$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json) Hash identifier: Vkve2ryM/2ltwhjifUkz7g+xCIwM5Mo8v7FmAz6AgZ8= Subject key identifier: 0E:1D:7A:69:EC:18:E9:9A:69:37:EA:8F:85:5C:48:70:F5:35:68:B9 Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft Manifest number: 06B6 Signing time: Sat 18 May 2024 23:08:16 +0000 Manifest this update: Sat 18 May 2024 23:08:15 +0000 Manifest next update: Sat 25 May 2024 23:08:15 +0000 Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: UiLOn3AD/hKmXltaw59mEXaTk94BMg1vLHFByoNyEKs=) 2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: IIwGPZzKhYLMunk4zsdAoj/wnapsapPWPhjcVZ0m9Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Validity Not Before: May 18 23:08:15 2024 GMT Not After : May 25 23:08:15 2024 GMT Subject: CN=664934e0-4051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:41:d4:6d:2e:b7:c2:4d:6b:5c:9b:54:2b: 6f:c4:2a:47:e8:8e:d3:76:24:93:0a:4e:73:73:2f: 0a:32:24:d2:80:dd:95:28:99:b3:e1:6f:3e:da:e2: 09:24:fc:d2:ff:ca:6e:ed:79:98:78:8e:55:94:bb: 04:ec:04:3c:70:68:98:9c:7a:f5:c9:7a:1c:aa:f2: 2f:59:6f:ab:83:73:9f:28:ee:0d:0e:fd:4d:da:b8: 82:3f:c9:d9:89:10:d0:e7:81:91:a1:db:ba:32:9e: 5a:ac:77:02:c3:48:76:0f:39:da:e6:d1:80:00:de: 50:3e:bd:a3:c8:ca:36:bc:a0:0d:f6:f5:bd:d6:31: 23:71:43:c5:37:da:28:13:c5:87:92:7b:0b:f0:98: de:67:9f:13:29:67:26:dd:cd:51:d8:27:85:4d:92: 57:e2:ed:8b:e7:ab:96:cd:e0:4c:b5:cb:74:43:21: e1:1b:cd:83:c1:83:39:91:3b:d0:74:4d:5a:22:67: d8:b7:43:a4:a1:29:3f:b5:dc:e2:a2:25:b5:1f:e3: 81:da:2c:8c:bb:63:8d:23:86:fb:f6:fa:f4:82:fb: c7:65:95:ac:81:99:21:8c:2d:c3:3a:66:df:2a:cd: a6:41:97:9b:6f:f2:78:1e:ec:27:c4:e8:ab:0f:04: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1D:7A:69:EC:18:E9:9A:69:37:EA:8F:85:5C:48:70:F5:35:68:B9 X509v3 Authority Key Identifier: keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c9:10:37:af:8d:47:ac:fb:08:41:67:aa:9b:bf:51:a3:34: a8:c4:b8:47:ec:78:7f:af:ca:15:02:cd:b9:90:34:fc:8b:89: 20:28:d4:33:24:d8:b5:3b:d3:fc:b0:7e:a4:76:ad:8a:77:11: 58:fb:9c:f8:23:a7:b3:9e:0c:aa:ee:6a:0c:86:51:e9:38:4e: f7:d2:56:9d:df:a0:8b:26:69:3f:37:d3:fb:87:c7:96:58:a5: f5:f1:d9:66:14:e0:c7:98:fd:d9:2b:bb:b5:b7:23:db:50:d6: 1d:dd:7f:85:c3:9e:64:69:64:ce:00:6a:cc:f1:15:08:ec:34: 3d:0c:0d:33:15:67:23:0b:df:cd:20:98:9b:af:84:8e:9f:ac: 81:32:82:68:d3:a3:e4:dc:69:87:e8:5d:fb:31:39:16:29:66: 85:85:2d:b3:a9:db:f0:f2:6f:57:b4:02:4d:5b:32:80:e0:aa: b2:0a:9f:9b:4c:8f:fe:98:3b:2f:d5:bc:cd:05:11:9e:ba:4e: 87:ee:a5:8f:ca:d2:2a:b3:e6:7f:9f:64:ce:c7:53:42:2f:32: e3:8f:16:cb:fe:4c:6e:08:fe:7d:6b:8c:b6:5d:28:a0:aa:d2: 9d:54:20:70:25:f5:b1:93:16:b6:04:44:17:e9:e0:fc:b1:68: 74:97:1f:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1 NjRGQ0QyREIwHhcNMjQwNTE4MjMwODE1WhcNMjQwNTI1MjMwODE1WjAYMRYwFAYD VQQDEw02NjQ5MzRlMC00MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2hB1G0ut8JNa1ybVCtvxCpH6I7TdiSTCk5zcy8KMiTSgN2VKJmz4W8+2uIJ JPzS/8pu7XmYeI5VlLsE7AQ8cGiYnHr1yXocqvIvWW+rg3OfKO4NDv1N2riCP8nZ iRDQ54GRodu6Mp5arHcCw0h2Dzna5tGAAN5QPr2jyMo2vKAN9vW91jEjcUPFN9oo E8WHknsL8JjeZ58TKWcm3c1R2CeFTZJX4u2L56uWzeBMtct0QyHhG82DwYM5kTvQ dE1aImfYt0OkoSk/tdzioiW1H+OB2iyMu2ONI4b79vr0gvvHZZWsgZkhjC3DOmbf Ks2mQZebb/J4HuwnxOirDwRUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4demns GOmaaTfqj4VcSHD1NWi5MB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1 MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQyRA3r41HrPsIQWeqm79RozSoxLhH7Hh/r8oVAs25kDT8i4kgKNQz JNi1O9P8sH6kdq2KdxFY+5z4I6ezngyq7moMhlHpOE730lad36CLJmk/N9P7h8eW WKX18dlmFODHmP3ZK7u1tyPbUNYd3X+Fw55kaWTOAGrM8RUI7DQ9DA0zFWcjC9/N IJibr4SOn6yBMoJo06Pk3GmH6F37MTkWKWaFhS2zqdvw8m9XtAJNWzKA4KqyCp+b TI/+mDsv1bzNBRGeuk6H7qWPytIqs+Z/n2TOx1NCLzLjjxbL/kxuCP59a4y2XSig qtKdVCBwJfWxkxa2BEQX6eD8sWh0lx8z -----END CERTIFICATE-----Generated at Sun May 19 00:16:11 2024 by rpki-client on console-fra.rpki-client.org