$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: E51n2/6kgLVFQKu+a18UdWH7IJv+hXPNG8gbE10hy1I= Subject key identifier: 9B:7F:CE:73:9E:8D:AB:2E:DE:EB:86:46:7C:9A:E8:21:5D:C1:07:55 Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 02ED Signing time: Wed 01 May 2024 03:35:08 +0000 Manifest this update: Wed 01 May 2024 03:35:08 +0000 Manifest next update: Wed 08 May 2024 03:35:08 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: eX13C5HsGM/GhmKFPEz3YRq9dODtD2xTbzzJZnJywJo=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: HwvL6khPsFztTQvg1TkHORxRaOjS21Qg3Y425hZAKNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: May 1 03:35:08 2024 GMT Not After : May 8 03:35:08 2024 GMT Subject: CN=6631b86c-1517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:bd:7f:79:ba:07:1d:ae:8a:cc:e3:36:58: 09:b8:7d:aa:f8:42:f7:db:39:59:f5:6d:70:82:ec: 64:16:ba:cc:86:6d:e2:a6:1b:23:8e:f7:4c:9c:15: 0a:37:a1:2f:5c:27:5a:29:6d:c7:e3:64:3d:49:2a: f7:32:8b:a3:94:97:e4:76:a5:d8:21:b4:a8:bd:f0: 00:f4:e2:45:37:90:6a:b8:7e:fe:ad:69:ab:6d:64: 55:dc:f9:9c:c4:03:ec:ae:bf:6a:de:60:b7:d1:71: 06:7c:92:14:64:d2:ee:d3:e3:ea:03:98:1c:16:0e: e8:c1:da:98:9f:06:07:f4:c7:5b:66:8f:71:2a:ae: 36:7e:44:d0:aa:df:d0:1d:50:27:c6:f8:db:98:6d: ea:10:25:44:d0:55:d5:62:cc:61:10:9f:3a:c3:e7: d1:ce:60:65:fe:1d:a0:7c:3a:ce:b1:cd:c4:aa:c7: e1:de:94:93:bd:81:0b:a1:35:1b:28:b3:69:5e:5d: db:67:42:0d:ed:25:88:6e:fc:80:f8:ee:1f:99:0f: 0b:e2:83:1b:1e:a0:32:f6:99:91:8e:9d:33:62:59: 71:42:da:ae:1b:a4:36:5e:56:dd:01:b4:cd:cc:b4: 6b:26:00:fa:3a:7f:7a:ac:eb:64:94:53:e1:d2:3b: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7F:CE:73:9E:8D:AB:2E:DE:EB:86:46:7C:9A:E8:21:5D:C1:07:55 X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9d:02:5a:68:98:ba:a5:26:8d:94:fe:a0:ff:ec:7e:b6:32: 04:c7:26:72:8e:63:69:3e:d1:9c:3b:6d:53:6f:fa:72:c2:fa: f0:bc:e4:1e:9e:48:f9:62:85:98:d0:e4:ed:91:53:d4:00:dd: dd:ca:82:a2:d2:57:8b:c6:48:eb:3a:11:28:c3:00:74:d0:e3: ba:6c:db:15:06:d9:52:ff:c0:59:eb:96:00:31:da:d7:a6:6c: c5:5d:7e:d8:8e:69:74:3f:40:28:08:cb:60:36:b9:e3:d8:2e: 3e:a9:b9:30:67:af:0f:85:76:78:ef:34:14:77:f5:8f:7b:8f: 3b:0c:7f:73:e1:f6:9e:8d:8e:70:46:5e:6e:e2:5e:b2:9f:16: 7a:99:0f:a5:99:f0:22:a9:66:3d:e0:e5:f5:62:de:dc:23:b8: 39:cc:9d:d0:07:e6:8e:c5:3d:f2:74:28:03:7c:b3:d0:a3:0a: ad:9d:04:5d:75:5a:58:de:4c:11:5f:78:e7:85:03:34:97:02: c7:f2:ee:a1:08:08:8c:85:a2:b8:47:99:b0:2f:6d:23:4e:82: 25:ad:f4:82:53:72:03:b1:e6:f5:69:1f:94:3b:2c:cf:10:e3: 4a:60:ad:d5:c8:4b:a9:38:9b:8b:61:7b:8d:b5:d7:49:c8:61: 5d:8e:c6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjQwNTAxMDMzNTA4WhcNMjQwNTA4MDMzNTA4WjAYMRYwFAYD VQQDEw02NjMxYjg2Yy0xNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYC9f3m6Bx2uiszjNlgJuH2q+EL32zlZ9W1wguxkFrrMhm3iphsjjvdMnBUK N6EvXCdaKW3H42Q9SSr3MoujlJfkdqXYIbSovfAA9OJFN5BquH7+rWmrbWRV3Pmc xAPsrr9q3mC30XEGfJIUZNLu0+PqA5gcFg7owdqYnwYH9MdbZo9xKq42fkTQqt/Q HVAnxvjbmG3qECVE0FXVYsxhEJ86w+fRzmBl/h2gfDrOsc3Eqsfh3pSTvYELoTUb KLNpXl3bZ0IN7SWIbvyA+O4fmQ8L4oMbHqAy9pmRjp0zYllxQtquG6Q2XlbdAbTN zLRrJgD6On96rOtklFPh0jvhLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt/znOe jasu3uuGRnya6CFdwQdVMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApnQJaaJi6pSaNlP6g/+x+tjIExyZyjmNpPtGcO21Tb/pywvrwvOQe nkj5YoWY0OTtkVPUAN3dyoKi0leLxkjrOhEowwB00OO6bNsVBtlS/8BZ65YAMdrX pmzFXX7Yjml0P0AoCMtgNrnj2C4+qbkwZ68PhXZ47zQUd/WPe487DH9z4faejY5w Rl5u4l6ynxZ6mQ+lmfAiqWY94OX1Yt7cI7g5zJ3QB+aOxT3ydCgDfLPQowqtnQRd dVpY3kwRX3jnhQM0lwLH8u6hCAiMhaK4R5mwL20jToIlrfSCU3IDseb1aR+UOyzP EONKYK3VyEupOJuLYXuNtddJyGFdjsYn -----END CERTIFICATE-----Generated at Wed May 1 04:49:21 2024 by rpki-client on console-ams.rpki-client.org