$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: 3nAxGcf9qrs+lw+qQ2LbnZtg5baapwXAaW7n1UlILa0= Subject key identifier: 3D:5E:C6:47:CA:9A:C6:8E:C5:1B:52:3B:8E:41:1A:DC:25:0B:72:AC Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 60 Signing time: Tue 07 May 2024 07:43:16 +0000 Manifest this update: Tue 07 May 2024 07:43:15 +0000 Manifest next update: Tue 14 May 2024 07:43:15 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: HnCBgNFjDKgsJdqzojlc0aTOuQLGXzh448btXRyvboY=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: A/66WVnR6iyQK+uVOIUrx69ZO3LnxCjGqEQUEBn3Lxc=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: XdxeMfWOgQlO5jLoNMyMUX1p4xelqTecAZkRcO8q704=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 07:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: May 7 07:43:15 2024 GMT Not After : May 14 07:43:15 2024 GMT Subject: CN=6639db93-1ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:b8:bd:e4:0a:70:b9:c4:b0:ae:94:04:fc: 79:dc:50:eb:b5:e6:1a:99:c8:43:ba:1a:33:47:df: bb:88:0a:bd:68:d0:41:bf:d9:1a:9b:12:70:2e:f1: e9:36:1b:a4:5c:f3:50:5f:92:2f:6a:eb:f2:b9:76: 8e:3a:06:ad:6d:8d:57:d3:ca:05:15:85:61:fe:b3: a3:84:af:8e:7b:ee:11:52:be:f2:d2:b2:10:b8:3d: 5a:26:5a:6f:f6:ed:1b:ab:9d:be:52:a5:a6:44:4c: 4e:65:7c:1d:e3:be:f3:72:1f:b9:f6:10:33:93:94: 14:29:61:c8:27:47:7d:e7:d0:9f:61:0a:3a:fc:5a: be:a0:4a:55:83:0a:78:25:91:de:52:a9:fa:b6:bd: d1:c9:3d:e8:70:49:c3:4e:7c:df:92:e0:a1:1e:16: 74:7f:e8:50:51:58:d6:f6:67:a9:be:65:27:27:7a: 80:a0:64:f8:3c:be:ed:07:6f:cf:f9:15:15:4a:4d: f7:a0:13:b0:e0:0c:c3:66:ad:b9:96:da:92:a0:7c: e3:5f:19:ec:86:df:10:67:97:95:0c:7f:f1:ad:24: 3c:14:67:7f:e1:d1:03:33:07:44:2d:eb:74:a9:07: dc:65:e4:a5:af:bf:23:a0:92:c8:98:9f:6f:bb:da: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:C6:47:CA:9A:C6:8E:C5:1B:52:3B:8E:41:1A:DC:25:0B:72:AC X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:25:04:f5:da:b4:32:7c:3b:26:52:f3:64:17:d7:6e:e0:78: 93:df:3e:27:ec:67:b9:53:26:68:a3:ca:d3:19:6f:bf:4c:e2: 0d:6c:73:a7:83:c4:fa:f8:f6:98:eb:83:d4:02:f8:f8:cf:bc: 7c:3f:77:46:60:43:88:3f:72:7e:cd:bf:e0:b4:8b:48:07:22: 88:7c:46:bd:18:b8:b8:e7:b2:3d:72:29:66:48:b2:bf:72:63: 89:17:bb:6a:6b:39:5f:55:a3:27:b8:4c:d6:a1:e6:6f:a4:68: cd:27:89:ff:fb:e9:0b:f5:4c:37:ab:3d:61:aa:18:c9:44:5f: 35:6e:6f:20:25:46:60:a4:00:7f:f8:88:88:11:1d:7a:0a:89: 21:a8:41:9f:38:f6:43:a7:e0:0d:42:3e:45:f3:d7:9e:32:be: 31:24:3e:ad:7f:67:c4:21:21:79:36:5e:16:5a:d8:76:6d:6a: 81:d3:2f:45:14:21:85:52:a4:c4:98:d0:cd:8e:7e:6a:26:83: 35:e8:cf:5c:e3:2e:f7:d9:e5:a6:b5:6c:a6:10:3f:2c:c5:98: 61:8c:48:87:3e:ee:7b:f4:f1:81:ed:78:0e:b8:1f:b4:cc:4d: 95:a1:ac:04:05:5d:38:89:a7:c5:79:fa:8f:4f:78:26:7e:d5: 90:48:f3:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjBGNjExMC8GA1UEBRMoQzBBRUY3MDc3RjUyNjIyNTY3MTc5QUNFNTZBRDVFRThD RDY0NjA0RTAeFw0yNDA1MDcwNzQzMTVaFw0yNDA1MTQwNzQzMTVaMBgxFjAUBgNV BAMTDTY2MzlkYjkzLTFhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS+Li95ApwucSwrpQE/HncUOu15hqZyEO6GjNH37uICr1o0EG/2RqbEnAu8ek2 G6Rc81Bfki9q6/K5do46Bq1tjVfTygUVhWH+s6OEr4577hFSvvLSshC4PVomWm/2 7Rurnb5SpaZETE5lfB3jvvNyH7n2EDOTlBQpYcgnR33n0J9hCjr8Wr6gSlWDCngl kd5Sqfq2vdHJPehwScNOfN+S4KEeFnR/6FBRWNb2Z6m+ZScneoCgZPg8vu0Hb8/5 FRVKTfegE7DgDMNmrbmW2pKgfONfGeyG3xBnl5UMf/GtJDwUZ3/h0QMzB0Qt63Sp B9xl5KWvvyOgksiYn2+72p5RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPV7GR8qa xo7FG1I7jkEa3CULcqwwHwYDVR0jBBgwFoAUwK73B39SYiVnF5rOVq1e6M1kYE4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMEY2L0ZFRTA1QkVDN0NB QzExRUU4QTI4ODQ2RkM0RjlBRTAyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lF NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0s3M0IzOVNZaVZuRjVyT1ZxMWU2TTFrWUU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MEY2L0ZFRTA1QkVDN0NBQzExRUU4QTI4ODQ2RkM0RjlBRTAyL3dLNzNCMzlTWWlW bkY1ck9WcTFlNk0xa1lFNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYlBPXatDJ8OyZS82QX127geJPfPifsZ7lTJmijytMZb79M4g1sc6eD xPr49pjrg9QC+PjPvHw/d0ZgQ4g/cn7Nv+C0i0gHIoh8Rr0YuLjnsj1yKWZIsr9y Y4kXu2prOV9Voye4TNah5m+kaM0nif/76Qv1TDerPWGqGMlEXzVubyAlRmCkAH/4 iIgRHXoKiSGoQZ849kOn4A1CPkXz154yvjEkPq1/Z8QhIXk2XhZa2HZtaoHTL0UU IYVSpMSY0M2OfmomgzXoz1zjLvfZ5aa1bKYQPyzFmGGMSIc+7nv08YHteA64H7TM TZWhrAQFXTiJp8V5+o9PeCZ+1ZBI8+E= -----END CERTIFICATE-----Generated at Tue May 7 09:19:47 2024 by rpki-client on console-ams.rpki-client.org