$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: fEnmy8aCAU/Xc2hccf+1m91pM5cSOiKbd07XqgsAVRA= Subject key identifier: 8C:37:D8:91:49:E7:F1:65:1E:A7:36:3F:7D:4F:2C:F9:EA:35:1A:FD Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 0731 Signing time: Thu 02 May 2024 22:36:13 +0000 Manifest this update: Thu 02 May 2024 22:36:12 +0000 Manifest next update: Thu 09 May 2024 22:36:12 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: Jc0j0e545nobmzUYEu3cOa6BuWztg7UJoZ7aakkws5s=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: KB4gVaA+7DFA/yp3Fgm7dddwOuqD5cNtCgviuemsN7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: May 2 22:36:12 2024 GMT Not After : May 9 22:36:12 2024 GMT Subject: CN=6634155c-d667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:50:07:be:93:0f:6d:66:bb:14:ee:6d:f4: c5:49:fd:d3:95:88:42:b1:c5:1a:79:e9:75:73:56: bb:b1:48:bd:e2:1e:5c:24:a2:64:56:b3:27:2f:8e: ea:66:79:f6:46:3d:31:6a:af:23:cf:49:26:b0:e8: 56:90:a0:72:f4:ff:46:8b:b2:8e:54:01:58:cb:8d: 77:63:59:8f:41:88:52:ad:57:e4:0b:96:68:f4:60: 16:89:f6:62:1f:95:ca:d2:14:1a:e2:d0:6c:f5:a8: 8f:6d:8c:85:fe:e1:fb:3b:6d:56:69:66:0e:95:5e: 45:e3:4f:d8:7d:5a:87:cd:f3:c5:0d:7e:bc:b1:24: 78:45:5a:48:9f:b4:d9:dd:a3:84:76:8b:1e:fe:0e: 13:33:ad:75:2d:75:e5:c9:27:d4:9b:93:df:f0:00: fb:80:6f:f2:72:85:d8:08:48:07:37:07:39:30:94: 40:20:d2:12:e2:d3:5e:8a:5f:8f:32:16:f1:71:fe: 6c:7b:c2:9b:62:5c:93:3f:0b:40:cd:46:0f:07:0d: 1d:77:a6:1d:f8:f0:a7:4a:32:f3:80:5f:e5:ec:05: af:c9:77:d4:ae:68:c6:71:54:3f:f3:d8:c9:73:1d: 00:2e:55:a1:35:89:61:db:97:d7:59:2a:4e:b0:ce: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:D8:91:49:E7:F1:65:1E:A7:36:3F:7D:4F:2C:F9:EA:35:1A:FD X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9d:98:31:ff:30:ec:cc:31:e0:4d:12:48:33:52:6d:5f:a7: 61:89:1a:0b:e8:d0:19:88:c0:bc:29:eb:eb:94:e6:1b:cb:ca: 1a:4b:74:79:7e:02:ac:09:99:04:bb:71:9b:a5:a4:3b:51:5f: b4:57:6b:ea:13:c0:f4:da:f1:88:98:67:47:78:ea:4d:46:dd: f2:79:2e:cb:d2:2c:21:84:67:c3:5e:dc:7d:ea:74:2a:ff:e6: 83:1c:a0:0a:cd:80:dd:43:1d:e5:15:ba:7f:98:16:2a:16:45: 9d:29:2d:a7:e6:a3:07:55:0b:7b:63:68:80:b4:14:25:4c:50: c8:d7:7c:c9:95:dc:c4:62:7c:0b:9c:df:59:53:07:df:cb:3b: c5:e6:2e:6b:8f:af:db:c5:b4:63:ae:85:91:b4:de:b5:e7:d3: db:b5:64:40:cf:1e:56:60:29:01:b6:86:1f:96:9c:07:1f:dd: e8:3a:bb:25:d8:01:ad:d6:b2:b0:b4:6e:9b:8c:4b:41:c8:d1: 5a:09:43:9a:51:cc:dc:7f:57:e7:86:24:dd:53:18:32:80:69: b9:e3:fd:6d:a8:e4:69:02:4c:b0:0a:ce:aa:59:5c:0a:23:a0: 9c:7c:0b:e5:84:1a:9b:26:dd:b1:55:a8:1e:97:c3:b3:1f:c5: 14:f3:f0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjQwNTAyMjIzNjEyWhcNMjQwNTA5MjIzNjEyWjAYMRYwFAYD VQQDEw02NjM0MTU1Yy1kNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqxQB76TD21muxTubfTFSf3TlYhCscUaeel1c1a7sUi94h5cJKJkVrMnL47q Znn2Rj0xaq8jz0kmsOhWkKBy9P9Gi7KOVAFYy413Y1mPQYhSrVfkC5Zo9GAWifZi H5XK0hQa4tBs9aiPbYyF/uH7O21WaWYOlV5F40/YfVqHzfPFDX68sSR4RVpIn7TZ 3aOEdose/g4TM611LXXlySfUm5Pf8AD7gG/ycoXYCEgHNwc5MJRAINIS4tNeil+P Mhbxcf5se8KbYlyTPwtAzUYPBw0dd6Yd+PCnSjLzgF/l7AWvyXfUrmjGcVQ/89jJ cx0ALlWhNYlh25fXWSpOsM5KUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw32JFJ 5/FlHqc2P31PLPnqNRr9MB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBunZgx/zDszDHgTRJIM1JtX6dhiRoL6NAZiMC8KevrlOYby8oaS3R5 fgKsCZkEu3GbpaQ7UV+0V2vqE8D02vGImGdHeOpNRt3yeS7L0iwhhGfDXtx96nQq /+aDHKAKzYDdQx3lFbp/mBYqFkWdKS2n5qMHVQt7Y2iAtBQlTFDI13zJldzEYnwL nN9ZUwffyzvF5i5rj6/bxbRjroWRtN6159PbtWRAzx5WYCkBtoYflpwHH93oOrsl 2AGt1rKwtG6bjEtByNFaCUOaUczcf1fnhiTdUxgygGm54/1tqORpAkywCs6qWVwK I6CcfAvlhBqbJt2xVagel8OzH8UU8/AX -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org