$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: pzRsnsn82+cSILt7lEMnyX/TaMS77ileDHcuoqWk4UM= Subject key identifier: 3E:DD:93:EE:1B:C2:9D:36:C6:6E:77:41:EE:6C:4D:B4:5F:2F:76:4E Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 18FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 18F5 Signing time: Sat 18 May 2024 16:52:05 +0000 Manifest this update: Sat 18 May 2024 16:52:05 +0000 Manifest next update: Sat 25 May 2024 16:52:05 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: wYU1xLqNxdxY69KS13g//AMs/lKx+qcDGONCD2NVwTM=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: u3Y1UTnDwpgpoAQ4nBRoQEeMPBM9RgMjEzF1OPsd3Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: May 18 16:52:05 2024 GMT Not After : May 25 16:52:05 2024 GMT Subject: CN=6648dcb5-9fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:08:2e:6e:ac:93:15:5f:8f:17:37:fe:d7: 2f:73:72:27:70:e6:79:fe:3e:31:74:39:88:6f:a7: d2:0b:2c:5f:c8:94:07:f7:46:70:f2:89:a2:56:77: 21:1f:cf:9e:91:11:7c:a3:06:04:22:34:c5:f5:23: 4a:d6:bc:65:0d:51:00:79:f7:54:7f:ea:26:1e:26: 58:f1:bc:00:3d:27:30:65:e1:01:04:1f:6f:8f:1b: 33:de:7f:73:4a:69:9f:79:2a:e7:4a:92:55:c2:80: 84:94:5a:7d:9c:1c:20:ef:e4:fa:dc:b9:85:2d:15: fa:68:e3:dd:5b:9b:fc:f4:fb:1e:f6:22:af:ad:b7: f4:0c:5b:8c:4b:04:6c:76:ff:1c:3e:67:66:78:ce: fe:c7:2f:2f:a6:e9:06:60:3d:59:66:3d:0f:6c:ff: d6:87:bc:e8:e1:91:76:62:80:d1:90:1a:63:6d:a8: 66:ca:1a:2c:d0:4b:32:19:85:98:03:d9:24:fd:a9: 4d:77:f6:28:a2:3b:cb:67:dc:dc:a6:b1:b5:ce:62: 50:0d:da:3b:09:6a:2c:c0:ff:13:65:cc:22:b6:6d: 2e:63:93:ab:c4:c4:45:54:dc:73:7a:e6:b6:2d:ad: 4e:45:bc:60:fd:44:f3:c8:cd:30:46:2b:01:60:64: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:93:EE:1B:C2:9D:36:C6:6E:77:41:EE:6C:4D:B4:5F:2F:76:4E X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c8:a6:ab:5a:01:b1:d4:b3:e4:7e:bd:33:13:0e:54:85:8b: 42:46:28:90:38:52:77:99:84:b2:f2:ab:02:6c:e7:5d:40:c7: 77:75:de:f9:b0:f3:07:c5:9b:71:5b:6d:7f:b2:47:bb:27:a5: 77:d8:d5:9d:37:6c:7a:b8:0d:fe:9a:bb:37:10:db:da:de:f9: e9:a5:05:97:ce:aa:5c:65:ae:2a:f9:ac:0f:70:f4:1b:01:a5: 7c:5c:9e:04:0f:83:07:43:73:21:09:ea:11:27:7e:59:d8:a4: 3e:a1:fd:ce:d4:45:ac:ed:c1:b5:65:fe:12:44:bb:eb:dc:24: c9:17:c1:77:ec:db:ba:63:08:41:9d:ad:d3:d9:24:8d:e2:40: e3:dc:fb:56:9b:cf:0e:0b:65:6d:bb:2b:22:59:39:0d:b7:aa: ab:97:25:d9:b4:0f:5c:cc:5a:21:b9:c1:97:3e:fb:a7:1b:97: 5d:ea:c1:c7:9e:c9:05:36:36:c9:0d:c4:1f:1a:33:48:cd:9b: 55:9d:3c:09:48:2e:04:d0:0c:6a:3b:8a:e3:a8:0d:b0:d0:96: 9c:92:06:10:20:e5:62:2a:a2:15:e2:29:00:8b:87:5a:17:d1: d6:24:51:1b:bc:20:dc:83:74:6f:1a:f4:fc:7d:b3:36:fc:63: 83:23:22:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjQwNTE4MTY1MjA1WhcNMjQwNTI1MTY1MjA1WjAYMRYwFAYD VQQDEw02NjQ4ZGNiNS05ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrsILm6skxVfjxc3/tcvc3IncOZ5/j4xdDmIb6fSCyxfyJQH90Zw8omiVnch H8+ekRF8owYEIjTF9SNK1rxlDVEAefdUf+omHiZY8bwAPScwZeEBBB9vjxsz3n9z SmmfeSrnSpJVwoCElFp9nBwg7+T63LmFLRX6aOPdW5v89Pse9iKvrbf0DFuMSwRs dv8cPmdmeM7+xy8vpukGYD1ZZj0PbP/Wh7zo4ZF2YoDRkBpjbahmyhos0EsyGYWY A9kk/alNd/YoojvLZ9zcprG1zmJQDdo7CWoswP8TZcwitm0uY5OrxMRFVNxzeua2 La1ORbxg/UTzyM0wRisBYGTWFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7dk+4b wp02xm53Qe5sTbRfL3ZOMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwyKarWgGx1LPkfr0zEw5UhYtCRiiQOFJ3mYSy8qsCbOddQMd3dd75 sPMHxZtxW21/ske7J6V32NWdN2x6uA3+mrs3ENva3vnppQWXzqpcZa4q+awPcPQb AaV8XJ4ED4MHQ3MhCeoRJ35Z2KQ+of3O1EWs7cG1Zf4SRLvr3CTJF8F37Nu6YwhB na3T2SSN4kDj3PtWm88OC2VtuysiWTkNt6qrlyXZtA9czFohucGXPvunG5dd6sHH nskFNjbJDcQfGjNIzZtVnTwJSC4E0AxqO4rjqA2w0JackgYQIOViKqIV4ikAi4da F9HWJFEbvCDcg3RvGvT8fbM2/GODIyLp -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org