$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: 9JVtWPbdmQbY7O0SwjerTTmc5hpNRdpOJme8uErFsW0= Subject key identifier: 17:FE:8C:CB:9D:A3:DF:08:8D:B1:60:8B:4F:E1:F0:72:1E:41:C0:57 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 04D4 Signing time: Sun 19 May 2024 01:22:26 +0000 Manifest this update: Sun 19 May 2024 01:22:25 +0000 Manifest next update: Sun 26 May 2024 01:22:25 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: nTXa3H95N861yNFrz+O6WtzjkRfavFdcB0o6WW8Pz00=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: juCHWSi8C/taruuTU656QKwfY6uR+R3up8XZFne8N40=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: yYTiOpsHNryEqNFQ6Sp9jGSaHOwhpt0hAg9+vAWSkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: May 19 01:22:25 2024 GMT Not After : May 26 01:22:25 2024 GMT Subject: CN=66495452-a49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:36:81:bf:e8:95:66:31:2c:22:41:60:7d: 6e:93:03:3f:f3:d4:87:df:ba:59:f1:4d:97:b1:fb: 55:73:dd:1a:5f:74:4f:ab:79:56:12:39:aa:af:68: 72:eb:1e:e8:02:ab:0c:15:2a:18:13:a9:bf:55:2e: fe:a0:f0:af:d8:d7:1e:5d:a5:50:9d:43:df:dc:e8: 52:6e:1a:06:fa:c5:ea:30:26:94:60:8f:07:bc:1c: b6:3c:06:dd:4a:2b:d2:bb:ff:f3:b3:8e:26:c5:3a: 8c:43:8f:04:fc:77:11:ae:0e:09:ba:90:f1:74:a8: e2:f0:fa:ea:c2:86:31:4c:f3:0c:7d:76:fa:f9:ed: 08:47:f6:33:df:10:bb:61:6c:83:5b:2a:60:b5:b0: 0c:a1:67:ad:5c:7f:ec:67:b7:ee:0e:73:60:ff:ba: 6e:e7:4c:99:39:89:af:33:dc:8d:ec:43:2d:32:fb: e6:fb:d3:1e:8c:79:d5:ef:7b:3f:d6:51:66:10:9e: b9:6b:b4:2b:d6:52:ff:a2:bf:c4:07:27:24:e2:a3: 66:be:de:9d:12:81:ea:74:96:9c:cd:fe:1b:7f:a3: 88:3a:7b:1c:89:c2:f7:40:54:d9:20:de:c5:fb:55: c4:50:0e:4b:23:6c:3d:97:b0:77:eb:43:5a:28:26: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:8C:CB:9D:A3:DF:08:8D:B1:60:8B:4F:E1:F0:72:1E:41:C0:57 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:19:1d:f1:ef:1e:a6:4e:07:6a:58:1e:aa:a8:a0:b8:f0: bb:8b:53:b5:dc:c0:82:94:df:7b:da:1c:3a:70:0f:3b:1e:8b: 5d:f8:41:4f:53:bc:7a:71:f0:2a:10:ed:71:42:66:2d:83:85: 6f:5f:51:fb:25:de:0e:7b:c9:83:99:5a:8f:e6:8c:6a:b8:14: 56:88:a0:70:15:6d:af:6c:62:08:e9:69:ad:8f:be:a4:25:e9: 02:b2:75:17:36:21:bd:f8:29:df:4e:6e:d1:b8:bc:24:b9:3d: 9c:04:4d:53:c2:0b:dd:ae:ec:83:5f:3f:1d:78:2f:04:a5:86: d1:99:44:04:a4:fe:c2:7f:20:83:45:89:67:15:39:f1:73:38: bf:af:51:95:df:25:9b:4d:43:54:9e:c0:6a:b8:a3:0a:46:23: 3c:ba:f8:23:cc:6f:ad:68:bb:3d:63:71:73:13:ac:e0:db:63: 55:bd:c5:11:40:a1:79:90:42:35:62:93:ea:11:58:ce:91:34: f8:cf:27:fe:69:1d:d8:b4:2e:c9:c5:58:e6:84:8c:c7:16:9b: f0:41:aa:1f:2b:77:ab:25:6a:3d:36:b1:cd:2f:c7:8b:b8:21: 35:a2:80:fe:dd:99:88:1e:59:e5:e8:0b:5b:05:a0:c2:08:0e: 6a:96:0a:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjQwNTE5MDEyMjI1WhcNMjQwNTI2MDEyMjI1WjAYMRYwFAYD VQQDEw02NjQ5NTQ1Mi1hNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fE2gb/olWYxLCJBYH1ukwM/89SH37pZ8U2XsftVc90aX3RPq3lWEjmqr2hy 6x7oAqsMFSoYE6m/VS7+oPCv2NceXaVQnUPf3OhSbhoG+sXqMCaUYI8HvBy2PAbd SivSu//zs44mxTqMQ48E/HcRrg4JupDxdKji8PrqwoYxTPMMfXb6+e0IR/Yz3xC7 YWyDWypgtbAMoWetXH/sZ7fuDnNg/7pu50yZOYmvM9yN7EMtMvvm+9MejHnV73s/ 1lFmEJ65a7Qr1lL/or/EByck4qNmvt6dEoHqdJaczf4bf6OIOnscicL3QFTZIN7F +1XEUA5LI2w9l7B360NaKCYjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf+jMud o98IjbFgi0/h8HIeQcBXMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpSRkd8e8epk4HalgeqqiguPC7i1O13MCClN972hw6cA87Hotd+EFP U7x6cfAqEO1xQmYtg4VvX1H7Jd4Oe8mDmVqP5oxquBRWiKBwFW2vbGII6Wmtj76k JekCsnUXNiG9+CnfTm7RuLwkuT2cBE1TwgvdruyDXz8deC8EpYbRmUQEpP7CfyCD RYlnFTnxczi/r1GV3yWbTUNUnsBquKMKRiM8uvgjzG+taLs9Y3FzE6zg22NVvcUR QKF5kEI1YpPqEVjOkTT4zyf+aR3YtC7JxVjmhIzHFpvwQaofK3erJWo9NrHNL8eL uCE1ooD+3ZmIHlnl6AtbBaDCCA5qlgq9 -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org