$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: q8rZliBmbwuYPBPOtDPX0EQcFf7q8Ch4boApIV97u9E= Subject key identifier: D5:69:CA:9B:7E:9D:45:A3:45:DA:17:F0:8C:54:C3:65:C8:1A:BA:2D Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 123D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 122C Signing time: Thu 02 May 2024 17:45:36 +0000 Manifest this update: Thu 02 May 2024 17:45:35 +0000 Manifest next update: Thu 09 May 2024 17:45:35 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: DAG7XFkU9vkFa+7bDHaP+kPhYcQmScvYNlWbI4aUwZg=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: 8CJ6yQII/8J7jxW2ZzqRCJVn7LiOkIu7gPIIoix5e5Q=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: XrfTkWWxSRHzIDn40ycWMNLbdsfmTyqKfBxNaVztmaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4669 (0x123d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: May 2 17:45:35 2024 GMT Not After : May 9 17:45:35 2024 GMT Subject: CN=6633d13f-401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:bf:15:5c:89:93:f7:9c:b8:3f:2b:0a:e6: 0d:8f:20:68:7e:9a:de:a2:34:93:6c:a8:39:9d:fd: 76:79:6b:76:8b:11:5b:3b:7e:8b:86:60:a3:34:b2: d6:56:63:ce:d1:2c:7a:ec:c0:a7:0c:59:fc:ad:db: 11:b4:37:37:fd:bc:1b:4d:51:07:d5:a3:92:ba:c6: a8:72:e8:45:72:45:1e:82:24:cf:8f:f8:5e:83:a7: 5b:86:82:4c:32:01:6c:46:7c:76:16:9a:b0:a9:2a: d5:ce:6a:24:aa:0c:74:d3:3f:8f:70:9b:74:48:1f: 63:39:19:62:e4:86:1e:6b:d4:79:0f:34:b1:89:ef: b9:70:d6:d4:3e:ce:99:44:69:ec:ec:1b:b8:88:24: d9:b9:27:23:02:53:2b:4f:cd:0e:a7:c9:82:c1:8b: ae:27:d5:d9:3e:85:8a:77:dd:6e:a7:6f:15:fb:b0: 79:1b:87:c8:f2:a1:1c:a5:ca:60:87:a2:be:e4:a1: 85:0c:47:e3:15:41:2c:7a:ca:39:a2:e2:2b:39:1d: ca:22:27:4a:cb:2a:ab:87:22:1f:56:1a:1a:61:8b: 0e:64:08:19:4f:5e:cb:57:f8:36:f4:18:0e:88:e0: bc:33:f0:be:ce:c3:8f:0a:59:91:25:1d:f9:e3:ec: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:CA:9B:7E:9D:45:A3:45:DA:17:F0:8C:54:C3:65:C8:1A:BA:2D X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:69:46:d1:a8:4a:b0:0b:7c:02:85:0a:b4:67:51:5b:55:75: f6:cd:3f:58:78:2c:e8:46:65:7e:24:1e:08:75:31:f8:22:99: 8a:4f:4b:a0:dc:a1:12:0f:9b:da:da:3a:01:ce:13:98:cd:4a: 35:d2:da:09:37:ad:3c:07:39:b9:fb:13:ba:0a:7b:4e:90:6f: 90:9e:a6:30:21:fc:62:e7:4d:35:35:aa:fa:4b:81:cf:76:ec: 2e:a9:02:44:ac:45:65:85:d2:40:c4:89:99:4a:bd:44:e1:7b: 1f:fb:6f:eb:fe:39:b7:21:84:e3:35:67:f8:97:a3:8d:24:1e: d5:72:83:f5:3e:6a:45:e6:3f:5d:12:48:37:40:06:27:8d:b8: 47:61:96:28:33:dc:2b:f0:4a:1c:66:a5:e2:06:9d:1c:79:03: f9:0a:08:8c:cd:d0:2a:12:3b:d9:89:1c:31:a4:4f:6b:58:81: ca:44:37:05:7f:4a:c1:85:a0:b0:82:a8:79:7a:6f:e9:6c:9d: f6:cf:d2:d9:08:38:22:d8:1d:6f:68:15:6a:7a:80:45:80:23: 22:13:73:56:01:01:d9:04:d9:a8:08:ae:cb:5a:f9:be:3d:0a: 6f:59:05:fa:d6:dc:6f:db:b1:50:2f:79:fd:83:80:72:7b:f1: 7d:64:75:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjQwNTAyMTc0NTM1WhcNMjQwNTA5MTc0NTM1WjAYMRYwFAYD VQQDEw02NjMzZDEzZi00MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4L6/FVyJk/ecuD8rCuYNjyBofpreojSTbKg5nf12eWt2ixFbO36LhmCjNLLW VmPO0Sx67MCnDFn8rdsRtDc3/bwbTVEH1aOSusaocuhFckUegiTPj/heg6dbhoJM MgFsRnx2FpqwqSrVzmokqgx00z+PcJt0SB9jORli5IYea9R5DzSxie+5cNbUPs6Z RGns7Bu4iCTZuScjAlMrT80Op8mCwYuuJ9XZPoWKd91up28V+7B5G4fI8qEcpcpg h6K+5KGFDEfjFUEseso5ouIrOR3KIidKyyqrhyIfVhoaYYsOZAgZT17LV/g29BgO iOC8M/C+zsOPClmRJR354+xz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVpypt+ nUWjRdoX8IxUw2XIGrotMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxaUbRqEqwC3wChQq0Z1FbVXX2zT9YeCzoRmV+JB4IdTH4IpmKT0ug 3KESD5va2joBzhOYzUo10toJN608Bzm5+xO6CntOkG+QnqYwIfxi5001Nar6S4HP duwuqQJErEVlhdJAxImZSr1E4Xsf+2/r/jm3IYTjNWf4l6ONJB7VcoP1PmpF5j9d Ekg3QAYnjbhHYZYoM9wr8EocZqXiBp0ceQP5CgiMzdAqEjvZiRwxpE9rWIHKRDcF f0rBhaCwgqh5em/pbJ32z9LZCDgi2B1vaBVqeoBFgCMiE3NWAQHZBNmoCK7LWvm+ PQpvWQX61txv27FQL3n9g4Bye/F9ZHW4 -----END CERTIFICATE-----Generated at Thu May 2 20:04:37 2024 by rpki-client on console-ams.rpki-client.org