$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: CBYs20zvhquTG/yxAEYmGG3mTeKonbHPfaUpTxe16vM= Subject key identifier: 96:7A:B1:89:8E:70:58:79:91:EC:2D:17:36:8E:1A:BB:1D:F1:91:0E Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 4D Signing time: Wed 15 May 2024 08:04:51 +0000 Manifest this update: Wed 15 May 2024 08:04:50 +0000 Manifest next update: Wed 22 May 2024 08:04:50 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: DYLghYTeQzfJ93wo/pZxMRdHv8QbaVJpaqyWtu0j9fo=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: pKamWC7nXFQVeE8ovgXP4xUZikJCD3MoE5ZIIPOMAyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: May 15 08:04:50 2024 GMT Not After : May 22 08:04:50 2024 GMT Subject: CN=66446ca2-c3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:25:f1:64:86:0f:cf:39:61:10:80:ca:f3: 98:87:51:74:0d:d3:ce:0c:51:15:38:bd:3d:7b:7d: 99:5a:b0:3a:67:d8:e9:5c:e9:53:b8:be:7e:b5:5a: b2:0d:67:0e:33:e4:5c:28:32:9a:00:93:e6:45:3f: 43:06:f3:46:f3:83:a2:6e:9c:46:64:13:de:a8:93: 01:f3:0b:94:30:56:c9:6c:da:c2:a5:14:ce:87:2b: c2:6d:7f:64:8d:12:bc:f8:74:4d:08:12:ef:22:c0: f5:a3:bb:35:d9:ba:98:9b:25:f3:4d:93:a2:c5:2c: da:b8:f2:7f:99:d5:77:6c:77:a8:ca:2f:b5:6a:8b: 0e:0e:cb:5e:ec:2a:b7:ce:05:60:cd:50:8d:ab:a8: e6:8e:ce:b0:6c:1f:02:1d:76:a7:17:fa:3f:28:a5: 21:07:e4:b4:8b:ec:05:a4:14:5a:2d:f9:4a:37:3a: d5:d0:cb:75:73:4b:af:a9:14:2d:7f:94:0d:25:2b: bc:00:df:a6:2e:a0:16:0c:83:2d:d0:80:c2:e7:3f: b1:48:12:34:9a:eb:27:2e:23:d2:2c:fa:3f:fe:38: a1:4d:a7:fb:b5:15:64:3d:53:29:4e:d2:b7:ed:c9: 5a:be:b7:61:e0:0a:e3:cc:71:06:28:0b:80:fa:fc: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7A:B1:89:8E:70:58:79:91:EC:2D:17:36:8E:1A:BB:1D:F1:91:0E X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9f:0f:9a:07:5f:c9:b8:11:4a:07:8c:46:17:fc:16:eb:43: 85:03:23:ee:db:d5:12:ed:e9:cf:f5:02:e4:2a:31:7b:3c:2e: c4:77:b8:50:b1:d6:74:cf:43:bf:cd:db:1e:41:f2:69:4d:b6: b2:aa:90:a5:50:46:54:c7:7c:8c:95:8d:07:05:28:85:ca:0a: e7:8a:8a:ad:9e:22:b1:4f:d1:c1:a2:7a:59:7f:28:63:d7:c1: cc:c2:42:32:fa:d0:ca:96:dd:79:54:2f:78:5a:7d:67:19:47: de:d4:a7:ae:15:0a:4d:9e:27:b6:f0:f3:c1:4f:4f:6f:96:91: d8:0d:9a:55:7c:cf:7f:af:53:8d:e2:0b:69:f5:65:46:e2:91: db:f7:cb:03:75:37:f6:1e:4a:93:84:28:8b:c8:f2:7e:f4:86: 70:a7:00:f2:3b:62:82:f4:61:0d:1e:a9:e0:94:69:2f:12:23: f1:ca:68:4f:9a:df:e1:c6:31:06:ca:87:21:39:dd:8c:f3:8f: 04:ed:32:fc:9f:5e:b4:fc:e8:4c:13:78:94:77:19:ef:75:f4: 42:4c:b1:65:19:6c:a4:83:dd:4d:d5:72:26:6d:60:8d:2a:f4: 9f:79:44:df:75:e9:0c:fe:3a:fb:b1:bd:01:c1:a1:bd:92:be: 72:3f:6c:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEQzMDExMC8GA1UEBRMoMEQ2NEM1NkUwRTYxMUE1Q0MxRDM1ODg2NzZDNTc0REUy MkQ1NzUwMTAeFw0yNDA1MTUwODA0NTBaFw0yNDA1MjIwODA0NTBaMBgxFjAUBgNV BAMTDTY2NDQ2Y2EyLWMzZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3qSXxZIYPzzlhEIDK85iHUXQN084MURU4vT17fZlasDpn2Olc6VO4vn61WrIN Zw4z5FwoMpoAk+ZFP0MG80bzg6JunEZkE96okwHzC5QwVsls2sKlFM6HK8Jtf2SN Erz4dE0IEu8iwPWjuzXZupibJfNNk6LFLNq48n+Z1Xdsd6jKL7Vqiw4Oy17sKrfO BWDNUI2rqOaOzrBsHwIddqcX+j8opSEH5LSL7AWkFFot+Uo3OtXQy3VzS6+pFC1/ lA0lK7wA36YuoBYMgy3QgMLnP7FIEjSa6ycuI9Is+j/+OKFNp/u1FWQ9UylO0rft yVq+t2HgCuPMcQYoC4D6/G8zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlnqxiY5w WHmR7C0XNo4aux3xkQ4wHwYDVR0jBBgwFoAUDWTFbg5hGlzB01iGdsV03iLVdQEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RDMwL0NEODBBQUU2OUZE MTExRUVBRDcwNDQwOUM0RjlBRTAyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRR RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFdURmJnNWhHbHpCMDFpR2RzVjAzaUxWZFFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 RDMwL0NEODBBQUU2OUZEMTExRUVBRDcwNDQwOUM0RjlBRTAyL0RXVEZiZzVoR2x6 QjAxaUdkc1YwM2lMVmRRRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEafD5oHX8m4EUoHjEYX/BbrQ4UDI+7b1RLt6c/1AuQqMXs8LsR3uFCx 1nTPQ7/N2x5B8mlNtrKqkKVQRlTHfIyVjQcFKIXKCueKiq2eIrFP0cGiell/KGPX wczCQjL60MqW3XlUL3hafWcZR97Up64VCk2eJ7bw88FPT2+WkdgNmlV8z3+vU43i C2n1ZUbikdv3ywN1N/YeSpOEKIvI8n70hnCnAPI7YoL0YQ0eqeCUaS8SI/HKaE+a 3+HGMQbKhyE53YzzjwTtMvyfXrT86EwTeJR3Ge919EJMsWUZbKSD3U3VciZtYI0q 9J95RN916Qz+OvuxvQHBob2SvnI/bM4= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org