$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft File: RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json) Hash identifier: Q1pDb9Fq2hLGA+JYcdHIFgIFowVT8KW4t80p4AmT+zw= Subject key identifier: B3:8A:55:B8:65:F5:CD:5B:22:01:0D:B6:E6:96:67:2F:EE:DA:B6:79 Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC Certificate issuer: /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft Manifest number: 0442 Signing time: Fri 03 May 2024 02:01:42 +0000 Manifest this update: Fri 03 May 2024 02:01:41 +0000 Manifest next update: Fri 10 May 2024 02:01:41 +0000 Files and hashes: 1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: arpQ49cYCIsV+jvYprDv8YUrBq16QBMNvhdxWlZbMMA=) 2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: WLnc9S4f9qHS4f2SHwwlmbxkC+IRwbCNUEVt/wAYlAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC Validity Not Before: May 3 02:01:41 2024 GMT Not After : May 10 02:01:41 2024 GMT Subject: CN=66344585-90c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:4a:bf:46:23:07:1a:fb:24:33:b9:e5:e7: c5:4b:13:25:43:e4:27:5e:f9:af:e3:fe:51:8c:1d: 0d:24:93:34:3c:5e:59:78:e5:ab:ab:ac:45:92:64: 81:31:90:4a:9e:a7:bd:20:7b:71:b9:f5:e0:b1:7e: b2:7c:58:94:f1:35:b6:06:f5:3e:e2:82:86:95:15: 15:12:9a:6e:ff:37:95:18:49:8e:b2:a6:9e:e1:fc: 37:dc:38:dd:c2:7d:70:7b:bb:5e:9a:4b:c5:30:64: e9:29:d5:7b:6e:7a:23:46:30:14:60:88:17:ff:99: 8e:19:2e:3b:6a:60:b7:84:08:f2:ff:ec:fd:e4:54: b5:5a:c4:d4:aa:20:98:91:49:71:58:a9:a4:e5:d4: e9:d5:77:14:a1:1b:f5:2f:0a:b8:6b:5c:98:22:7e: 2c:35:ed:d2:04:3c:2c:b6:97:7a:7b:e5:a9:60:87: 26:28:a1:c6:4a:47:06:45:8d:c5:61:ab:1d:98:5e: c4:77:a1:80:df:31:4b:47:9c:ab:78:1c:7f:e9:0e: ec:61:8f:65:8e:70:0c:38:6d:40:19:b2:6c:6d:4f: d4:b0:8b:a4:03:74:02:b4:42:8e:49:82:18:30:31: 83:92:e8:2e:e5:a3:d4:f6:25:ae:0f:12:8e:96:16: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:55:B8:65:F5:CD:5B:22:01:0D:B6:E6:96:67:2F:EE:DA:B6:79 X509v3 Authority Key Identifier: keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:21:11:40:8c:75:08:d5:68:a2:3a:96:74:a4:98:45:51: 39:e8:f5:fd:65:3b:fc:86:a5:5f:5a:83:68:44:8a:bb:b8:45: fa:f2:11:cb:d8:75:80:ed:84:8f:00:dd:db:31:d4:72:cb:74: 31:99:da:3e:df:1b:83:08:a7:af:91:73:39:49:a8:b2:aa:27: 9c:55:3f:df:17:ed:70:30:3e:0b:0e:82:68:60:f9:c7:77:74: 93:87:4f:bb:35:a5:ac:57:53:3b:f7:f7:1f:29:fe:ff:68:36: 24:5c:3a:b7:79:a7:a4:3b:b4:5a:ff:c7:cc:65:f6:6e:3b:80: 7e:dd:82:73:91:6d:d8:f3:11:cd:13:e4:47:a5:2d:0f:bf:ce: e1:d0:0c:12:9c:dd:7b:6c:6d:bd:9f:fa:b7:d9:2b:72:13:da: 18:78:5d:c2:eb:a3:ca:25:ed:af:ad:81:9b:c9:28:ad:c9:4f: 45:bc:99:f3:25:bf:28:7f:64:c7:25:92:d8:c4:e1:8d:91:28: 5b:f1:d3:f3:d9:7a:2e:2f:dd:84:6d:43:72:fc:b5:7c:20:d8: ef:fe:54:25:d6:1f:48:ae:9d:e1:c2:bb:55:74:4e:10:03:82: 5e:fb:b5:34:fc:55:a9:a5:8a:fc:1d:76:6d:65:f4:47:04:67: 67:49:9a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3 MUU4RjgzRUMwHhcNMjQwNTAzMDIwMTQxWhcNMjQwNTEwMDIwMTQxWjAYMRYwFAYD VQQDEw02NjM0NDU4NS05MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPVKv0YjBxr7JDO55efFSxMlQ+QnXvmv4/5RjB0NJJM0PF5ZeOWrq6xFkmSB MZBKnqe9IHtxufXgsX6yfFiU8TW2BvU+4oKGlRUVEppu/zeVGEmOsqae4fw33Djd wn1we7temkvFMGTpKdV7bnojRjAUYIgX/5mOGS47amC3hAjy/+z95FS1WsTUqiCY kUlxWKmk5dTp1XcUoRv1Lwq4a1yYIn4sNe3SBDwstpd6e+WpYIcmKKHGSkcGRY3F YasdmF7Ed6GA3zFLR5yreBx/6Q7sYY9ljnAMOG1AGbJsbU/UsIukA3QCtEKOSYIY MDGDkugu5aPU9iWuDxKOlhaz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOKVbhl 9c1bIgENtuaWZy/u2rZ5MB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5 OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2 MndPT2pOTEdPdXh4NlBnLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOEyERQIx1CNVoojqWdKSYRVE56PX9ZTv8hqVfWoNoRIq7uEX68hHL 2HWA7YSPAN3bMdRyy3Qxmdo+3xuDCKevkXM5SaiyqiecVT/fF+1wMD4LDoJoYPnH d3STh0+7NaWsV1M79/cfKf7/aDYkXDq3eaekO7Ra/8fMZfZuO4B+3YJzkW3Y8xHN E+RHpS0Pv87h0AwSnN17bG29n/q32StyE9oYeF3C66PKJe2vrYGbySityU9FvJnz Jb8of2THJZLYxOGNkShb8dPz2XouL92EbUNy/LV8INjv/lQl1h9Irp3hwrtVdE4Q A4Je+7U0/FWppYr8HXZtZfRHBGdnSZr0 -----END CERTIFICATE-----Generated at Fri May 3 03:10:52 2024 by rpki-client on console-ams.rpki-client.org