$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft File: AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json) Hash identifier: pyKqSn/Ro9798LbbNMLPgheFhuBUVxVgg25jJLZhcBM= Subject key identifier: B3:C3:11:EC:85:6F:EF:33:B8:20:74:00:44:C9:AF:96:18:16:21:62 Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 Certificate issuer: /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft Manifest number: 05B8 Signing time: Fri 03 May 2024 00:18:40 +0000 Manifest this update: Fri 03 May 2024 00:18:40 +0000 Manifest next update: Fri 10 May 2024 00:18:40 +0000 Files and hashes: 1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: mC9yWzFUwmnpKj3TNVNlSdy1iiW+qZo6Lvj9B+uo/cs=) 2: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: BUJL28WoiCfZKWbGeIJLwPyoVTA4y1TM9oPGHN4lNNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932 Validity Not Before: May 3 00:18:40 2024 GMT Not After : May 10 00:18:40 2024 GMT Subject: CN=66342d60-848a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:b9:fc:58:01:4a:46:51:08:28:97:d8:6a: 4d:f4:58:33:1a:ea:41:58:fa:d7:d0:32:8d:59:74: 8a:b9:f0:cf:6d:37:f3:8b:18:2b:a6:d6:9f:74:0a: c6:b2:b6:b2:7a:cb:7e:a8:c1:a3:5f:a9:59:1e:cf: 17:85:18:d3:1a:4a:ed:dc:a9:ca:1c:10:53:e8:b6: 31:20:df:47:5f:03:ee:5d:d8:a8:2d:30:c0:1e:9f: d2:ad:68:53:d4:6a:63:90:cf:fe:11:d8:2b:48:2c: 96:55:b1:cf:2b:3d:4d:cc:33:af:e6:83:06:10:97: 33:ff:60:b1:0d:21:2b:df:a4:a1:63:14:b7:55:a7: ad:02:29:48:00:4d:5f:4c:2a:14:36:a3:e8:46:f1: ad:b9:98:68:0c:4a:d5:ba:7d:cd:c1:07:6e:f5:ce: 99:91:f4:81:70:eb:41:da:86:c4:04:66:9d:cd:58: f9:9c:72:97:e8:76:fc:77:5c:33:27:22:4c:ae:0d: aa:72:0a:bd:79:c2:18:7a:0c:66:0a:fa:24:e0:4e: 70:5b:f7:3b:e5:5d:d3:0d:a1:b0:dd:c7:0e:0a:13: 74:05:ff:18:18:5d:8d:31:2d:b0:fd:90:7e:82:44: 76:d3:7e:08:a2:fb:29:aa:51:8e:c7:9f:63:69:4b: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C3:11:EC:85:6F:EF:33:B8:20:74:00:44:C9:AF:96:18:16:21:62 X509v3 Authority Key Identifier: keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:18:4d:41:7a:cb:06:32:38:3e:a6:69:e2:6d:93:a5:25:d5: 57:48:18:35:4e:e5:84:3c:88:6e:25:59:20:4f:31:82:df:76: af:97:4b:24:bc:86:ab:dd:e4:9a:17:89:e6:8d:d1:de:db:83: f0:23:4a:90:d9:6b:99:c5:5a:b0:e1:5d:a3:05:6d:98:01:c5: d2:1f:50:c9:f4:f1:47:4b:32:6b:1b:5e:84:94:bc:97:9f:f3: 18:fd:8f:e1:0d:8a:ab:ee:34:a2:c3:ef:b1:4d:b5:b8:62:69: 8a:d3:14:e6:2f:a5:e4:7d:93:43:f7:19:c8:7a:59:f9:ad:9d: 8f:66:51:76:69:95:2a:18:2c:b4:30:9c:bd:73:4c:b6:d4:69: 39:31:f5:fd:14:09:99:41:6f:ca:42:44:fb:db:dc:b9:ec:d9: a7:1e:a8:bc:50:6f:4d:63:f9:e0:18:af:51:d1:b3:b5:ee:21: c6:74:9f:bd:52:8b:6b:d9:81:fd:d4:31:11:62:09:d8:39:98: 9e:2b:97:af:6b:83:bd:60:ac:40:1a:aa:d1:3d:78:d5:ac:7b: 39:88:5a:0f:6f:87:c4:f7:9a:9b:f1:a7:f8:f5:87:d8:e7:38: b8:b3:b9:72:f1:00:d8:c9:27:a6:81:15:6c:a6:b4:b7:4c:2a: f9:ea:0c:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ1NDQxMTAvBgNVBAUTKDAxNjVBOURDQzAyQkMwRTg3Njg3RUUwNjcwNUMwRTZD OTkyREU5MzIwHhcNMjQwNTAzMDAxODQwWhcNMjQwNTEwMDAxODQwWjAYMRYwFAYD VQQDEw02NjM0MmQ2MC04NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvq5/FgBSkZRCCiX2GpN9FgzGupBWPrX0DKNWXSKufDPbTfzixgrptafdArG srayest+qMGjX6lZHs8XhRjTGkrt3KnKHBBT6LYxIN9HXwPuXdioLTDAHp/SrWhT 1GpjkM/+EdgrSCyWVbHPKz1NzDOv5oMGEJcz/2CxDSEr36ShYxS3VaetAilIAE1f TCoUNqPoRvGtuZhoDErVun3NwQdu9c6ZkfSBcOtB2obEBGadzVj5nHKX6Hb8d1wz JyJMrg2qcgq9ecIYegxmCvok4E5wW/c75V3TDaGw3ccOChN0Bf8YGF2NMS2w/ZB+ gkR2034IovspqlGOx59jaUuJnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPDEeyF b+8zuCB0AETJr5YYFiFiMB8GA1UdIwQYMBaAFAFlqdzAK8DodofuBnBcDmyZLeky MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDU0NC80NTlDODlFNDc1 RjIxMUVCQTNFRDM2NDdDNEY5QUUwMi9BV1dwM01BcndPaDJoLTRHY0Z3T2JKa3Q2 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXV3AzTUFyd09oMmgtNEdjRndPYkprdDZUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDU0NC80NTlDODlFNDc1RjIxMUVCQTNFRDM2NDdDNEY5QUUwMi9BV1dwM01BcndP aDJoLTRHY0Z3T2JKa3Q2VEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtGE1BessGMjg+pmnibZOlJdVXSBg1TuWEPIhuJVkgTzGC33avl0sk vIar3eSaF4nmjdHe24PwI0qQ2WuZxVqw4V2jBW2YAcXSH1DJ9PFHSzJrG16ElLyX n/MY/Y/hDYqr7jSiw++xTbW4YmmK0xTmL6XkfZND9xnIeln5rZ2PZlF2aZUqGCy0 MJy9c0y21Gk5MfX9FAmZQW/KQkT729y57NmnHqi8UG9NY/ngGK9R0bO17iHGdJ+9 Uotr2YH91DERYgnYOZieK5eva4O9YKxAGqrRPXjVrHs5iFoPb4fE95qb8af49YfY 5zi4s7ly8QDYySemgRVsprS3TCr56gwU -----END CERTIFICATE-----Generated at Fri May 3 01:30:27 2024 by rpki-client on console-fra.rpki-client.org