$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: nhJRTe+vhDT6un5I8/oIAC7WJaWaXyWJhU5B4Zj56kM= Subject key identifier: 2E:A5:D4:C7:3F:77:AA:7E:17:4C:D5:B2:DC:CF:40:AD:66:1E:3D:23 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 025E Signing time: Sun 19 May 2024 03:50:16 +0000 Manifest this update: Sun 19 May 2024 03:50:16 +0000 Manifest next update: Sun 26 May 2024 03:50:16 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: m9Tb+ionKEWJyx8O886LCVDbc05ItmEBlVVQy21m8wE=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: iopQneA8kxj6kmhloNdh16nY9aK11MA1aIku64P+Cv8=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: V60MtfasMOeAG/somCavZJbjo1tA1luGRueHTkfl71Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: May 19 03:50:16 2024 GMT Not After : May 26 03:50:16 2024 GMT Subject: CN=664976f8-c328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:0f:3d:a7:3b:28:60:f8:78:99:db:f2:8a: a7:d7:aa:73:be:2b:18:6d:52:66:82:40:4f:17:4b: 98:96:63:b3:03:e0:ef:e9:f9:2d:27:c5:b1:c6:35: 28:c8:8d:b1:e4:a4:4a:f2:29:c7:9a:77:79:36:bb: 78:95:ae:32:fc:3a:90:11:5a:3c:65:48:72:ce:96: fc:f2:ec:a7:98:9b:a1:f6:97:ba:84:fa:e3:5e:7f: ad:ec:6f:6f:d0:cc:32:36:18:f2:c9:f4:7c:0f:81: 1f:2b:92:67:75:98:19:30:48:de:5a:10:30:db:83: 30:13:c0:72:46:7c:35:22:18:11:9d:3e:06:63:29: 87:d7:dc:37:3c:2a:a0:8d:40:76:f8:c5:c0:e7:7e: 82:27:3b:94:c9:4d:c4:49:17:17:61:c2:f3:b6:61: 3f:31:d0:07:61:bd:11:cb:79:54:79:73:bd:c8:24: 79:f0:01:8a:aa:ed:85:06:27:45:92:10:a7:85:a6: 7b:e5:29:fa:58:4c:e0:bd:8a:b6:32:2c:14:28:5a: ba:9d:25:0d:48:a6:0b:21:1b:00:65:79:87:ac:20: 2b:d3:a6:2a:df:64:85:83:8c:a0:55:c9:78:9e:68: 5f:33:90:59:81:21:7d:0f:5b:6d:b8:e0:79:03:e0: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A5:D4:C7:3F:77:AA:7E:17:4C:D5:B2:DC:CF:40:AD:66:1E:3D:23 X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:6c:ca:f4:ec:94:ce:90:2e:80:e1:1b:13:62:19:e2:c8: dc:0b:69:87:4f:d1:e7:8a:99:e6:fe:64:33:e6:6d:69:56:1b: 90:10:17:ae:b6:8d:46:90:d8:10:3b:81:4c:74:28:bb:77:22: 1c:e3:c7:88:8f:7c:6e:e0:9e:b8:d1:28:cf:1d:49:c5:4e:98: db:02:7f:3b:00:b6:43:50:d8:72:06:90:e9:dd:04:5c:bd:bd: 3e:6a:11:ff:2c:e4:95:ac:db:76:40:fd:a1:1e:16:1a:b4:a3: 4e:bb:88:77:e4:ab:28:39:85:47:55:0f:36:75:76:f5:94:e3: 07:9d:6a:6f:58:05:ca:1a:3f:59:57:2a:c8:97:b1:ff:c5:1c: 86:bd:c2:6b:ea:96:eb:99:f3:61:58:6c:8e:c2:0c:86:95:fd: 97:9f:64:16:01:e3:f9:c7:3e:9a:8f:f3:e5:ea:1f:d2:a1:6b: 6a:e6:05:9b:1c:b4:ea:73:14:a8:0a:15:f3:29:ed:73:8c:cf: fe:58:78:38:dc:ad:ea:60:be:13:66:55:59:9c:6c:0a:86:75: 51:a6:3a:ee:23:e0:c1:e5:11:2f:c4:fb:62:ee:5f:c8:b2:17: fa:67:bd:7f:2f:ba:7e:77:f2:22:27:23:15:9f:f2:89:24:ac: af:80:57:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjQwNTE5MDM1MDE2WhcNMjQwNTI2MDM1MDE2WjAYMRYwFAYD VQQDEw02NjQ5NzZmOC1jMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSwPPac7KGD4eJnb8oqn16pzvisYbVJmgkBPF0uYlmOzA+Dv6fktJ8WxxjUo yI2x5KRK8inHmnd5Nrt4la4y/DqQEVo8ZUhyzpb88uynmJuh9pe6hPrjXn+t7G9v 0MwyNhjyyfR8D4EfK5JndZgZMEjeWhAw24MwE8ByRnw1IhgRnT4GYymH19w3PCqg jUB2+MXA536CJzuUyU3ESRcXYcLztmE/MdAHYb0Ry3lUeXO9yCR58AGKqu2FBidF khCnhaZ75Sn6WEzgvYq2MiwUKFq6nSUNSKYLIRsAZXmHrCAr06Yq32SFg4ygVcl4 nmhfM5BZgSF9D1ttuOB5A+BqNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6l1Mc/ d6p+F0zVstzPQK1mHj0jMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxmzK9OyUzpAugOEbE2IZ4sjcC2mHT9Hnipnm/mQz5m1pVhuQEBeu to1GkNgQO4FMdCi7dyIc48eIj3xu4J640SjPHUnFTpjbAn87ALZDUNhyBpDp3QRc vb0+ahH/LOSVrNt2QP2hHhYatKNOu4h35KsoOYVHVQ82dXb1lOMHnWpvWAXKGj9Z VyrIl7H/xRyGvcJr6pbrmfNhWGyOwgyGlf2Xn2QWAeP5xz6aj/Pl6h/SoWtq5gWb HLTqcxSoChXzKe1zjM/+WHg43K3qYL4TZlVZnGwKhnVRpjruI+DB5REvxPti7l/I shf6Z71/L7p+d/IiJyMVn/KJJKyvgFfU -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org