$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: rz6BSfUvpvkw1pLatt77sR3bRgWguefZwnDJm0veDXY= Subject key identifier: 38:79:AC:D6:E9:B4:59:CC:A1:09:D6:29:DB:79:BA:1D:6C:CD:86:F0 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 04FE Signing time: Sun 19 May 2024 01:12:22 +0000 Manifest this update: Sun 19 May 2024 01:12:22 +0000 Manifest next update: Sun 26 May 2024 01:12:22 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: iPnfmhDI8xcN3qAXVghZ8AbsImZYzKPJdUNxF6BMg88=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: rWgRsGTMLta/IuuCY7Dii0qt2LNfRV+Vfb8i8XwO5RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: May 19 01:12:22 2024 GMT Not After : May 26 01:12:22 2024 GMT Subject: CN=664951f6-1cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:c7:f5:6c:11:50:74:07:40:ea:d9:90:35: 9a:75:b2:13:aa:b4:85:b3:2a:8f:1b:ba:96:fb:d7: ba:2b:1c:01:f3:93:71:78:bb:9d:7c:5e:4c:5f:a6: 68:eb:76:70:4a:d8:43:d5:a1:cc:c7:24:93:59:61: 5e:15:22:4a:e0:5e:4e:9e:0a:d7:ad:54:11:5a:77: b5:16:d8:eb:82:c2:c1:82:d8:97:ed:64:70:e2:84: 75:44:13:aa:fc:4b:32:9d:2f:48:7b:d0:c0:32:6b: 7f:5e:70:17:ce:92:74:b4:dc:66:25:45:77:25:d7: 19:a8:0c:f1:f3:b1:32:14:df:ad:8c:78:e6:cd:e2: 81:67:c8:0e:1a:2b:76:13:ca:1d:0e:f2:64:bd:42: 14:c4:38:d9:46:b2:ff:25:91:20:7b:5c:68:16:f6: 6f:c4:4e:ac:9d:74:ff:c8:9a:b3:48:e1:8d:79:66: d4:f8:fb:e0:64:9f:21:2b:6a:ed:47:69:ed:08:d1: d2:c9:b1:86:5e:5a:af:3e:09:f8:58:49:a6:07:50: 1a:d7:b5:d8:cf:98:b2:7a:fc:b3:34:6f:e3:fd:24: 2d:b6:a8:ba:fa:dd:03:d6:5d:a4:e2:97:e6:87:f8: 03:9f:3f:47:85:1b:8b:1c:9a:50:f7:01:2a:18:40: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:79:AC:D6:E9:B4:59:CC:A1:09:D6:29:DB:79:BA:1D:6C:CD:86:F0 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ba:41:74:c1:ea:e6:56:18:db:e9:44:18:91:b1:79:d6:61: 64:b4:96:72:3c:28:91:78:48:49:f0:3c:99:a9:cd:6b:19:55: a2:fa:f6:fd:2d:ae:99:c8:6a:e8:20:2c:36:24:6f:78:19:80: f8:07:b3:20:8d:d2:e1:2f:3d:a7:d2:df:ac:7f:57:1f:df:d0: 6f:0e:2b:eb:25:46:85:ab:41:a0:57:31:e4:44:8b:fd:1e:95: 1a:19:be:40:c3:bc:f3:42:92:fb:9f:d7:29:54:be:79:60:5a: 1c:25:b4:52:3a:40:3e:40:d0:68:df:9a:f0:78:e2:c1:f9:07: 98:f5:22:32:28:4f:78:6a:ea:0d:c0:10:33:f0:aa:ea:06:81: d4:4d:87:d2:47:c4:f8:31:92:ea:c7:72:25:9d:b1:0a:38:4f: 06:8f:bb:3c:6f:05:f4:fb:c0:f7:a6:95:37:f9:5b:ec:62:96: 75:f2:8d:a8:29:b9:5a:b7:58:10:f2:96:06:b7:95:79:5b:10: 91:3a:f7:fa:64:e0:4e:d3:22:8c:53:d6:b9:f1:8c:99:cc:30: ee:a0:60:36:e8:89:94:a8:43:52:5b:87:43:4d:cb:d1:c9:63: 16:09:b9:44:9c:e2:da:77:b5:14:cd:43:63:1c:d2:b4:e6:72: 08:3e:0b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjQwNTE5MDExMjIyWhcNMjQwNTI2MDExMjIyWjAYMRYwFAYD VQQDEw02NjQ5NTFmNi0xY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIrH9WwRUHQHQOrZkDWadbITqrSFsyqPG7qW+9e6KxwB85NxeLudfF5MX6Zo 63ZwSthD1aHMxySTWWFeFSJK4F5OngrXrVQRWne1FtjrgsLBgtiX7WRw4oR1RBOq /EsynS9Ie9DAMmt/XnAXzpJ0tNxmJUV3JdcZqAzx87EyFN+tjHjmzeKBZ8gOGit2 E8odDvJkvUIUxDjZRrL/JZEge1xoFvZvxE6snXT/yJqzSOGNeWbU+PvgZJ8hK2rt R2ntCNHSybGGXlqvPgn4WEmmB1Aa17XYz5iyevyzNG/j/SQttqi6+t0D1l2k4pfm h/gDnz9HhRuLHJpQ9wEqGEDelwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh5rNbp tFnMoQnWKdt5uh1szYbwMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuukF0wermVhjb6UQYkbF51mFktJZyPCiReEhJ8DyZqc1rGVWi+vb9 La6ZyGroICw2JG94GYD4B7MgjdLhLz2n0t+sf1cf39BvDivrJUaFq0GgVzHkRIv9 HpUaGb5Aw7zzQpL7n9cpVL55YFocJbRSOkA+QNBo35rweOLB+QeY9SIyKE94auoN wBAz8KrqBoHUTYfSR8T4MZLqx3IlnbEKOE8Gj7s8bwX0+8D3ppU3+VvsYpZ18o2o Kblat1gQ8pYGt5V5WxCROvf6ZOBO0yKMU9a58YyZzDDuoGA26ImUqENSW4dDTcvR yWMWCblEnOLad7UUzUNjHNK05nIIPgvN -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org