$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: WjHAqW8ec5JFrDfYW8QHmOvgJLrI+sepcYXIU9kPUco= Subject key identifier: BA:43:D3:EB:7D:FB:1C:FD:F3:A1:30:EF:9C:48:FA:32:0B:8F:06:69 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 0642 Signing time: Mon 06 May 2024 23:45:57 +0000 Manifest this update: Mon 06 May 2024 23:45:57 +0000 Manifest next update: Mon 13 May 2024 23:45:57 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: xjZ26tqg3oXzV+tB7323ylTSDXFiKSZ1uDfgl3+oHRw=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: le+pL78T/5WOyWn02JNH/JXNPs9vefxlfUt8ab1FKYI=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: +hvAkUjJQDkxg4YO4MDeyWdMQFculz4teJUZHUzCNDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: May 6 23:45:57 2024 GMT Not After : May 13 23:45:57 2024 GMT Subject: CN=66396bb5-897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:20:f6:95:64:40:67:3c:61:7d:50:e7:c3: 6a:41:de:b1:60:f6:db:bd:1e:1d:fb:24:38:e0:d1: cb:2d:af:ed:e9:d0:74:3c:44:ac:d6:e3:0b:b2:33: bc:a1:bb:21:7f:81:ab:3c:01:5d:e2:24:9b:f0:5b: 85:5a:c1:da:0f:8b:8a:07:85:3b:d5:64:48:f7:e4: c8:3d:7f:5d:78:e3:b5:47:5c:c9:19:44:83:fa:5e: db:b2:9f:fa:3f:b2:a0:cc:27:e0:37:cd:42:ba:d0: 92:c7:63:87:8e:36:56:fb:05:ec:09:5c:ac:81:38: fb:05:5a:f8:fe:87:75:03:67:62:2e:d0:dd:53:47: c6:7e:16:9e:12:20:bd:6a:6e:f6:88:5a:03:a1:2f: 6b:f7:db:26:18:a1:95:b4:e2:4c:c1:d6:44:c7:06: 8c:a4:ff:b4:b6:29:97:d6:9e:89:6a:ee:78:51:fd: cf:f2:e3:cb:9b:9f:c9:95:4c:30:bb:02:b5:ab:1e: c7:c1:da:bb:7c:38:3b:9d:1e:8c:68:0c:8d:50:40: f7:cd:0a:9d:ab:21:80:fa:96:53:93:5e:48:27:01: 5e:9d:57:54:61:6a:44:c9:cd:00:75:8a:b4:24:68: 27:43:9c:d6:a1:fe:9e:03:90:0f:59:d3:d2:12:c4: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:43:D3:EB:7D:FB:1C:FD:F3:A1:30:EF:9C:48:FA:32:0B:8F:06:69 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:f7:f9:01:f9:bf:93:ca:7f:e6:23:a9:b4:07:bb:93:d5: f2:8a:58:bd:d5:b6:d0:bf:65:c3:48:04:ee:ae:ab:97:33:96: ac:93:dd:ca:0a:fd:a7:94:23:57:68:0e:ca:0c:cd:07:8a:08: 45:7e:72:cc:ff:2c:04:81:48:76:86:d7:5f:f6:35:e7:cc:99: 51:93:55:72:db:f2:ab:f5:1c:01:13:78:8a:d4:3d:8b:b1:86: fe:8d:ad:6a:7a:6c:cc:d9:2c:d8:88:19:25:c1:51:aa:93:9d: ca:d7:1c:ac:f2:50:bb:6b:8e:e9:0b:46:50:a5:5c:b7:49:2b: 29:b3:6b:29:6c:de:4c:f8:ed:74:28:c5:24:45:81:dd:16:c2: 08:1c:23:a0:f1:6f:c1:34:30:cd:86:e2:b4:a6:2f:1a:64:56: 70:12:f0:cc:70:00:55:7c:ed:24:85:64:39:02:a1:c8:e4:fd: 69:1f:23:f6:94:f0:35:05:b3:82:a5:d0:d4:e4:37:1d:cf:cd: 73:e5:86:b9:ca:13:75:97:39:d1:26:40:61:9c:a2:9c:6e:7d: 6c:3a:85:a5:3d:c7:41:ff:5c:94:aa:7b:02:29:31:34:b6:c6: b3:d3:b6:c5:9a:ce:c7:21:cc:b7:d6:44:05:a0:56:aa:a9:4e: d3:f4:5f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjQwNTA2MjM0NTU3WhcNMjQwNTEzMjM0NTU3WjAYMRYwFAYD VQQDEw02NjM5NmJiNS04OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUMg9pVkQGc8YX1Q58NqQd6xYPbbvR4d+yQ44NHLLa/t6dB0PESs1uMLsjO8 obshf4GrPAFd4iSb8FuFWsHaD4uKB4U71WRI9+TIPX9deOO1R1zJGUSD+l7bsp/6 P7KgzCfgN81CutCSx2OHjjZW+wXsCVysgTj7BVr4/od1A2diLtDdU0fGfhaeEiC9 am72iFoDoS9r99smGKGVtOJMwdZExwaMpP+0timX1p6Jau54Uf3P8uPLm5/JlUww uwK1qx7Hwdq7fDg7nR6MaAyNUED3zQqdqyGA+pZTk15IJwFenVdUYWpEyc0AdYq0 JGgnQ5zWof6eA5APWdPSEsS7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpD0+t9 +xz986Ew75xI+jILjwZpMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATHvf5Afm/k8p/5iOptAe7k9Xyili91bbQv2XDSATurquXM5ask93K Cv2nlCNXaA7KDM0HighFfnLM/ywEgUh2htdf9jXnzJlRk1Vy2/Kr9RwBE3iK1D2L sYb+ja1qemzM2SzYiBklwVGqk53K1xys8lC7a47pC0ZQpVy3SSsps2spbN5M+O10 KMUkRYHdFsIIHCOg8W/BNDDNhuK0pi8aZFZwEvDMcABVfO0khWQ5AqHI5P1pHyP2 lPA1BbOCpdDU5Dcdz81z5Ya5yhN1lznRJkBhnKKcbn1sOoWlPcdB/1yUqnsCKTE0 tsaz07bFms7HIcy31kQFoFaqqU7T9F9u -----END CERTIFICATE-----Generated at Tue May 7 00:53:21 2024 by rpki-client on console-ams.rpki-client.org