$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: LDyW58QrIlHhZCADG2ok+MG3UtLS6PdNq12Ae6ojpDo= Subject key identifier: A6:7E:02:B5:1C:16:31:E8:C1:7B:C8:9E:C6:E7:73:2F:29:91:D2:75 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 49 Signing time: Sun 19 May 2024 08:06:41 +0000 Manifest this update: Sun 19 May 2024 08:06:41 +0000 Manifest next update: Sun 26 May 2024 08:06:41 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: B7kxGybsEWu/bDjramjIcLceufriF8Cv/ALDXgxdrUU=) 2: D2A0E6FEE3C811EE900A6909C4F9AE02.roa (hash: g97LC1BCWHycvusZlIYhFR2TmnuGnbENmy2sxwjPlKs=) 3: EAEFF196E3C811EE8818A409C4F9AE02.roa (hash: HX7W9yI/6Topdma74/kpwIA0DVLeKAQpdbxnAszEWTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: May 19 08:06:41 2024 GMT Not After : May 26 08:06:41 2024 GMT Subject: CN=6649b311-58c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:f1:25:6c:52:b8:e3:c6:f8:a1:6d:42:6a: fa:6d:14:cb:0a:c6:9a:ad:35:a6:8c:c4:61:f6:f6: 33:e0:ca:f1:b8:b7:f6:62:3c:fd:76:ee:76:ad:61: 50:de:44:20:34:2f:e2:17:bc:b7:4a:d9:49:00:55: f2:2d:3c:4e:26:c2:7c:18:9e:dd:84:3d:e1:64:ef: ff:01:ef:5d:8c:a0:a4:bf:ac:31:a1:cb:d9:80:be: e9:b1:bb:c7:1c:4f:5d:88:3c:a7:22:6d:41:7a:5b: 9d:17:7a:5f:42:6f:84:15:8d:a8:e4:d4:f4:45:d8: a2:82:21:1b:0a:53:c3:7f:57:0e:8b:33:a3:a4:f5: 12:aa:e5:a6:6d:c3:a5:c9:ba:bf:fe:18:0b:85:e5: 07:03:bc:98:bc:80:86:de:79:cc:93:17:4b:b6:a6: 0a:aa:18:b3:33:57:4f:4e:2f:fa:ac:96:18:20:46: 84:86:7a:01:ff:e1:d3:8f:0e:93:b1:c3:d0:22:e2: 3a:f3:95:a3:e9:45:38:c7:0a:d5:47:78:1f:da:d4: 90:06:a4:55:b6:0f:d2:a6:7a:b3:6e:50:fb:3f:7c: 6f:a9:2c:d5:56:42:7c:73:70:7f:6a:4b:70:a9:ae: 4e:49:2a:79:41:3f:70:d0:66:5c:5a:f6:f4:87:31: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7E:02:B5:1C:16:31:E8:C1:7B:C8:9E:C6:E7:73:2F:29:91:D2:75 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6d:7a:20:90:27:8f:39:b2:96:2c:a4:8f:08:8f:98:57:2d: e6:a6:25:86:a3:e3:03:43:48:6a:76:c0:52:d0:78:f8:aa:0c: 39:52:29:5e:39:4a:c8:f5:9d:c0:97:d4:f4:3a:45:b1:31:6f: 03:41:57:17:e8:48:44:08:2f:f7:9f:92:46:0a:64:81:6a:56: dd:c6:b0:20:a0:91:ad:12:cf:a6:a2:0f:61:e9:91:b3:fa:11: 35:f9:7a:fb:14:1f:40:2c:98:dd:c5:b0:07:f6:0d:8e:af:8c: ff:a7:cd:b0:66:6b:56:a4:66:23:70:72:27:59:ca:0a:cd:e0: fb:a5:87:12:6d:d0:db:97:5c:3b:1f:fa:a1:17:7f:f1:d9:9a: 75:09:be:69:ec:6b:74:9c:8c:0f:d0:1d:51:a2:ec:1f:dc:da: 36:2f:3c:55:4c:81:51:98:5c:19:bb:0c:a4:c5:58:34:33:91: 09:43:32:ea:43:60:0f:36:53:c6:64:f6:02:9f:64:c8:d9:e8: 50:cf:fb:6b:4f:4a:80:8a:09:92:0b:50:c2:16:d5:2b:01:06: 58:4e:1d:41:f8:b0:6f:2c:8b:ad:4f:cc:da:29:57:3e:96:56: 6c:dc:d1:54:fe:ff:6b:bb:d6:14:92:d7:c9:c7:72:0e:97:39: 9d:0b:33:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkRDNDExMC8GA1UEBRMoNUI0MzAwRkU0OUFFRTBFNDE1Q0M2MTk3NkMwMkI1QjlD MDIwNEFBRDAeFw0yNDA1MTkwODA2NDFaFw0yNDA1MjYwODA2NDFaMBgxFjAUBgNV BAMTDTY2NDliMzExLTU4YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsKvElbFK448b4oW1CavptFMsKxpqtNaaMxGH29jPgyvG4t/ZiPP127natYVDe RCA0L+IXvLdK2UkAVfItPE4mwnwYnt2EPeFk7/8B712MoKS/rDGhy9mAvumxu8cc T12IPKcibUF6W50Xel9Cb4QVjajk1PRF2KKCIRsKU8N/Vw6LM6Ok9RKq5aZtw6XJ ur/+GAuF5QcDvJi8gIbeecyTF0u2pgqqGLMzV09OL/qslhggRoSGegH/4dOPDpOx w9Ai4jrzlaPpRTjHCtVHeB/a1JAGpFW2D9KmerNuUPs/fG+pLNVWQnxzcH9qS3Cp rk5JKnlBP3DQZlxa9vSHMWtxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpn4CtRwW MejBe8iexudzLymR0nUwHwYDVR0jBBgwFoAUW0MA/kmu4OQVzGGXbAK1ucAgSq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyREM0LzVCRUREMDU0QjMx NjExRUVBOEJDQzYyNEM0RjlBRTAyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1Nx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVzBNQV9rbXU0T1FWekdHWGJBSzF1Y0FnU3EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy REM0LzVCRUREMDU0QjMxNjExRUVBOEJDQzYyNEM0RjlBRTAyL1cwTUFfa211NE9R VnpHR1hiQUsxdWNBZ1NxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9teiCQJ485spYspI8Ij5hXLeamJYaj4wNDSGp2wFLQePiqDDlSKV45 Ssj1ncCX1PQ6RbExbwNBVxfoSEQIL/efkkYKZIFqVt3GsCCgka0Sz6aiD2HpkbP6 ETX5evsUH0AsmN3FsAf2DY6vjP+nzbBma1akZiNwcidZygrN4PulhxJt0NuXXDsf +qEXf/HZmnUJvmnsa3ScjA/QHVGi7B/c2jYvPFVMgVGYXBm7DKTFWDQzkQlDMupD YA82U8Zk9gKfZMjZ6FDP+2tPSoCKCZILUMIW1SsBBlhOHUH4sG8si61PzNopVz6W Vmzc0VT+/2u71hSS18nHcg6XOZ0LM3o= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org