$ rpki-client -vvf rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft File: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft (raw, json) Hash identifier: Rhx8h2eG+XY3N2ZKFEeR76wGvjq1dUTnyLBzqDNbScM= Subject key identifier: DE:2F:8C:1E:A9:2A:DB:48:75:29:E2:B2:B4:A5:45:8D:03:7B:32:61 Authority key identifier: C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 Certificate issuer: /CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Certificate serial: 127D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft Manifest number: 1273 Signing time: Sat 04 May 2024 17:46:41 +0000 Manifest this update: Sat 04 May 2024 17:46:39 +0000 Manifest next update: Sat 11 May 2024 17:46:39 +0000 Files and hashes: 1: w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl (hash: 6cg9oXTW/Dg+Z0yr2oz6I5e+LaCeo8nXTffnPu+8esg=) 2: A4A123AE910F11EBA9F7B639C4F9AE02.roa (hash: 0VlpTd/u5AQ9SvGGwRGZDkuWUVcNk9IhchTlmde8Q0E=) 3: AD1B7E40A5C511E8A9B85134C4F9AE02.roa (hash: gSFMToAippUhfj6Yauf652gB64yTtO3/+lsd11hCXmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4733 (0x127d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F89D/serialNumber=C396305D02D2F885F3FADED53AC310F21BD05487 Validity Not Before: May 4 17:46:39 2024 GMT Not After : May 11 17:46:39 2024 GMT Subject: CN=66367480-a505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:34:67:46:35:fb:3a:54:1e:6c:47:6e:66: ae:1a:7b:aa:36:18:5e:2c:8d:7c:ab:d5:1b:8c:50: f3:ab:08:a0:12:a8:71:74:f7:c4:78:8a:0e:d1:92: 08:68:21:07:0b:09:5b:a8:ac:78:f7:de:b4:13:40: 25:16:19:6f:ee:99:f0:32:f5:5e:a7:f8:14:4a:1c: f2:85:29:2d:1d:6d:7c:6e:d1:17:9c:65:29:da:f1: 8a:97:ef:c6:bf:c6:c1:5b:34:7f:d1:54:a9:a8:c6: b8:d8:e2:4e:98:2a:be:9f:f3:d9:80:5f:01:1a:80: 20:0a:bc:29:ca:07:a2:c2:a2:d2:64:f0:42:72:e9: 0b:8f:dc:da:27:70:56:0a:0e:6a:6a:79:e2:84:cb: bb:54:f4:d3:34:ff:47:6d:3a:57:e5:db:ca:1a:8e: 51:04:c7:43:01:ea:b5:09:94:22:2e:1a:92:f5:91: 97:bd:b3:d7:e8:c9:74:64:dd:1c:f1:97:08:28:4f: 78:fe:80:ab:81:b1:24:13:5f:ed:8c:b4:6a:c8:50: 01:d2:91:9e:d3:f1:39:a6:67:a5:fa:ab:2f:5a:3e: 75:ad:a9:ac:da:36:06:b5:38:e6:93:25:72:bf:7a: e2:0b:e5:3d:af:2c:43:5e:f0:11:4f:b9:67:ff:32: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:8C:1E:A9:2A:DB:48:75:29:E2:B2:B4:A5:45:8D:03:7B:32:61 X509v3 Authority Key Identifier: keyid:C3:96:30:5D:02:D2:F8:85:F3:FA:DE:D5:3A:C3:10:F2:1B:D0:54:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F89D/9674AFC8A5C411E89505FD31C4F9AE02/w5YwXQLS-IXz-t7VOsMQ8hvQVIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4a:66:75:f5:53:e5:42:92:1a:70:17:7b:bf:06:ef:dd:e9: bf:34:16:e0:14:3e:7e:df:93:05:36:0f:99:39:df:2d:91:50: c2:9b:54:70:28:2f:5d:40:38:9b:a9:80:e1:e9:90:3e:22:ff: 08:a2:fa:58:a1:ae:95:32:59:9d:e8:3a:c5:7e:19:6d:5f:4c: 4c:1a:76:cd:50:f9:92:f1:54:db:e0:66:0d:e9:09:01:db:f5: b4:11:04:fe:f6:ed:d3:1e:ec:2e:89:66:2c:d8:95:0e:6d:81: c7:02:15:2f:c5:93:93:fb:5e:c5:c8:a8:d6:08:9a:17:f9:d3: ee:e1:5d:2d:9e:cf:5b:2b:fe:a9:71:e5:17:41:d4:f4:47:4d: 7b:cf:0e:10:0d:13:d5:6f:52:8c:72:b9:0d:67:48:69:08:21: 24:b1:55:94:55:ba:1e:f8:6f:8b:2f:b4:70:e1:89:1b:f8:73: f0:95:6b:ff:20:08:c6:68:48:80:b3:05:e3:56:8d:88:f3:14: 1c:ec:42:2b:6c:f4:11:b3:96:71:88:c7:58:ee:d9:a9:ca:0e: 1f:2b:aa:a3:3c:6f:f3:4e:f0:b0:ec:bf:ac:85:85:c9:53:ad: c9:e5:83:fb:cd:92:50:8a:ae:56:a5:70:5b:3f:6d:e3:f5:11: 85:81:b6:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4OUQxMTAvBgNVBAUTKEMzOTYzMDVEMDJEMkY4ODVGM0ZBREVENTNBQzMxMEYy MUJEMDU0ODcwHhcNMjQwNTA0MTc0NjM5WhcNMjQwNTExMTc0NjM5WjAYMRYwFAYD VQQDEw02NjM2NzQ4MC1hNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZE0Z0Y1+zpUHmxHbmauGnuqNhheLI18q9UbjFDzqwigEqhxdPfEeIoO0ZII aCEHCwlbqKx49960E0AlFhlv7pnwMvVep/gUShzyhSktHW18btEXnGUp2vGKl+/G v8bBWzR/0VSpqMa42OJOmCq+n/PZgF8BGoAgCrwpygeiwqLSZPBCcukLj9zaJ3BW Cg5qannihMu7VPTTNP9HbTpX5dvKGo5RBMdDAeq1CZQiLhqS9ZGXvbPX6Ml0ZN0c 8ZcIKE94/oCrgbEkE1/tjLRqyFAB0pGe0/E5pmel+qsvWj51rams2jYGtTjmkyVy v3riC+U9ryxDXvART7ln/zLkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4vjB6p KttIdSnisrSlRY0DezJhMB8GA1UdIwQYMBaAFMOWMF0C0viF8/re1TrDEPIb0FSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg5RC85Njc0QUZDOEE1 QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1JWHotdDdWT3NNUThodlFW SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1WXdYUUxTLUlYei10N1ZPc01ROGh2UVZJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg5RC85Njc0QUZDOEE1QzQxMUU4OTUwNUZEMzFDNEY5QUUwMi93NVl3WFFMUy1J WHotdDdWT3NNUThodlFWSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4SmZ19VPlQpIacBd7vwbv3em/NBbgFD5+35MFNg+ZOd8tkVDCm1Rw KC9dQDibqYDh6ZA+Iv8IovpYoa6VMlmd6DrFfhltX0xMGnbNUPmS8VTb4GYN6QkB 2/W0EQT+9u3THuwuiWYs2JUObYHHAhUvxZOT+17FyKjWCJoX+dPu4V0tns9bK/6p ceUXQdT0R017zw4QDRPVb1KMcrkNZ0hpCCEksVWUVboe+G+LL7Rw4Ykb+HPwlWv/ IAjGaEiAswXjVo2I8xQc7EIrbPQRs5ZxiMdY7tmpyg4fK6qjPG/zTvCw7L+shYXJ U63J5YP7zZJQiq5WpXBbP23j9RGFgbaC -----END CERTIFICATE-----Generated at Sat May 4 20:37:11 2024 by rpki-client on console-fra.rpki-client.org