$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: 9s46bowVAqS03aya9b9lT/qLwHV+3LzX22VVo8aA94Y= Subject key identifier: 9D:EB:A4:F4:70:89:2C:6F:46:0F:53:B5:A9:E0:0B:E0:DC:66:CC:4B Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 18F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 18EA Signing time: Fri 26 Apr 2024 16:52:51 +0000 Manifest this update: Fri 26 Apr 2024 16:52:51 +0000 Manifest next update: Fri 03 May 2024 16:52:51 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: bQwDzD4FnvIfgTc3ajA52TyXJOWQ/WsGbAyFXHT6G00=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: u3Y1UTnDwpgpoAQ4nBRoQEeMPBM9RgMjEzF1OPsd3Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6387 (0x18f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Apr 26 16:52:51 2024 GMT Not After : May 3 16:52:51 2024 GMT Subject: CN=662bdbe3-55b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:e5:c6:f3:50:09:4f:7e:fa:83:03:74:67: 50:cb:b1:26:93:41:7f:6f:74:2b:7a:6b:22:1c:9e: 36:3f:c6:41:6e:1f:56:1a:16:17:12:d2:8c:d3:d3: 69:ab:e7:95:4e:e2:5b:fc:c3:6f:79:47:7b:f5:fc: f1:ef:85:fe:7b:dc:66:e5:40:7c:c8:c7:33:ed:b8: b9:99:a5:0c:b9:56:b3:05:56:5e:6b:72:22:0e:c0: 1b:df:a4:b9:11:4d:e5:ec:93:7e:8b:8a:7c:ff:db: f5:eb:91:ea:0e:d8:4b:8a:82:2f:70:b9:0b:a3:b4: e1:f4:16:45:c5:9e:4e:ec:0e:da:77:2f:cb:5f:ba: ec:07:3b:49:27:67:0d:b0:6e:50:23:52:e0:08:7a: fc:ae:82:b9:1a:ec:0e:46:36:81:b4:f0:00:7a:af: 0d:83:86:c8:bd:fe:b9:65:1e:47:76:ce:09:de:09: 0b:83:5c:68:58:2c:f4:dd:64:31:ca:61:20:4e:d4: 93:4b:7b:b5:9c:3e:eb:ce:d9:c1:38:94:49:f8:7d: 83:fc:83:ec:e2:8b:ad:ed:3b:4c:e6:c6:c9:69:f6: 47:7b:52:2b:23:6f:92:c3:1d:2c:c2:d3:c5:e8:16: 9f:0e:79:d0:05:c6:e8:3d:20:0a:c0:01:0f:2a:af: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EB:A4:F4:70:89:2C:6F:46:0F:53:B5:A9:E0:0B:E0:DC:66:CC:4B X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:c3:15:17:c4:87:1d:70:dd:9c:6d:0f:6d:ab:2f:9f:43: 14:f4:fd:89:2b:31:0a:e6:a2:b9:2f:ad:e4:7c:44:d2:f0:09: 0b:f4:ce:4e:5b:b8:bb:d8:18:25:28:48:fb:6c:59:00:fc:53: 3e:f9:14:71:6b:00:dc:b3:10:ba:e2:55:5b:5c:d9:86:61:b7: 59:59:5d:a1:41:35:fe:ae:e5:16:da:eb:8f:5b:e2:97:c4:0b: bb:f3:a7:f5:fd:f5:80:2c:24:f1:6e:4e:67:06:fc:bc:9f:c7: dd:15:69:9c:5a:40:16:0d:80:91:17:4f:7f:1a:df:97:a3:66: 38:46:8f:fd:47:73:da:f7:9b:9a:c1:bd:03:1d:55:eb:f8:cd: a8:66:e8:72:69:ff:9b:f9:6e:c8:9a:3f:f7:f2:38:de:87:80: 23:36:f2:58:59:5f:2e:c1:2d:b0:28:7d:18:c1:cc:13:ed:d5: 76:00:81:04:52:b8:67:cc:b0:78:0b:66:62:1b:5c:81:eb:c3: 6c:0c:c1:48:ca:84:5f:cc:b6:8c:56:7a:81:b8:9f:ce:f1:e8: 61:55:36:ca:87:d3:9e:88:71:12:e6:1b:e4:21:b8:98:aa:83: 7f:f4:0a:8d:f8:a0:5a:a2:03:99:e1:ef:1c:72:6c:50:f4:1a: db:1c:55:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjQwNDI2MTY1MjUxWhcNMjQwNTAzMTY1MjUxWjAYMRYwFAYD VQQDEw02NjJiZGJlMy01NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnjlxvNQCU9++oMDdGdQy7Emk0F/b3QremsiHJ42P8ZBbh9WGhYXEtKM09Np q+eVTuJb/MNveUd79fzx74X+e9xm5UB8yMcz7bi5maUMuVazBVZea3IiDsAb36S5 EU3l7JN+i4p8/9v165HqDthLioIvcLkLo7Th9BZFxZ5O7A7ady/LX7rsBztJJ2cN sG5QI1LgCHr8roK5GuwORjaBtPAAeq8Ng4bIvf65ZR5Hds4J3gkLg1xoWCz03WQx ymEgTtSTS3u1nD7rztnBOJRJ+H2D/IPs4out7TtM5sbJafZHe1IrI2+Swx0swtPF 6BafDnnQBcboPSAKwAEPKq8FIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3rpPRw iSxvRg9TtangC+DcZsxLMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNaMMVF8SHHXDdnG0Pbasvn0MU9P2JKzEK5qK5L63kfETS8AkL9M5O W7i72BglKEj7bFkA/FM++RRxawDcsxC64lVbXNmGYbdZWV2hQTX+ruUW2uuPW+KX xAu786f1/fWALCTxbk5nBvy8n8fdFWmcWkAWDYCRF09/Gt+Xo2Y4Ro/9R3Pa95ua wb0DHVXr+M2oZuhyaf+b+W7Imj/38jjeh4AjNvJYWV8uwS2wKH0YwcwT7dV2AIEE UrhnzLB4C2ZiG1yB68NsDMFIyoRfzLaMVnqBuJ/O8ehhVTbKh9OeiHES5hvkIbiY qoN/9AqN+KBaogOZ4e8ccmxQ9BrbHFXl -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:23 2024 by rpki-client on console-ams.rpki-client.org