$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft File: w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json) Hash identifier: GP5mOY8Vm2GDX0YYNPtus0cDF09Q8GSLQcXtN0YRbiw= Subject key identifier: 36:AA:A6:FB:52:89:CB:EB:51:76:30:57:DE:C8:0F:2B:FC:17:BB:C6 Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft Manifest number: 3E Signing time: Tue 21 May 2024 08:09:22 +0000 Manifest this update: Tue 21 May 2024 08:09:21 +0000 Manifest next update: Tue 28 May 2024 08:09:21 +0000 Files and hashes: 1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: eDatB17pjQAu2rcp8QyxSnSjWWbCYDkdUn3qQ3XmEX0=) 2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: xNLwv3ZrWQzpaBz7sFH6rc4BQ7H6gwRgcXBsSsBbUSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: May 21 08:09:21 2024 GMT Not After : May 28 08:09:21 2024 GMT Subject: CN=664c56b2-5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:2c:9f:27:9f:05:2f:aa:d5:24:91:d8:21: b1:2c:4c:a0:00:1c:b0:d0:83:bf:96:19:94:d1:f6: f9:0f:f7:ce:13:5b:75:08:bd:61:20:3a:27:0f:ae: b1:bb:42:c4:af:e8:c1:65:60:73:81:b5:5b:fd:47: d2:45:e0:1e:f9:78:59:11:33:51:41:1e:a6:25:64: 7c:09:d3:6b:35:90:15:9d:5a:3e:ee:38:7b:14:42: 70:35:fe:cc:fd:b8:f1:bf:16:3b:72:af:bc:77:d4: 88:5b:0e:7e:27:8a:10:61:06:b8:81:07:18:05:e9: 1c:88:70:95:69:9d:dd:94:16:78:70:34:76:9f:99: 32:c9:bd:67:2a:58:23:2f:3c:20:1c:0b:ac:78:90: 93:12:db:18:4a:b2:3b:bd:28:01:77:a0:03:af:95: e5:21:08:19:99:f2:a8:26:fc:47:10:27:b1:58:36: 70:76:91:89:24:9c:f7:3e:c7:bc:32:8b:a0:c1:f2: 29:e7:c6:8c:2d:40:49:58:0d:1c:80:13:c4:98:53: 8c:3f:52:a2:61:71:4b:f9:96:6d:90:e8:92:3f:38: 2b:f4:97:6f:1c:0a:c5:a6:b0:b0:12:c4:43:51:31: 3e:c8:3f:36:48:02:5b:b5:77:30:81:1e:fe:4f:25: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AA:A6:FB:52:89:CB:EB:51:76:30:57:DE:C8:0F:2B:FC:17:BB:C6 X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:41:71:5d:07:0c:f7:de:03:f3:12:5a:24:b3:b9:f7:00: 7b:ea:1c:2b:c6:53:94:f4:f4:d8:7a:ab:21:17:dd:e5:96:02: bf:00:e7:5e:ff:c4:32:2f:b0:05:0b:09:d0:e6:4d:9f:c0:1e: 87:06:4d:18:e3:7f:5f:00:61:a6:55:a1:fa:1f:93:1c:2a:68: cc:9d:5a:37:11:51:68:54:41:72:68:c0:6d:3e:2f:34:6d:5c: cb:1a:d2:2d:9c:b9:cb:1a:f0:db:6b:eb:e3:28:6e:7f:8c:d7: 20:7d:3b:e8:b1:73:29:7a:ea:42:68:da:7e:df:83:a8:5f:47: e6:33:2a:0a:e1:1a:d8:4c:e5:a6:be:12:a5:93:c4:ba:67:69: 88:d9:2e:93:ae:67:aa:ab:ef:0d:bc:69:26:0d:0a:50:54:99: 60:36:2e:bf:7a:9a:4c:cf:8b:1d:58:15:80:e9:36:4e:64:7a: 5e:64:52:42:09:03:ad:a1:c0:1a:75:79:ba:3a:3e:b9:4a:1a: e1:52:a6:1f:ca:c3:93:a7:4e:70:15:a2:8a:25:30:9d:67:f8: a5:b7:29:a1:63:c8:ba:c2:e8:f0:76:5b:c9:f9:9f:a0:bc:4f: b2:a5:20:bd:2d:bc:50:72:41:11:81:11:12:39:34:59:16:fb: ba:d4:49:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTA3MDExMC8GA1UEBRMoQzM2Q0Y1REUyNTMzOUI5MTQ1NkU1Q0MyMzE3MjQ4QjM2 RUE0NUI3RDAeFw0yNDA1MjEwODA5MjFaFw0yNDA1MjgwODA5MjFaMBgxFjAUBgNV BAMTDTY2NGM1NmIyLTVjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRJCyfJ58FL6rVJJHYIbEsTKAAHLDQg7+WGZTR9vkP984TW3UIvWEgOicPrrG7 QsSv6MFlYHOBtVv9R9JF4B75eFkRM1FBHqYlZHwJ02s1kBWdWj7uOHsUQnA1/sz9 uPG/Fjtyr7x31IhbDn4nihBhBriBBxgF6RyIcJVpnd2UFnhwNHafmTLJvWcqWCMv PCAcC6x4kJMS2xhKsju9KAF3oAOvleUhCBmZ8qgm/EcQJ7FYNnB2kYkknPc+x7wy i6DB8innxowtQElYDRyAE8SYU4w/UqJhcUv5lm2Q6JI/OCv0l28cCsWmsLASxENR MT7IPzZIAlu1dzCBHv5PJTwFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNqqm+1KJ y+tRdjBX3sgPK/wXu8YwHwYDVR0jBBgwFoAUw2z13iUzm5FFblzCMXJIs26kW30w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMDcwLzgwOEI0RDZDQkMx MDExRUU4QkVCMTM3QUM0RjlBRTAyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1cz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzJ6MTNpVXptNUZGYmx6Q01YSklzMjZrVzMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MDcwLzgwOEI0RDZDQkMxMDExRUU4QkVCMTM3QUM0RjlBRTAyL3cyejEzaVV6bTVG RmJsekNNWEpJczI2a1czMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuUQXFdBwz33gPzEloks7n3AHvqHCvGU5T09Nh6qyEX3eWWAr8A517/ xDIvsAULCdDmTZ/AHocGTRjjf18AYaZVofofkxwqaMydWjcRUWhUQXJowG0+LzRt XMsa0i2cucsa8Ntr6+Mobn+M1yB9O+ixcyl66kJo2n7fg6hfR+YzKgrhGthM5aa+ EqWTxLpnaYjZLpOuZ6qr7w28aSYNClBUmWA2Lr96mkzPix1YFYDpNk5kel5kUkIJ A62hwBp1ebo6PrlKGuFSph/Kw5OnTnAVooolMJ1n+KW3KaFjyLrC6PB2W8n5n6C8 T7KlIL0tvFByQRGBERI5NFkW+7rUSWU= -----END CERTIFICATE-----Generated at Tue May 21 08:38:35 2024 by rpki-client on console-fra.rpki-client.org