$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft File: W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json) Hash identifier: E1eWcpFuymia5czDyWJgsPIlapzBG8AYjyTbIX7YyJ4= Subject key identifier: 98:22:8E:D6:CD:8E:8D:43:19:56:05:B7:70:A6:86:B4:0D:5F:0A:CC Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 Certificate issuer: /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft Manifest number: 0AF8 Signing time: Tue 30 Apr 2024 20:17:28 +0000 Manifest this update: Tue 30 Apr 2024 20:17:28 +0000 Manifest next update: Tue 07 May 2024 20:17:28 +0000 Files and hashes: 1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: viXS664n7D5gto2p/OZbg/6EKQc1BlVat876OMMmepo=) 2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: kZPMRZW0KbPzAlLQtmg9fgS0R0C3vBYVUNs4qQ9AQtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Validity Not Before: Apr 30 20:17:28 2024 GMT Not After : May 7 20:17:28 2024 GMT Subject: CN=663151d8-a3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e5:56:42:8c:be:2e:0a:9f:55:68:a2:e8:05: b8:51:13:d1:44:42:e9:7a:cc:9c:97:af:dd:34:0f: 46:cb:43:de:a0:70:8b:98:24:f3:51:01:5e:25:61: f0:d2:7c:1c:01:e3:ea:cc:40:3a:36:c3:2c:78:65: ec:eb:97:3d:2b:0b:93:44:35:db:cc:1e:00:bd:37: a1:7c:3a:5e:5c:24:3b:48:4c:79:23:18:22:36:c9: 30:6f:fd:64:a8:1a:df:1b:0c:80:cf:01:e3:59:be: 48:f2:ff:9d:ca:a5:36:32:29:10:38:62:4a:50:b3: 5a:18:5b:b9:3e:69:ec:e3:e4:90:bb:89:cd:5b:11: 00:a2:95:6c:a3:5f:cc:03:1e:8b:4a:a5:85:ce:a1: 41:7e:10:1b:da:87:14:01:83:18:a1:ba:f0:d5:3b: 02:48:2f:a5:a2:c6:31:8e:8b:bf:a3:8f:73:2b:40: 13:ae:85:34:22:26:be:56:f1:be:16:e3:5a:c0:00: 1e:a1:33:6c:33:aa:6b:3d:21:37:09:11:59:c9:be: 18:07:ac:d6:76:4f:fc:97:25:e0:01:96:c4:e4:4e: 71:f6:cf:a9:6c:cc:46:39:94:eb:05:b5:30:b2:4b: 3a:3b:df:67:8d:c8:4a:1b:db:92:17:04:f6:92:2f: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:22:8E:D6:CD:8E:8D:43:19:56:05:B7:70:A6:86:B4:0D:5F:0A:CC X509v3 Authority Key Identifier: keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c3:44:ac:dd:9a:e0:ee:d0:19:9e:37:d2:79:53:a4:79:56: c8:01:ce:7c:b9:a6:e1:62:d5:23:7d:4e:1b:93:2c:b3:80:ae: 32:30:b7:91:79:58:f7:b9:d3:29:ad:2e:a6:cd:65:ad:17:de: 77:45:9e:a2:87:cc:5e:b0:31:af:b1:2f:f8:a3:53:fe:50:7f: 4e:f0:af:cd:8c:45:0e:d6:29:87:30:a1:f1:6f:b5:bd:6a:65: 9f:64:1f:34:24:0c:8a:ef:fa:28:7a:8c:a3:fd:ee:ea:9f:52: 9e:28:7b:dc:ef:91:80:1d:aa:b2:45:9a:e7:8d:fd:79:f8:c6: 56:02:80:4a:e7:06:31:b0:dd:9e:1f:bb:cd:7b:6f:be:55:a9: e6:59:ec:a8:fa:ff:5f:50:cf:64:38:fb:8d:22:c2:28:98:89: 2a:98:35:be:d0:c7:51:d6:04:ec:64:c9:d5:a4:cb:76:01:f9: ec:66:c8:83:4b:b8:4a:5b:2a:6d:2a:0c:2f:c1:93:00:13:39: 00:97:18:02:7b:de:ba:4f:58:d1:d8:30:87:49:61:a8:2f:f8: 93:ea:f3:3c:bf:31:85:68:43:46:ae:3a:aa:6f:d9:14:41:f5: e6:44:7c:15:53:09:72:a0:d3:e2:81:da:25:af:fa:7c:a4:a9: 54:97:6a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGNzAxMTAvBgNVBAUTKDVCQTlBMkIxMzBFNzA1MzYyMTNCRDlENDY4OUZFN0JE NTRGMEFEMjMwHhcNMjQwNDMwMjAxNzI4WhcNMjQwNTA3MjAxNzI4WjAYMRYwFAYD VQQDEw02NjMxNTFkOC1hM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eVWQoy+LgqfVWii6AW4URPRRELpesycl6/dNA9Gy0PeoHCLmCTzUQFeJWHw 0nwcAePqzEA6NsMseGXs65c9KwuTRDXbzB4AvTehfDpeXCQ7SEx5IxgiNskwb/1k qBrfGwyAzwHjWb5I8v+dyqU2MikQOGJKULNaGFu5Pmns4+SQu4nNWxEAopVso1/M Ax6LSqWFzqFBfhAb2ocUAYMYobrw1TsCSC+losYxjou/o49zK0ATroU0Iia+VvG+ FuNawAAeoTNsM6prPSE3CRFZyb4YB6zWdk/8lyXgAZbE5E5x9s+pbMxGOZTrBbUw sks6O99njchKG9uSFwT2ki96aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgijtbN jo1DGVYFt3CmhrQNXwrMMB8GA1UdIwQYMBaAFFuporEw5wU2ITvZ1Gif571U8K0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkY3MC9EMDI4OEMzNjFE OTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJUWWhPOW5VYUpfbnZWVHdy U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2bWlzVERuQlRZaE85blVhSl9udlZUd3JTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkY3MC9EMDI4OEMzNjFEOTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJU WWhPOW5VYUpfbnZWVHdyU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtw0Ss3Zrg7tAZnjfSeVOkeVbIAc58uabhYtUjfU4bkyyzgK4yMLeR eVj3udMprS6mzWWtF953RZ6ih8xesDGvsS/4o1P+UH9O8K/NjEUO1imHMKHxb7W9 amWfZB80JAyK7/ooeoyj/e7qn1KeKHvc75GAHaqyRZrnjf15+MZWAoBK5wYxsN2e H7vNe2++VanmWeyo+v9fUM9kOPuNIsIomIkqmDW+0MdR1gTsZMnVpMt2AfnsZsiD S7hKWyptKgwvwZMAEzkAlxgCe966T1jR2DCHSWGoL/iT6vM8vzGFaENGrjqqb9kU QfXmRHwVUwlyoNPigdolr/p8pKlUl2qj -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:58 2024 by rpki-client on console-ams.rpki-client.org