifest this update: Sun 19 May 2024 08:01:01 +0000 Manifest next update: Sun 26 May 2024 08:01:01 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: xkunSa5bTYEBdt363cmr3nYe86yVgzzG3oQxR1RVptM=) 2: F090C65CF76411EE88806717C4F9AE02.roa (hash: KS86v7mF+6dJ+9U3ZOFBZb7JHV9eYXTP5IAlmJs4IDk=) 3: F77C9B16F76511EEA4C51923C4F9AE02.roa (hash: +YyC+pfRVFeURFsg/7flU5OXASo/Ug7YnjQfTEpCkV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: May 19 08:01:01 2024 GMT Not After : May 26 08:01:01 2024 GMT Subject: CN=6649b1bd-62cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:1e:af:a9:91:ee:12:b2:e3:5c:c2:10:97: 88:87:4e:34:90:d1:8c:12:df:23:f5:90:1b:fc:fd: b8:94:aa:c8:b9:ee:c3:05:d1:0d:e5:79:5a:55:d6: 79:07:52:6d:4a:2a:1a:d4:cb:b4:dc:0e:e9:56:ab: 10:fe:9a:b4:db:57:7d:02:cc:cf:6c:64:19:67:8e: 22:fd:c7:7e:73:8f:02:88:55:66:48:9f:2a:4c:60: 85:96:de:16:ba:70:6f:1f:8f:77:06:61:c2:77:7a: ba:42:49:b4:eb:45:62:ac:dc:c9:8b:dc:b1:26:48: 52:a8:20:ce:e4:c3:17:cf:0e:17:a3:f2:ee:af:32: e1:8b:d0:18:b9:bc:12:80:4a:dd:89:ac:b7:21:2e: 99:fe:71:bc:f4:80:d3:18:8b:d8:a7:aa:96:d0:40: bb:71:34:df:b9:d5:7b:6f:aa:39:22:c5:d2:87:9d: df:0b:d1:70:b2:ba:50:33:a0:27:b1:b6:d8:41:60: d7:a9:a4:fc:3b:7b:6b:c7:69:97:4d:d0:ba:de:38: 29:e2:a1:3b:ff:01:54:49:79:2c:ef:70:1c:7b:1c: dc:87:60:39:c9:75:0a:d8:1c:c6:fd:56:e1:fc:76: a7:83:e8:b4:c6:bf:b9:7f:10:41:cc:1c:a6:6b:0a: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:19:DF:B9:57:09:65:F2:6B:69:E2:A7:DD:B6:03:E5:62:EF:62:60 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:54:0a:b5:d1:0d:f4:f2:15:26:d6:3e:91:64:fa:04:02:a3: 6e:55:76:3d:2b:8e:7f:06:bd:ea:ef:a5:a5:57:de:46:e1:75: 99:fa:65:9a:1e:f3:cb:7f:13:a8:f4:de:ca:c2:21:ab:2c:e8: b3:4d:33:d8:5d:ae:5a:6d:37:b9:3d:06:18:1a:59:22:5f:fe: 21:fb:93:a5:f3:d1:5c:3c:5d:74:34:58:8f:71:2b:1e:06:a4: 00:6a:8e:7f:57:8d:c1:79:02:ee:db:4e:ba:c9:65:cf:a5:db: a4:bf:66:e2:e3:41:85:f9:8a:4d:c1:a5:c2:2a:9a:1e:5e:eb: fe:c0:c4:ce:46:2f:52:af:23:a1:d1:9f:4a:54:7b:08:77:8e: 10:12:ee:25:c0:13:f3:71:cb:33:1b:fa:bd:44:cd:e8:5d:30: 9b:66:a0:0a:57:44:e7:cd:c4:80:9b:85:3a:1f:d9:54:5b:05: 5d:44:18:29:5c:f4:a5:ca:96:3d:04:ab:bc:da:ec:fd:8f:21: 75:d1:53:dd:84:4a:b9:cd:b3:21:a8:95:04:c0:71:e8:b2:20: 63:47:85:73:be:bd:2b:af:19:8b:5b:46:79:07:d0:1c:c9:a1: 15:ed:95:03:54:82:4a:65:4f:4f:80:1e:25:6c:70:09:05:ab: d5:7b:f4:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QURDNDExMC8GA1UEBRMoQzNEODkzQjIyOTFCM0ExRTFCRjVGNEYwNDFEMTA1MkUy Q0NCQjI1QTAeFw0yNDA1MTkwODAxMDFaFw0yNDA1MjYwODAxMDFaMBgxFjAUBgNV BAMTDTY2NDliMWJkLTYyY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwUR6vqZHuErLjXMIQl4iHTjSQ0YwS3yP1kBv8/biUqsi57sMF0Q3leVpV1nkH Um1KKhrUy7TcDulWqxD+mrTbV30CzM9sZBlnjiL9x35zjwKIVWZInypMYIWW3ha6 cG8fj3cGYcJ3erpCSbTrRWKs3MmL3LEmSFKoIM7kwxfPDhej8u6vMuGL0Bi5vBKA St2JrLchLpn+cbz0gNMYi9inqpbQQLtxNN+51XtvqjkixdKHnd8L0XCyulAzoCex tthBYNeppPw7e2vHaZdN0LreOCnioTv/AVRJeSzvcBx7HNyHYDnJdQrYHMb9VuH8 dqeD6LTGv7l/EEHMHKZrCnZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIBnfuVcJ ZfJraeKn3bYD5WLvYmAwHwYDVR0jBBgwFoAUw9iTsikbOh4b9fTwQdEFLizLslow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBREM0LzJGQTQzNENBQUFB NjExRUU5NjNBQTYzQUM0RjlBRTAyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzlpVHNpa2JPaDRiOWZUd1FkRUZMaXpMc2xvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB REM0LzJGQTQzNENBQUFBNjExRUU5NjNBQTYzQUM0RjlBRTAyL3c5aVRzaWtiT2g0 YjlmVHdRZEVGTGl6THNsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxUCrXRDfTyFSbWPpFk+gQCo25Vdj0rjn8GvervpaVX3kbhdZn6ZZoe 88t/E6j03srCIass6LNNM9hdrlptN7k9BhgaWSJf/iH7k6Xz0Vw8XXQ0WI9xKx4G pABqjn9XjcF5Au7bTrrJZc+l26S/ZuLjQYX5ik3BpcIqmh5e6/7AxM5GL1KvI6HR n0pUewh3jhAS7iXAE/NxyzMb+r1EzehdMJtmoApXROfNxICbhTof2VRbBV1EGClc 9KXKlj0Eq7za7P2PIXXRU92ESrnNsyGolQTAceiyIGNHhXO+vSuvGYtbRnkH0BzJ oRXtlQNUgkplT0+AHiVscAkFq9V79E8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org