$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: E116GV4aq1n2RsFGHB92olwN97fz93Po4ofWx/FhBGM= Subject key identifier: 77:49:49:74:47:A2:81:80:60:02:4F:8E:CD:D8:E3:CB:57:B5:9C:AB Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: D3 Signing time: Fri 03 May 2024 06:16:13 +0000 Manifest this update: Fri 03 May 2024 06:16:13 +0000 Manifest next update: Fri 10 May 2024 06:16:13 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: 3k3uZ6zFF2+1xA26TSR/xVBOz1eG6W2T/F5x8VbUcio=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: ndYomZ99yxFknrYEsXYBDeEAsKcdU++6L8FlnDMmRWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: May 3 06:16:13 2024 GMT Not After : May 10 06:16:13 2024 GMT Subject: CN=6634812d-fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:0e:b2:bb:dc:20:f4:6d:a2:8e:e4:19:e5: a3:cc:38:1f:36:80:e3:b6:4a:0c:61:22:e7:72:12: fb:12:30:13:c9:dc:8d:1b:e1:f5:ec:3e:03:66:b7: dc:24:26:bd:0e:5d:96:f0:2d:6f:fd:61:e3:a6:4c: 2a:9c:ba:6c:a8:d2:7b:10:5c:29:82:b9:9d:87:88: cc:06:8c:ae:2f:d4:4b:1b:b8:5a:c2:56:51:54:3c: 5f:d2:7d:72:4d:ea:63:b2:c4:e1:63:4f:66:9d:48: 49:1a:ad:58:62:65:a7:00:da:e1:a1:3b:48:4b:91: 57:1b:a4:04:a7:6f:ca:29:6b:7b:ce:0b:12:ee:cb: 9c:63:5d:b0:8d:0d:06:79:4b:1c:8f:d4:d3:a3:11: 84:64:90:d0:9b:4c:df:da:f8:69:76:fc:17:13:41: 07:58:cd:6f:1a:a7:92:6b:fa:a4:71:eb:7a:fe:81: d2:d3:e9:92:bb:59:80:21:87:e1:16:bc:4a:ba:3f: 9d:fe:72:6f:7e:1d:f1:4a:64:bb:8f:25:98:60:00: 70:dc:d0:1b:f9:4e:26:9f:2f:4c:c5:21:5b:c0:ce: 51:b5:28:c3:18:02:b8:cc:80:04:ff:9f:2a:27:35: 8f:21:12:77:06:02:d5:b3:62:5b:74:7a:b2:4e:bd: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:49:74:47:A2:81:80:60:02:4F:8E:CD:D8:E3:CB:57:B5:9C:AB X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:35:bb:20:41:a6:d1:89:ac:6d:d1:51:d7:2c:1d:ec:1a:87: 8d:16:c0:69:f8:c7:1b:da:4e:9a:8f:01:c1:77:c9:c9:c6:37: 63:6f:9d:d0:55:d2:15:5e:79:cc:5c:a0:1b:d0:ac:a2:fe:1e: 1c:d9:d5:55:30:25:aa:d3:4f:ca:43:8e:85:3d:eb:2e:af:97: 50:b4:06:1a:27:fb:19:c4:00:02:29:a3:82:c9:80:1b:98:63: 4d:89:a9:7d:fb:23:72:31:d5:35:c0:ba:87:80:f0:50:db:08: 76:6c:ca:f3:07:0a:c3:c2:55:e4:8b:24:33:43:b4:ba:51:9b: 51:dc:4c:0a:bf:eb:fe:7b:4e:61:3a:3d:50:5f:03:33:d3:ec: e1:a8:cc:07:99:47:1a:ba:54:b7:5f:86:f3:8c:47:a2:83:04: 4f:4e:44:43:a4:8b:28:57:66:d8:de:e6:0f:a3:09:2d:cf:99: 72:63:d9:9c:83:34:46:b1:5b:7a:b9:e0:33:32:17:06:bd:60: b0:29:f8:b5:c5:f2:dc:a1:fb:50:a4:d9:f2:89:38:48:34:26: f6:5c:5e:90:91:1a:94:5b:38:0d:39:2a:35:aa:bf:4f:45:8b: 18:0b:09:26:63:d7:f4:7f:85:d6:ce:43:60:93:13:85:52:2c: 62:8d:51:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjQwNTAzMDYxNjEzWhcNMjQwNTEwMDYxNjEzWjAYMRYwFAYD VQQDEw02NjM0ODEyZC1mYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6sOsrvcIPRtoo7kGeWjzDgfNoDjtkoMYSLnchL7EjATydyNG+H17D4DZrfc JCa9Dl2W8C1v/WHjpkwqnLpsqNJ7EFwpgrmdh4jMBoyuL9RLG7hawlZRVDxf0n1y TepjssThY09mnUhJGq1YYmWnANrhoTtIS5FXG6QEp2/KKWt7zgsS7sucY12wjQ0G eUscj9TToxGEZJDQm0zf2vhpdvwXE0EHWM1vGqeSa/qkcet6/oHS0+mSu1mAIYfh FrxKuj+d/nJvfh3xSmS7jyWYYABw3NAb+U4mny9MxSFbwM5RtSjDGAK4zIAE/58q JzWPIRJ3BgLVs2JbdHqyTr2CTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdJSXRH ooGAYAJPjs3Y48tXtZyrMB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvNbsgQabRiaxt0VHXLB3sGoeNFsBp+Mcb2k6ajwHBd8nJxjdjb53Q VdIVXnnMXKAb0Kyi/h4c2dVVMCWq00/KQ46FPesur5dQtAYaJ/sZxAACKaOCyYAb mGNNial9+yNyMdU1wLqHgPBQ2wh2bMrzBwrDwlXkiyQzQ7S6UZtR3EwKv+v+e05h Oj1QXwMz0+zhqMwHmUcaulS3X4bzjEeigwRPTkRDpIsoV2bY3uYPowktz5lyY9mc gzRGsVt6ueAzMhcGvWCwKfi1xfLcoftQpNnyiThINCb2XF6QkRqUWzgNOSo1qr9P RYsYCwkmY9f0f4XWzkNgkxOFUixijVFK -----END CERTIFICATE-----Generated at Fri May 3 08:21:37 2024 by rpki-client on console-ams.rpki-client.org