$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft File: WFTG2IaugFcOzmJHTVQZnE6CnKs.mft (raw, json) Hash identifier: a9jLSgrv/yxPVfpu/Pe5MVrtQ4s9DLfscI/etD2+MvA= Subject key identifier: EF:A7:64:D1:0E:BD:6F:E3:E5:9E:B9:05:94:11:F4:E2:8A:FB:1B:7A Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB Certificate issuer: /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft Manifest number: 05A0 Signing time: Sun 19 May 2024 00:22:27 +0000 Manifest this update: Sun 19 May 2024 00:22:27 +0000 Manifest next update: Sun 26 May 2024 00:22:27 +0000 Files and hashes: 1: WFTG2IaugFcOzmJHTVQZnE6CnKs.crl (hash: eY18YFcR95Q9w15FQ5xvcaxxPmRomFVeU0zmG/1jPsA=) 2: 5F38A4F082D611EB802C1A55C4F9AE02.roa (hash: UOjR0c6GhcTb/ztzkw/K5+yS24Iwi0A/h+4yO2s04cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB Validity Not Before: May 19 00:22:27 2024 GMT Not After : May 26 00:22:27 2024 GMT Subject: CN=66494643-496b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:88:8b:b2:36:da:48:89:1a:69:10:69:47: 31:5a:10:80:c0:db:e0:c7:d6:3d:36:08:bf:50:d7: d2:04:82:ed:1b:87:be:50:b9:76:52:fb:37:ab:fd: 40:58:72:66:91:fb:7e:99:ee:fb:bb:af:3b:16:f0: 2e:de:bd:f2:e5:39:e6:63:c0:be:1e:65:e2:10:de: 35:8c:fb:1c:4f:aa:58:e5:48:b1:39:aa:6c:e8:a0: b2:0a:92:a5:de:8b:a9:a7:e6:e0:e4:f9:c5:39:d5: 3e:93:7a:10:a7:52:d7:46:8d:69:1d:0a:c4:d6:3e: ad:a4:9e:f2:35:dc:04:97:de:07:9d:18:96:22:7c: c0:ac:9e:94:12:a0:c0:ad:9b:ce:46:4c:d7:0f:68: d4:38:48:ca:1a:07:1e:08:28:40:10:a6:fe:ac:8f: ad:89:11:9d:a4:e8:6a:ee:f3:70:9c:1e:f9:e2:93: d5:86:da:38:cb:9d:27:8f:6e:32:94:3b:98:00:d1: e2:f5:c5:9a:f2:66:cd:2f:2f:71:2a:5e:cd:a4:ff: 84:c7:64:df:23:93:4b:9c:af:0d:3b:3b:c9:df:63: d1:63:50:05:a6:90:46:f8:c9:01:e8:2b:43:2e:ad: de:18:bf:08:91:d6:af:76:c7:aa:70:2a:37:a5:a9: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A7:64:D1:0E:BD:6F:E3:E5:9E:B9:05:94:11:F4:E2:8A:FB:1B:7A X509v3 Authority Key Identifier: keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:64:cc:9f:70:a9:1a:55:52:43:56:df:4f:3e:1b:67:59:32: 26:21:2b:90:b0:36:fd:26:7f:b5:25:55:6e:a8:b8:eb:4b:29: 73:14:49:d5:9f:17:df:a4:17:52:85:cd:82:7c:b6:61:48:ec: ed:55:ef:96:cd:fd:fa:ea:13:04:55:c1:14:23:e5:3b:5b:28: f7:11:68:b1:d6:42:5e:14:a4:f2:da:8a:7a:d5:bb:a0:ed:e1: 41:da:2e:d8:13:eb:83:73:a7:78:94:43:4b:cb:9c:ac:23:d9: 59:28:6c:ed:41:5c:b9:ae:5c:ce:a8:8e:79:1c:67:15:16:7d: 39:12:c8:0c:c3:10:71:77:fd:25:02:c6:6e:69:2f:d1:6b:a9: 37:d6:80:ee:f4:61:67:13:04:62:9f:9f:83:5f:82:29:69:7b: 1b:55:bc:0b:fb:7f:4b:11:d2:88:d0:30:7d:2b:fd:f2:f5:ac: 1a:73:9f:d0:74:62:c5:a7:72:d0:83:84:a0:53:6b:a9:b4:ab: 53:3a:1e:69:ab:60:1a:66:f6:d6:4b:ce:af:9e:85:3c:a2:4c: 60:78:98:df:3e:70:7d:2a:69:71:c8:15:87:01:02:87:2a:c8: 17:a4:30:69:a1:88:d9:2c:5c:19:f3:77:09:a0:fa:6b:d0:37: 0d:36:a3:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBBRDExMTAvBgNVBAUTKDU4NTRDNkQ4ODZBRTgwNTcwRUNFNjI0NzRENTQxOTlD NEU4MjlDQUIwHhcNMjQwNTE5MDAyMjI3WhcNMjQwNTI2MDAyMjI3WjAYMRYwFAYD VQQDEw02NjQ5NDY0My00OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3+Ii7I22kiJGmkQaUcxWhCAwNvgx9Y9Ngi/UNfSBILtG4e+ULl2Uvs3q/1A WHJmkft+me77u687FvAu3r3y5TnmY8C+HmXiEN41jPscT6pY5UixOaps6KCyCpKl 3oupp+bg5PnFOdU+k3oQp1LXRo1pHQrE1j6tpJ7yNdwEl94HnRiWInzArJ6UEqDA rZvORkzXD2jUOEjKGgceCChAEKb+rI+tiRGdpOhq7vNwnB754pPVhto4y50nj24y lDuYANHi9cWa8mbNLy9xKl7NpP+Ex2TfI5NLnK8NOzvJ32PRY1AFppBG+MkB6CtD Lq3eGL8IkdavdseqcCo3paleMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+nZNEO vW/j5Z65BZQR9OKK+xt6MB8GA1UdIwQYMBaAFFhUxtiGroBXDs5iR01UGZxOgpyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFEMS81QTgzQTU4NDgy Q0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdGY096bUpIVFZRWm5FNkNu S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGVEcySWF1Z0ZjT3ptSkhUVlFabkU2Q25Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEFEMS81QTgzQTU4NDgyQ0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdG Y096bUpIVFZRWm5FNkNuS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDZMyfcKkaVVJDVt9PPhtnWTImISuQsDb9Jn+1JVVuqLjrSylzFEnV nxffpBdShc2CfLZhSOztVe+Wzf366hMEVcEUI+U7Wyj3EWix1kJeFKTy2op61bug 7eFB2i7YE+uDc6d4lENLy5ysI9lZKGztQVy5rlzOqI55HGcVFn05EsgMwxBxd/0l AsZuaS/Ra6k31oDu9GFnEwRin5+DX4IpaXsbVbwL+39LEdKI0DB9K/3y9awac5/Q dGLFp3LQg4SgU2uptKtTOh5pq2AaZvbWS86vnoU8okxgeJjfPnB9KmlxyBWHAQKH KsgXpDBpoYjZLFwZ83cJoPpr0DcNNqPK -----END CERTIFICATE-----Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org