$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft File: RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json) Hash identifier: 6tSNzci8AJpL5n5DFezI4WPkr0JUgcTsI9QQETh0Izs= Subject key identifier: D4:06:39:68:D2:38:0B:37:48:73:99:C9:7C:AD:41:32:5F:24:B3:30 Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft Manifest number: 0450 Signing time: Sat 01 Jun 2024 02:54:18 +0000 Manifest this update: Sat 01 Jun 2024 02:54:17 +0000 Manifest next update: Sat 08 Jun 2024 02:54:17 +0000 Files and hashes: 1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: ClM5iz69sJ0f5yBjrkXd/NWCtPRa/jlkRFI3eUifuoE=) 2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: WLnc9S4f9qHS4f2SHwwlmbxkC+IRwbCNUEVt/wAYlAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Validity Not Before: Jun 1 02:54:17 2024 GMT Not After : Jun 8 02:54:17 2024 GMT Subject: CN=665a8d5a-85ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:d8:89:9d:16:dd:cb:a7:35:f3:81:3a:f1: 78:53:42:41:41:58:2d:04:fd:b2:1e:43:a2:2e:2a: 24:08:74:2b:f0:8e:ef:67:19:49:8f:8d:1a:cf:61: d6:ec:34:dc:ea:00:fb:b5:62:a6:c0:9a:86:50:3e: d4:7c:6d:22:23:c9:27:ff:41:89:c4:f7:f2:e2:19: d3:97:9c:98:7a:2c:e4:9f:ec:30:12:d8:3b:81:16: ec:d1:07:38:b4:f6:64:00:68:33:a6:f1:4a:d1:e3: 89:f8:71:d6:8a:74:64:aa:57:14:04:a2:37:32:0c: 98:31:e4:7c:71:eb:e6:db:76:e2:93:0c:04:74:7a: bf:c3:9d:e0:58:eb:62:ec:44:5a:25:cb:5a:e4:8a: 59:12:31:67:40:b9:05:97:a4:23:2f:30:b3:e3:3c: be:45:82:3a:fc:3b:9f:42:6a:5e:cf:97:66:6e:75: c7:54:ab:7f:41:0d:21:c1:ae:17:fd:a3:e2:8e:3c: 7f:66:fe:83:62:ed:a8:98:27:cb:ce:9e:59:97:bf: 1b:c9:b1:89:a4:80:1d:d2:00:1f:f1:4b:e8:85:90: 55:d6:0d:e9:a1:10:f9:4a:8f:a4:d5:f8:2b:c3:97: ad:d3:1a:d4:ac:b9:60:79:6c:69:9a:31:73:1b:d9: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:06:39:68:D2:38:0B:37:48:73:99:C9:7C:AD:41:32:5F:24:B3:30 X509v3 Authority Key Identifier: keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d3:80:d4:bf:48:57:cd:d1:cc:7e:ef:86:bd:3b:9c:0a:66: 6f:50:7b:54:d6:b5:d2:0b:64:84:71:62:88:5e:ca:6f:58:ce: 3b:0e:13:dc:01:c8:06:24:6d:8c:1d:62:4f:b5:ba:d6:57:f4: 22:5d:91:fc:2a:9b:78:b3:be:d9:51:d7:4b:ab:67:c6:f8:3a: 2f:87:e2:19:c2:2e:30:73:55:fd:3a:1e:c1:ee:fd:bf:97:15: 29:3a:0d:61:56:ba:ae:0d:5d:5a:b8:f2:45:bf:e3:0a:04:d6: 4f:7f:23:c0:81:d0:56:77:50:4f:29:d5:43:66:3e:17:ad:fd: 03:9f:32:2a:5f:c0:b3:78:03:2c:30:01:0f:a5:ad:a2:ef:f2: 61:d2:e0:99:e5:80:e4:24:f2:ff:c5:b8:fa:5b:78:1a:78:9f: 80:71:25:76:b1:d9:f0:8c:a2:e2:50:21:e5:91:52:d8:b7:be: 8c:26:96:ba:3a:7e:59:91:bb:4f:a7:92:e4:e5:0c:83:1b:8f: 3f:4f:df:90:0e:47:84:bc:40:53:33:a1:c4:f5:1d:78:bf:b5: 5b:d6:2c:b1:02:d0:39:89:c4:1f:52:f7:7f:5c:2d:59:2b:31: d1:80:75:d8:67:1c:4d:bb:19:18:36:c9:52:27:b2:d6:de:f4: 5d:fd:a7:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3 MUU4RjgzRUMwHhcNMjQwNjAxMDI1NDE3WhcNMjQwNjA4MDI1NDE3WjAYMRYwFAYD VQQDEw02NjVhOGQ1YS04NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL3YiZ0W3cunNfOBOvF4U0JBQVgtBP2yHkOiLiokCHQr8I7vZxlJj40az2HW 7DTc6gD7tWKmwJqGUD7UfG0iI8kn/0GJxPfy4hnTl5yYeizkn+wwEtg7gRbs0Qc4 tPZkAGgzpvFK0eOJ+HHWinRkqlcUBKI3MgyYMeR8cevm23bikwwEdHq/w53gWOti 7ERaJcta5IpZEjFnQLkFl6QjLzCz4zy+RYI6/DufQmpez5dmbnXHVKt/QQ0hwa4X /aPijjx/Zv6DYu2omCfLzp5Zl78bybGJpIAd0gAf8UvohZBV1g3poRD5So+k1fgr w5et0xrUrLlgeWxpmjFzG9n/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQGOWjS OAs3SHOZyXytQTJfJLMwMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5 OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2 MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW04DUv0hXzdHMfu+GvTucCmZvUHtU1rXSC2SEcWKIXspvWM47DhPc AcgGJG2MHWJPtbrWV/QiXZH8Kpt4s77ZUddLq2fG+Dovh+IZwi4wc1X9Oh7B7v2/ lxUpOg1hVrquDV1auPJFv+MKBNZPfyPAgdBWd1BPKdVDZj4Xrf0DnzIqX8CzeAMs MAEPpa2i7/Jh0uCZ5YDkJPL/xbj6W3gaeJ+AcSV2sdnwjKLiUCHlkVLYt76MJpa6 On5ZkbtPp5Lk5QyDG48/T9+QDkeEvEBTM6HE9R14v7Vb1iyxAtA5icQfUvd/XC1Z KzHRgHXYZxxNuxkYNslSJ7LW3vRd/afJ -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:03 2024 by rpki-client on console-fra.rpki-client.org