$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: lBBVsD/2NuK7+UJr/IMV1Z0moSC3gc/o6jhRCI3Pc4s= Subject key identifier: 6B:35:91:F3:E5:13:24:C1:B1:C3:D9:B9:44:D3:86:90:58:13:AD:D2 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 015B Signing time: Wed 01 May 2024 05:12:15 +0000 Manifest this update: Wed 01 May 2024 05:12:15 +0000 Manifest next update: Wed 08 May 2024 05:12:15 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: rbM2HBPu+brtGwixwWpFsRyE0Yy9qvU1g9Asp7DHMp4=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ESvF2zANeeoHFSP7kMO/U5RvLezUTjQbbdWpYH4pQ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: May 1 05:12:15 2024 GMT Not After : May 8 05:12:15 2024 GMT Subject: CN=6631cf2f-8882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:83:91:43:9c:7e:34:a5:aa:19:87:84:df: f4:c5:b4:7b:11:ad:08:17:2d:1d:36:42:17:cf:e4: d3:d6:9d:64:c1:a1:a9:a4:c0:65:08:f0:13:1c:2b: e0:1e:ea:42:30:89:73:0e:16:a0:2d:34:55:60:f8: c1:6c:cd:9d:65:c9:b9:6e:84:ba:a9:0d:34:69:ad: 03:39:68:6f:c4:95:4a:33:94:94:d0:74:a3:e6:ad: 5f:02:78:26:1a:51:b6:34:28:d7:7c:ac:c4:37:36: cb:4e:db:04:0b:3f:93:58:0b:fd:e0:44:c3:40:c9: 9e:d1:00:6c:9d:1a:26:62:a8:5f:9f:d6:1d:e1:01: 65:a4:bb:95:92:11:b5:a9:a6:66:63:15:25:f1:0f: b5:0e:88:f4:2f:d9:e0:4e:df:37:86:bb:62:35:c2: 78:80:b0:7d:b0:4d:8d:9a:cc:e6:54:ad:32:77:30: 62:1e:f0:f7:7b:1f:b7:95:df:ad:88:cf:62:41:49: 6c:87:d6:57:44:52:e9:1a:52:a0:8f:d7:81:6e:30: 92:ae:45:0e:d5:90:9e:af:54:f1:2a:e1:2e:62:0e: 4f:fd:4a:a7:02:71:5c:d7:20:73:1a:ab:c7:e3:71: d0:aa:5e:29:63:6f:51:8c:40:1e:85:09:4a:88:a4: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:35:91:F3:E5:13:24:C1:B1:C3:D9:B9:44:D3:86:90:58:13:AD:D2 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:93:e6:7c:24:3e:72:f7:0b:e1:4a:5c:f4:c8:7f:b3:95: 40:b3:1c:74:33:f5:06:87:5e:c1:5f:01:1c:61:21:2d:9e:6e: 12:83:e3:14:9f:1e:ca:ee:fa:e4:a1:53:8a:4c:b5:be:9f:d0: 6d:16:ea:ed:50:59:af:5f:2c:f2:b3:4f:5b:2b:4d:cd:0a:ae: 31:cb:7b:1e:8c:c4:7c:5e:8e:d5:ac:c6:92:00:ef:7a:8b:f1: bc:53:41:15:c3:74:b2:79:2f:39:54:ec:48:7b:93:c9:f9:0c: 5a:27:3d:50:c4:e2:4c:e9:5f:e5:19:24:79:a7:c6:09:d1:e2: 44:eb:80:a6:c0:55:9a:1c:ac:26:64:0e:03:82:73:99:de:00: a2:a2:16:3d:b0:d1:c8:6f:58:c2:4f:56:f4:3a:49:28:b8:42: fd:7e:f1:30:97:f2:98:ca:23:d2:37:c1:4d:52:04:30:07:f1: 88:dd:d4:55:ce:92:59:ba:13:6b:ab:d8:a9:45:e8:51:a9:20: ca:05:5a:49:0a:0a:a2:5a:3b:78:d8:33:b7:8b:a1:45:b5:bf: 3e:f9:8b:66:f3:d6:b1:d3:6a:f3:5d:fe:f5:26:ab:50:f7:5c: 6f:00:fa:fa:1e:7d:c4:36:23:8d:b8:54:7c:83:27:b7:7d:f2: 0d:94:08:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjQwNTAxMDUxMjE1WhcNMjQwNTA4MDUxMjE1WjAYMRYwFAYD VQQDEw02NjMxY2YyZi04ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlmDkUOcfjSlqhmHhN/0xbR7Ea0IFy0dNkIXz+TT1p1kwaGppMBlCPATHCvg HupCMIlzDhagLTRVYPjBbM2dZcm5boS6qQ00aa0DOWhvxJVKM5SU0HSj5q1fAngm GlG2NCjXfKzENzbLTtsECz+TWAv94ETDQMme0QBsnRomYqhfn9Yd4QFlpLuVkhG1 qaZmYxUl8Q+1Doj0L9ngTt83hrtiNcJ4gLB9sE2NmszmVK0ydzBiHvD3ex+3ld+t iM9iQUlsh9ZXRFLpGlKgj9eBbjCSrkUO1ZCer1TxKuEuYg5P/UqnAnFc1yBzGqvH 43HQql4pY29RjEAehQlKiKR1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs1kfPl EyTBscPZuUTThpBYE63SMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaDJPmfCQ+cvcL4Upc9Mh/s5VAsxx0M/UGh17BXwEcYSEtnm4Sg+MU nx7K7vrkoVOKTLW+n9BtFurtUFmvXyzys09bK03NCq4xy3sejMR8Xo7VrMaSAO96 i/G8U0EVw3SyeS85VOxIe5PJ+QxaJz1QxOJM6V/lGSR5p8YJ0eJE64CmwFWaHKwm ZA4DgnOZ3gCiohY9sNHIb1jCT1b0OkkouEL9fvEwl/KYyiPSN8FNUgQwB/GI3dRV zpJZuhNrq9ipRehRqSDKBVpJCgqiWjt42DO3i6FFtb8++Ytm89ax02rzXf71JqtQ 91xvAPr6Hn3ENiONuFR8gye3ffINlAi8 -----END CERTIFICATE-----Generated at Wed May 1 05:55:39 2024 by rpki-client on console-ams.rpki-client.org