$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json) Hash identifier: UKjFdSeoJq6ibkBL5hG351A5iwmc8h2PVNb+zBT3y+0= Subject key identifier: BD:24:E6:C5:23:93:B6:A0:07:13:A0:F4:31:7E:FC:51:AD:1B:2F:E9 Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft Manifest number: A1 Signing time: Fri 17 May 2024 06:53:31 +0000 Manifest this update: Fri 17 May 2024 06:53:31 +0000 Manifest next update: Fri 24 May 2024 06:53:31 +0000 Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: Ikk1z0FWptT7Z9iY7YC+BKVE9LCcc4EMLerjiTrZBvw=) 2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: 33HkpvrkeHpGV0MCCkt2Uwsnq/ooEKYbSLSLSfasvYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Validity Not Before: May 17 06:53:31 2024 GMT Not After : May 24 06:53:31 2024 GMT Subject: CN=6646feeb-6d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:67:3a:12:52:db:8e:70:d6:2c:f1:71:86:e1: 2f:02:59:6a:05:3c:ee:ff:42:b4:bd:c6:8b:51:a6: f2:65:4d:dc:a9:58:8e:53:1e:f6:e3:d6:a7:f7:40: d3:c3:e3:f5:5c:2b:0d:7d:b3:af:b3:bb:cd:ac:78: f5:dc:0d:27:96:d6:40:6c:cd:2d:35:9d:2f:9c:03: 85:cf:78:90:70:32:5a:24:16:0d:f0:cd:df:e2:73: d8:c7:67:8e:9c:d6:05:a2:11:fd:42:38:17:ea:cb: df:10:55:05:fa:48:5d:ef:90:e9:f6:df:93:11:4e: 53:0c:31:bb:8d:08:d3:76:3d:b7:0d:63:a9:a8:13: f1:49:24:42:06:5f:65:8c:64:8f:65:8a:57:aa:1b: 50:43:28:aa:12:1e:ad:63:c1:55:c0:86:3e:b5:f3: c5:7d:44:64:31:4d:b8:6e:2b:98:34:d6:0d:7c:09: 8f:b1:8d:fa:fb:3f:2b:7a:73:23:5d:45:ea:40:34: 50:bc:e9:d1:49:78:6a:5a:46:7f:da:c4:42:c8:e3: 1a:83:01:05:b0:25:cb:1c:54:bc:58:70:96:55:d2: 63:12:88:c5:d5:9f:49:4e:5b:53:ba:07:fd:81:3e: e2:a2:2d:28:7f:54:19:6d:8f:0a:b0:1a:d5:08:98: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:24:E6:C5:23:93:B6:A0:07:13:A0:F4:31:7E:FC:51:AD:1B:2F:E9 X509v3 Authority Key Identifier: keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:45:5d:48:52:51:1c:a5:cb:e8:90:42:2e:34:9f:ca:cd:8d: 3f:8d:c0:4e:55:b1:9c:5c:65:c7:da:c5:72:c4:b4:7c:51:3c: 00:44:83:1b:fa:38:d4:d6:56:e3:e9:ac:46:0d:32:12:86:5d: a4:f5:08:99:19:51:5e:b8:01:f3:15:1b:0b:e7:36:7e:b5:de: 0c:61:8d:e8:a6:9d:4f:6d:c6:a2:15:3d:8e:c6:52:98:ee:0c: f5:eb:47:6f:f9:ae:cc:0e:71:4c:c0:bf:b3:7e:26:61:90:20: 3d:bb:44:c6:eb:7a:f1:51:f3:49:f1:02:00:65:0a:d6:d7:da: dc:00:c1:36:7a:f7:e1:3c:6f:ba:a2:ce:6f:cd:4e:66:db:af: ce:e5:fd:25:e8:75:a9:61:75:b8:b7:a5:51:4b:61:53:8f:55: e3:2b:39:c5:4a:31:ce:c3:cb:76:a1:17:c7:72:2a:28:f3:68: ef:c3:b7:a2:4d:31:f4:49:de:17:99:88:0b:35:dd:b8:d9:8d: cc:29:26:e4:17:1d:c7:23:21:5a:ee:07:ff:03:32:87:e6:e5: cf:a7:46:07:7d:cc:5d:c9:82:5d:b0:5e:34:d4:ba:2c:9b:81: 8e:b2:09:d4:5b:ca:7f:a9:be:0c:c8:96:1b:59:6c:07:d9:0c: 60:ee:b1:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky ODg4QTQ5NUEwHhcNMjQwNTE3MDY1MzMxWhcNMjQwNTI0MDY1MzMxWjAYMRYwFAYD VQQDEw02NjQ2ZmVlYi02ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Wc6ElLbjnDWLPFxhuEvAllqBTzu/0K0vcaLUabyZU3cqViOUx7249an90DT w+P1XCsNfbOvs7vNrHj13A0nltZAbM0tNZ0vnAOFz3iQcDJaJBYN8M3f4nPYx2eO nNYFohH9QjgX6svfEFUF+khd75Dp9t+TEU5TDDG7jQjTdj23DWOpqBPxSSRCBl9l jGSPZYpXqhtQQyiqEh6tY8FVwIY+tfPFfURkMU24biuYNNYNfAmPsY36+z8renMj XUXqQDRQvOnRSXhqWkZ/2sRCyOMagwEFsCXLHFS8WHCWVdJjEojF1Z9JTltTugf9 gT7ioi0of1QZbY8KsBrVCJiVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0k5sUj k7agBxOg9DF+/FGtGy/pMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYRV1IUlEcpcvokEIuNJ/KzY0/jcBOVbGcXGXH2sVyxLR8UTwARIMb +jjU1lbj6axGDTIShl2k9QiZGVFeuAHzFRsL5zZ+td4MYY3opp1PbcaiFT2OxlKY 7gz160dv+a7MDnFMwL+zfiZhkCA9u0TG63rxUfNJ8QIAZQrW19rcAME2evfhPG+6 os5vzU5m26/O5f0l6HWpYXW4t6VRS2FTj1XjKznFSjHOw8t2oRfHcioo82jvw7ei TTH0Sd4XmYgLNd242Y3MKSbkFx3HIyFa7gf/AzKH5uXPp0YHfcxdyYJdsF401Los m4GOsgnUW8p/qb4MyJYbWWwH2Qxg7rHc -----END CERTIFICATE-----Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org