$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: kRnottmTSXvydlvvRdEwefbPLSBOzwaMmrgNYVkLNxM= Subject key identifier: C0:EE:17:72:4F:BE:A3:95:E9:00:7C:2C:21:BA:FD:1C:70:22:B7:A0 Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 021C Signing time: Tue 07 May 2024 04:04:07 +0000 Manifest this update: Tue 07 May 2024 04:04:07 +0000 Manifest next update: Tue 14 May 2024 04:04:07 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: YvbweiBnlMp7B2LFupXIi+p7E8Gd7i7JgxwoBErafME=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: QkEE0n5obbzAJPu3NC2pe+HHxIT7OvxbSEov/eGQSNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: May 7 04:04:07 2024 GMT Not After : May 14 04:04:07 2024 GMT Subject: CN=6639a837-dec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:71:b5:59:83:a0:48:1a:e6:f0:64:47:2d: 3a:d4:30:a5:69:99:11:d4:3d:10:b9:57:4b:84:b2: 94:a2:d5:e4:1b:37:0c:03:b8:43:61:fd:07:dc:e2: 2d:57:8e:19:1c:b0:5b:2b:e8:f0:24:2b:8f:2e:d3: 67:f2:c9:86:b7:53:80:7f:d4:03:04:ef:9f:84:ac: 31:20:53:19:3e:2e:05:1a:51:03:2b:43:31:8f:f7: 5e:00:32:55:ac:2e:42:20:88:19:c1:ee:8b:34:ff: 75:a3:b9:0b:d2:be:34:be:f6:21:3a:5e:46:14:46: ea:fa:1d:5b:98:7f:69:16:e3:84:1d:01:ba:81:cc: 76:91:dc:95:bd:f8:2f:5e:56:82:c0:80:ec:42:a6: 37:52:2f:09:24:30:87:26:87:52:4e:d8:65:73:02: fe:30:b2:b1:2c:8b:bd:8d:d2:46:9c:3c:98:4c:ef: 5c:a2:e3:0e:5c:15:b0:91:98:a5:69:42:5d:82:47: 5d:49:fb:5a:20:ba:a6:b0:30:7a:8f:b5:3d:0b:99: 01:8b:79:00:d6:90:fc:1c:32:81:80:6f:f4:8d:24: 29:16:9b:b4:25:7d:95:31:fc:9b:49:d0:ff:97:b0: bd:99:33:15:80:99:ba:c0:d7:c1:3e:cb:8f:e6:28: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:17:72:4F:BE:A3:95:E9:00:7C:2C:21:BA:FD:1C:70:22:B7:A0 X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:ff:0b:be:90:31:c3:26:11:3c:15:ed:48:be:e5:74:26: e8:ee:1f:45:c1:35:d7:4a:9b:c1:d4:b7:e5:92:47:09:1b:8b: c5:8b:f8:30:ba:f9:54:94:f2:5d:1e:61:e1:ef:ce:cd:80:c1: df:35:cf:9d:64:61:f1:e7:97:b0:39:bc:dd:52:f3:dc:36:00: b8:7c:5a:7b:96:bc:a6:6c:3c:5b:1c:e2:a8:52:b8:c2:8b:53: 16:81:48:49:0f:8d:a0:8e:19:68:9c:bf:cd:cc:5b:11:d4:6f: b1:ad:a1:2c:1a:0f:fb:0e:86:99:28:9d:fe:98:fc:da:26:d6: ad:1a:78:3d:9a:4a:90:c8:09:df:5b:a8:7e:07:d8:56:64:36: 24:64:8f:b4:24:89:20:22:10:f2:3f:72:45:b5:03:6d:37:d6: 2e:2f:58:4f:4e:48:4e:2d:9e:05:5f:10:c3:d3:77:04:3c:37: 9f:22:80:e3:5f:ea:bc:bc:fa:09:ed:e0:94:dd:24:c3:11:ba: f4:69:0f:a0:66:b9:11:ce:61:4a:36:02:e0:dd:2c:3c:3d:4f: 45:77:15:ce:58:56:a8:ba:db:79:7a:5a:a3:8e:ef:af:1d:9c: be:db:94:e9:44:be:39:89:af:92:2f:85:ff:b0:db:50:37:95: 95:85:da:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjQwNTA3MDQwNDA3WhcNMjQwNTE0MDQwNDA3WjAYMRYwFAYD VQQDEw02NjM5YTgzNy1kZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rBxtVmDoEga5vBkRy061DClaZkR1D0QuVdLhLKUotXkGzcMA7hDYf0H3OIt V44ZHLBbK+jwJCuPLtNn8smGt1OAf9QDBO+fhKwxIFMZPi4FGlEDK0Mxj/deADJV rC5CIIgZwe6LNP91o7kL0r40vvYhOl5GFEbq+h1bmH9pFuOEHQG6gcx2kdyVvfgv XlaCwIDsQqY3Ui8JJDCHJodSTthlcwL+MLKxLIu9jdJGnDyYTO9couMOXBWwkZil aUJdgkddSftaILqmsDB6j7U9C5kBi3kA1pD8HDKBgG/0jSQpFpu0JX2VMfybSdD/ l7C9mTMVgJm6wNfBPsuP5iizbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDuF3JP vqOV6QB8LCG6/RxwIregMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG/f8LvpAxwyYRPBXtSL7ldCbo7h9FwTXXSpvB1LflkkcJG4vFi/gw uvlUlPJdHmHh787NgMHfNc+dZGHx55ewObzdUvPcNgC4fFp7lrymbDxbHOKoUrjC i1MWgUhJD42gjhlonL/NzFsR1G+xraEsGg/7DoaZKJ3+mPzaJtatGng9mkqQyAnf W6h+B9hWZDYkZI+0JIkgIhDyP3JFtQNtN9YuL1hPTkhOLZ4FXxDD03cEPDefIoDj X+q8vPoJ7eCU3STDEbr0aQ+gZrkRzmFKNgLg3Sw8PU9FdxXOWFaoutt5elqjju+v HZy+25TpRL45ia+SL4X/sNtQN5WVhdrw -----END CERTIFICATE-----Generated at Tue May 7 05:34:27 2024 by rpki-client on console-ams.rpki-client.org