$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: 8WkvGOdQaWRnuA+oD68xaj/ThL0XeF2u2sdCBJZRVZQ= Subject key identifier: 94:0F:EE:CB:97:DB:9A:CA:84:6B:22:13:67:42:84:48:0D:1F:1E:34 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 08BE Signing time: Sat 18 May 2024 21:28:53 +0000 Manifest this update: Sat 18 May 2024 21:28:53 +0000 Manifest next update: Sat 25 May 2024 21:28:53 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: GcTt8TtobxAziOVFwMREK8F0mAJAFFDw3ANgOgbSs9I=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: rU8ueRHigkcnrboSiyuAgDPtglpiwxpoV+xUGO9FxD4=) 3: 7C3B57D48FBE11EA9797847DC4F9AE02.roa (hash: tVnphRRZgGFSH92354sv/OpGtYFdnNRhky6OfyETCg4=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: Y60lVXZCMvlg24lDH++SKV1ufImtIdM82ov4PLfGH4o=) 5: 7CD5A60E8FBE11EA9797847DC4F9AE02.roa (hash: 0N7KnyWQo6VcQUYOyNzJ4ZYibJk8iB5HaQ5JSpbobWM=) 6: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: ccG1BUs0i4CV7gjyI57tTXWxoo2ZO3TQ4gdTjDhcm5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: May 18 21:28:53 2024 GMT Not After : May 25 21:28:53 2024 GMT Subject: CN=66491d95-2fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d9:4b:bd:c9:13:c4:74:60:f3:b1:b6:82:34: 35:17:26:be:47:b2:a3:17:b4:8f:f8:d6:22:52:5c: 77:26:03:66:11:d4:ea:16:8a:4b:f8:6e:4c:69:6a: f4:40:71:25:5e:2b:25:f4:43:3e:b2:29:8e:7e:80: 67:8f:5a:56:7f:32:db:a9:7f:74:15:9d:33:33:c7: e1:bb:69:9c:84:f3:2d:18:72:4a:7d:99:44:58:8d: f8:af:55:d2:b7:89:de:ff:33:53:a2:63:33:c6:5a: f0:ca:da:f5:f2:4d:56:b8:03:23:59:77:62:37:20: af:99:df:34:c0:ee:38:a2:be:20:18:02:8e:ba:3d: 78:7b:50:f7:77:68:3b:4d:f4:97:90:b3:ff:e5:aa: f0:54:1d:2f:23:83:f8:64:c6:2a:fe:f2:07:0b:57: 23:9e:7a:44:00:0a:0a:60:40:77:f8:3e:67:75:fc: 8c:2e:13:f9:88:df:ed:3f:59:fd:a2:ba:91:89:17: 6a:e6:ea:16:b6:0b:e2:c9:b3:d9:6b:18:8d:33:3c: 19:a4:99:bb:fe:82:c5:90:a4:e6:cc:d7:c6:24:f8: 06:09:a4:76:51:59:2c:c1:9a:f5:dc:4f:3b:02:b0: 5b:21:74:1e:39:16:06:cb:8f:c9:b6:f2:92:a2:73: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0F:EE:CB:97:DB:9A:CA:84:6B:22:13:67:42:84:48:0D:1F:1E:34 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:3d:43:43:d6:6c:d7:18:27:3c:69:7b:5e:6f:83:e5:7c: 93:cb:ae:00:66:15:80:d7:53:5c:73:fe:96:d9:97:c1:92:84: ea:4a:5e:f4:56:c5:a7:94:8d:0c:b2:18:82:59:f4:fb:00:7b: fb:66:7a:d3:f5:cf:6d:c8:3c:31:2f:0f:10:6f:40:2f:41:cc: d9:30:82:86:c6:40:bf:69:92:9f:cf:72:cd:16:55:0f:6d:3c: 42:88:d0:33:31:2b:2e:96:34:a7:e9:79:10:86:e0:79:86:c0: b5:6b:0a:1d:45:35:fd:33:9c:f1:12:25:a6:fe:fa:dd:58:10: e3:fb:c6:ff:0f:11:ed:c3:fd:d1:e6:4e:a2:d4:1c:30:25:d6: e4:64:2d:ba:27:f5:36:1e:b9:75:3c:75:ea:30:91:1d:be:ff: c6:ce:22:2b:58:fa:65:cf:13:cb:7d:2f:f9:6c:6e:0a:e0:19: 21:e8:5a:49:57:fc:96:88:1b:af:70:70:cd:8a:f9:46:0e:cf: 18:c3:63:8c:b2:5c:7f:e2:a8:b5:f5:25:c0:00:e5:0b:31:3d: ba:26:16:0a:25:33:aa:0e:49:bd:2c:0d:3d:2b:13:2d:7d:34: 21:f5:ea:df:fd:40:d1:30:64:3d:cb:73:9a:cc:e9:fe:02:7f: 3e:35:47:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjQwNTE4MjEyODUzWhcNMjQwNTI1MjEyODUzWjAYMRYwFAYD VQQDEw02NjQ5MWQ5NS0yZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dlLvckTxHRg87G2gjQ1Fya+R7KjF7SP+NYiUlx3JgNmEdTqFopL+G5MaWr0 QHElXisl9EM+simOfoBnj1pWfzLbqX90FZ0zM8fhu2mchPMtGHJKfZlEWI34r1XS t4ne/zNTomMzxlrwytr18k1WuAMjWXdiNyCvmd80wO44or4gGAKOuj14e1D3d2g7 TfSXkLP/5arwVB0vI4P4ZMYq/vIHC1cjnnpEAAoKYEB3+D5ndfyMLhP5iN/tP1n9 orqRiRdq5uoWtgviybPZaxiNMzwZpJm7/oLFkKTmzNfGJPgGCaR2UVkswZr13E87 ArBbIXQeORYGy4/JtvKSonND0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQP7suX 25rKhGsiE2dChEgNHx40MB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxkT1DQ9Zs1xgnPGl7Xm+D5XyTy64AZhWA11Ncc/6W2ZfBkoTqSl70 VsWnlI0MshiCWfT7AHv7ZnrT9c9tyDwxLw8Qb0AvQczZMIKGxkC/aZKfz3LNFlUP bTxCiNAzMSsuljSn6XkQhuB5hsC1awodRTX9M5zxEiWm/vrdWBDj+8b/DxHtw/3R 5k6i1BwwJdbkZC26J/U2Hrl1PHXqMJEdvv/GziIrWPplzxPLfS/5bG4K4Bkh6FpJ V/yWiBuvcHDNivlGDs8Yw2OMslx/4qi19SXAAOULMT26JhYKJTOqDkm9LA09KxMt fTQh9erf/UDRMGQ9y3OazOn+An8+NUfi -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org