$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft File: w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json) Hash identifier: MJzdefMr8yopG/mem4EMoI8PDXee4laVjkccdgcYAEg= Subject key identifier: 66:53:47:CA:10:BA:A3:9E:BB:66:1D:CB:D7:D7:17:C9:5B:D3:65:D6 Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft Manifest number: 063A Signing time: Sat 18 May 2024 23:42:38 +0000 Manifest this update: Sat 18 May 2024 23:42:38 +0000 Manifest next update: Sat 25 May 2024 23:42:37 +0000 Files and hashes: 1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: MnwPAz8aTwQ8UwAMnzc07aqQwmG+gd2XDbR89jjTlp8=) 2: 43854B4044D411EB85615640C4F9AE02.roa (hash: klAGfBDx0WVWjQu4/S2weh+NfUhun+iFqiAVeW1UVsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E Validity Not Before: May 18 23:42:38 2024 GMT Not After : May 25 23:42:37 2024 GMT Subject: CN=66493cee-9dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:21:3a:32:21:ad:cd:e9:05:a1:41:f5:8d: 1a:52:93:71:3d:8b:73:a4:aa:5b:53:87:0f:b9:a2: b3:d4:28:46:7a:34:ee:b5:0b:d1:b2:46:43:6a:ac: f5:2e:25:f4:20:05:6b:40:40:5e:73:52:02:fb:86: 89:5b:bf:ae:00:e7:de:ed:e7:4b:77:78:54:3b:2c: 7a:46:64:90:97:fe:c7:5b:7a:05:ee:95:13:74:9b: 77:44:b8:d4:52:61:72:bc:1c:52:3a:de:67:c8:92: 61:46:98:e3:7c:b1:20:37:8c:85:e8:c4:d0:ea:bc: 08:ee:48:9d:92:1b:12:64:5b:cb:2a:17:49:e4:a1: 16:95:dd:b5:74:b5:c9:8d:f8:4d:01:02:a6:b2:f5: 9b:23:35:41:dd:ef:ef:bb:42:c1:c8:61:03:ab:e8: 0b:7e:12:8f:ee:5a:c1:fb:54:9a:d1:a7:a0:8f:2c: 5c:85:84:0f:0c:b4:8f:d9:21:46:e9:de:c7:51:d9: 5d:13:50:71:61:95:97:e6:29:a5:59:05:b2:e5:35: c0:90:72:49:8b:ff:26:b7:b3:91:6c:cb:38:4b:4b: d8:a7:17:bc:3d:09:a6:d2:03:85:1b:8b:0d:54:28: a8:ff:d4:6c:fd:56:0a:5d:95:51:c7:55:00:59:26: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:53:47:CA:10:BA:A3:9E:BB:66:1D:CB:D7:D7:17:C9:5B:D3:65:D6 X509v3 Authority Key Identifier: keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c8:08:89:0d:de:82:45:59:29:7c:6b:08:4a:b2:df:52:c3: bc:68:63:af:91:4a:91:ce:64:db:d8:5c:15:b7:bd:d5:e1:f6: 9b:b5:d0:81:67:65:c6:ee:44:35:9c:7b:18:d5:2c:24:66:f7: 9c:92:eb:0a:af:b6:8e:d2:06:ed:ef:ea:83:53:87:ca:17:d5: 40:af:26:bd:59:29:25:ac:b6:4b:d3:8f:c5:9d:a3:4e:58:17: ff:32:d4:cb:cb:11:83:0f:6f:35:8d:75:76:3d:bb:b4:18:c9: df:8b:40:97:9f:f3:2b:ec:59:63:88:1e:bb:7e:32:74:f5:5a: 0b:da:31:1d:15:a9:4d:e3:ae:7d:14:d7:52:f1:bf:bb:dd:d1: 66:1d:92:87:c7:21:15:3b:84:2a:8d:3d:d0:14:b0:4f:84:35: 8b:47:ae:b6:ea:da:e6:72:42:6c:fe:d4:62:d2:c7:b4:2a:0e: bc:20:7d:59:5a:06:df:4f:04:31:20:37:0d:fa:fd:d7:2e:eb: c5:05:36:20:46:55:71:e5:e8:38:7c:33:2a:90:ae:cb:ad:52: f5:84:03:34:db:68:c8:3e:b2:8a:05:67:5b:b6:72:6b:4d:67: 06:5b:09:d6:8e:e7:af:d7:04:01:c4:c7:a2:6c:a7:c5:a5:69: d4:2a:1b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxOTcxMTAvBgNVBAUTKEMzQjY0OEVCMkUyMzg3MkE5MThEMDU3NzEzMEYzNTg1 M0Y2RjYzOUUwHhcNMjQwNTE4MjM0MjM4WhcNMjQwNTI1MjM0MjM3WjAYMRYwFAYD VQQDEw02NjQ5M2NlZS05ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/AhOjIhrc3pBaFB9Y0aUpNxPYtzpKpbU4cPuaKz1ChGejTutQvRskZDaqz1 LiX0IAVrQEBec1IC+4aJW7+uAOfe7edLd3hUOyx6RmSQl/7HW3oF7pUTdJt3RLjU UmFyvBxSOt5nyJJhRpjjfLEgN4yF6MTQ6rwI7kidkhsSZFvLKhdJ5KEWld21dLXJ jfhNAQKmsvWbIzVB3e/vu0LByGEDq+gLfhKP7lrB+1Sa0aegjyxchYQPDLSP2SFG 6d7HUdldE1BxYZWX5imlWQWy5TXAkHJJi/8mt7ORbMs4S0vYpxe8PQmm0gOFG4sN VCio/9Rs/VYKXZVRx1UAWSY6xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZTR8oQ uqOeu2Ydy9fXF8lb02XWMB8GA1UdIwQYMBaAFMO2SOsuI4cqkY0FdxMPNYU/b2Oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE5Ny9BNEREQTUyNDQ0 RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5cVJqUVYzRXc4MWhUOXZZ NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Wkk2eTRqaHlxUmpRVjNFdzgxaFQ5dlk1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE5Ny9BNEREQTUyNDQ0RDIxMUVCQjEzNzlDM0VDNEY5QUUwMi93N1pJNnk0amh5 cVJqUVYzRXc4MWhUOXZZNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXyAiJDd6CRVkpfGsISrLfUsO8aGOvkUqRzmTb2FwVt73V4fabtdCB Z2XG7kQ1nHsY1SwkZveckusKr7aO0gbt7+qDU4fKF9VArya9WSklrLZL04/FnaNO WBf/MtTLyxGDD281jXV2Pbu0GMnfi0CXn/Mr7FljiB67fjJ09VoL2jEdFalN4659 FNdS8b+73dFmHZKHxyEVO4QqjT3QFLBPhDWLR6626trmckJs/tRi0se0Kg68IH1Z WgbfTwQxIDcN+v3XLuvFBTYgRlVx5eg4fDMqkK7LrVL1hAM022jIPrKKBWdbtnJr TWcGWwnWjuev1wQBxMeibKfFpWnUKhte -----END CERTIFICATE-----Generated at Sun May 19 00:30:16 2024 by rpki-client on console-ams.rpki-client.org