$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json) Hash identifier: /Fw3JTi5eJKkYIHTR7SAXksufBlQtNWxpLD8yB1x12Y= Subject key identifier: 94:FA:73:22:2A:43:2F:CD:84:F3:C1:66:AC:3A:3E:7A:09:BB:65:26 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft Manifest number: 3B Signing time: Fri 31 May 2024 09:11:39 +0000 Manifest this update: Fri 31 May 2024 09:11:39 +0000 Manifest next update: Fri 07 Jun 2024 09:11:39 +0000 Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: +yRjtG8LUS9+IfXbFJlPgk77kLmqLCXS7i7+wdNl0t8=) 2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: tIcPw3vxXvLhp6nfbIDwhgBEsWGNygmBVtBY2PyYGew=) 3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: 5zP4asLuUMqFKymZj9u0orpzXVEOFrs4G4h8prjGFDs=) 4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: snFkGaJtPrz2fSPhLeMxGCxMlcdrJtdDA8o9WlhAsV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: May 31 09:11:39 2024 GMT Not After : Jun 7 09:11:39 2024 GMT Subject: CN=6659944b-5dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:89:a2:7c:a7:d9:1c:b8:74:99:7f:f6:83: 39:79:e8:0d:b3:1c:69:e5:9d:a6:61:14:59:52:f5: ff:01:c5:52:89:be:be:3f:2c:05:39:33:25:59:e3: 1b:b4:76:4a:f4:2b:cf:9e:df:37:33:20:5c:ea:66: 45:d9:eb:ba:f8:78:57:0a:43:bd:0f:39:6a:0a:14: 91:48:34:89:50:d6:11:90:e4:48:ab:4b:36:23:fd: ee:39:1d:cf:a2:57:ba:cd:00:21:31:ff:10:01:d8: 6f:14:6e:eb:b2:f6:af:1b:9f:f9:e0:9f:dc:e0:7f: 8b:d4:9f:8c:07:39:a6:5a:82:6b:a9:fb:90:c2:65: 87:fd:e0:2f:62:40:0e:8e:92:6b:12:91:b4:59:47: d5:18:bd:13:f3:9f:47:97:eb:1a:89:51:4a:ff:25: bd:5c:57:cf:d9:7c:eb:a8:ab:9f:ca:c4:45:da:85: 3f:6f:6b:74:ae:55:fc:43:55:2b:66:cd:c0:4a:29: 79:16:a3:31:4c:2f:0d:a4:a2:8d:18:45:41:91:38: 6b:d1:3d:b7:08:41:6b:2e:02:30:e0:a5:5a:34:d9: 88:ee:f6:c9:6c:f3:28:c2:16:37:a1:9f:a7:3a:a2: 28:e1:4a:da:b4:1c:9c:d6:1e:27:6d:1d:3b:02:ef: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FA:73:22:2A:43:2F:CD:84:F3:C1:66:AC:3A:3E:7A:09:BB:65:26 X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f4:8e:8b:51:cc:2c:4d:74:d5:99:d1:39:8f:07:ff:86:7e: 4b:30:74:a6:99:e8:cb:fc:db:94:b8:a0:5d:25:db:8f:ef:be: 33:ef:59:f8:86:3d:f6:2b:44:ef:ad:ee:74:f7:c6:ad:eb:bd: df:e4:bd:2c:c1:74:03:5f:6a:92:09:40:fb:07:2a:41:2e:50: 1b:91:33:d1:21:5f:51:14:82:08:98:13:ab:a1:36:c4:99:cc: 0c:08:19:9e:fc:73:17:59:9c:70:ba:24:71:1b:3b:8f:30:15: 24:d3:0a:ff:5f:44:27:99:14:5f:94:a8:25:f1:37:67:6e:94: 5a:b1:87:52:56:98:49:cf:c0:d0:6b:d9:95:aa:70:57:44:76: f6:65:0d:ff:ec:2e:ba:f9:79:20:84:0a:4b:97:f4:2a:69:4d: a1:a7:66:dc:19:a0:b1:b7:9b:d4:2a:82:1d:df:e8:76:53:db: 55:46:89:5a:67:c8:98:66:06:37:06:10:df:e1:87:15:f0:c4: a2:2a:0b:14:88:cd:00:3f:62:90:a0:85:b1:bd:0a:33:44:e3: 8a:1f:0c:1e:07:21:39:fc:ac:9c:1d:55:0a:1f:e8:c3:f9:49: 60:d0:a9:0b:97:1e:ee:05:ae:31:e9:6e:76:a7:2a:51:a9:6a: 90:91:ed:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTkzNjExMC8GA1UEBRMoNUI1Q0M0MDMwOUEwN0MwM0RGMEI2MzA0RkNEODQwRjk1 MEJGQjA0MTAeFw0yNDA1MzEwOTExMzlaFw0yNDA2MDcwOTExMzlaMBgxFjAUBgNV BAMTDTY2NTk5NDRiLTVkZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2+4mifKfZHLh0mX/2gzl56A2zHGnlnaZhFFlS9f8BxVKJvr4/LAU5MyVZ4xu0 dkr0K8+e3zczIFzqZkXZ67r4eFcKQ70POWoKFJFINIlQ1hGQ5EirSzYj/e45Hc+i V7rNACEx/xAB2G8Ubuuy9q8bn/ngn9zgf4vUn4wHOaZagmup+5DCZYf94C9iQA6O kmsSkbRZR9UYvRPzn0eX6xqJUUr/Jb1cV8/ZfOuoq5/KxEXahT9va3SuVfxDVStm zcBKKXkWozFMLw2koo0YRUGROGvRPbcIQWsuAjDgpVo02Yju9sls8yjCFjehn6c6 oijhStq0HJzWHidtHTsC72rTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlPpzIipD L82E88FmrDo+egm7ZSYwHwYDVR0jBBgwFoAUW1zEAwmgfAPfC2ME/NhA+VC/sEEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxOTM2LzZFQjlDMDNFQzYz NjExRUVBQkNDMDQwQkM0RjlBRTAyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NF RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVzF6RUF3bWdmQVBmQzJNRV9OaEEtVkNfc0VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx OTM2LzZFQjlDMDNFQzYzNjExRUVBQkNDMDQwQkM0RjlBRTAyL1cxekVBd21nZkFQ ZkMyTUVfTmhBLVZDX3NFRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGz0jotRzCxNdNWZ0TmPB/+GfkswdKaZ6Mv825S4oF0l24/vvjPvWfiG PfYrRO+t7nT3xq3rvd/kvSzBdANfapIJQPsHKkEuUBuRM9EhX1EUggiYE6uhNsSZ zAwIGZ78cxdZnHC6JHEbO48wFSTTCv9fRCeZFF+UqCXxN2dulFqxh1JWmEnPwNBr 2ZWqcFdEdvZlDf/sLrr5eSCECkuX9CppTaGnZtwZoLG3m9Qqgh3f6HZT21VGiVpn yJhmBjcGEN/hhxXwxKIqCxSIzQA/YpCghbG9CjNE44ofDB4HITn8rJwdVQof6MP5 SWDQqQuXHu4FrjHpbnanKlGpapCR7UA= -----END CERTIFICATE-----Generated at Fri May 31 10:02:45 2024 by rpki-client on console-ams.rpki-client.org