$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: fxWK3s3FuKBWwKoP2QXKo1jFyyYl2bmMiJcpLGaix/Y= Subject key identifier: CB:1D:72:75:01:B1:35:09:F9:2A:48:A8:F3:A6:7D:1B:9E:F7:8C:A2 Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 0222 Signing time: Sun 19 May 2024 04:03:54 +0000 Manifest this update: Sun 19 May 2024 04:03:53 +0000 Manifest next update: Sun 26 May 2024 04:03:53 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: cWXmtpRCY9SQ8PpPgNjh1NxOmEKUlDZN9x4ybaWL4iI=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: QkEE0n5obbzAJPu3NC2pe+HHxIT7OvxbSEov/eGQSNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: May 19 04:03:53 2024 GMT Not After : May 26 04:03:53 2024 GMT Subject: CN=66497a29-4104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:bb:55:9b:8c:7b:be:46:1f:72:32:d4:9c: da:8a:cc:7f:ff:b9:e8:53:91:81:6a:27:82:17:73: eb:28:59:a6:d9:80:d6:b1:57:8f:19:c0:4a:95:18: 39:b0:c7:52:b7:b6:1d:7b:c5:39:46:fe:a7:3d:03: cf:d7:9a:ed:42:78:a4:40:70:30:32:42:44:19:57: c0:8e:12:0b:17:d1:c5:fe:b8:f9:67:69:cf:54:f7: 81:de:01:ea:6e:03:9b:64:ed:4f:b3:7c:5f:a9:71: 32:29:87:7a:d3:c1:e9:43:a5:18:8a:44:b6:fb:a9: 64:74:e1:5a:d6:65:91:30:e1:bc:0c:e4:d3:a1:da: 02:52:3a:62:d0:1e:71:40:33:86:a9:bc:ba:70:a7: 0f:92:3f:12:54:81:83:6f:55:2a:1e:bb:db:e7:f5: 6d:fd:2d:91:42:8c:2f:dd:3e:0f:32:b3:e8:ed:f6: a1:7b:59:1b:2e:f5:18:38:ee:ea:8d:78:4e:48:bc: 57:91:eb:7f:a3:a4:98:25:9c:f9:49:5e:8d:a0:76: b6:e4:53:a6:71:eb:c1:91:d8:55:cf:27:8b:8d:fa: cc:ba:be:a7:8d:e1:37:34:a3:42:93:8c:59:79:50: d4:4b:da:24:64:77:9f:ad:64:78:e3:c1:72:cd:9a: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:72:75:01:B1:35:09:F9:2A:48:A8:F3:A6:7D:1B:9E:F7:8C:A2 X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:7c:fa:ba:dd:79:b3:55:fd:2f:55:98:52:e0:0a:aa:b1:c4: 46:4f:58:0a:97:44:ab:16:f4:d5:27:73:62:5b:df:4b:97:d3: 0e:78:eb:52:01:35:39:d0:89:33:10:de:ea:95:e2:55:11:4d: cb:6c:e7:26:72:2d:d4:46:4b:e4:f0:45:80:bb:2a:01:28:06: 0e:6f:98:b3:16:73:31:17:ef:2c:03:6c:e9:9b:8c:be:a9:87: 14:12:5d:e9:07:3d:12:1c:5a:39:13:0e:4e:90:ca:65:f4:d2: 5e:a7:2b:c4:33:b9:23:52:01:d1:0a:28:0f:9b:0a:4b:9b:57: a5:a7:0a:ac:3e:9f:8d:96:50:60:33:8c:a1:50:5b:da:1b:42: 92:67:7f:99:0c:aa:bb:53:d1:9d:ec:0b:b5:fe:e7:ad:15:83: 7f:00:fd:2a:f6:53:65:9f:82:9c:53:31:86:1a:96:5e:5c:33: 15:b3:4f:86:59:a2:8b:0b:ee:6f:a5:31:4e:07:f3:80:89:c5: 6a:e3:7f:19:15:5a:95:f8:bf:5d:a5:65:73:20:f2:ff:20:31: d4:e0:2b:2c:88:cc:e2:16:ce:15:81:eb:e1:ee:e8:5b:c0:cf: 0c:b3:e0:03:12:bf:27:e9:1c:dc:9d:96:49:b2:17:d8:5a:cd: 09:fa:1c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjQwNTE5MDQwMzUzWhcNMjQwNTI2MDQwMzUzWjAYMRYwFAYD VQQDEw02NjQ5N2EyOS00MTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqm7VZuMe75GH3Iy1Jzaisx//7noU5GBaieCF3PrKFmm2YDWsVePGcBKlRg5 sMdSt7Yde8U5Rv6nPQPP15rtQnikQHAwMkJEGVfAjhILF9HF/rj5Z2nPVPeB3gHq bgObZO1Ps3xfqXEyKYd608HpQ6UYikS2+6lkdOFa1mWRMOG8DOTTodoCUjpi0B5x QDOGqby6cKcPkj8SVIGDb1UqHrvb5/Vt/S2RQowv3T4PMrPo7fahe1kbLvUYOO7q jXhOSLxXket/o6SYJZz5SV6NoHa25FOmcevBkdhVzyeLjfrMur6njeE3NKNCk4xZ eVDUS9okZHefrWR448FyzZq3oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsdcnUB sTUJ+SpIqPOmfRue94yiMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXfPq63XmzVf0vVZhS4AqqscRGT1gKl0SrFvTVJ3NiW99Ll9MOeOtS ATU50IkzEN7qleJVEU3LbOcmci3URkvk8EWAuyoBKAYOb5izFnMxF+8sA2zpm4y+ qYcUEl3pBz0SHFo5Ew5OkMpl9NJepyvEM7kjUgHRCigPmwpLm1elpwqsPp+NllBg M4yhUFvaG0KSZ3+ZDKq7U9Gd7Au1/uetFYN/AP0q9lNln4KcUzGGGpZeXDMVs0+G WaKLC+5vpTFOB/OAicVq438ZFVqV+L9dpWVzIPL/IDHU4CssiMziFs4Vgevh7uhb wM8Ms+ADEr8n6RzcnZZJshfYWs0J+hyc -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org