$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft File: 1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft (raw, json) Hash identifier: NUfpS6nZuXlzbv3PIRsFug0Otwls9Pw1f97iEAeAdhI= Subject key identifier: AF:BF:E0:61:50:84:10:99:1C:DB:56:30:7E:6B:52:1D:99:E2:36:6A Authority key identifier: D5:60:B8:3F:E9:69:40:66:FA:AC:19:CB:C9:9B:6D:58:6B:CB:95:F4 Certificate issuer: /CN=A9118B31/serialNumber=D560B83FE9694066FAAC19CBC99B6D586BCB95F4 Certificate serial: 1D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft Manifest number: 1D1B Signing time: Mon 20 May 2024 01:07:13 +0000 Manifest this update: Mon 20 May 2024 01:07:12 +0000 Manifest next update: Mon 27 May 2024 01:07:12 +0000 Files and hashes: 1: 1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl (hash: OJ/8OCQoUnb9F0EJFpN2KJ50vDtghA2XZLbpztrpy7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 01:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7462 (0x1d26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B31/serialNumber=D560B83FE9694066FAAC19CBC99B6D586BCB95F4 Validity Not Before: May 20 01:07:12 2024 GMT Not After : May 27 01:07:12 2024 GMT Subject: CN=664aa241-3adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:05:08:6a:a8:fa:58:f1:f7:aa:98:b2:d4: 1b:0c:98:d2:41:0f:d0:a2:81:37:e8:89:66:1b:16: b2:14:b8:14:53:c4:05:28:44:d9:d8:33:c3:72:7c: 66:2d:58:44:67:04:ec:2e:c0:0a:c7:40:ff:ac:77: cc:97:14:aa:c1:14:fd:3b:e2:68:8e:6e:59:81:86: 66:aa:6b:56:fc:63:21:e5:f5:97:a8:64:56:af:07: 33:59:77:04:cf:96:bc:9e:71:77:bb:37:53:ef:0b: 7b:d8:f4:1d:ec:7b:ff:fc:45:27:20:a1:84:bf:5d: de:4e:a4:e2:24:04:81:4e:9a:33:19:0e:82:ed:27: 8e:86:15:cf:09:74:b1:8b:48:83:6c:38:a0:12:2d: f6:ac:2d:e2:65:1b:4c:da:98:64:c9:d3:9e:00:d9: 2a:4f:9b:f7:a4:f7:1a:d8:29:e0:89:00:df:d8:5c: f8:51:a9:62:0a:f5:2c:d2:b2:57:d0:f0:69:df:da: 30:da:c1:b8:9c:07:a0:7d:1e:bf:2f:19:30:22:da: 89:33:3b:e7:0c:5f:f6:e2:f6:b6:93:00:cb:2f:89: 0f:de:0a:62:df:33:91:0a:4d:c8:b7:f4:1a:0f:13: 25:98:b4:37:83:28:7b:28:f6:85:4a:cc:09:52:80: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BF:E0:61:50:84:10:99:1C:DB:56:30:7E:6B:52:1D:99:E2:36:6A X509v3 Authority Key Identifier: keyid:D5:60:B8:3F:E9:69:40:66:FA:AC:19:CB:C9:9B:6D:58:6B:CB:95:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WC4P-lpQGb6rBnLyZttWGvLlfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B31/B1812C7291A511E69A068F0AC4F9AE02/1WC4P-lpQGb6rBnLyZttWGvLlfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:3b:f8:d0:5e:5d:a7:e1:90:b1:cf:36:65:f0:d3:7c:5f:a6: be:6c:11:70:57:04:1d:01:05:d3:81:33:11:6c:1a:1a:f8:91: a7:82:0e:65:5b:f4:01:d3:7a:aa:f9:05:7b:c4:c5:25:88:12: 7d:0b:dc:0f:16:a5:06:3e:60:fb:56:d7:cb:c1:dc:df:ef:82: 82:a5:4d:52:f6:2f:00:ba:69:6f:ca:27:2f:13:bc:c3:61:94: 4d:3c:d6:08:06:53:d6:ba:e4:90:a0:f2:b7:dd:6c:bb:09:69: 20:3d:fc:58:ae:22:bd:16:bd:8b:7b:b4:2a:9c:7e:ff:b3:c0: a3:0c:cf:bb:45:e2:07:50:50:ff:a8:d2:9d:be:b2:a5:00:4d: 46:6b:40:9b:2e:d1:3a:8d:5a:6c:e3:9e:09:00:f2:06:9e:01: d7:5c:49:b8:3f:d5:a6:85:b5:fa:d9:e8:3d:b2:ec:50:07:0f: 2e:ed:16:44:b6:b0:08:af:90:ed:df:6a:bd:0c:39:f0:95:65: 99:8c:29:ff:e5:34:f1:40:aa:f4:47:07:d7:80:5d:ab:53:5a: 68:f2:32:a8:ec:c9:0b:fd:7f:2e:6d:d1:76:3e:ad:d0:2c:eb: cf:3d:10:f9:03:b5:af:fc:af:c3:fa:aa:e2:cd:9c:8c:d2:50: 8e:c8:9a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzExMTAvBgNVBAUTKEQ1NjBCODNGRTk2OTQwNjZGQUFDMTlDQkM5OUI2RDU4 NkJDQjk1RjQwHhcNMjQwNTIwMDEwNzEyWhcNMjQwNTI3MDEwNzEyWjAYMRYwFAYD VQQDEw02NjRhYTI0MS0zYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybUFCGqo+ljx96qYstQbDJjSQQ/QooE36IlmGxayFLgUU8QFKETZ2DPDcnxm LVhEZwTsLsAKx0D/rHfMlxSqwRT9O+Jojm5ZgYZmqmtW/GMh5fWXqGRWrwczWXcE z5a8nnF3uzdT7wt72PQd7Hv//EUnIKGEv13eTqTiJASBTpozGQ6C7SeOhhXPCXSx i0iDbDigEi32rC3iZRtM2phkydOeANkqT5v3pPca2CngiQDf2Fz4UaliCvUs0rJX 0PBp39ow2sG4nAegfR6/LxkwItqJMzvnDF/24va2kwDLL4kP3gpi3zORCk3It/Qa DxMlmLQ3gyh7KPaFSswJUoDD0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+/4GFQ hBCZHNtWMH5rUh2Z4jZqMB8GA1UdIwQYMBaAFNVguD/paUBm+qwZy8mbbVhry5X0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMS9CMTgxMkM3Mjkx QTUxMUU2OUEwNjhGMEFDNEY5QUUwMi8xV0M0UC1scFFHYjZyQm5MeVp0dFdHdkxs ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXQzRQLWxwUUdiNnJCbkx5WnR0V0d2TGxmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMS9CMTgxMkM3MjkxQTUxMUU2OUEwNjhGMEFDNEY5QUUwMi8xV0M0UC1scFFH YjZyQm5MeVp0dFdHdkxsZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmO/jQXl2n4ZCxzzZl8NN8X6a+bBFwVwQdAQXTgTMRbBoa+JGngg5l W/QB03qq+QV7xMUliBJ9C9wPFqUGPmD7VtfLwdzf74KCpU1S9i8AumlvyicvE7zD YZRNPNYIBlPWuuSQoPK33Wy7CWkgPfxYriK9Fr2Le7QqnH7/s8CjDM+7ReIHUFD/ qNKdvrKlAE1Ga0CbLtE6jVps454JAPIGngHXXEm4P9WmhbX62eg9suxQBw8u7RZE trAIr5Dt32q9DDnwlWWZjCn/5TTxQKr0RwfXgF2rU1po8jKo7MkL/X8ubdF2Pq3Q LOvPPRD5A7Wv/K/D+qrizZyM0lCOyJpl -----END CERTIFICATE-----Generated at Mon May 20 01:40:01 2024 by rpki-client on console-ams.rpki-client.org