$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: kpFOi1YugKYHDIQZ8t7pYuMshsOzoBsK5eterCSQCKU= Subject key identifier: CD:36:2E:01:2B:89:07:EC:C9:AF:21:40:5F:93:1D:7B:9F:AB:CF:18 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 65 Signing time: Fri 17 May 2024 08:07:06 +0000 Manifest this update: Fri 17 May 2024 08:07:05 +0000 Manifest next update: Fri 24 May 2024 08:07:05 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: nm5cng9e+qArq99eJRD1lFbJprPF7s+1HoTmcTwnL18=) 2: F090C65CF76411EE88806717C4F9AE02.roa (hash: KS86v7mF+6dJ+9U3ZOFBZb7JHV9eYXTP5IAlmJs4IDk=) 3: F77C9B16F76511EEA4C51923C4F9AE02.roa (hash: +YyC+pfRVFeURFsg/7flU5OXASo/Ug7YnjQfTEpCkV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: May 17 08:07:05 2024 GMT Not After : May 24 08:07:05 2024 GMT Subject: CN=66471029-58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:6c:86:c0:d4:4f:57:24:b2:c9:e9:d9:19: 47:cf:54:e9:c3:bc:95:df:53:0c:3d:9b:28:40:93: cd:c0:65:7e:d0:94:0b:86:c2:59:0b:55:67:7b:28: 21:34:0c:35:5f:ab:95:3c:10:92:9d:1c:da:8f:0a: 7c:78:67:8a:08:73:be:11:51:1b:64:4c:03:f4:2a: a8:70:d3:15:f1:bd:03:c8:06:9a:e2:e1:39:7e:79: 33:76:a6:5c:73:a0:28:a3:df:ed:6b:4a:d4:e9:2e: 6d:e0:7e:f8:3b:a6:52:ec:27:a1:ca:40:32:6e:ff: 5d:95:0f:8c:53:0a:55:1a:29:ce:f5:c3:27:7a:cc: 06:80:45:a2:8e:1c:4c:d7:6c:02:16:41:b7:14:69: 8a:31:9f:42:60:16:cc:1c:c2:6c:6f:89:9c:84:bb: 61:39:77:58:88:05:f8:ea:73:a5:d5:3e:b6:da:ca: eb:5e:a7:16:7a:0b:65:a1:b6:16:45:c6:38:b9:61: 00:ab:60:38:5e:12:d2:4d:75:46:b0:aa:89:47:83: 82:01:e6:68:f2:09:11:f1:f1:5e:bb:b1:cd:51:55: 74:e0:c6:76:35:b2:2e:25:4d:ff:f4:28:0d:f0:db: df:3e:02:77:c2:53:66:81:9f:6e:65:b6:9b:84:15: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:36:2E:01:2B:89:07:EC:C9:AF:21:40:5F:93:1D:7B:9F:AB:CF:18 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6c:a1:05:ab:0a:5d:95:19:94:82:a9:38:97:34:1d:b3:fa: 0e:db:c9:4c:0e:3c:1b:dd:97:d3:d8:64:72:b4:28:7d:d5:2b: e4:4c:92:1b:a7:b6:d2:ce:2e:59:55:82:6c:fa:a2:b2:21:9a: 62:4b:7d:37:cf:8e:32:f8:53:1b:ca:74:b7:f8:a5:b6:32:5a: 89:aa:19:8d:fd:e5:29:7e:71:81:35:81:89:be:c4:3e:98:63: b0:68:fa:f4:9e:05:a3:b0:c1:9f:dd:e9:4a:3e:76:09:12:46: 0c:00:00:d9:a6:cd:1d:e3:27:de:d7:0b:dd:a5:1f:04:fe:68: 0a:2f:cd:14:9c:91:bc:a4:2f:03:cf:04:a2:7b:45:a4:d7:c4: 44:a2:14:9f:c5:2a:bd:ee:d9:c0:38:52:24:b8:e8:c9:9c:04: 6e:6c:0a:6b:83:e7:2b:ef:ac:5b:31:bf:1b:b4:d3:6f:7f:af: 85:65:86:14:5a:7b:7a:ec:a5:35:7a:b2:46:8a:3d:c8:ac:96: 6b:18:51:fe:73:d5:dc:ab:59:73:f9:4e:a0:3c:0c:50:c2:d5: f9:64:25:9c:e1:b5:5e:d3:c9:4d:57:9f:6c:00:aa:fd:09:6a: 88:8e:b3:ac:27:60:72:39:47:1f:04:b1:69:84:41:6e:ed:c3: c1:ac:8b:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QURDNDExMC8GA1UEBRMoQzNEODkzQjIyOTFCM0ExRTFCRjVGNEYwNDFEMTA1MkUy Q0NCQjI1QTAeFw0yNDA1MTcwODA3MDVaFw0yNDA1MjQwODA3MDVaMBgxFjAUBgNV BAMTDTY2NDcxMDI5LTU4YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPW2yGwNRPVySyyenZGUfPVOnDvJXfUww9myhAk83AZX7QlAuGwlkLVWd7KCE0 DDVfq5U8EJKdHNqPCnx4Z4oIc74RURtkTAP0Kqhw0xXxvQPIBpri4Tl+eTN2plxz oCij3+1rStTpLm3gfvg7plLsJ6HKQDJu/12VD4xTClUaKc71wyd6zAaARaKOHEzX bAIWQbcUaYoxn0JgFswcwmxviZyEu2E5d1iIBfjqc6XVPrbayutepxZ6C2WhthZF xji5YQCrYDheEtJNdUawqolHg4IB5mjyCRHx8V67sc1RVXTgxnY1si4lTf/0KA3w 298+AnfCU2aBn25ltpuEFc+xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzTYuASuJ B+zJryFAX5Mde5+rzxgwHwYDVR0jBBgwFoAUw9iTsikbOh4b9fTwQdEFLizLslow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBREM0LzJGQTQzNENBQUFB NjExRUU5NjNBQTYzQUM0RjlBRTAyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzlpVHNpa2JPaDRiOWZUd1FkRUZMaXpMc2xvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB REM0LzJGQTQzNENBQUFBNjExRUU5NjNBQTYzQUM0RjlBRTAyL3c5aVRzaWtiT2g0 YjlmVHdRZEVGTGl6THNsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAINsoQWrCl2VGZSCqTiXNB2z+g7byUwOPBvdl9PYZHK0KH3VK+RMkhun ttLOLllVgmz6orIhmmJLfTfPjjL4UxvKdLf4pbYyWomqGY395Sl+cYE1gYm+xD6Y Y7Bo+vSeBaOwwZ/d6Uo+dgkSRgwAANmmzR3jJ97XC92lHwT+aAovzRSckbykLwPP BKJ7RaTXxESiFJ/FKr3u2cA4UiS46MmcBG5sCmuD5yvvrFsxvxu0029/r4VlhhRa e3rspTV6skaKPcislmsYUf5z1dyrWXP5TqA8DFDC1flkJZzhtV7TyU1Xn2wAqv0J aoiOs6wnYHI5Rx8EsWmEQW7tw8Gsix4= -----END CERTIFICATE-----Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org