$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: mYyJoFRzDdilo2MHhmH7A7xrk494ayn8/i5ghnfNda8= Subject key identifier: B7:4A:1E:A3:64:A0:AF:AB:FA:8E:40:5D:D0:84:1E:AF:80:B6:EF:E0 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 0FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 0FD9 Signing time: Sat 18 May 2024 18:02:19 +0000 Manifest this update: Sat 18 May 2024 18:02:19 +0000 Manifest next update: Sat 25 May 2024 18:02:19 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: zsBBaaUdnpjWDQXQD+l2aimeK1nq0sW6kN2CT+DYcbM=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: RT81J29uhYl4YzqEly3Rmp3Ji5PBXdnS+hxd+mUFyP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: May 18 18:02:19 2024 GMT Not After : May 25 18:02:19 2024 GMT Subject: CN=6648ed2b-1e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:62:92:17:c1:1a:d0:94:dc:17:cb:c1:d8: 69:12:aa:78:1c:b1:85:ef:10:35:74:a3:22:29:04: 12:5e:f2:66:f2:74:bb:14:4e:d4:1c:9a:57:b9:b2: 24:ae:8c:73:ef:76:15:42:63:6d:e8:03:66:5f:61: 43:cd:46:63:5a:95:14:5d:ac:83:43:e8:15:55:f0: 4d:67:3a:f6:fd:77:41:2c:a0:f3:79:50:ca:6d:45: 51:ad:ea:6c:64:b3:28:8e:fb:a6:e0:71:4c:6a:f2: 47:8e:0d:8e:2d:80:ce:ea:51:34:1e:c8:c2:61:de: c2:dd:10:9a:3b:e3:9c:a8:92:d7:5b:d6:6a:95:a4: 36:08:dd:8f:10:ff:8a:e6:01:5c:f8:d7:40:92:b0: bf:27:20:63:95:21:ea:4f:e4:95:ab:0f:20:f9:6b: cc:44:33:b6:b7:15:6b:be:30:60:21:c6:5b:02:70: fa:70:91:73:be:2a:17:65:fa:96:00:60:2c:08:3b: 82:69:b0:34:75:48:92:c5:94:a3:78:9f:6f:6e:aa: 45:b8:ed:17:f3:ba:73:71:b8:4b:4d:97:50:0a:17: 1b:64:c0:29:5d:eb:c7:64:bb:5a:93:3a:63:b9:5e: d2:30:b6:29:83:ff:3f:d2:10:b0:53:d6:fc:90:c1: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:1E:A3:64:A0:AF:AB:FA:8E:40:5D:D0:84:1E:AF:80:B6:EF:E0 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:15:6d:1d:fd:02:bf:d2:a3:f8:38:41:09:ea:26:b4:c5:76: 1d:47:05:f5:51:dd:ed:ba:67:f4:4f:81:40:ff:9c:12:0b:a6: 0e:78:92:ba:99:66:c0:17:03:f6:4d:8a:e1:73:f1:7c:7b:48: d0:f5:0b:09:9b:13:51:1f:8c:11:39:fd:b5:d6:a1:2c:96:22: 22:ba:03:25:6f:08:a1:30:df:15:d1:6c:3f:bb:a3:73:18:55: 3c:47:83:ad:f7:e9:51:f9:ba:61:0e:d4:22:c4:3e:d1:93:83: 54:a8:9f:22:b4:bf:63:bd:93:b8:23:d6:70:d1:46:9e:45:e5: 06:c6:c4:d1:63:4e:fd:1b:5d:83:e1:57:80:00:1a:d1:9d:3c: e3:ba:57:88:cd:1e:ea:f7:32:58:63:ac:7c:87:41:b2:52:81: a0:25:c1:6f:27:77:87:46:1b:7a:76:8d:19:50:cf:d7:9b:b9: 22:fa:ba:bd:36:59:4d:b5:5f:72:22:72:a1:44:d9:de:23:6d: ee:1b:ba:c2:3d:5b:7c:4d:33:32:fc:e6:7f:46:81:75:be:9e: 6c:14:0a:ef:27:ac:26:01:ff:87:28:47:b9:7d:60:25:d3:a0: 86:2d:a1:e5:86:84:97:62:9e:11:d7:ae:3c:25:47:1c:f8:f6: b4:3a:6b:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjQwNTE4MTgwMjE5WhcNMjQwNTI1MTgwMjE5WjAYMRYwFAYD VQQDEw02NjQ4ZWQyYi0xZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h9ikhfBGtCU3BfLwdhpEqp4HLGF7xA1dKMiKQQSXvJm8nS7FE7UHJpXubIk roxz73YVQmNt6ANmX2FDzUZjWpUUXayDQ+gVVfBNZzr2/XdBLKDzeVDKbUVRreps ZLMojvum4HFMavJHjg2OLYDO6lE0HsjCYd7C3RCaO+OcqJLXW9ZqlaQ2CN2PEP+K 5gFc+NdAkrC/JyBjlSHqT+SVqw8g+WvMRDO2txVrvjBgIcZbAnD6cJFzvioXZfqW AGAsCDuCabA0dUiSxZSjeJ9vbqpFuO0X87pzcbhLTZdQChcbZMApXevHZLtakzpj uV7SMLYpg/8/0hCwU9b8kMFfFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdKHqNk oK+r+o5AXdCEHq+Atu/gMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHFW0d/QK/0qP4OEEJ6ia0xXYdRwX1Ud3tumf0T4FA/5wSC6YOeJK6 mWbAFwP2TYrhc/F8e0jQ9QsJmxNRH4wROf211qEsliIiugMlbwihMN8V0Ww/u6Nz GFU8R4Ot9+lR+bphDtQixD7Rk4NUqJ8itL9jvZO4I9Zw0UaeReUGxsTRY079G12D 4VeAABrRnTzjuleIzR7q9zJYY6x8h0GyUoGgJcFvJ3eHRht6do0ZUM/Xm7ki+rq9 NllNtV9yInKhRNneI23uG7rCPVt8TTMy/OZ/RoF1vp5sFArvJ6wmAf+HKEe5fWAl 06CGLaHlhoSXYp4R1648JUcc+Pa0Omux -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org