$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json) Hash identifier: 3sDPf6zFTY/8VWWCtB1OPR257sOReUEZtdkjfLGeRPM= Subject key identifier: 7F:5F:02:EE:92:F4:19:57:0A:CA:2A:F9:01:35:EE:CB:AF:6F:28:83 Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft Manifest number: A2 Signing time: Sun 19 May 2024 06:46:46 +0000 Manifest this update: Sun 19 May 2024 06:46:45 +0000 Manifest next update: Sun 26 May 2024 06:46:45 +0000 Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: NkOihAN+zClFQmtt626n8BAVNeYKXJQdUKlEsXJwjik=) 2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: 33HkpvrkeHpGV0MCCkt2Uwsnq/ooEKYbSLSLSfasvYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Validity Not Before: May 19 06:46:45 2024 GMT Not After : May 26 06:46:45 2024 GMT Subject: CN=6649a055-cfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:6f:a5:e7:13:8d:7a:a0:62:16:3c:bd:2f: 1f:d4:29:cb:64:6e:f6:d4:28:1a:69:ee:11:63:6c: 48:17:86:2a:85:2a:84:c3:44:f9:02:60:74:5c:db: 95:c3:65:3c:04:3d:5e:7f:4a:e3:91:37:f9:20:92: c9:bd:44:38:27:6e:99:c2:a1:03:d9:b5:0a:c9:53: 37:a3:ee:c6:fa:0a:f5:d5:e1:75:63:2d:67:a4:af: e6:b2:17:fd:68:3c:0c:f8:d9:75:78:98:e8:6e:5b: 93:c3:aa:d1:e6:e8:35:53:91:05:df:28:3d:11:bb: 8e:05:02:f3:70:87:fa:bf:08:a4:ae:52:21:19:e2: f1:32:d9:4b:ea:d6:69:1a:55:92:d4:51:7c:c0:e4: 82:1f:25:9e:11:ab:23:c6:43:2a:6e:9c:dd:94:66: fe:36:35:97:f6:eb:bd:4b:65:d7:e7:71:71:58:27: 11:aa:ee:d4:6d:4a:94:42:c4:2d:b1:cf:5e:27:5b: 4c:45:81:87:dc:92:5e:c2:41:1c:5d:95:77:78:74: 95:1d:29:9b:c6:d9:62:0b:44:fd:ef:83:02:a4:d0: d2:1f:71:98:11:64:8b:e4:03:37:ea:8b:c5:59:af: 77:ee:9c:e1:de:63:f3:09:86:04:7d:fa:74:3f:a2: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5F:02:EE:92:F4:19:57:0A:CA:2A:F9:01:35:EE:CB:AF:6F:28:83 X509v3 Authority Key Identifier: keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:6f:42:20:80:58:4b:f3:eb:73:f2:cd:4f:df:3c:5b:1b: 7f:0b:08:b2:55:ef:54:e6:2d:c3:35:7c:37:9e:b0:83:5c:f5: fa:36:3e:ce:2f:f5:27:fd:b8:34:a4:f9:ac:6a:a0:30:de:da: 44:aa:48:72:20:a8:8a:e2:78:26:5e:af:02:27:6f:69:6b:2e: bc:20:af:82:dc:4e:7d:2f:6c:25:fa:a7:27:84:4a:cd:32:6c: 98:3c:af:ec:5e:26:e2:52:52:11:ef:d2:71:d3:a8:59:2c:ae: c9:56:c6:56:f8:d5:15:8c:62:70:57:78:ae:a3:36:d8:2b:c8: ca:1a:5c:52:df:15:24:22:cb:4d:d9:af:75:75:1c:8c:d0:65: 65:e7:6a:1f:63:82:21:77:23:54:78:2b:0d:52:c8:76:17:bd: ee:bc:af:41:8d:ac:56:87:a4:40:a0:12:b6:7d:2d:e8:5f:33: ba:c7:84:35:46:84:67:a7:6d:ad:be:f7:c9:28:64:85:02:32: 7d:db:af:2a:68:72:73:88:a8:ba:08:9e:32:cb:13:c1:3b:94: 96:d0:28:58:af:78:07:bd:6c:02:03:b3:40:db:15:78:64:c1: f3:ec:9c:34:4a:ef:42:1f:d3:3e:63:f2:da:f2:f4:28:eb:19: b6:4e:18:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky ODg4QTQ5NUEwHhcNMjQwNTE5MDY0NjQ1WhcNMjQwNTI2MDY0NjQ1WjAYMRYwFAYD VQQDEw02NjQ5YTA1NS1jZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27VvpecTjXqgYhY8vS8f1CnLZG721Cgaae4RY2xIF4YqhSqEw0T5AmB0XNuV w2U8BD1ef0rjkTf5IJLJvUQ4J26ZwqED2bUKyVM3o+7G+gr11eF1Yy1npK/mshf9 aDwM+Nl1eJjobluTw6rR5ug1U5EF3yg9EbuOBQLzcIf6vwikrlIhGeLxMtlL6tZp GlWS1FF8wOSCHyWeEasjxkMqbpzdlGb+NjWX9uu9S2XX53FxWCcRqu7UbUqUQsQt sc9eJ1tMRYGH3JJewkEcXZV3eHSVHSmbxtliC0T974MCpNDSH3GYEWSL5AM36ovF Wa937pzh3mPzCYYEffp0P6LuTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9fAu6S 9BlXCsoq+QE17suvbyiDMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAioG9CIIBYS/Prc/LNT988Wxt/CwiyVe9U5i3DNXw3nrCDXPX6Nj7O L/Un/bg0pPmsaqAw3tpEqkhyIKiK4ngmXq8CJ29pay68IK+C3E59L2wl+qcnhErN MmyYPK/sXibiUlIR79Jx06hZLK7JVsZW+NUVjGJwV3iuozbYK8jKGlxS3xUkIstN 2a91dRyM0GVl52ofY4IhdyNUeCsNUsh2F73uvK9BjaxWh6RAoBK2fS3oXzO6x4Q1 RoRnp22tvvfJKGSFAjJ9268qaHJziKi6CJ4yyxPBO5SW0ChYr3gHvWwCA7NA2xV4 ZMHz7Jw0Su9CH9M+Y/La8vQo6xm2ThgG -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org