$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft File: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft (raw, json) Hash identifier: 3UWQ0qK6/id5SHX0aLSXeiflfuj8cEBPxps9EXPL4LQ= Subject key identifier: 9B:39:8F:EF:8C:98:B9:E4:F2:BA:76:A7:32:0F:AC:D2:69:34:4C:44 Authority key identifier: AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B Certificate issuer: /CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft Manifest number: 15 Signing time: Wed 15 May 2024 08:55:14 +0000 Manifest this update: Wed 15 May 2024 08:55:14 +0000 Manifest next update: Wed 22 May 2024 08:55:14 +0000 Files and hashes: 1: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl (hash: VMBz8XzSzQ2u3axfgCKbdoBb+SKRksLqXfinZZ5IoKI=) 2: F869F6E6F27D11EE83652C2FC4F9AE02.roa (hash: ew+XPEWx1FJtgNOojePOaLBaSb2GLaRwxpMAXTIzL38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Validity Not Before: May 15 08:55:14 2024 GMT Not After : May 22 08:55:14 2024 GMT Subject: CN=66447872-a3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:1d:e5:7b:ea:02:ac:b9:d0:ce:a9:9b:2e: 2c:10:5e:7d:34:0d:0b:0f:7a:79:47:1c:3d:3f:f7: c3:e4:a9:d6:13:78:76:4a:c5:5d:58:ca:0c:44:30: 53:ec:6e:7c:1a:c9:b6:d7:71:50:ed:5e:97:16:6b: fe:16:eb:32:c9:db:5b:42:a9:30:4d:26:5a:6b:46: 67:60:cf:da:68:c7:52:d0:59:24:c3:3b:4f:59:cc: fb:52:fb:74:5d:48:d7:da:67:79:1d:cc:d3:74:22: 3f:50:76:5e:ff:ae:f4:ad:b8:8c:f8:90:ae:41:45: 8a:14:16:18:f3:2e:60:a0:db:c1:7c:21:4d:a7:e1: 20:52:4d:59:8b:7a:a9:a1:3f:99:16:b5:44:03:de: f2:9e:14:6b:f9:d3:b6:4e:5b:de:4e:41:0d:33:34: f6:62:83:8e:f2:c7:b0:e9:d2:58:85:3c:65:bd:42: df:e5:dc:d2:92:e5:c0:07:0f:61:03:9e:4d:cd:c1: a4:5b:79:29:09:bd:08:27:5a:a1:ad:01:7a:27:5d: 78:dc:95:d5:69:83:ae:1a:34:23:a3:1f:31:b7:c4: 59:0b:c2:85:e3:7a:81:d4:2a:2b:76:9f:7b:96:ce: 23:26:e9:0a:35:79:a5:9a:b6:2d:4e:9c:b5:65:bf: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:8F:EF:8C:98:B9:E4:F2:BA:76:A7:32:0F:AC:D2:69:34:4C:44 X509v3 Authority Key Identifier: keyid:AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:d4:cf:6f:74:e3:04:cb:28:5a:cc:d7:55:80:8a:d8:2e: e9:60:4b:3c:36:a6:10:78:b2:e1:a2:70:e9:96:97:ea:7e:9b: 0c:64:59:dd:44:9d:25:40:3a:f5:7b:d7:d8:b9:30:cc:78:76: c8:29:ee:ec:b6:e1:c8:eb:86:26:a8:b1:0f:fe:b9:c9:5d:50: 5d:10:bb:b7:e0:3a:3d:86:e4:2e:09:95:11:13:f9:fe:be:ff: 9e:86:4a:ab:10:1e:d6:e4:95:8e:96:d1:73:1d:2c:a1:a8:11: 09:07:76:7e:56:db:e2:66:b6:43:3f:1f:e1:0a:ef:80:ed:80: 06:b8:ef:da:1c:4b:b8:60:80:f1:1a:75:0f:be:7a:f0:13:4e: 62:cc:b1:76:3b:0a:82:c6:ed:56:9a:82:77:49:df:f0:59:ce: de:22:96:0a:3e:7e:c4:7b:8b:d9:ee:c4:a9:6b:52:d0:1b:b1: 8f:29:bd:41:3d:b8:c7:3f:c2:71:fa:a7:b3:30:c4:12:0b:7e: 60:af:d0:ac:10:79:2e:86:cd:f4:59:c3:74:cd:d4:3e:9f:30: a8:f5:30:e7:3a:61:57:0b:f7:42:48:bf:10:7f:02:bd:d7:f4: 34:17:a0:21:c7:cd:7e:3f:20:a8:bd:0a:20:da:7a:e5:ba:b0: 55:8f:be:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQyNTExMC8GA1UEBRMoQUQ2RUU3QkExOTU4NjUwRkFBODQ2QzgzRDBBOEE0QjM2 NURBRjU1QjAeFw0yNDA1MTUwODU1MTRaFw0yNDA1MjIwODU1MTRaMBgxFjAUBgNV BAMTDTY2NDQ3ODcyLWEzZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2MR3le+oCrLnQzqmbLiwQXn00DQsPenlHHD0/98PkqdYTeHZKxV1YygxEMFPs bnwaybbXcVDtXpcWa/4W6zLJ21tCqTBNJlprRmdgz9pox1LQWSTDO09ZzPtS+3Rd SNfaZ3kdzNN0Ij9Qdl7/rvStuIz4kK5BRYoUFhjzLmCg28F8IU2n4SBSTVmLeqmh P5kWtUQD3vKeFGv507ZOW95OQQ0zNPZig47yx7Dp0liFPGW9Qt/l3NKS5cAHD2ED nk3NwaRbeSkJvQgnWqGtAXonXXjcldVpg64aNCOjHzG3xFkLwoXjeoHUKit2n3uW ziMm6Qo1eaWati1OnLVlv8OfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmzmP74yY ueTyunanMg+s0mk0TEQwHwYDVR0jBBgwFoAUrW7nuhlYZQ+qhGyD0Kiks2Xa9Vsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDI1LzhGOUYwMzg2RjI3 RDExRUU4N0Q5NkMyOEM0RjlBRTAyL3JXN251aGxZWlEtcWhHeUQwS2lrczJYYTlW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclc3bnVobFlaUS1xaEd5RDBLaWtzMlhhOVZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDI1LzhGOUYwMzg2RjI3RDExRUU4N0Q5NkMyOEM0RjlBRTAyL3JXN251aGxZWlEt cWhHeUQwS2lrczJYYTlWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoi1M9vdOMEyyhazNdVgIrYLulgSzw2phB4suGicOmWl+p+mwxkWd1E nSVAOvV719i5MMx4dsgp7uy24cjrhiaosQ/+ucldUF0Qu7fgOj2G5C4JlRET+f6+ /56GSqsQHtbklY6W0XMdLKGoEQkHdn5W2+JmtkM/H+EK74DtgAa479ocS7hggPEa dQ++evATTmLMsXY7CoLG7VaagndJ3/BZzt4ilgo+fsR7i9nuxKlrUtAbsY8pvUE9 uMc/wnH6p7MwxBILfmCv0KwQeS6GzfRZw3TN1D6fMKj1MOc6YVcL90JIvxB/Ar3X 9DQXoCHHzX4/IKi9CiDaeuW6sFWPviE= -----END CERTIFICATE-----Generated at Wed May 15 11:17:40 2024 by rpki-client on console-ams.rpki-client.org