$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: QjRQxHJMwXxFci1ojFiFZX9aRq9bhsVlPrMEIDaLHfs= Subject key identifier: 88:31:BC:0C:01:FD:15:45:3D:63:FE:78:4D:E7:9C:3E:1A:16:A8:3E Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0CC9 Signing time: Sat 18 May 2024 18:47:48 +0000 Manifest this update: Sat 18 May 2024 18:47:47 +0000 Manifest next update: Sat 25 May 2024 18:47:47 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: 0SfJqvBoCLDqg+ar31mg5E+KChfGjclCmGNoTHUO6nw=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: OOcUaZPbkyW4779Q1AXKo2gixDB3AoDPgAdlfA9uGBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3280 (0xcd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: May 18 18:47:47 2024 GMT Not After : May 25 18:47:47 2024 GMT Subject: CN=6648f7d3-05cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:c3:f1:17:4f:4f:fb:7e:40:1a:a6:ef:4b: ed:d6:4a:2b:e6:71:e7:46:f7:26:79:c9:78:67:68: d6:4e:57:9a:99:aa:35:db:ec:dd:0d:ed:60:ef:3f: e1:07:d1:91:0c:0f:f0:61:a5:ce:39:bf:c3:98:f2: 98:02:1c:82:92:6a:10:ad:ee:db:04:a9:fa:09:1c: 3f:72:26:ac:a4:18:28:70:2c:ac:7b:f1:80:92:db: 1c:9f:5f:eb:51:cf:e6:2f:0c:51:38:65:4c:e9:86: 30:75:4c:26:c3:0c:67:97:f2:67:1e:22:d9:66:d9: eb:b8:e6:ef:c1:7c:b9:e8:b7:4e:1b:f5:59:1a:08: 46:95:9f:a7:55:8a:05:57:e4:1c:74:53:04:ef:bb: f0:65:3d:e6:af:25:4f:12:43:63:99:64:e6:62:71: 9f:8a:b4:09:0a:57:6d:1b:33:69:5f:a1:42:0f:c8: bc:1a:38:19:b6:58:b7:cf:f9:59:22:fd:36:44:d1: 24:9f:ef:a5:1c:79:fd:41:a3:58:c4:41:10:5a:6d: 21:eb:30:7f:cb:86:9f:7f:b6:d6:db:ff:f0:f2:7b: dd:85:53:a8:b2:66:a8:6d:93:10:01:b1:0d:b6:91: be:f8:64:62:71:bd:60:86:c6:88:4e:30:e1:c2:4f: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:31:BC:0C:01:FD:15:45:3D:63:FE:78:4D:E7:9C:3E:1A:16:A8:3E X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:69:e8:ab:ea:e9:c3:e1:e7:98:9c:17:26:fe:7a:91:57:40: 16:3e:6f:65:2d:48:72:60:c3:4b:c6:47:de:17:da:d0:8d:30: 80:6a:74:5e:3e:d0:60:27:d2:16:cd:e9:50:a9:9e:e6:18:ab: 80:8b:42:c9:46:80:80:4e:78:53:67:a8:f9:53:cf:6a:f4:75: e0:94:79:4e:27:d1:fc:50:0b:93:e3:20:00:24:d1:65:16:52: 4e:4d:66:96:f1:f3:8f:12:23:70:b3:7f:52:23:09:9c:d5:2c: 67:2b:3e:54:26:01:08:c8:da:dc:e2:9e:a3:e9:ad:ab:9c:c8: 21:cf:80:9b:15:eb:bd:a4:cf:c0:47:d8:3a:38:2d:96:3a:94: d0:4f:e2:6c:22:f5:d2:27:03:da:93:bf:d6:f0:1d:f9:25:10: f3:b5:f9:d8:cd:49:2b:8f:9e:01:80:39:f4:b9:58:7c:74:5e: 80:c8:15:1f:47:70:c5:05:d5:c7:62:ec:4f:0f:be:a5:ac:ca: de:fb:b5:91:3a:34:d0:76:f3:4c:ab:0b:53:29:cf:12:2f:8a: 30:2b:b6:3f:da:4c:c8:b8:cd:61:0f:dc:e2:d3:9a:2d:fb:5a: 78:10:21:c7:5a:35:9b:e8:49:d5:ea:46:f2:7d:f2:ed:d8:25: f6:da:82:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjQwNTE4MTg0NzQ3WhcNMjQwNTI1MTg0NzQ3WjAYMRYwFAYD VQQDEw02NjQ4ZjdkMy0wNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07zD8RdPT/t+QBqm70vt1kor5nHnRvcmecl4Z2jWTleamao12+zdDe1g7z/h B9GRDA/wYaXOOb/DmPKYAhyCkmoQre7bBKn6CRw/ciaspBgocCyse/GAktscn1/r Uc/mLwxROGVM6YYwdUwmwwxnl/JnHiLZZtnruObvwXy56LdOG/VZGghGlZ+nVYoF V+QcdFME77vwZT3mryVPEkNjmWTmYnGfirQJCldtGzNpX6FCD8i8GjgZtli3z/lZ Iv02RNEkn++lHHn9QaNYxEEQWm0h6zB/y4aff7bW2//w8nvdhVOosmaobZMQAbEN tpG++GRicb1ghsaITjDhwk8LTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgxvAwB /RVFPWP+eE3nnD4aFqg+MB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzaeir6unD4eeYnBcm/nqRV0AWPm9lLUhyYMNLxkfeF9rQjTCAanRe PtBgJ9IWzelQqZ7mGKuAi0LJRoCATnhTZ6j5U89q9HXglHlOJ9H8UAuT4yAAJNFl FlJOTWaW8fOPEiNws39SIwmc1SxnKz5UJgEIyNrc4p6j6a2rnMghz4CbFeu9pM/A R9g6OC2WOpTQT+JsIvXSJwPak7/W8B35JRDztfnYzUkrj54BgDn0uVh8dF6AyBUf R3DFBdXHYuxPD76lrMre+7WROjTQdvNMqwtTKc8SL4owK7Y/2kzIuM1hD9zi05ot +1p4ECHHWjWb6EnV6kbyffLt2CX22oLR -----END CERTIFICATE-----Generated at Sat May 18 19:21:04 2024 by rpki-client on console-fra.rpki-client.org