$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: bpEyJVxl24ISwKp65FfJLl+Qfb5uscN/jRp0uaYypCk= Subject key identifier: D4:F9:8D:6B:F7:8E:67:C4:53:3E:4D:C9:B9:A3:08:66:A1:F4:14:02 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 064E Signing time: Sat 01 Jun 2024 00:30:54 +0000 Manifest this update: Sat 01 Jun 2024 00:30:54 +0000 Manifest next update: Sat 08 Jun 2024 00:30:54 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: TGPmmrYZ4ah5FBBbnIkfT9qExPg+c7killsb16H0064=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: le+pL78T/5WOyWn02JNH/JXNPs9vefxlfUt8ab1FKYI=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: +hvAkUjJQDkxg4YO4MDeyWdMQFculz4teJUZHUzCNDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Jun 1 00:30:54 2024 GMT Not After : Jun 8 00:30:54 2024 GMT Subject: CN=665a6bbe-720a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:95:39:e2:cf:26:ae:96:02:9b:df:e5:af: 26:3f:3a:c8:8c:88:19:68:89:d5:c1:cb:13:44:e7: 15:ae:34:9e:68:26:d8:71:f6:63:59:ad:af:72:35: bf:01:90:aa:11:a1:c0:d0:7f:1b:d3:a6:28:3a:5c: 08:e1:dc:de:97:98:e2:dd:cb:84:fb:88:ed:d8:a5: 15:48:37:4c:6e:bf:c1:c3:b8:70:52:e1:6a:c9:75: 74:50:2d:3a:39:0f:75:d3:a2:68:55:f9:6a:75:c8: b0:f2:62:8b:a6:0e:09:32:af:c9:21:3a:bd:54:65: e3:2d:ed:d9:da:8c:3a:3c:22:d0:fc:ef:85:a6:33: 81:ad:18:6d:21:02:ce:a8:71:2b:90:6d:d8:92:61: 91:a6:e7:08:50:ce:82:8e:82:9e:5a:bf:44:2a:05: be:d3:9a:7f:5c:6c:e2:0f:8d:b9:0e:b9:11:8e:e7: 9d:6d:fe:fc:0f:ba:e4:2e:7e:5e:f0:f5:c3:b8:33: 74:dd:c7:c2:d3:ab:af:68:b5:92:81:76:7e:3b:2e: 8d:1c:f0:69:da:85:ba:21:22:c7:56:fe:64:4a:d1: cc:5d:57:1e:6f:69:18:1f:97:49:e6:c0:0b:99:97: e6:33:fc:32:61:71:7b:7e:d8:72:ad:fe:1e:e7:49: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:8D:6B:F7:8E:67:C4:53:3E:4D:C9:B9:A3:08:66:A1:F4:14:02 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1f:15:cf:9d:6c:7d:33:73:a8:c4:9d:78:e5:6d:16:5b:2a: f5:b8:3a:40:fb:e1:2f:e0:ca:e3:61:b4:ee:21:d0:10:e2:2a: 2c:0f:b6:21:e5:04:77:d2:73:61:33:58:5d:07:6d:dd:d2:eb: 34:93:61:1c:f3:4f:0f:6f:ed:15:9d:85:de:96:91:b7:f0:ef: db:a2:17:fe:f0:40:2e:0a:31:dc:60:f2:38:b9:09:7a:16:aa: fa:d9:8f:e2:cf:ea:de:bd:df:ac:ed:4b:f1:89:87:76:16:ea: ed:ba:13:0b:e4:f4:c2:21:f0:c6:5c:e5:40:51:07:2d:7f:4f: e6:c2:f9:42:46:b2:ba:10:a4:8d:d1:58:1e:83:d8:b8:60:52: 14:9a:b2:96:94:ea:4d:e8:7f:3e:1d:af:c0:05:ad:8f:44:ec: f1:56:7d:77:f8:22:cc:f4:58:4a:54:12:04:c7:36:4d:51:b2: 06:11:2a:3a:8f:2b:d2:ef:0c:3f:0f:d2:c6:a6:9b:f0:4d:62: fd:41:21:26:8b:fd:c4:23:32:4b:c2:d1:88:f4:04:ac:1d:1a: 26:b0:45:3b:ca:fc:b7:7e:62:08:83:8b:92:fb:83:5d:61:4c: d3:4e:f4:91:a2:6f:61:0b:5e:45:84:6d:1e:4a:2d:03:48:ed: c0:ff:02:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjQwNjAxMDAzMDU0WhcNMjQwNjA4MDAzMDU0WjAYMRYwFAYD VQQDEw02NjVhNmJiZS03MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqmVOeLPJq6WApvf5a8mPzrIjIgZaInVwcsTROcVrjSeaCbYcfZjWa2vcjW/ AZCqEaHA0H8b06YoOlwI4dzel5ji3cuE+4jt2KUVSDdMbr/Bw7hwUuFqyXV0UC06 OQ9106JoVflqdciw8mKLpg4JMq/JITq9VGXjLe3Z2ow6PCLQ/O+FpjOBrRhtIQLO qHErkG3YkmGRpucIUM6CjoKeWr9EKgW+05p/XGziD425DrkRjuedbf78D7rkLn5e 8PXDuDN03cfC06uvaLWSgXZ+Oy6NHPBp2oW6ISLHVv5kStHMXVceb2kYH5dJ5sAL mZfmM/wyYXF7fthyrf4e50mSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNT5jWv3 jmfEUz5NybmjCGah9BQCMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcHxXPnWx9M3OoxJ145W0WWyr1uDpA++Ev4MrjYbTuIdAQ4iosD7Yh 5QR30nNhM1hdB23d0us0k2Ec808Pb+0VnYXelpG38O/bohf+8EAuCjHcYPI4uQl6 Fqr62Y/iz+revd+s7UvxiYd2FurtuhML5PTCIfDGXOVAUQctf0/mwvlCRrK6EKSN 0Vgeg9i4YFIUmrKWlOpN6H8+Ha/ABa2PROzxVn13+CLM9FhKVBIExzZNUbIGESo6 jyvS7ww/D9LGppvwTWL9QSEmi/3EIzJLwtGI9ASsHRomsEU7yvy3fmIIg4uS+4Nd YUzTTvSRom9hC15FhG0eSi0DSO3A/wJ0 -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org