$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: 2EFmJKaOMNfS7/8fVJpAcgv0oS1hifFEcaDT1DGwiQ4= Subject key identifier: 5B:19:69:C1:7C:95:38:3B:C1:8F:42:51:54:F9:FE:56:7B:95:FB:5D Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 33EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 33D8 Signing time: Tue 30 Apr 2024 15:26:23 +0000 Manifest this update: Tue 30 Apr 2024 15:26:23 +0000 Manifest next update: Tue 07 May 2024 15:26:23 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: FD3Uw/v/HuuCeJlDtDYtmvyTStcfoTnu0/lXuNAsrEc=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: HLTePiU4urymQI4+1hTlyJoCh3/oP2VQ7PHFtXnFIXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13294 (0x33ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Apr 30 15:26:23 2024 GMT Not After : May 7 15:26:23 2024 GMT Subject: CN=66310d9f-970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:ca:eb:fc:cc:aa:f2:fd:d0:58:87:92:b3: 29:24:be:f5:33:4a:e9:8e:73:53:33:5e:4b:bf:5c: 04:e7:c9:ac:56:ff:ad:c0:88:30:97:05:98:cb:f4: 92:c3:37:18:64:db:9d:a0:23:6a:95:93:10:30:fb: 13:96:31:ed:6a:01:c2:b9:3a:3e:6e:b6:f2:fd:84: ec:07:53:7b:84:21:cc:a1:d3:6e:6c:8f:3a:7e:cd: bf:2e:16:f4:81:cf:a0:62:57:77:b5:ba:c8:9c:94: 2a:39:10:5f:63:f4:2a:74:f9:a7:3b:ab:6e:f8:b3: e0:9d:be:e0:43:d9:85:49:c3:83:af:37:82:65:c8: 51:27:73:ab:6e:f7:c3:74:df:8f:98:84:e9:e8:fe: d9:0e:dc:39:7f:0f:20:9b:07:f9:6f:f1:90:ec:73: ce:27:8b:95:83:1a:d6:76:7d:eb:05:1e:3b:2d:d0: 07:1f:eb:aa:4b:f5:42:37:e4:9e:a2:ae:5a:5a:a8: f6:e3:2c:e4:40:9f:da:48:3b:fd:d5:b3:5a:2d:f5: d8:ef:0c:e3:c6:6a:03:b5:28:38:6b:db:b4:02:1e: 5e:6c:5d:80:c3:e3:c1:8d:07:67:a8:3a:21:ff:9f: 40:bd:4a:0b:da:b9:6b:b7:98:02:40:96:33:55:cb: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:69:C1:7C:95:38:3B:C1:8F:42:51:54:F9:FE:56:7B:95:FB:5D X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:08:0b:4c:d0:d1:2f:dd:30:18:56:08:e8:72:9e:37:2f:07: a1:c8:37:6e:1e:07:c2:e9:f6:72:dc:2d:33:29:60:b0:34:a7: 2f:d8:29:fd:6d:28:cb:bc:94:48:da:56:92:b6:9c:5d:cc:57: 76:3d:ea:5c:a0:bc:60:4b:64:50:c8:85:d4:7d:f3:49:4a:54: 4c:e7:4e:d4:cf:70:3c:ec:54:7f:d0:5a:ba:b7:82:46:88:f6: 1b:74:13:fc:cc:ef:87:95:29:e3:e3:06:29:f2:e5:50:a1:c5: a2:07:c0:a5:eb:e5:d5:c2:8a:19:ce:b7:2d:66:17:aa:51:19: a6:4c:0b:d3:80:0b:0a:7d:a1:36:cc:07:0a:e0:81:b2:bf:87: c2:be:32:e0:9b:17:43:8f:c0:b3:bb:5f:bc:fd:ad:3b:31:7d: a2:03:6f:b1:2b:f4:83:9f:e4:ab:bd:5c:c9:8e:98:ad:90:8f: 6d:8d:56:44:fa:76:25:83:33:74:3f:26:7d:39:e5:91:3c:32: a8:67:8c:43:d9:37:80:41:9f:36:15:03:0e:2e:a4:a7:b1:3a: 2f:1f:ff:5e:e2:61:5c:90:2f:f5:a1:61:63:9d:06:c4:47:31: c8:e0:74:22:e4:c4:03:53:25:44:db:74:c5:25:d3:23:64:0c: 11:ac:bd:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjQwNDMwMTUyNjIzWhcNMjQwNTA3MTUyNjIzWjAYMRYwFAYD VQQDEw02NjMxMGQ5Zi05NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHzK6/zMqvL90FiHkrMpJL71M0rpjnNTM15Lv1wE58msVv+twIgwlwWYy/SS wzcYZNudoCNqlZMQMPsTljHtagHCuTo+brby/YTsB1N7hCHModNubI86fs2/Lhb0 gc+gYld3tbrInJQqORBfY/QqdPmnO6tu+LPgnb7gQ9mFScODrzeCZchRJ3OrbvfD dN+PmITp6P7ZDtw5fw8gmwf5b/GQ7HPOJ4uVgxrWdn3rBR47LdAHH+uqS/VCN+Se oq5aWqj24yzkQJ/aSDv91bNaLfXY7wzjxmoDtSg4a9u0Ah5ebF2Aw+PBjQdnqDoh /59AvUoL2rlrt5gCQJYzVcvwRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsZacF8 lTg7wY9CUVT5/lZ7lftdMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZCAtM0NEv3TAYVgjocp43LwehyDduHgfC6fZy3C0zKWCwNKcv2Cn9 bSjLvJRI2laStpxdzFd2PepcoLxgS2RQyIXUffNJSlRM507Uz3A87FR/0Fq6t4JG iPYbdBP8zO+HlSnj4wYp8uVQocWiB8Cl6+XVwooZzrctZheqURmmTAvTgAsKfaE2 zAcK4IGyv4fCvjLgmxdDj8Czu1+8/a07MX2iA2+xK/SDn+SrvVzJjpitkI9tjVZE +nYlgzN0PyZ9OeWRPDKoZ4xD2TeAQZ82FQMOLqSnsTovH/9e4mFckC/1oWFjnQbE RzHI4HQi5MQDUyVE23TFJdMjZAwRrL2u -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:14 2024 by rpki-client on console-ams.rpki-client.org