$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: hrVkn5Fs5qMAgSs5BT5hsAfqL1506gTS6+GhxeFyHJQ= Subject key identifier: 18:9B:A4:4F:F2:DB:19:E3:2A:ED:19:93:AC:BE:68:B7:7D:03:7D:A1 Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 01B4 Signing time: Sun 05 May 2024 04:41:07 +0000 Manifest this update: Sun 05 May 2024 04:41:07 +0000 Manifest next update: Sun 12 May 2024 04:41:07 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: +xglNvQfj4GevW7UzUCn0nJTQWD0QU8dPJZVo1pQ0UY=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: //lRqq+BrUysk8Y7dqz2TIXaCkc9uSilIGEwzyxWpfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: May 5 04:41:07 2024 GMT Not After : May 12 04:41:07 2024 GMT Subject: CN=66370de3-0ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:bf:1e:90:0b:3b:5a:bf:22:7c:54:c7:fa: 25:e9:5a:7c:96:a4:65:b0:47:ee:5f:03:b1:ae:56: f2:35:89:8d:91:fe:bb:84:ca:73:7d:7e:23:6f:81: f7:1c:2e:7a:6c:d0:d0:47:46:cd:71:6a:84:bc:f3: 1d:17:3c:19:4e:22:12:60:22:4a:87:e7:7d:94:a9: 5c:1b:b0:33:d9:63:66:da:bc:2d:44:d2:0c:8b:f2: 98:45:de:58:1a:89:70:57:a3:5c:e0:49:4c:b0:7b: ec:eb:85:9f:d2:7e:0c:18:b9:57:81:0d:7d:c5:4b: e2:dc:40:02:9c:12:e8:ab:f5:54:01:b5:bc:cd:b7: 47:17:fd:2f:35:f6:3d:44:0f:22:c3:76:95:b5:66: ae:e1:f6:de:62:7f:aa:27:da:7a:41:8c:52:89:4a: 64:8c:4e:58:8d:e9:4f:0d:ea:cf:b4:4c:8c:b1:eb: af:a5:be:a1:48:35:81:c4:be:cc:77:2b:66:fd:b4: 27:8f:02:b4:41:ad:11:6b:9a:03:5c:a3:20:91:1d: 2e:e3:e7:39:d1:60:99:9f:59:8b:6f:11:6b:12:a3: 4b:10:85:04:6d:eb:fa:be:41:47:90:a5:77:35:36: 6f:e1:08:c4:db:b0:c0:35:c3:7e:0a:25:3f:c0:00: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:A4:4F:F2:DB:19:E3:2A:ED:19:93:AC:BE:68:B7:7D:03:7D:A1 X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:4f:86:e2:d9:eb:29:e3:35:87:57:f7:8a:ba:3d:d1:4f: 93:8f:04:87:0e:61:90:4c:8c:4c:5f:dd:12:11:96:9e:92:74: 66:58:7f:b7:e4:bf:e5:33:53:f6:fa:e8:22:b9:29:3f:d3:25: 51:a4:fd:b6:ec:0e:9e:9b:35:8f:67:83:ea:bf:30:fa:f6:94: 47:ba:37:77:9f:78:14:0a:6d:5b:85:46:c0:71:e3:c3:d2:46: 1e:bd:4e:f4:b2:c1:e1:9c:04:63:20:83:bf:9e:93:b6:b3:8e: 7f:de:52:65:0e:41:db:09:65:f3:24:a4:ce:ba:95:d8:ff:b9: 74:e1:a1:28:27:cb:60:bb:18:4d:e7:e0:81:50:7c:28:ec:27: 9e:24:c2:ea:03:00:ea:85:74:c9:53:1b:d7:bf:2c:ce:a7:b4: 3f:15:75:63:ff:62:f3:4f:78:8a:01:b4:a5:0a:6e:2b:41:0b: 47:5a:e8:05:b7:e1:65:09:54:05:10:a2:3b:9f:61:12:24:56: 4b:ea:a4:c0:a7:6f:0a:2c:93:9c:2b:dc:dc:30:d9:39:dd:6e: 01:d6:e8:44:76:bf:70:0e:17:cb:87:9c:9f:9a:1f:0d:f4:a1: de:71:03:bf:84:85:fc:71:4d:b7:8f:6b:ba:83:4f:72:0f:e9: 29:f5:38:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjQwNTA1MDQ0MTA3WhcNMjQwNTEyMDQ0MTA3WjAYMRYwFAYD VQQDEw02NjM3MGRlMy0wZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7m/HpALO1q/InxUx/ol6Vp8lqRlsEfuXwOxrlbyNYmNkf67hMpzfX4jb4H3 HC56bNDQR0bNcWqEvPMdFzwZTiISYCJKh+d9lKlcG7Az2WNm2rwtRNIMi/KYRd5Y GolwV6Nc4ElMsHvs64Wf0n4MGLlXgQ19xUvi3EACnBLoq/VUAbW8zbdHF/0vNfY9 RA8iw3aVtWau4fbeYn+qJ9p6QYxSiUpkjE5YjelPDerPtEyMseuvpb6hSDWBxL7M dytm/bQnjwK0Qa0Ra5oDXKMgkR0u4+c50WCZn1mLbxFrEqNLEIUEbev6vkFHkKV3 NTZv4QjE27DANcN+CiU/wAC7rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBibpE/y 2xnjKu0Zk6y+aLd9A32hMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB52E+G4tnrKeM1h1f3iro90U+TjwSHDmGQTIxMX90SEZaeknRmWH+3 5L/lM1P2+ugiuSk/0yVRpP227A6emzWPZ4PqvzD69pRHujd3n3gUCm1bhUbAcePD 0kYevU70ssHhnARjIIO/npO2s45/3lJlDkHbCWXzJKTOupXY/7l04aEoJ8tguxhN 5+CBUHwo7CeeJMLqAwDqhXTJUxvXvyzOp7Q/FXVj/2LzT3iKAbSlCm4rQQtHWugF t+FlCVQFEKI7n2ESJFZL6qTAp28KLJOcK9zcMNk53W4B1uhEdr9wDhfLh5yfmh8N 9KHecQO/hIX8cU23j2u6g09yD+kp9Tgy -----END CERTIFICATE-----Generated at Sun May 5 05:21:54 2024 by rpki-client on console-fra.rpki-client.org