$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft File: j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json) Hash identifier: tmal/FsCEdJQLTmN+av0rI4npm2v8bPt36LTeJfSIWc= Subject key identifier: 6E:10:43:41:38:B0:B0:68:E7:A7:63:86:7C:EF:9F:DF:57:AD:AA:6D Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft Manifest number: 19 Signing time: Wed 15 May 2024 08:52:41 +0000 Manifest this update: Wed 15 May 2024 08:52:40 +0000 Manifest next update: Wed 22 May 2024 08:52:40 +0000 Files and hashes: 1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: qFA258VnpazuFUyOemhMzJxsq1QVqrnRK+iya/hxLBc=) 2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: 2TfuRrs33GlJpt8WHzTylQoJHac6ILq0kUfthhkIDXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Validity Not Before: May 15 08:52:40 2024 GMT Not After : May 22 08:52:40 2024 GMT Subject: CN=664477d8-3da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:ed:5c:50:87:e6:82:18:8b:4f:19:e3:59: 68:86:03:06:cd:bc:e1:d0:7a:10:2d:d8:43:ea:3f: 8a:a8:1b:45:08:c6:4e:1c:9b:eb:c4:64:e0:91:71: d1:22:0e:c3:9f:37:c0:ff:19:71:42:02:42:54:05: 7b:bd:33:52:3e:91:aa:8e:8e:4e:27:12:ef:d7:ed: 78:8e:5b:74:41:bb:de:7a:a9:19:2c:96:64:f3:9d: 19:c4:c8:1f:89:21:54:c6:8d:57:86:85:0b:f7:fc: 33:c0:d3:8f:29:0a:09:b1:7b:85:be:10:f0:ff:8d: 36:75:39:fc:08:18:43:8c:fd:09:a6:fb:2f:ed:2f: e9:62:45:af:da:9a:30:09:d1:27:da:55:84:98:ec: dd:aa:11:dd:79:90:1d:41:7a:db:6b:f3:d9:fc:0e: 1a:00:79:3c:ff:eb:88:32:77:0c:02:d6:1e:80:fe: 09:ba:e9:40:41:12:e5:bd:67:b1:0c:21:e8:34:07: 0a:c8:a8:2b:7b:ad:ea:e9:0e:31:7c:4f:65:b1:43: 49:c5:68:90:f7:bf:86:ea:f7:a0:2d:82:d6:b4:6e: 36:9c:11:6f:26:0d:35:bd:ef:20:17:08:f6:88:7d: 80:55:85:87:98:e5:44:58:cb:44:44:e4:24:87:22: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:10:43:41:38:B0:B0:68:E7:A7:63:86:7C:EF:9F:DF:57:AD:AA:6D X509v3 Authority Key Identifier: keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b8:93:9e:f5:2f:f9:39:13:7e:ca:c5:27:ad:d5:81:a6:6c: 6f:9f:9d:0f:7a:c5:87:0e:2d:eb:99:cf:41:ec:47:8c:5b:d6: f6:83:72:86:a8:7a:e8:e8:64:db:6d:10:34:32:be:fc:56:6d: 13:8e:fa:2c:9c:dd:85:3a:ea:f8:e7:68:49:c8:f2:2f:5f:ef: 9c:37:8e:dc:4a:16:06:86:cc:ae:a7:c1:da:8c:53:e3:5a:a6: 45:57:a0:5e:f5:ad:75:46:8c:70:93:da:6b:4b:59:11:0c:c1: 43:15:c0:ea:ab:be:7c:8a:bd:ce:fe:4f:86:48:38:89:49:d8: 83:2e:1c:fe:eb:b4:8d:88:c1:e5:60:85:91:bc:b5:af:9b:b7: 08:bc:e4:ab:69:a3:2c:d9:40:a2:39:e7:59:df:4a:79:22:03: 7b:d4:19:b9:9e:0d:8f:6e:11:4e:78:32:5a:ae:ef:ef:f0:2f: f5:ad:eb:22:ea:fd:b7:41:fc:a9:2c:59:55:f1:1b:3b:2f:55: 69:f2:48:55:cd:71:ea:57:63:2f:fe:50:2e:0d:56:05:d6:a4: 92:fa:a9:a0:0a:b5:8f:16:e6:f5:38:91:d4:0a:92:e8:78:41: 93:37:54:ea:a6:ae:63:52:d3:5b:f6:35:10:8f:f4:df:6d:6e: 28:bc:3d:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUYxRDExMC8GA1UEBRMoOEZFNUE3Qzk5OEZCOEI3OEFDMzMxRUFFODNCQzE3ODYy M0VFM0M5RTAeFw0yNDA1MTUwODUyNDBaFw0yNDA1MjIwODUyNDBaMBgxFjAUBgNV BAMTDTY2NDQ3N2Q4LTNkYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnKe1cUIfmghiLTxnjWWiGAwbNvOHQehAt2EPqP4qoG0UIxk4cm+vEZOCRcdEi DsOfN8D/GXFCAkJUBXu9M1I+kaqOjk4nEu/X7XiOW3RBu956qRkslmTznRnEyB+J IVTGjVeGhQv3/DPA048pCgmxe4W+EPD/jTZ1OfwIGEOM/Qmm+y/tL+liRa/amjAJ 0SfaVYSY7N2qEd15kB1Bettr89n8DhoAeTz/64gydwwC1h6A/gm66UBBEuW9Z7EM Ieg0BwrIqCt7rerpDjF8T2WxQ0nFaJD3v4bq96Atgta0bjacEW8mDTW97yAXCPaI fYBVhYeY5URYy0RE5CSHIgDvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbhBDQTiw sGjnp2OGfO+f31etqm0wHwYDVR0jBBgwFoAUj+WnyZj7i3isMx6ug7wXhiPuPJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjFEL0JBOUNEOEFDRUNF NjExRUVBQUU5RTgxRUM0RjlBRTAyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvai1XbnlaajdpM2lzTXg2dWc3d1hoaVB1UEo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjFEL0JBOUNEOEFDRUNFNjExRUVBQUU5RTgxRUM0RjlBRTAyL2otV255Wmo3aTNp c014NnVnN3dYaGlQdVBKNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu4k571L/k5E37KxSet1YGmbG+fnQ96xYcOLeuZz0HsR4xb1vaDcoao eujoZNttEDQyvvxWbROO+iyc3YU66vjnaEnI8i9f75w3jtxKFgaGzK6nwdqMU+Na pkVXoF71rXVGjHCT2mtLWREMwUMVwOqrvnyKvc7+T4ZIOIlJ2IMuHP7rtI2IweVg hZG8ta+btwi85KtpoyzZQKI551nfSnkiA3vUGbmeDY9uEU54Mlqu7+/wL/Wt6yLq /bdB/KksWVXxGzsvVWnySFXNcepXYy/+UC4NVgXWpJL6qaAKtY8W5vU4kdQKkuh4 QZM3VOqmrmNS01v2NRCP9N9tbii8PYU= -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org