$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: lVF1Y1eX5XDiUkUduZgMiLfVro7+b2aOpuxu523jKJ4= Subject key identifier: 33:A5:EA:76:BC:95:09:D0:5A:EC:BC:9D:DF:22:26:C9:BC:68:FB:28 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: 21 Signing time: Thu 19 Sep 2024 06:07:10 +0000 Manifest this update: Thu 19 Sep 2024 06:07:09 +0000 Manifest next update: Thu 26 Sep 2024 06:07:09 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: BM33HOVehmx2iTLNwvzzwzFNSr8CxPjtkvzDhSfnWB0=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: RSlQ28v4R7Z7Z91/NWLcgcqSptGPnncTkhKlGUAo99c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Sep 19 06:07:09 2024 GMT Not After : Sep 26 06:07:09 2024 GMT Subject: CN=66ebbf8d-dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:e1:c5:c9:9e:7e:14:8e:e6:f5:6d:30:bc: 49:b5:5f:95:0c:7b:7f:22:de:75:6b:b7:89:c1:1b: e5:72:e5:c3:b1:47:b8:c7:1f:a5:b7:57:8b:c1:2d: fc:85:32:eb:27:94:eb:59:fb:03:7c:2a:8d:05:5e: 49:ee:18:ba:ac:c8:b8:b5:c4:21:00:ff:f0:ea:9e: 31:b9:4a:51:46:8a:1e:fb:1c:f9:f5:8a:4b:0b:1a: b4:06:a6:20:40:16:e3:0d:1d:7e:53:b3:3c:80:17: 7e:db:08:99:99:e2:d7:21:c8:7c:c2:66:33:d6:34: 64:68:91:c3:ad:4e:d8:b8:54:c2:85:bb:50:b3:2d: bc:c9:84:13:09:0f:70:17:df:0f:fb:de:31:16:e9: f4:00:28:70:e8:6d:22:5a:4f:81:9f:a4:5a:1f:21: da:8e:65:b9:4e:7a:0d:b8:9e:6b:53:8a:c3:d9:76: 29:8c:05:82:b9:db:69:31:30:48:7c:8f:95:30:16: f9:51:a2:7e:e7:dc:92:82:32:8a:35:97:23:8d:61: d1:9d:b1:f9:0f:fa:74:e1:bc:3e:7d:d9:cd:ee:8f: e3:64:b6:f2:da:80:e6:cb:e3:35:79:d2:f4:8e:21: af:fa:77:2f:5b:5d:4b:c5:19:57:6b:0b:45:da:82: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:EA:76:BC:95:09:D0:5A:EC:BC:9D:DF:22:26:C9:BC:68:FB:28 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:af:c9:c9:4f:88:43:aa:8f:63:2f:28:e1:e7:0d:d5:d2: 93:2f:84:d8:66:a6:37:cb:28:79:94:3c:f5:38:83:01:4f:1d: c4:35:ff:5a:9f:cb:25:ac:b0:bf:68:17:eb:04:be:55:5d:99: bc:3b:03:16:3c:e1:14:2d:48:b7:54:55:dc:c4:58:93:e2:68: 1d:e1:58:16:71:e9:ad:15:a3:a4:55:17:a5:c6:10:92:59:d7: 25:18:51:68:ad:cd:11:4e:e9:51:a3:47:8f:03:09:57:d5:1c: 36:73:c2:21:85:5e:92:67:4e:08:03:ec:5f:ca:52:75:3f:2b: 2b:78:9d:61:58:32:58:ec:bc:78:55:b0:0f:5b:88:7e:52:fb: 11:4e:83:7e:24:00:24:27:8c:58:f8:dd:b5:6d:44:6c:f8:cc: 7c:90:a5:7a:69:ef:4c:f1:6a:49:39:da:0f:54:6e:01:68:b3: ce:34:79:f2:e9:32:e8:95:29:14:0b:95:cb:11:ce:2e:19:54: 01:0c:f5:3a:fc:5f:c7:51:28:9d:d5:34:d6:b3:dc:79:62:ec: de:fd:b0:18:c9:55:8d:50:dc:c5:1f:77:63:e7:72:dc:7c:7d: 70:7c:4f:a9:e1:06:4d:e9:0c:7e:fc:04:f8:a9:68:39:55:aa: 3e:af:20:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RUQyQjExMC8GA1UEBRMoQzM5M0JDREY3RDQ1QTcxOTZGRjNDRDZEMzBENjIzMERG NEZEQzU3RDAeFw0yNDA5MTkwNjA3MDlaFw0yNDA5MjYwNjA3MDlaMBgxFjAUBgNV BAMTDTY2ZWJiZjhkLWRjM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1xOHFyZ5+FI7m9W0wvEm1X5UMe38i3nVrt4nBG+Vy5cOxR7jHH6W3V4vBLfyF MusnlOtZ+wN8Ko0FXknuGLqsyLi1xCEA//DqnjG5SlFGih77HPn1iksLGrQGpiBA FuMNHX5TszyAF37bCJmZ4tchyHzCZjPWNGRokcOtTti4VMKFu1CzLbzJhBMJD3AX 3w/73jEW6fQAKHDobSJaT4GfpFofIdqOZblOeg24nmtTisPZdimMBYK522kxMEh8 j5UwFvlRon7n3JKCMoo1lyONYdGdsfkP+nThvD592c3uj+NktvLagObL4zV50vSO Ia/6dy9bXUvFGVdrC0XagoqnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM6XqdryV CdBa7Lyd3yImybxo+ygwHwYDVR0jBBgwFoAUw5O8331Fpxlv881tMNYjDfT9xX0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFRDJCL0ZDMTFCRkQyNDVC MDExRUZCRDU5OEI3N0M0RjlBRTAyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhY MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzVPODMzMUZweGx2ODgxdE1OWWpEZlQ5eFgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF RDJCL0ZDMTFCRkQyNDVCMDExRUZCRDU5OEI3N0M0RjlBRTAyL3c1TzgzMzFGcHhs djg4MXRNTllqRGZUOXhYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAv0r8nJT4hDqo9jLyjh5w3V0pMvhNhmpjfLKHmUPPU4gwFPHcQ1/1qf yyWssL9oF+sEvlVdmbw7AxY84RQtSLdUVdzEWJPiaB3hWBZx6a0Vo6RVF6XGEJJZ 1yUYUWitzRFO6VGjR48DCVfVHDZzwiGFXpJnTggD7F/KUnU/Kyt4nWFYMljsvHhV sA9biH5S+xFOg34kACQnjFj43bVtRGz4zHyQpXpp70zxakk52g9UbgFos840efLp MuiVKRQLlcsRzi4ZVAEM9Tr8X8dRKJ3VNNaz3Hli7N79sBjJVY1Q3MUfd2Pnctx8 fXB8T6nhBk3pDH78BPipaDlVqj6vIF8= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:13 2024 by rpki-client on console-ams.rpki-client.org