$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json) Hash identifier: 7qjL5jvFEQ8Z5e6eyiZDcuR8GHS57jc+7XAZqhM2K5c= Subject key identifier: CA:6B:63:B6:D5:C7:D0:CD:EA:8D:89:B1:05:B0:FF:E9:FD:E8:1C:CD Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft Manifest number: 1B69 Signing time: Fri 26 Apr 2024 16:38:59 +0000 Manifest this update: Fri 26 Apr 2024 16:38:59 +0000 Manifest next update: Fri 03 May 2024 16:38:59 +0000 Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: 8y8cyQnDWsJc3gycysU8MvJ5KKPWf2gt/M9w2kIPDw4=) 2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3cA1gK1HrSbV3DLfw85sASZb6DlZUxl8/X1gxVVvHLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7030 (0x1b76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Apr 26 16:38:59 2024 GMT Not After : May 3 16:38:59 2024 GMT Subject: CN=662bd8a3-5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:97:85:38:ed:81:06:59:d9:24:8a:a2:a3: f6:40:08:b7:25:db:27:60:bb:f5:18:6d:90:0b:9e: 81:39:51:f2:c2:14:11:4b:fb:4a:fe:c2:fa:61:8f: d0:6f:5e:32:67:e5:24:93:58:01:93:e6:61:66:27: 76:cc:1e:50:f0:01:6e:21:75:9a:80:8a:1e:b7:2a: 3b:3b:96:d5:8c:aa:0f:d9:e9:b4:d9:f7:4d:48:27: 55:4a:dd:a5:c4:b5:48:1a:c4:82:12:12:f2:9c:25: c0:d0:84:cd:1f:cd:52:0f:6c:f5:da:9d:b3:c9:12: 0a:00:36:9e:3b:49:81:96:ae:cb:d2:3c:90:af:e3: 4f:24:6d:49:d1:a2:5a:16:4f:66:7f:a8:38:e1:bf: d8:54:40:4a:c8:9d:97:90:3f:cd:c0:ca:5b:4f:d5: 62:8b:0a:42:d0:17:31:bd:30:54:d9:ff:42:8c:bd: 9f:e8:07:e3:18:a3:2a:0b:83:6f:65:76:5d:ab:c8: 20:ab:2d:ba:8f:dd:d6:0f:ec:d3:ca:4d:a7:6e:53: 8b:ce:08:63:c2:17:85:31:ce:5f:5c:fd:d2:e0:87: db:04:6e:12:cf:1c:a8:cc:f5:f6:f8:ca:b1:1b:40: b9:bb:33:26:03:86:e5:11:ed:81:4a:76:dc:8c:25: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6B:63:B6:D5:C7:D0:CD:EA:8D:89:B1:05:B0:FF:E9:FD:E8:1C:CD X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:65:86:69:8f:8e:55:57:7b:1d:cb:af:68:b8:3d:d8:b8: 12:2e:2c:ff:4c:57:02:bd:63:89:ed:58:6e:01:db:b7:ae:2f: 93:17:43:01:59:ed:12:b4:a4:db:b1:51:9a:5d:31:8c:c6:61: c3:e2:e6:2b:f3:2f:98:f3:8e:a9:48:81:a9:fa:c9:0c:af:fc: 74:ea:10:08:5f:f0:5f:be:95:7f:d4:6b:f4:90:2e:d7:57:63: 5e:09:80:b2:9b:bd:52:88:95:d0:df:82:78:d1:8d:33:09:6a: 0c:c2:3d:af:49:fd:ae:9e:ac:99:ea:e5:ca:25:99:1c:f2:ed: 0d:80:3e:d2:24:0b:12:27:89:2d:59:c4:fd:ba:17:20:5f:64: 3d:1e:48:7e:1e:55:ad:bc:e1:40:c3:a9:5b:4b:1d:74:16:47: 92:b4:bc:4b:05:9f:65:cb:0f:69:36:75:a6:39:72:24:bc:74: b3:55:34:3f:12:43:71:75:bf:01:2f:29:3e:a1:8a:fa:f0:aa: dc:c2:42:0d:1b:6b:d1:2b:ce:09:e1:aa:f7:1e:03:d2:91:53: ab:1c:79:0e:07:eb:f8:ae:57:0f:dd:00:60:9a:b1:ce:05:56: fd:bb:fd:e2:d2:88:9d:05:58:68:c4:15:41:4c:a9:7f:0d:27: e5:18:76:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjQwNDI2MTYzODU5WhcNMjQwNTAzMTYzODU5WjAYMRYwFAYD VQQDEw02NjJiZDhhMy01ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdOXhTjtgQZZ2SSKoqP2QAi3JdsnYLv1GG2QC56BOVHywhQRS/tK/sL6YY/Q b14yZ+Ukk1gBk+ZhZid2zB5Q8AFuIXWagIoetyo7O5bVjKoP2em02fdNSCdVSt2l xLVIGsSCEhLynCXA0ITNH81SD2z12p2zyRIKADaeO0mBlq7L0jyQr+NPJG1J0aJa Fk9mf6g44b/YVEBKyJ2XkD/NwMpbT9ViiwpC0BcxvTBU2f9CjL2f6AfjGKMqC4Nv ZXZdq8ggqy26j93WD+zTyk2nblOLzghjwheFMc5fXP3S4IfbBG4SzxyozPX2+Mqx G0C5uzMmA4blEe2BSnbcjCVDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMprY7bV x9DN6o2JsQWw/+n96BzNMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK UW54X3lkM2R6MHFDaDJDd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJdGWGaY+OVVd7HcuvaLg92LgSLiz/TFcCvWOJ7VhuAdu3ri+TF0MB We0StKTbsVGaXTGMxmHD4uYr8y+Y846pSIGp+skMr/x06hAIX/BfvpV/1Gv0kC7X V2NeCYCym71SiJXQ34J40Y0zCWoMwj2vSf2unqyZ6uXKJZkc8u0NgD7SJAsSJ4kt WcT9uhcgX2Q9Hkh+HlWtvOFAw6lbSx10FkeStLxLBZ9lyw9pNnWmOXIkvHSzVTQ/ EkNxdb8BLyk+oYr68KrcwkING2vRK84J4ar3HgPSkVOrHHkOB+v4rlcP3QBgmrHO BVb9u/3i0oidBVhoxBVBTKl/DSflGHYD -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:48 2024 by rpki-client on console-ams.rpki-client.org