$ rpki-client -vvf rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft File: 1w6O-A81h--QKJbYsw3LC26zOa8.mft (raw, json) Hash identifier: Wk/cgLTuHzXfJ4fZ6qgGX0uG2P8EMbROtfndjYn1Ahw= Subject key identifier: 10:D4:18:2A:0E:C0:F2:63:B7:A8:DE:EA:B1:2E:34:90:BB:4F:4C:2B Authority key identifier: D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF Certificate issuer: /CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft Manifest number: 33C5 Signing time: Sat 18 May 2024 14:52:06 +0000 Manifest this update: Sat 18 May 2024 14:52:05 +0000 Manifest next update: Sat 25 May 2024 14:52:05 +0000 Files and hashes: 1: 1w6O-A81h--QKJbYsw3LC26zOa8.crl (hash: 81zoOMGYzgo5vnBisa65coBmBAkJtJ2lGa4jI2T/9Us=) 2: A8306EA22D6911EC9F557316C4F9AE02.roa (hash: U/+lwFo2Lc5FiNONRbM3DJ4bIeUHZx680RnS/e7OQ2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF Validity Not Before: May 18 14:52:05 2024 GMT Not After : May 25 14:52:05 2024 GMT Subject: CN=6648c096-8af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:54:39:3b:53:dc:7e:cf:58:0b:69:4d:0f: 7a:f5:ff:56:6c:41:5b:41:ee:56:17:22:ec:7d:75: 38:cd:6b:3d:8a:cf:58:6d:6b:b3:bd:e7:17:f2:cc: c5:51:5d:90:04:bb:86:40:6c:e6:b9:73:df:36:6b: a7:a1:d5:be:01:08:38:94:61:74:6b:00:80:d4:d8: a4:c9:59:2e:c4:88:83:b2:ac:f7:4a:17:c7:8d:42: 6f:78:38:7a:84:66:7c:a7:4c:70:c5:56:52:63:0a: 31:4c:a0:88:0f:7b:d7:18:92:55:d1:4e:c0:73:89: 8a:a7:f1:a4:7e:a2:f9:a3:9f:5d:65:4d:40:86:60: e1:4e:1d:06:5a:5c:2f:58:79:9b:47:02:ec:08:60: c1:ce:bf:6d:25:41:fe:89:a2:46:54:2b:96:6f:52: 62:d4:47:98:d5:93:e8:75:c7:10:30:4b:1a:60:d1: 04:c2:b2:d9:96:50:7b:3f:b2:40:08:99:1f:98:de: 70:5c:25:a5:f2:b8:13:e5:d3:84:e5:5c:9a:a1:4b: ae:91:a1:28:19:0a:50:37:a1:df:3a:bb:b7:59:98: 16:ec:ea:ad:74:c5:ba:8c:25:5c:4e:4d:57:f4:5b: 24:01:b0:57:15:06:d6:02:4c:e9:4a:86:2f:f4:09: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D4:18:2A:0E:C0:F2:63:B7:A8:DE:EA:B1:2E:34:90:BB:4F:4C:2B X509v3 Authority Key Identifier: keyid:D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8a:6d:92:71:3f:da:48:74:2d:9d:db:6e:5f:35:0a:47:0c: 71:21:70:ca:8e:56:78:2c:0a:53:0e:53:7c:78:5e:cc:98:d4: e0:86:21:07:8b:84:3c:ad:90:7d:30:9c:5f:61:bf:9a:00:9d: 87:da:a6:9d:7b:84:33:f7:a2:a3:7b:6c:e3:de:56:5b:1a:68: a7:cc:bc:5d:c5:e5:41:be:e7:47:87:f8:32:ba:1d:ae:61:ec: 1a:bd:12:be:e3:16:52:88:f6:c5:b5:3c:6c:93:22:7e:94:b2: 16:99:43:6e:ac:76:a0:a5:68:a4:29:9c:00:00:ae:5b:d7:dd: 6d:cb:0c:be:d3:7f:b8:d7:ca:d2:17:1f:bc:35:95:3d:10:d7: b1:af:e1:c7:11:f0:12:c1:2b:45:9d:b4:1d:e8:c9:91:b0:bc: 2a:75:fb:13:2c:ce:be:ac:6a:c0:90:c9:55:e0:41:1b:86:18: be:88:06:d0:42:ed:ed:99:20:82:5d:d9:bb:d8:92:20:13:87: 5b:94:81:f6:85:fd:87:32:7a:77:25:75:9b:31:28:35:f5:ca: 84:ce:ae:c2:c5:13:c9:ba:78:7d:16:42:f0:8d:06:b7:b8:42: b0:10:06:aa:f3:14:64:b1:69:be:dd:a5:39:6a:d2:c4:97:23: a8:dd:34:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMjMxMTAvBgNVBAUTKEQ3MEU4RUY4MEYzNTg3RUY5MDI4OTZEOEIzMERDQjBC NkVCMzM5QUYwHhcNMjQwNTE4MTQ1MjA1WhcNMjQwNTI1MTQ1MjA1WjAYMRYwFAYD VQQDEw02NjQ4YzA5Ni04YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yFUOTtT3H7PWAtpTQ969f9WbEFbQe5WFyLsfXU4zWs9is9YbWuzvecX8szF UV2QBLuGQGzmuXPfNmunodW+AQg4lGF0awCA1NikyVkuxIiDsqz3ShfHjUJveDh6 hGZ8p0xwxVZSYwoxTKCID3vXGJJV0U7Ac4mKp/GkfqL5o59dZU1AhmDhTh0GWlwv WHmbRwLsCGDBzr9tJUH+iaJGVCuWb1Ji1EeY1ZPodccQMEsaYNEEwrLZllB7P7JA CJkfmN5wXCWl8rgT5dOE5VyaoUuukaEoGQpQN6HfOru3WZgW7OqtdMW6jCVcTk1X 9FskAbBXFQbWAkzpSoYv9AnqBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDUGCoO wPJjt6je6rEuNJC7T0wrMB8GA1UdIwQYMBaAFNcOjvgPNYfvkCiW2LMNywtuszmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMyMy80RUI5NDI2QzFE OTMxMUUyQkY3OEQ4RjYwOEIwMkNEMi8xdzZPLUE4MWgtLVFLSmJZc3czTEMyNnpP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3Nk8tQTgxaC0tUUtKYllzdzNMQzI2ek9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMyMy80RUI5NDI2QzFEOTMxMUUyQkY3OEQ4RjYwOEIwMkNEMi8xdzZPLUE4MWgt LVFLSmJZc3czTEMyNnpPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfim2ScT/aSHQtndtuXzUKRwxxIXDKjlZ4LApTDlN8eF7MmNTghiEH i4Q8rZB9MJxfYb+aAJ2H2qade4Qz96Kje2zj3lZbGminzLxdxeVBvudHh/gyuh2u YewavRK+4xZSiPbFtTxskyJ+lLIWmUNurHagpWikKZwAAK5b191tywy+03+418rS Fx+8NZU9ENexr+HHEfASwStFnbQd6MmRsLwqdfsTLM6+rGrAkMlV4EEbhhi+iAbQ Qu3tmSCCXdm72JIgE4dblIH2hf2HMnp3JXWbMSg19cqEzq7CxRPJunh9FkLwjQa3 uEKwEAaq8xRksWm+3aU5atLElyOo3TRS -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org