$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: M4d3ndCtKJdiIr7GQlI6fkJQn+RIvnbEIOBT+sgNBFQ= Subject key identifier: B2:EB:EF:8E:82:0C:B9:ED:7A:25:A3:84:94:48:DC:82:BE:2F:CA:E6 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 0FD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 0FD1 Signing time: Thu 02 May 2024 18:06:47 +0000 Manifest this update: Thu 02 May 2024 18:06:46 +0000 Manifest next update: Thu 09 May 2024 18:06:46 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: Jc9l8Bd/a33H3cOnkH/xDfSE+ve2VQI65IstwoD+fgo=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: RT81J29uhYl4YzqEly3Rmp3Ji5PBXdnS+hxd+mUFyP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: May 2 18:06:46 2024 GMT Not After : May 9 18:06:46 2024 GMT Subject: CN=6633d636-3668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:ca:f3:9e:3f:f4:92:7c:23:c8:92:01:88: 79:16:11:68:dd:0e:69:e8:95:45:57:78:c1:08:25: 87:e9:2a:18:c2:f5:89:67:27:13:c7:da:11:ae:d6: 05:fe:20:48:b0:da:20:14:b9:2c:bc:15:ed:ea:bd: 47:f0:ff:60:ae:73:c6:ad:ae:42:dd:12:63:8f:cf: bd:82:2d:f6:ee:9d:9a:32:86:fa:c8:19:c0:b7:00: 24:d8:e6:0b:32:13:ea:40:8c:eb:ff:b1:c8:8a:e7: 0e:d2:55:91:10:8d:fb:1a:c4:9a:22:44:6f:c1:28: d3:2f:a9:76:05:9a:e3:33:3b:64:fb:70:7f:88:c5: 0c:5d:ea:23:01:93:f0:0d:fa:8e:a1:70:fd:c5:00: fa:36:0c:6a:e9:a8:b3:87:e0:f3:55:c3:ab:e8:c6: 49:6a:2d:7e:1f:2d:44:3b:19:f5:fd:a6:ce:8c:53: 12:f6:e0:10:a7:65:9d:73:92:c7:09:62:88:5a:ad: c0:c8:dd:33:97:f3:9b:10:b3:84:9e:2d:c8:e6:12: 11:08:74:44:62:97:df:58:74:ea:6d:4a:51:19:b8: 72:4e:35:92:84:a6:21:23:92:06:b2:79:10:f2:48: bf:da:89:f9:93:c0:f4:1a:f6:38:5a:05:60:32:dc: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EB:EF:8E:82:0C:B9:ED:7A:25:A3:84:94:48:DC:82:BE:2F:CA:E6 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:35:3f:3e:2e:2f:d7:a4:e9:1d:bc:70:fe:5a:85:0a:fe: f4:06:ac:9b:65:1e:1d:21:34:f0:6b:65:0b:bc:2a:8d:ad:47: 49:19:f0:49:5a:b7:54:7d:03:3c:88:9c:7d:18:b0:cc:80:12: fd:f3:09:aa:59:7b:f9:9a:6c:b1:3d:bd:ac:b8:20:a0:c8:95: 1c:e2:7e:c2:0d:cc:b2:03:b4:37:12:04:0d:8b:27:21:10:7f: b3:13:32:2f:a0:1a:1e:24:f9:5b:74:a9:96:c9:d9:e4:5d:04: 8b:20:cc:37:bf:68:73:26:f5:e6:00:12:2f:e4:2b:a3:39:b6: 88:fd:7d:aa:21:d4:e9:32:66:74:17:b2:18:81:a4:60:a6:f7: 84:84:54:ff:b4:7b:ed:df:f1:9f:d8:ae:ed:6c:a1:c5:5d:03: 3e:28:72:41:f4:fb:3e:be:39:0a:47:89:31:3c:16:ae:33:51: 35:6d:22:99:33:e7:fd:06:96:18:9e:9c:50:d3:23:7a:5b:e2: cf:7b:64:9d:b4:d3:24:4d:76:96:0d:8b:be:90:fb:6c:16:56: 2f:38:a1:5d:2a:31:95:8f:df:07:14:0e:71:c6:31:2b:2d:09: 60:f3:61:f9:84:0b:21:1c:d7:53:0c:71:71:6f:dd:3d:45:c9: 4a:9b:b5:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjQwNTAyMTgwNjQ2WhcNMjQwNTA5MTgwNjQ2WjAYMRYwFAYD VQQDEw02NjMzZDYzNi0zNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi7K854/9JJ8I8iSAYh5FhFo3Q5p6JVFV3jBCCWH6SoYwvWJZycTx9oRrtYF /iBIsNogFLksvBXt6r1H8P9grnPGra5C3RJjj8+9gi327p2aMob6yBnAtwAk2OYL MhPqQIzr/7HIiucO0lWREI37GsSaIkRvwSjTL6l2BZrjMztk+3B/iMUMXeojAZPw DfqOoXD9xQD6Ngxq6aizh+DzVcOr6MZJai1+Hy1EOxn1/abOjFMS9uAQp2Wdc5LH CWKIWq3AyN0zl/ObELOEni3I5hIRCHREYpffWHTqbUpRGbhyTjWShKYhI5IGsnkQ 8ki/2on5k8D0GvY4WgVgMtwNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLr746C DLnteiWjhJRI3IK+L8rmMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFuTU/Pi4v16TpHbxw/lqFCv70BqybZR4dITTwa2ULvCqNrUdJGfBJ WrdUfQM8iJx9GLDMgBL98wmqWXv5mmyxPb2suCCgyJUc4n7CDcyyA7Q3EgQNiych EH+zEzIvoBoeJPlbdKmWydnkXQSLIMw3v2hzJvXmABIv5CujObaI/X2qIdTpMmZ0 F7IYgaRgpveEhFT/tHvt3/Gf2K7tbKHFXQM+KHJB9Ps+vjkKR4kxPBauM1E1bSKZ M+f9BpYYnpxQ0yN6W+LPe2SdtNMkTXaWDYu+kPtsFlYvOKFdKjGVj98HFA5xxjEr LQlg82H5hAshHNdTDHFxb909RclKm7V4 -----END CERTIFICATE-----Generated at Thu May 2 20:04:49 2024 by rpki-client on console-ams.rpki-client.org