$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: yiz+YcZcgT/ZMfFdcsgmk69FugZiTNhTe129wYt5iFw= Subject key identifier: E5:0B:4D:AD:45:A7:7C:5B:67:99:F3:B9:70:0A:75:2B:B3:37:BD:64 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 0386 Signing time: Fri 03 May 2024 02:51:22 +0000 Manifest this update: Fri 03 May 2024 02:51:21 +0000 Manifest next update: Fri 10 May 2024 02:51:21 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: S3KUdboMQxXKyMWFyP28t2GR2KQBFaPyWxv1QNnEyuo=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 6p9TqnChUnyfm26ZZLBLmmyndB/671MOguxKaFX62F4=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: WtBhf+2wV0FG+D0dG09G0N6uOWOutj/QTC9UQ4o3FqU=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: GXouMFAOJVC9NIYsZ23uZYKCTXWXo1NKnPdMvbwSfZE=) 5: 5A892D6424E011EDAEC0E529C4F9AE02.roa (hash: hD/ATLAAYUyRMW6O66/4L+ra15DS1ajdFvliMlcn8tc=) 6: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: HEB34Hkp/m9L/BxeJv7XDWdKw2MGO2ilQuFX47vSU/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: May 3 02:51:21 2024 GMT Not After : May 10 02:51:21 2024 GMT Subject: CN=66345129-6c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:87:d4:09:1f:16:7b:3d:ca:d7:68:8d:a5: 32:34:c9:dc:4d:d5:b2:c0:26:b6:1c:54:21:91:ee: a7:e9:ae:24:31:d7:bd:6d:3c:50:f7:cc:b0:57:58: 3a:38:fb:a1:e5:e1:ad:57:11:8a:4a:66:f4:1b:08: a6:9a:6d:76:8b:83:6e:bc:0e:f1:6c:e8:b2:a4:81: c2:66:18:15:55:bb:ab:22:ac:97:37:18:bf:f3:02: b6:9e:07:59:c4:ff:f1:61:cb:fa:e0:07:d6:12:c0: 4e:91:11:72:43:d0:7b:46:0a:37:51:c2:3b:a8:09: 35:0e:28:5a:a6:2a:59:66:f5:8e:cf:75:cb:88:9d: b1:3c:1d:6d:8b:4f:33:ae:50:2a:ee:11:8d:c4:f1: 70:d2:9e:e6:83:28:69:c9:9e:e8:81:d3:15:59:12: 9e:24:a6:94:9a:96:5b:3f:17:a8:38:8a:2f:0b:43: 34:03:5b:c7:56:66:47:40:a7:c2:20:34:f5:6e:1f: 00:bf:5c:ed:96:21:24:cc:ad:74:48:b7:41:b1:82: ee:5e:c3:a6:bc:74:11:4c:a8:20:86:ba:af:be:47: ac:47:eb:e8:3a:b1:d2:29:e3:a5:54:11:54:a8:f3: 32:e3:58:3d:38:bc:4c:9b:a7:b9:81:69:e5:be:93: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:4D:AD:45:A7:7C:5B:67:99:F3:B9:70:0A:75:2B:B3:37:BD:64 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3d:a2:af:63:4c:67:f0:fd:6f:7e:ac:f7:b5:ac:01:6c:1e: 7b:d4:ca:3f:a3:41:58:c8:2c:5e:51:b2:70:31:f2:5d:b9:0b: bb:3a:2b:ea:cd:49:c3:68:40:eb:3d:f7:74:d8:1d:1a:df:29: 79:d9:48:b9:d1:e6:5e:34:8c:6f:11:57:2c:75:10:ae:22:88: 33:ff:7e:4f:32:02:98:58:8a:5d:6c:5f:73:3c:96:be:1b:02: 06:7d:a2:2f:63:5d:68:06:ad:27:62:84:95:88:1b:5c:21:03: 64:19:0a:9a:07:25:dd:fc:4f:db:92:13:8f:ab:8d:ae:85:84: fc:0b:c2:9e:c2:b6:a0:71:24:5a:1c:e6:c5:ac:6f:0c:7c:fb: 7d:10:ab:63:70:07:30:00:2d:fe:16:27:66:fd:37:e7:13:92: bb:c2:f3:c8:1d:e7:38:6c:cb:4a:e1:de:81:da:1b:24:90:e8: e7:00:cf:89:7d:ad:27:d8:53:25:26:51:3e:b4:72:aa:75:f3: 9e:cd:53:bd:65:e8:61:a0:ed:65:8c:dc:c5:64:41:99:26:6e: 77:0c:73:35:25:98:37:18:8a:92:11:51:f2:51:a9:e6:ab:f4: af:89:93:d5:a8:f2:65:f0:4e:6f:c0:b5:36:f2:c5:ad:55:f8: 5f:c0:e7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjQwNTAzMDI1MTIxWhcNMjQwNTEwMDI1MTIxWjAYMRYwFAYD VQQDEw02NjM0NTEyOS02YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWiH1AkfFns9ytdojaUyNMncTdWywCa2HFQhke6n6a4kMde9bTxQ98ywV1g6 OPuh5eGtVxGKSmb0Gwimmm12i4NuvA7xbOiypIHCZhgVVburIqyXNxi/8wK2ngdZ xP/xYcv64AfWEsBOkRFyQ9B7Rgo3UcI7qAk1DihapipZZvWOz3XLiJ2xPB1ti08z rlAq7hGNxPFw0p7mgyhpyZ7ogdMVWRKeJKaUmpZbPxeoOIovC0M0A1vHVmZHQKfC IDT1bh8Av1ztliEkzK10SLdBsYLuXsOmvHQRTKgghrqvvkesR+voOrHSKeOlVBFU qPMy41g9OLxMm6e5gWnlvpN3bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOULTa1F p3xbZ5nzuXAKdSuzN71kMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgPaKvY0xn8P1vfqz3tawBbB571Mo/o0FYyCxeUbJwMfJduQu7Oivq zUnDaEDrPfd02B0a3yl52Ui50eZeNIxvEVcsdRCuIogz/35PMgKYWIpdbF9zPJa+ GwIGfaIvY11oBq0nYoSViBtcIQNkGQqaByXd/E/bkhOPq42uhYT8C8KewragcSRa HObFrG8MfPt9EKtjcAcwAC3+Fidm/TfnE5K7wvPIHec4bMtK4d6B2hskkOjnAM+J fa0n2FMlJlE+tHKqdfOezVO9ZehhoO1ljNzFZEGZJm53DHM1JZg3GIqSEVHyUanm q/SviZPVqPJl8E5vwLU28sWtVfhfwOd+ -----END CERTIFICATE-----Generated at Fri May 3 04:45:16 2024 by rpki-client on console-fra.rpki-client.org