$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: zJQ8tUskhND0rpKFTnd67Se9KgOvfZyydwFhb/CBGjc= Subject key identifier: 28:EE:87:4A:E8:7C:AA:AC:AB:F3:E8:C7:01:2D:49:13:78:E3:84:43 Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 10D0 Signing time: Sat 18 May 2024 20:19:21 +0000 Manifest this update: Sat 18 May 2024 20:19:20 +0000 Manifest next update: Sat 25 May 2024 20:19:20 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: /wjxBUuP5y+smPvMPU5j6BHbQQrI4AbzVP5VUMFhyQo=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: Z4bXenf1ke8uJG5sblfsVQE/bEWaV4ViBo8erSy1zOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: May 18 20:19:20 2024 GMT Not After : May 25 20:19:20 2024 GMT Subject: CN=66490d48-dd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:de:cf:ff:0b:3a:33:e1:a3:ea:8e:87:3e: 51:fa:53:06:f2:51:8c:f7:a6:f5:0b:f4:d6:56:53: a4:9c:7c:54:ba:10:7d:81:67:8e:8c:c5:cf:4c:f8: 6f:81:6c:fe:80:2c:b5:09:19:af:22:0b:ad:ce:55: 0b:29:c1:27:09:53:d3:54:7a:2a:c2:18:f0:2f:1a: 81:58:d6:6d:a9:27:6d:40:0e:e0:5b:40:f0:1f:31: 27:bc:41:04:29:28:0c:2d:2e:24:f9:bc:e4:3e:47: 16:fe:49:65:31:e7:7e:f8:48:83:1f:a0:22:f0:d4: de:42:72:e9:dc:de:d6:e4:5a:d6:ca:64:00:ec:41: f4:d3:14:e0:2f:1e:6c:1a:3d:95:16:f0:48:49:88: 05:cc:12:98:da:37:6b:7a:70:d8:01:f2:41:ff:45: 3e:85:f7:87:ac:d9:38:bf:79:ae:df:cc:dc:fa:5d: b1:41:20:36:f5:2c:a6:6f:4c:76:fb:71:db:af:b9: 03:d6:b1:89:9c:d9:fa:a0:af:86:82:5a:3b:ff:ce: 5d:c6:3e:e0:4b:a5:5c:00:41:82:09:33:ae:c2:04: a0:1a:ad:70:19:7d:19:5f:74:3f:52:49:ec:e2:87: 46:e8:2d:8a:63:40:6a:e2:e4:47:77:4a:0d:43:72: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EE:87:4A:E8:7C:AA:AC:AB:F3:E8:C7:01:2D:49:13:78:E3:84:43 X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a5:aa:27:ac:b6:18:0e:9d:bc:1e:84:24:84:b8:b3:39:ac: cd:ed:c2:72:41:3d:eb:24:0e:87:7d:b2:89:0f:3e:5a:11:c1: d7:71:23:ec:f8:9d:c7:02:55:5a:f8:e8:5e:45:61:94:55:28: c9:4c:0c:ce:f0:f5:14:b3:e0:c7:48:29:d7:75:bb:fa:bb:44: 50:0f:6c:d3:5f:f9:b0:5f:a9:e5:1f:2d:e2:de:92:8c:c5:9c: d8:29:14:d9:ca:76:3f:25:77:01:b3:4e:10:f2:69:05:88:e0: ee:05:ac:b9:2a:51:b4:80:6d:7d:c5:2c:53:26:92:32:6d:0b: fa:73:bc:f7:d6:48:39:6f:0b:01:89:72:c7:9f:f7:e1:2b:d2: 54:0b:66:72:2b:ad:e0:cc:23:37:fe:12:2f:f3:fc:51:c5:60: fa:e7:3d:7b:51:d7:01:67:e2:76:51:4b:04:9b:69:aa:98:f0: d6:51:ba:4b:ef:20:28:2d:0f:65:2a:2a:36:db:47:f4:13:3e: 3e:7a:42:04:cf:40:b3:5b:9b:8c:ef:94:f1:9c:99:c3:cb:2f: 8a:af:19:6d:fc:8d:89:7a:35:0b:d8:03:50:9e:52:84:2d:f1: ab:44:bf:77:2e:5e:79:22:4f:25:ab:11:4c:c9:be:47:5a:e4: de:0c:48:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjQwNTE4MjAxOTIwWhcNMjQwNTI1MjAxOTIwWjAYMRYwFAYD VQQDEw02NjQ5MGQ0OC1kZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNHez/8LOjPho+qOhz5R+lMG8lGM96b1C/TWVlOknHxUuhB9gWeOjMXPTPhv gWz+gCy1CRmvIgutzlULKcEnCVPTVHoqwhjwLxqBWNZtqSdtQA7gW0DwHzEnvEEE KSgMLS4k+bzkPkcW/kllMed++EiDH6Ai8NTeQnLp3N7W5FrWymQA7EH00xTgLx5s Gj2VFvBISYgFzBKY2jdrenDYAfJB/0U+hfeHrNk4v3mu38zc+l2xQSA29Symb0x2 +3Hbr7kD1rGJnNn6oK+Gglo7/85dxj7gS6VcAEGCCTOuwgSgGq1wGX0ZX3Q/Ukns 4odG6C2KY0Bq4uRHd0oNQ3KZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjuh0ro fKqsq/PoxwEtSRN444RDMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspaonrLYYDp28HoQkhLizOazN7cJyQT3rJA6HfbKJDz5aEcHXcSPs +J3HAlVa+OheRWGUVSjJTAzO8PUUs+DHSCnXdbv6u0RQD2zTX/mwX6nlHy3i3pKM xZzYKRTZynY/JXcBs04Q8mkFiODuBay5KlG0gG19xSxTJpIybQv6c7z31kg5bwsB iXLHn/fhK9JUC2ZyK63gzCM3/hIv8/xRxWD65z17UdcBZ+J2UUsEm2mqmPDWUbpL 7yAoLQ9lKio220f0Ez4+ekIEz0CzW5uM75TxnJnDyy+Krxlt/I2JejUL2ANQnlKE LfGrRL93Ll55Ik8lqxFMyb5HWuTeDEh8 -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org