$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: g2zWhqt4plocxXaV93Ejxp1Ztier3c6gwVH7ZkujjKA= Subject key identifier: 97:E3:B0:1F:0E:2C:45:EE:5B:93:8A:D0:32:0E:54:CE:BC:CE:30:2C Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0E9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0E98 Signing time: Fri 31 May 2024 18:47:50 +0000 Manifest this update: Fri 31 May 2024 18:47:49 +0000 Manifest next update: Fri 07 Jun 2024 18:47:49 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: BucEW1HDLhdlIgD4oDu95uaFULzDbhIh00oXB7FyMm0=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: tu8KXjzCqVxyu2t9CPCDvMpbydnARQGYcqUmy819fZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3743 (0xe9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: May 31 18:47:49 2024 GMT Not After : Jun 7 18:47:49 2024 GMT Subject: CN=665a1b56-66bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:8d:a3:fb:f9:91:05:0f:17:08:f1:c3:10: b6:8d:6f:53:f1:9b:c8:1a:21:42:3f:07:22:4d:b2: 36:71:17:73:22:40:41:38:01:53:f3:ef:ca:07:21: 08:33:33:cf:f3:54:2a:e8:6f:85:30:24:19:85:2a: cf:aa:26:db:41:3b:49:43:69:ac:e0:03:7e:23:5b: 0a:b2:21:9a:05:c1:4a:76:10:af:bd:76:7d:6b:8c: b5:4e:27:ea:ef:b2:eb:70:25:ae:38:08:df:1a:c9: 5a:31:bf:ee:35:84:fc:27:26:a6:91:0e:a8:b4:c4: 75:58:c5:c8:bf:93:b7:6d:a1:88:b6:cb:c2:3b:7b: ec:15:87:f3:a8:56:af:f0:e6:51:08:82:d7:0b:f3: dc:44:4f:56:9c:19:0d:fc:6b:a7:27:b2:e2:88:70: d4:5b:05:9c:9d:87:08:05:b7:51:93:95:63:5f:32: b5:5e:ef:f3:b2:35:8b:d7:4f:83:1b:44:b2:94:a3: 4b:c6:b6:01:9d:08:92:af:c1:68:7b:86:71:15:ba: de:89:65:22:44:d8:73:3c:74:4d:88:02:fe:19:14: 96:da:2f:1e:c4:79:af:48:b1:a2:ac:b3:3a:bf:a2: 37:6b:ee:db:2c:d2:78:80:43:63:50:4f:94:b6:28: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:B0:1F:0E:2C:45:EE:5B:93:8A:D0:32:0E:54:CE:BC:CE:30:2C X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:d7:1a:83:d4:2a:75:63:99:e5:3e:9c:fe:9b:7f:16:e6: c0:07:89:5b:50:a3:f2:e9:3c:78:46:b7:dd:20:1f:4c:52:a9: e6:db:3c:52:2e:c4:49:25:45:d1:5d:be:62:b8:a1:6b:7b:a3: 7f:1b:da:bc:83:0c:aa:51:b7:7e:0b:30:87:26:71:fe:c8:67: b1:5e:51:0a:f9:64:18:70:59:98:ef:fb:80:e0:7f:e6:e1:da: da:a3:94:10:af:43:f9:87:85:c6:be:c5:c7:a5:5a:65:21:eb: e2:43:7c:e0:ca:6a:5d:a5:a2:a0:ed:d7:df:6c:9c:f7:c4:da: 89:63:b4:2a:9a:4d:c3:ed:d5:70:2e:38:3e:4a:da:76:77:96: fc:81:02:6c:71:8c:11:4c:16:42:7c:6e:d4:cf:37:79:de:d1: cc:c4:6f:a4:19:76:5d:ff:a0:e2:2e:df:85:28:fb:ce:f0:74: 63:f0:26:7a:91:de:6e:c7:aa:f0:2f:7b:f5:3b:33:b9:c0:22: d9:73:8c:d9:2a:8a:04:0f:16:06:ce:4a:24:15:b7:8f:86:19: 37:95:96:84:01:76:51:04:df:25:1b:80:e6:33:c2:3e:86:bd: 10:5f:d9:2d:c5:9a:e9:bb:52:bb:ba:03:79:77:33:61:28:94: 67:e2:fd:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjQwNTMxMTg0NzQ5WhcNMjQwNjA3MTg0NzQ5WjAYMRYwFAYD VQQDEw02NjVhMWI1Ni02NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cWNo/v5kQUPFwjxwxC2jW9T8ZvIGiFCPwciTbI2cRdzIkBBOAFT8+/KByEI MzPP81Qq6G+FMCQZhSrPqibbQTtJQ2ms4AN+I1sKsiGaBcFKdhCvvXZ9a4y1Tifq 77LrcCWuOAjfGslaMb/uNYT8JyamkQ6otMR1WMXIv5O3baGItsvCO3vsFYfzqFav 8OZRCILXC/PcRE9WnBkN/GunJ7LiiHDUWwWcnYcIBbdRk5VjXzK1Xu/zsjWL10+D G0SylKNLxrYBnQiSr8Foe4ZxFbreiWUiRNhzPHRNiAL+GRSW2i8exHmvSLGirLM6 v6I3a+7bLNJ4gENjUE+UtigLvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfjsB8O LEXuW5OK0DIOVM68zjAsMB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR/9cag9QqdWOZ5T6c/pt/FubAB4lbUKPy6Tx4RrfdIB9MUqnm2zxS LsRJJUXRXb5iuKFre6N/G9q8gwyqUbd+CzCHJnH+yGexXlEK+WQYcFmY7/uA4H/m 4drao5QQr0P5h4XGvsXHpVplIeviQ3zgympdpaKg7dffbJz3xNqJY7Qqmk3D7dVw Ljg+Stp2d5b8gQJscYwRTBZCfG7Uzzd53tHMxG+kGXZd/6DiLt+FKPvO8HRj8CZ6 kd5ux6rwL3v1OzO5wCLZc4zZKooEDxYGzkokFbePhhk3lZaEAXZRBN8lG4DmM8I+ hr0QX9ktxZrpu1K7ugN5dzNhKJRn4v3o -----END CERTIFICATE-----Generated at Fri May 31 19:47:46 2024 by rpki-client on console-fra.rpki-client.org