$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: GmAjaGGd6dE/h7r+d2/35bYcca30PgxRBc2UEELWlZM= Subject key identifier: 68:CD:6F:49:2F:22:97:0F:70:0F:8C:CC:B5:0D:24:20:B1:1C:99:84 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0CC3 Signing time: Mon 06 May 2024 18:52:18 +0000 Manifest this update: Mon 06 May 2024 18:52:17 +0000 Manifest next update: Mon 13 May 2024 18:52:17 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: GW0tEuvlJic48KaNMn1U3cPok0C7lZTNDZAu2He/WT4=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: OOcUaZPbkyW4779Q1AXKo2gixDB3AoDPgAdlfA9uGBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3274 (0xcca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: May 6 18:52:17 2024 GMT Not After : May 13 18:52:17 2024 GMT Subject: CN=663926e1-09e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:eb:68:29:79:9a:ad:bf:71:81:07:52:50: 7a:e8:15:83:d1:6e:6e:b3:a9:cb:4b:16:95:b4:ca: 96:df:49:e4:b9:23:50:e7:27:f0:54:69:6d:2d:2a: 07:ee:a3:58:0d:4b:7f:2e:c7:d0:59:8c:dc:78:a1: 7e:5c:6a:41:d2:ac:9f:42:57:f4:9a:b0:4c:71:90: 2d:19:16:7a:e3:21:15:24:c1:bd:06:46:ad:52:1f: 49:48:a1:7c:f9:72:ac:90:81:41:cf:a8:9d:71:cd: 2d:d9:81:be:6d:2d:63:cc:01:78:f1:5a:84:f2:a0: 0a:f2:62:bc:31:d3:8d:15:a4:2a:13:5b:96:a2:e9: 66:66:ca:c4:9d:c4:db:45:29:e5:34:dd:a7:61:db: b8:97:68:5a:61:c0:94:e7:95:14:e2:da:a1:7a:1e: 2c:6b:ca:16:30:30:8c:a2:89:ca:53:32:80:5a:78: 16:39:99:e1:79:85:02:77:ee:25:3c:21:7f:96:9b: 2e:7c:68:63:8b:50:06:da:b1:75:4f:61:c6:c5:d7: af:6d:c1:e2:a1:a7:a4:aa:fc:a3:1a:9c:a3:84:0f: 1e:c2:d3:63:66:1c:cc:8c:20:ee:fb:52:b6:62:9f: 66:ef:30:40:75:dd:f0:f6:46:ac:83:87:33:15:89: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:6F:49:2F:22:97:0F:70:0F:8C:CC:B5:0D:24:20:B1:1C:99:84 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:aa:52:94:aa:f0:2f:41:55:20:21:6b:5c:62:e0:14:98:74: 74:94:03:6d:20:4a:b6:26:9f:ad:bd:b7:81:30:66:9d:8a:84: 4b:0e:d5:d5:13:dd:de:b3:12:30:f4:cd:75:e7:63:19:97:67: 81:13:26:cb:e8:61:39:2f:01:15:d0:d5:17:7d:0b:94:78:2e: bf:ca:51:04:11:19:0e:13:2f:16:c4:d4:41:ad:b4:01:a2:46: 85:4a:cd:48:8b:08:e3:ce:20:6b:02:73:ff:cd:28:9b:ee:71: d4:af:8f:68:e5:70:7e:62:11:fa:37:60:71:3f:5f:95:cc:a9: cd:ee:a8:4b:97:81:25:2c:25:e3:97:c4:99:9b:9c:94:f3:17: 8c:4d:a0:9e:25:31:19:d8:fd:86:e8:a3:ac:85:d6:a5:c4:61: d1:11:59:fc:f3:7d:da:09:d6:82:3a:af:7e:b9:28:1f:63:1d: 17:0b:fa:dd:fc:d4:0c:06:c5:46:78:6d:e6:28:2a:78:ae:0d: 85:b7:3e:70:24:21:49:3e:d7:c6:b1:0e:00:a8:32:ad:4d:3a: 8f:04:ea:7e:c0:f1:97:77:8e:3f:15:30:86:3a:56:ea:7e:3a: 3d:ae:14:54:ee:2c:b0:22:c7:b6:2e:a8:a2:06:bb:b0:80:45: 83:5f:69:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjQwNTA2MTg1MjE3WhcNMjQwNTEzMTg1MjE3WjAYMRYwFAYD VQQDEw02NjM5MjZlMS0wOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8LraCl5mq2/cYEHUlB66BWD0W5us6nLSxaVtMqW30nkuSNQ5yfwVGltLSoH 7qNYDUt/LsfQWYzceKF+XGpB0qyfQlf0mrBMcZAtGRZ64yEVJMG9BkatUh9JSKF8 +XKskIFBz6idcc0t2YG+bS1jzAF48VqE8qAK8mK8MdONFaQqE1uWoulmZsrEncTb RSnlNN2nYdu4l2haYcCU55UU4tqheh4sa8oWMDCMoonKUzKAWngWOZnheYUCd+4l PCF/lpsufGhji1AG2rF1T2HGxdevbcHioaekqvyjGpyjhA8ewtNjZhzMjCDu+1K2 Yp9m7zBAdd3w9kasg4czFYnzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjNb0kv IpcPcA+MzLUNJCCxHJmEMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9qlKUqvAvQVUgIWtcYuAUmHR0lANtIEq2Jp+tvbeBMGadioRLDtXV E93esxIw9M1152MZl2eBEybL6GE5LwEV0NUXfQuUeC6/ylEEERkOEy8WxNRBrbQB okaFSs1IiwjjziBrAnP/zSib7nHUr49o5XB+YhH6N2BxP1+VzKnN7qhLl4ElLCXj l8SZm5yU8xeMTaCeJTEZ2P2G6KOshdalxGHREVn8833aCdaCOq9+uSgfYx0XC/rd /NQMBsVGeG3mKCp4rg2Ftz5wJCFJPtfGsQ4AqDKtTTqPBOp+wPGXd44/FTCGOlbq fjo9rhRU7iywIse2LqiiBruwgEWDX2lS -----END CERTIFICATE-----Generated at Mon May 6 20:19:16 2024 by rpki-client on console-fra.rpki-client.org