$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft File: wLFgOcRs3wyI2adKgtnkWaOoyuY.mft (raw, json) Hash identifier: 3u+Me1nEeVRzcjizWe8CYkG11fudw+wGRb1bIAQtrI4= Subject key identifier: 25:01:D7:EF:2A:50:A6:E1:74:B2:85:C9:9D:FA:8E:B7:96:1D:53:95 Authority key identifier: C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 Certificate issuer: /CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft Manifest number: 04DE Signing time: Fri 31 May 2024 01:53:55 +0000 Manifest this update: Fri 31 May 2024 01:53:54 +0000 Manifest next update: Fri 07 Jun 2024 01:53:54 +0000 Files and hashes: 1: wLFgOcRs3wyI2adKgtnkWaOoyuY.crl (hash: rDjY7gTlyu3YLyScYCohCsWHAsRGBY5lWiOzMR5J+/Y=) 2: 974A6E0CE15611EC9E14513DC4F9AE02.roa (hash: it97aMVO7z/szOuRdoiZildMRkb16qoJyAaIBBrlycw=) 3: 96033290E15611EC9E14513DC4F9AE02.roa (hash: 9rUYZVVSecYKVgGZS3+LYYtxh4AnVM4o9EV4HsZiQko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A9EE/serialNumber=C0B16039C46CDF0C88D9A74A82D9E459A3A8CAE6 Validity Not Before: May 31 01:53:54 2024 GMT Not After : Jun 7 01:53:54 2024 GMT Subject: CN=66592db3-7d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:df:26:96:9a:6e:6e:98:6f:58:69:8e:a2: ac:09:b3:86:cc:ea:4f:54:24:59:2f:8a:2e:17:b8: 0a:b2:75:ae:58:47:06:01:8b:9e:0e:ff:c2:ab:13: c1:10:6a:2d:fd:16:91:3f:66:b5:af:1c:94:21:0d: be:6f:a5:c1:ba:98:e1:27:30:bb:8b:fe:ff:3d:bd: ec:dc:cd:fd:4f:b0:b9:bb:db:e5:58:c8:2c:04:53: 00:f2:c3:3e:3a:d1:b9:4b:f6:96:fa:fc:06:5f:42: 3f:6e:cc:65:d5:ee:c3:ae:dd:55:0c:5a:e1:4a:46: 61:31:61:c4:91:48:93:f9:d6:39:98:b3:9d:a1:bc: 38:ad:cb:dc:30:01:e6:86:e9:11:2d:6b:fe:28:f3: 1b:af:27:0c:51:f2:24:3e:2f:c7:d2:2f:6d:56:8c: 0b:f0:b4:eb:9b:0c:de:63:a9:45:b1:13:a0:5a:4c: 1a:88:43:75:b7:b8:d2:eb:e9:c2:4f:c0:f5:7b:ac: 62:08:4c:81:25:a8:1f:ad:70:80:68:0b:a2:c9:c7: 34:a5:05:93:d7:c0:33:a5:52:17:fd:83:57:9c:f1: 4e:ea:05:c1:d2:3b:5f:65:89:bf:d1:de:ea:bc:54: 4c:9c:ed:ea:09:e4:b4:d4:87:e8:e7:6a:39:32:2a: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:D7:EF:2A:50:A6:E1:74:B2:85:C9:9D:FA:8E:B7:96:1D:53:95 X509v3 Authority Key Identifier: keyid:C0:B1:60:39:C4:6C:DF:0C:88:D9:A7:4A:82:D9:E4:59:A3:A8:CA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLFgOcRs3wyI2adKgtnkWaOoyuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9EE/A08B6A5CD36A11EB88B1EB33C4F9AE02/wLFgOcRs3wyI2adKgtnkWaOoyuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:32:60:e4:cf:b5:fa:6b:5d:ec:88:94:a2:1c:9b:2b:00:32: 8b:e8:d2:3a:be:d6:f8:b0:81:9d:f4:c8:ff:0e:07:eb:e4:08: 16:f7:99:4a:bb:d2:58:3e:39:38:af:4d:f7:1c:75:a7:09:8f: 9b:db:36:f6:f5:b0:cb:a0:5e:2f:50:70:68:a8:d2:c0:b8:ca: 47:ce:bf:4e:3f:fa:71:53:df:d4:ea:38:8d:e9:4b:79:a5:88: 8d:bc:ff:8f:c1:2e:68:a1:6c:9f:b1:68:db:b5:01:a2:0f:a9: df:06:7d:5d:51:a7:e7:84:be:25:c5:54:64:1e:23:52:5b:fe: c5:50:ee:88:75:e9:b8:41:b5:5a:ed:74:5b:a0:ab:25:8d:e7: bf:33:5b:3f:6e:0b:65:cd:11:01:e8:11:39:dd:c4:c0:c1:0e: da:bf:4a:e8:ba:c6:e8:37:71:b2:86:38:2a:ba:79:8c:89:6b: 32:f4:aa:42:31:c9:57:b2:61:85:f4:4a:4e:72:32:8a:e8:12: d9:bc:58:3e:10:95:13:60:ca:84:63:f8:47:54:ce:cd:ca:c7: 15:0a:c1:60:f4:5d:73:2e:b1:e1:0a:a3:84:dd:e7:a6:9b:e0: a8:9c:6f:4d:94:96:62:a5:4e:5e:69:fb:f8:18:1a:53:54:6d: 8b:c4:51:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5RUUxMTAvBgNVBAUTKEMwQjE2MDM5QzQ2Q0RGMEM4OEQ5QTc0QTgyRDlFNDU5 QTNBOENBRTYwHhcNMjQwNTMxMDE1MzU0WhcNMjQwNjA3MDE1MzU0WjAYMRYwFAYD VQQDEw02NjU5MmRiMy03ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CPfJpaabm6Yb1hpjqKsCbOGzOpPVCRZL4ouF7gKsnWuWEcGAYueDv/CqxPB EGot/RaRP2a1rxyUIQ2+b6XBupjhJzC7i/7/Pb3s3M39T7C5u9vlWMgsBFMA8sM+ OtG5S/aW+vwGX0I/bsxl1e7Drt1VDFrhSkZhMWHEkUiT+dY5mLOdobw4rcvcMAHm hukRLWv+KPMbrycMUfIkPi/H0i9tVowL8LTrmwzeY6lFsROgWkwaiEN1t7jS6+nC T8D1e6xiCEyBJagfrXCAaAuiycc0pQWT18AzpVIX/YNXnPFO6gXB0jtfZYm/0d7q vFRMnO3qCeS01Ifo52o5Miq69QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUB1+8q UKbhdLKFyZ36jreWHVOVMB8GA1UdIwQYMBaAFMCxYDnEbN8MiNmnSoLZ5FmjqMrm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTlFRS9BMDhCNkE1Q0Qz NkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3eUkyYWRLZ3Rua1dhT295 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMRmdPY1JzM3d5STJhZEtndG5rV2FPb3l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTlFRS9BMDhCNkE1Q0QzNkExMUVCODhCMUVCMzNDNEY5QUUwMi93TEZnT2NSczN3 eUkyYWRLZ3Rua1dhT295dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxMmDkz7X6a13siJSiHJsrADKL6NI6vtb4sIGd9Mj/Dgfr5AgW95lK u9JYPjk4r033HHWnCY+b2zb29bDLoF4vUHBoqNLAuMpHzr9OP/pxU9/U6jiN6Ut5 pYiNvP+PwS5ooWyfsWjbtQGiD6nfBn1dUafnhL4lxVRkHiNSW/7FUO6Idem4QbVa 7XRboKsljee/M1s/bgtlzREB6BE53cTAwQ7av0rousboN3GyhjgqunmMiWsy9KpC MclXsmGF9EpOcjKK6BLZvFg+EJUTYMqEY/hHVM7NyscVCsFg9F1zLrHhCqOE3eem m+ConG9NlJZipU5eafv4GBpTVG2LxFFE -----END CERTIFICATE-----Generated at Fri May 31 03:15:02 2024 by rpki-client on console-ams.rpki-client.org