$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: ZzR3rJZoUKYd59QITKcgMyhqG6srXf2jaLJtnEl3aOo= Subject key identifier: 96:2F:44:BA:7F:96:A1:86:B0:E1:5B:C0:D2:30:7B:F1:1A:21:61:88 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: 18 Signing time: Sun 19 May 2024 08:42:25 +0000 Manifest this update: Sun 19 May 2024 08:42:25 +0000 Manifest next update: Sun 26 May 2024 08:42:25 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: M7Ndy0FSGmp5lGEWHyJZuvrvOk+NqA63HDfJeu7IU14=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: UunbX0mH3OsfQ0HkJCqaF4weWk5/aIz4Kwft7QzCBww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: May 19 08:42:25 2024 GMT Not After : May 26 08:42:25 2024 GMT Subject: CN=6649bb71-e0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:b3:b0:c7:8a:ce:bf:db:40:cf:6a:1b:51: f8:c0:86:dd:1e:e4:ea:15:67:df:4c:fc:8a:aa:4e: 54:62:db:b1:3e:c1:52:6b:26:d3:08:34:e8:e4:bd: 53:4e:30:03:9b:b8:c1:a4:f0:f0:2a:1e:96:d3:3c: 8a:37:a0:fc:0e:20:cb:7b:0f:b6:5b:e5:b3:e0:cc: a8:62:eb:6b:ad:40:b8:92:4b:c1:a8:e1:fb:08:39: 1e:aa:cf:cc:dc:6a:c3:a3:cd:89:77:dc:46:ac:e0: 30:45:7e:bf:d7:52:cc:2b:c4:fd:ee:6f:c1:89:f7: c0:dc:3f:32:cd:c1:89:e7:93:44:45:ee:67:1b:82: 4e:77:a4:f3:eb:4c:aa:ff:48:e4:44:05:57:1f:97: c5:f7:7a:63:4f:7c:c4:67:b4:f1:69:2a:37:e1:85: 38:f1:7c:f4:0d:ac:9d:94:c9:bf:93:ce:d1:88:99: ce:eb:24:34:27:80:93:5d:9b:c9:21:79:92:5f:98: 74:fc:e5:65:23:25:7d:dc:65:d4:12:ca:bd:d6:f2: 3a:ed:18:f6:c2:6b:13:f9:12:1f:43:0b:a5:4e:96: e7:8f:d6:d6:2b:2f:45:86:74:ff:02:43:c9:81:0a: 38:53:9f:66:33:27:20:4a:c0:e3:4c:7d:e5:5b:47: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2F:44:BA:7F:96:A1:86:B0:E1:5B:C0:D2:30:7B:F1:1A:21:61:88 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:79:d3:99:98:89:fb:d4:26:f4:55:b0:f2:a8:f9:85:18:a2: b5:99:dc:d7:3a:a4:7e:a1:af:ff:7f:bb:32:8d:bb:d2:46:09: 76:7b:75:bf:84:5c:12:2c:f5:1b:ad:cf:95:30:6f:a9:51:52: b9:7e:ea:0a:81:5c:d5:4d:ff:7c:5c:f0:46:0d:fa:51:49:e2: 6b:ae:f1:ff:2c:7c:34:bb:8c:88:c9:26:54:6e:03:75:f5:05: c5:03:2d:c7:0c:32:8c:96:36:19:88:60:b5:b3:88:23:a8:e2: 2e:a2:92:b6:02:5d:8d:45:60:98:19:a5:69:71:cd:cb:a4:c4: 08:13:10:e9:60:35:42:24:3a:9b:48:f6:30:f2:c6:c8:d7:0a: 4a:3c:21:d5:5a:65:bd:f3:78:86:4c:6e:dc:73:d9:e4:a2:46: 12:7e:61:23:5b:80:ee:ea:13:4d:58:72:43:90:2a:98:24:63: c5:00:ea:0d:93:16:91:5a:48:33:2e:c3:f3:74:a3:e8:47:6c: 58:04:eb:b2:ee:ed:62:9b:2d:9f:9a:8f:82:e3:9c:a1:39:63: 7e:22:3b:bf:dc:f5:f6:2a:19:10:f1:df:b3:72:50:db:2a:17: b2:8d:d4:04:e6:2b:69:1e:e0:3e:1b:33:9c:df:ca:c7:ec:49: 86:17:83:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTg4MjExMC8GA1UEBRMoNUJDNDk0RTg5RDBBNDE1NUI1NTI1MzYzRDEyMzVDNUVE QzBGREUyRjAeFw0yNDA1MTkwODQyMjVaFw0yNDA1MjYwODQyMjVaMBgxFjAUBgNV BAMTDTY2NDliYjcxLWUwYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIGbOwx4rOv9tAz2obUfjAht0e5OoVZ99M/IqqTlRi27E+wVJrJtMINOjkvVNO MAObuMGk8PAqHpbTPIo3oPwOIMt7D7Zb5bPgzKhi62utQLiSS8Go4fsIOR6qz8zc asOjzYl33Eas4DBFfr/XUswrxP3ub8GJ98DcPzLNwYnnk0RF7mcbgk53pPPrTKr/ SOREBVcfl8X3emNPfMRntPFpKjfhhTjxfPQNrJ2Uyb+TztGImc7rJDQngJNdm8kh eZJfmHT85WUjJX3cZdQSyr3W8jrtGPbCaxP5Eh9DC6VOlueP1tYrL0WGdP8CQ8mB CjhTn2YzJyBKwONMfeVbR4INAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUli9Eun+W oYaw4VvA0jB78RohYYgwHwYDVR0jBBgwFoAUW8SU6J0KQVW1UlNj0SNcXtwP3i8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxODgyL0E4QzI1MUVBRjBC MzExRUVBNEM3MkY4NEM0RjlBRTAyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVzhTVTZKMEtRVlcxVWxOajBTTmNYdHdQM2k4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx ODgyL0E4QzI1MUVBRjBCMzExRUVBNEM3MkY4NEM0RjlBRTAyL1c4U1U2SjBLUVZX MVVsTmowU05jWHR3UDNpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJN505mYifvUJvRVsPKo+YUYorWZ3Nc6pH6hr/9/uzKNu9JGCXZ7db+E XBIs9Rutz5Uwb6lRUrl+6gqBXNVN/3xc8EYN+lFJ4muu8f8sfDS7jIjJJlRuA3X1 BcUDLccMMoyWNhmIYLWziCOo4i6ikrYCXY1FYJgZpWlxzcukxAgTEOlgNUIkOptI 9jDyxsjXCko8IdVaZb3zeIZMbtxz2eSiRhJ+YSNbgO7qE01YckOQKpgkY8UA6g2T FpFaSDMuw/N0o+hHbFgE67Lu7WKbLZ+aj4LjnKE5Y34iO7/c9fYqGRDx37NyUNsq F7KN1ATmK2ke4D4bM5zfysfsSYYXg0Q= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org