$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: QUhnl4Tv+DNcknzAOGbGdT1idI/Rehb8oSE9Fo20e8o= Subject key identifier: DE:90:31:B1:F7:C6:D5:02:3C:3B:0F:37:70:B0:04:34:72:89:15:7A Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: DB Signing time: Sun 19 May 2024 06:06:26 +0000 Manifest this update: Sun 19 May 2024 06:06:25 +0000 Manifest next update: Sun 26 May 2024 06:06:25 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: La9auFypEJvJJfSrE41NgRB1t4wZ8Hs9Sid0QyBDOBE=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: ndYomZ99yxFknrYEsXYBDeEAsKcdU++6L8FlnDMmRWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: May 19 06:06:25 2024 GMT Not After : May 26 06:06:25 2024 GMT Subject: CN=664996e1-c890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:25:9b:6d:60:79:82:04:6c:fb:8f:d8:05: 1a:74:41:76:ea:1b:90:75:aa:c8:f3:ec:56:d6:c0: e9:dd:77:0e:4f:b6:24:61:ba:79:44:3d:5a:87:d0: bd:41:c7:34:27:d3:78:a8:40:2e:55:79:d9:94:7a: 47:c5:cd:3f:93:88:8c:b4:56:93:a9:c6:48:81:37: db:e7:3c:e1:63:77:04:5b:b1:99:39:af:cb:dc:0b: e3:97:06:5f:a6:db:aa:17:56:4e:12:bb:5a:ad:8e: 51:32:8e:49:cc:88:05:48:a5:63:c7:11:2e:13:6a: 92:71:f2:ba:45:28:c2:f2:f6:d6:07:cb:47:69:ff: 83:e9:b5:9f:85:81:e4:5c:d9:24:75:7a:d4:47:1d: d7:16:c9:34:02:cf:84:b5:f4:90:a6:3e:aa:0c:4e: 76:5f:93:c8:17:83:aa:b0:c7:ff:1a:9a:27:99:95: 64:cc:2f:da:f9:53:56:f7:81:d9:62:c5:0f:cd:7b: 99:bf:99:a7:27:ba:a2:1c:af:25:62:74:24:3e:39: 86:6c:ad:62:65:30:6c:75:27:5f:ce:82:1d:da:ec: 4c:17:c4:f2:33:c7:d7:d1:08:de:18:fc:8f:4b:33: 0c:ff:65:ec:e1:93:67:21:5e:76:b3:88:75:6f:99: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:31:B1:F7:C6:D5:02:3C:3B:0F:37:70:B0:04:34:72:89:15:7A X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e5:d4:4e:96:0d:3a:38:8b:76:c0:5c:ee:74:9b:f4:de:c1: dc:81:dc:75:c8:f7:00:d5:f2:20:35:ef:3e:08:89:6b:5e:2d: fa:b8:44:92:1d:ed:22:6d:b2:3a:fb:65:fe:da:2f:7a:3e:bb: 57:6c:a1:37:47:bc:97:72:01:83:5a:f0:b5:9c:a7:25:fd:cf: ac:73:b3:93:c1:36:c3:ce:da:dc:80:90:3c:41:f9:d8:b7:28: c2:3e:0e:4f:06:32:e3:98:8a:ca:04:8b:d4:e8:83:b9:13:2d: c3:db:f8:20:b6:55:c0:e3:f0:4f:f3:73:bb:78:4f:e6:6b:d9: dd:88:aa:e5:b9:c2:61:b9:bf:d9:6f:cf:99:e1:a3:09:58:13: 83:85:05:30:54:69:15:f0:a3:92:aa:57:45:8b:de:89:7c:f3: 87:a4:fe:97:19:aa:65:c1:c4:b9:f1:3e:2d:f2:26:be:78:d1: ca:ca:d6:1a:1a:e4:6d:d9:b7:c0:b6:d7:1a:37:b4:1d:c6:9e: cf:56:b5:58:cd:ee:a9:b2:1c:1e:67:82:56:da:a8:68:a4:09: 18:4e:9c:78:7c:7e:df:ee:e0:ac:81:e0:ae:d5:17:d5:b4:e4: 96:53:8a:21:d8:23:89:81:9a:b0:d6:7b:01:a8:94:f7:a9:67: 35:20:06:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjQwNTE5MDYwNjI1WhcNMjQwNTI2MDYwNjI1WjAYMRYwFAYD VQQDEw02NjQ5OTZlMS1jODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KIlm21geYIEbPuP2AUadEF26huQdarI8+xW1sDp3XcOT7YkYbp5RD1ah9C9 Qcc0J9N4qEAuVXnZlHpHxc0/k4iMtFaTqcZIgTfb5zzhY3cEW7GZOa/L3AvjlwZf ptuqF1ZOErtarY5RMo5JzIgFSKVjxxEuE2qScfK6RSjC8vbWB8tHaf+D6bWfhYHk XNkkdXrURx3XFsk0As+EtfSQpj6qDE52X5PIF4OqsMf/GponmZVkzC/a+VNW94HZ YsUPzXuZv5mnJ7qiHK8lYnQkPjmGbK1iZTBsdSdfzoId2uxMF8TyM8fX0QjeGPyP SzMM/2Xs4ZNnIV52s4h1b5kxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6QMbH3 xtUCPDsPN3CwBDRyiRV6MB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+5dROlg06OIt2wFzudJv03sHcgdx1yPcA1fIgNe8+CIlrXi36uESS He0ibbI6+2X+2i96PrtXbKE3R7yXcgGDWvC1nKcl/c+sc7OTwTbDztrcgJA8QfnY tyjCPg5PBjLjmIrKBIvU6IO5Ey3D2/ggtlXA4/BP83O7eE/ma9ndiKrlucJhub/Z b8+Z4aMJWBODhQUwVGkV8KOSqldFi96JfPOHpP6XGaplwcS58T4t8ia+eNHKytYa GuRt2bfAttcaN7Qdxp7PVrVYze6pshweZ4JW2qhopAkYTpx4fH7f7uCsgeCu1RfV tOSWU4oh2COJgZqw1nsBqJT3qWc1IAb3 -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org